This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft File: DF3717861F6521730921F11365C5A826CFF24DAA.mft (raw, json) Hash identifier: Up8Z032dwL+IGHcUEQRyDCIDy1ndnqYJmshnOXRE7EM= Subject key identifier: D7:82:E3:49:59:6D:14:47:04:27:F8:13:52:2C:E4:F0:F5:3B:EF:DA Authority key identifier: DF:37:17:86:1F:65:21:73:09:21:F1:13:65:C5:A8:26:CF:F2:4D:AA Certificate issuer: /CN=DF3717861F6521730921F11365C5A826CFF24DAA Certificate serial: 2620C440A4A9B7EF9D18B1BFAAD5FFF5C7ED4504 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft Manifest number: 014C Signing time: Mon 19 Jan 2026 21:50:00 +0000 Manifest this update: Mon 19 Jan 2026 21:45:00 +0000 Manifest next update: Fri 23 Jan 2026 02:16:00 +0000 Files and hashes: 1: 323030313a6466333a356263303a3a2f34382d3438203d3e20313532303832.roa (hash: xala12s6NGlWdt+lWB7nCyXhpdJkrQpRN4xo94j8YNU=) 2: DF3717861F6521730921F11365C5A826CFF24DAA.crl (hash: hgU9ycghX+H/s8riPnXSG5CmNaTO34P8cZVIFgUHStM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.crl rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 02:16:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:20:c4:40:a4:a9:b7:ef:9d:18:b1:bf:aa:d5:ff:f5:c7:ed:45:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF3717861F6521730921F11365C5A826CFF24DAA Validity Not Before: Jan 19 21:45:00 2026 GMT Not After : Jan 23 02:16:00 2026 GMT Subject: CN=D782E349596D14470427F813522CE4F0F53BEFDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8d:0a:db:4b:a5:66:11:22:8b:14:3e:00:41: ee:0f:a1:1f:a4:de:1f:57:51:0c:36:a6:0e:8d:56: 53:ff:f2:0f:4e:45:de:54:fc:1d:5f:7e:7e:d7:9c: 7b:e5:2c:ea:ee:a9:9b:7f:c5:a0:2f:85:e3:ec:53: 50:7a:5c:00:e6:88:44:54:e3:12:4e:3c:ad:fa:4b: 1f:1f:6e:cb:0b:c7:3d:70:1c:92:13:18:dc:84:d6: 2b:14:bb:1f:70:8b:93:09:e6:30:a4:1b:3a:35:df: 4b:1d:7f:73:4b:61:7b:44:81:e0:95:22:07:ca:f8: 95:50:7b:8d:90:6e:97:b8:fc:95:b7:d4:f7:b1:0f: 33:c9:e0:8c:c9:87:66:98:21:0f:aa:53:84:2d:7f: db:ea:31:40:40:d6:70:9a:63:d6:cf:74:f3:02:d2: d7:49:9b:2d:fb:9b:b6:30:69:d5:b0:74:ed:58:86: d2:2b:18:31:7c:33:ce:c0:42:d6:83:ad:e5:3a:75: d6:9d:3e:ac:0a:6f:54:b3:94:e1:9a:3b:f6:7a:f8: 59:fd:35:7c:52:58:90:43:06:b3:30:55:a4:71:75: 31:41:2b:2f:7f:93:9b:9f:50:77:de:55:12:ab:6a: 52:37:b6:a8:9a:36:52:69:91:e5:ca:bf:62:94:c4: 03:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:82:E3:49:59:6D:14:47:04:27:F8:13:52:2C:E4:F0:F5:3B:EF:DA X509v3 Authority Key Identifier: keyid:DF:37:17:86:1F:65:21:73:09:21:F1:13:65:C5:A8:26:CF:F2:4D:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:c4:46:ca:18:26:82:06:b6:5a:8e:9a:08:90:2d:3b:f0:8e: 48:15:0d:11:b7:37:46:b6:19:8f:82:ed:b1:6b:b2:39:e2:49: 81:b8:38:81:8b:75:92:25:69:ec:fc:d0:ca:8e:c0:1b:21:b9: ea:2f:8a:aa:a7:34:78:65:fa:29:58:5a:4c:17:23:f2:a6:15: 96:4a:b8:5c:fa:05:27:cb:fb:3d:c8:7b:68:17:09:a6:ed:3b: e3:c9:5e:d4:cc:bc:cd:20:7b:7a:a9:14:d0:46:33:b0:b2:b3: 80:03:9b:3c:04:8e:3e:15:13:e4:f9:9a:e0:74:ca:88:f2:31: e5:3d:92:52:39:40:37:b6:72:87:b0:6d:36:09:20:f7:2b:f3: d9:c8:a3:71:e6:02:65:de:7f:8e:54:31:56:d8:85:8d:ab:60: d7:58:dc:92:25:94:37:c5:ed:43:cc:9c:58:78:8f:bd:79:16: ad:92:b7:af:b5:2c:30:74:85:7e:c1:b0:86:ea:29:0d:86:02: 00:95:cb:ac:0b:61:15:80:2d:19:e1:71:e7:c4:0b:da:60:0f: 61:0a:2c:fb:b3:81:e2:9f:8b:c6:00:26:ff:dc:28:40:b4:a9: c7:02:fb:6a:cd:c8:98:2e:5c:c1:95:51:a7:90:e8:3c:57:d7: 97:be:c2:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJiDEQKSpt++dGLG/qtX/9cftRQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4MjZD RkYyNERBQTAeFw0yNjAxMTkyMTQ1MDBaFw0yNjAxMjMwMjE2MDBaMDMxMTAvBgNV BAMTKEQ3ODJFMzQ5NTk2RDE0NDcwNDI3RjgxMzUyMkNFNEYwRjUzQkVGREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/jQrbS6VmESKLFD4AQe4PoR+k 3h9XUQw2pg6NVlP/8g9ORd5U/B1ffn7XnHvlLOruqZt/xaAvhePsU1B6XADmiERU 4xJOPK36Sx8fbssLxz1wHJITGNyE1isUux9wi5MJ5jCkGzo130sdf3NLYXtEgeCV IgfK+JVQe42Qbpe4/JW31PexDzPJ4IzJh2aYIQ+qU4Qtf9vqMUBA1nCaY9bPdPMC 0tdJmy37m7YwadWwdO1YhtIrGDF8M87AQtaDreU6ddadPqwKb1SzlOGaO/Z6+Fn9 NXxSWJBDBrMwVaRxdTFBKy9/k5ufUHfeVRKralI3tqiaNlJpkeXKv2KUxAPHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU14LjSVltFEcEJ/gTUizk8PU779owHwYDVR0j BBgwFoAU3zcXhh9lIXMJIfETZcWoJs/yTaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDdjZDVhMi1hNzQyLTQ1MGMtYjE5MC01MDBlNzU0NTIwZGUvMS9ERjM3MTc4NjFG NjUyMTczMDkyMUYxMTM2NUM1QTgyNkNGRjI0REFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4MjZDRkYy NERBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTQ3Y2Q1YTItYTc0Mi00NTBjLWIx OTAtNTAwZTc1NDUyMGRlLzEvREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4 MjZDRkYyNERBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFzERsoYJoIGtlqOmgiQLTvwjkgVDRG3N0a2 GY+C7bFrsjniSYG4OIGLdZIlaez80MqOwBshueoviqqnNHhl+ilYWkwXI/KmFZZK uFz6BSfL+z3Ie2gXCabtO+PJXtTMvM0ge3qpFNBGM7Cys4ADmzwEjj4VE+T5muB0 yojyMeU9klI5QDe2coewbTYJIPcr89nIo3HmAmXef45UMVbYhY2rYNdY3JIllDfF 7UPMnFh4j715Fq2St6+1LDB0hX7BsIbqKQ2GAgCVy6wLYRWALRnhcefEC9pgD2EK LPuzgeKfi8YAJv/cKEC0qccC+2rNyJguXMGVUaeQ6DxX15e+wmI= -----END CERTIFICATE-----Generated at Wed Jan 21 17:55:49 2026 by rpki-client