This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft File: DEF44331E724964F28697DEABAF2313CDCEEFACE.mft (raw, json) Hash identifier: 9aZlqNT01/I5BeUOh/DRERCkMTJ2KPUU4MG5Gc1N+u0= Subject key identifier: 8D:5A:E3:AB:85:82:45:71:24:E6:32:8C:AA:93:9F:F5:A4:F2:27:90 Authority key identifier: DE:F4:43:31:E7:24:96:4F:28:69:7D:EA:BA:F2:31:3C:DC:EE:FA:CE Certificate issuer: /CN=DEF44331E724964F28697DEABAF2313CDCEEFACE Certificate serial: 46ADE23E070A0D9EDE5C1E4514493E628C781E22 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEF44331E724964F28697DEABAF2313CDCEEFACE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft Manifest number: 0544 Signing time: Sun 01 Feb 2026 23:31:01 +0000 Manifest this update: Sun 01 Feb 2026 23:26:01 +0000 Manifest next update: Thu 05 Feb 2026 11:12:01 +0000 Files and hashes: 1: DEF44331E724964F28697DEABAF2313CDCEEFACE.crl (hash: 4BCrEFuR24ETIoS88qwYhkcLnAq7qmIXBSb4xZYB+Cc=) 2: 3130332e3130382e3139312e302f32342d3234203d3e20313337333132.roa (hash: rUdT5hgB1MoqDtYNUlsd/H7JJhMR5l8B8KRXMe+OwOs=) 3: 323030313a6466343a316630303a3a2f34382d3438203d3e20313337333132.roa (hash: JRR7XEn+B9iX1MKG6S3DWTWk+XJaRXgwa3RueWQgr7k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.crl rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEF44331E724964F28697DEABAF2313CDCEEFACE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:ad:e2:3e:07:0a:0d:9e:de:5c:1e:45:14:49:3e:62:8c:78:1e:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEF44331E724964F28697DEABAF2313CDCEEFACE Validity Not Before: Feb 1 23:26:01 2026 GMT Not After : Feb 5 11:12:01 2026 GMT Subject: CN=8D5AE3AB8582457124E6328CAA939FF5A4F22790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fe:97:d0:d2:bd:58:ef:88:6a:0e:80:7b:b5: 87:2a:66:e1:7b:13:d2:2a:01:f8:2a:32:b2:10:6a: c4:3d:e6:d9:ac:8f:8d:c4:95:19:cf:af:b9:b6:c4: 7f:10:27:de:4b:10:17:34:0f:bc:e0:da:14:21:b5: e2:c0:b9:fa:fa:c4:ef:90:3f:13:17:ad:b3:2b:47: 02:59:3b:93:a6:58:47:36:78:ac:3b:fb:97:30:ef: 72:bc:2e:55:10:f5:0c:e6:a8:1a:88:ac:7a:22:92: 69:3e:41:7c:ab:78:89:8b:2f:1f:74:c3:53:90:f9: 72:27:ee:ef:2b:b2:14:c8:94:ee:5e:c2:10:62:de: c2:dd:d5:d9:d0:e6:6b:a3:67:3e:95:11:3f:e5:9e: 72:16:cb:43:25:81:97:15:96:a0:be:7b:1a:91:34: 99:1a:84:e4:24:c0:ee:80:e5:f9:0f:b6:fd:c6:0a: e2:4c:76:3c:20:04:d2:ba:b7:9f:4b:ff:c1:9c:5f: 40:9c:8b:d1:5e:13:70:d0:ef:1d:f7:db:19:84:37: b0:5e:bd:70:c8:cd:03:de:c1:64:59:50:40:f2:d2: e3:a7:bf:95:1a:05:e6:0d:93:e1:ce:e5:7e:1c:e1: f8:a3:da:a1:ec:65:77:29:81:7a:6f:34:60:23:6f: 43:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:5A:E3:AB:85:82:45:71:24:E6:32:8C:AA:93:9F:F5:A4:F2:27:90 X509v3 Authority Key Identifier: keyid:DE:F4:43:31:E7:24:96:4F:28:69:7D:EA:BA:F2:31:3C:DC:EE:FA:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEF44331E724964F28697DEABAF2313CDCEEFACE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:89:f8:16:f7:5b:fb:74:13:16:86:f2:5a:53:73:16:b9:9d: cf:86:55:d3:b4:6c:15:1c:a2:2a:91:1d:5c:71:0b:fb:cc:03: e5:c0:90:1d:64:d0:ed:b2:18:98:64:62:af:ad:ae:06:d0:93: 1a:1f:48:4a:a8:14:cf:f8:bd:df:3f:a6:2e:61:2f:a5:1a:56: 6b:a7:d7:a2:d6:57:31:25:91:42:ba:b4:f9:57:87:2b:ff:9b: 40:61:13:bc:1c:60:da:31:be:4d:b7:31:18:b7:d9:4e:b4:63: f4:5e:d1:63:96:8c:04:89:17:eb:82:2d:1f:26:0b:b4:1e:51: 36:fe:a0:69:93:37:d4:7e:1e:dd:30:73:fe:1d:ac:0f:20:60: 68:e1:e4:bd:03:51:df:9b:4d:d2:a8:ad:45:c5:c1:39:31:bb: b4:f8:3b:61:18:1e:98:a6:c6:8f:af:ea:03:23:90:71:86:6f: b9:c4:d9:82:fc:76:c1:35:b2:93:75:52:9f:bb:92:78:30:6b: a9:1a:05:51:16:c2:85:80:d2:ed:50:bd:31:be:07:76:07:7d: 6a:b0:cb:2e:65:53:2b:f5:a2:bc:6d:37:75:a0:2c:bd:ca:65: c9:ac:65:9d:6d:bc:48:52:ba:9f:fe:45:82:8f:36:cf:2d:39: 0c:10:27:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURq3iPgcKDZ7eXB5FFEk+Yox4HiIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVGNDQzMzFFNzI0OTY0RjI4Njk3REVBQkFGMjMxM0NE Q0VFRkFDRTAeFw0yNjAyMDEyMzI2MDFaFw0yNjAyMDUxMTEyMDFaMDMxMTAvBgNV BAMTKDhENUFFM0FCODU4MjQ1NzEyNEU2MzI4Q0FBOTM5RkY1QTRGMjI3OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo/pfQ0r1Y74hqDoB7tYcqZuF7 E9IqAfgqMrIQasQ95tmsj43ElRnPr7m2xH8QJ95LEBc0D7zg2hQhteLAufr6xO+Q PxMXrbMrRwJZO5OmWEc2eKw7+5cw73K8LlUQ9QzmqBqIrHoikmk+QXyreImLLx90 w1OQ+XIn7u8rshTIlO5ewhBi3sLd1dnQ5mujZz6VET/lnnIWy0MlgZcVlqC+exqR NJkahOQkwO6A5fkPtv3GCuJMdjwgBNK6t59L/8GcX0Cci9FeE3DQ7x332xmEN7Be vXDIzQPewWRZUEDy0uOnv5UaBeYNk+HO5X4c4fij2qHsZXcpgXpvNGAjb0P5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjVrjq4WCRXEk5jKMqpOf9aTyJ5AwHwYDVR0j BBgwFoAU3vRDMecklk8oaX3quvIxPNzu+s4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTkwYzM3ZS0yNjU1LTQyYjEtYmFmNy00MmVjMWNmMTkyYWEvMC9ERUY0NDMzMUU3 MjQ5NjRGMjg2OTdERUFCQUYyMzEzQ0RDRUVGQUNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREVGNDQzMzFFNzI0OTY0RjI4Njk3REVBQkFGMjMxM0NEQ0VF RkFDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjE5MGMzN2UtMjY1NS00MmIxLWJh ZjctNDJlYzFjZjE5MmFhLzAvREVGNDQzMzFFNzI0OTY0RjI4Njk3REVBQkFGMjMx M0NEQ0VFRkFDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABGJ+Bb3W/t0ExaG8lpTcxa5nc+GVdO0bBUc oiqRHVxxC/vMA+XAkB1k0O2yGJhkYq+trgbQkxofSEqoFM/4vd8/pi5hL6UaVmun 16LWVzElkUK6tPlXhyv/m0BhE7wcYNoxvk23MRi32U60Y/Re0WOWjASJF+uCLR8m C7QeUTb+oGmTN9R+Ht0wc/4drA8gYGjh5L0DUd+bTdKorUXFwTkxu7T4O2EYHpim xo+v6gMjkHGGb7nE2YL8dsE1spN1Up+7kngwa6kaBVEWwoWA0u1QvTG+B3YHfWqw yy5lUyv1orxtN3WgLL3KZcmsZZ1tvEhSup/+RYKPNs8tOQwQJ74= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:26 2026 by rpki-client