This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft File: A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft (raw, json) Hash identifier: g65EgaxmuHfdHG4RH/s+c9aDQnwb+iv/RntB8l/vWVg= Subject key identifier: 8F:C0:CC:BC:45:7E:11:77:3B:C0:A0:E1:76:BF:13:DB:31:14:34:F4 Authority key identifier: A8:CD:D5:76:A9:B5:E4:48:A8:69:BE:A4:D5:16:BA:FC:5A:87:95:03 Certificate issuer: /CN=A8CDD576A9B5E448A869BEA4D516BAFC5A879503 Certificate serial: 18C327A18F7AFB199B8B6D768444AD7FBF346C05 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft Manifest number: FE Signing time: Thu 08 Jan 2026 22:02:35 +0000 Manifest this update: Thu 08 Jan 2026 21:57:35 +0000 Manifest next update: Mon 12 Jan 2026 02:31:35 +0000 Files and hashes: 1: 3136302e31392e3134342e302f32342d3234203d3e20313532373838.roa (hash: zcdVZSiLzuXwzNXJqyWuf4sDbiVxTodHTiD95Tvz7k8=) 2: 3136302e31392e3134352e302f32342d3234203d3e203435333035.roa (hash: b0d54b5VfP0y4Y/gj0JeZ9te1p1dA7COr+bHtkAFBE4=) 3: A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl (hash: IYB44mxbAlicnoK3PtO8paBbNAylvYZFd/hcupEd7Q0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Jan 2026 02:31:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:c3:27:a1:8f:7a:fb:19:9b:8b:6d:76:84:44:ad:7f:bf:34:6c:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8CDD576A9B5E448A869BEA4D516BAFC5A879503 Validity Not Before: Jan 8 21:57:35 2026 GMT Not After : Jan 12 02:31:35 2026 GMT Subject: CN=8FC0CCBC457E11773BC0A0E176BF13DB311434F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:15:7d:7e:e5:82:16:f3:e5:5e:0c:bb:22:20: 01:1e:78:a4:0d:0a:57:35:bc:d3:ab:22:4c:c6:41: f9:33:41:e4:91:78:b2:7d:3c:28:15:d6:7b:84:9c: 6c:c0:3e:bf:7a:88:eb:e7:2c:59:67:b9:7d:29:89: 55:c0:2c:0f:a7:74:db:d0:f5:b8:d2:43:1f:f2:25: 00:b9:f7:20:4f:4c:c1:32:38:31:f5:85:78:9a:2c: 83:6d:65:c0:7a:1c:2f:bb:88:a8:a6:99:fa:3f:55: 38:8e:1d:4f:93:42:65:35:b0:cd:9e:d9:8b:33:52: 78:86:43:56:c2:9a:95:55:cd:dc:4a:a1:c1:2f:ef: 19:c7:1b:c9:ed:ef:57:ae:6f:2b:4c:11:cb:61:f8: 7b:84:b4:b3:04:3e:a9:fb:b2:42:f9:90:97:f6:61: 92:9c:07:84:53:e3:25:1d:f6:05:01:85:c1:1e:96: 16:ee:da:e8:d4:ee:f9:e7:64:83:6e:83:e4:6c:86: b8:00:37:b5:80:c3:72:ed:72:73:ba:e7:26:c1:6b: ba:aa:fa:0c:4b:95:8b:0a:45:37:6a:83:9a:ee:ed: 8e:d1:d9:15:e7:2e:7b:3e:45:2e:4e:ee:8f:d3:74: 91:3d:e3:1d:42:7c:f6:ed:fd:da:be:3a:22:e4:c2: fa:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C0:CC:BC:45:7E:11:77:3B:C0:A0:E1:76:BF:13:DB:31:14:34:F4 X509v3 Authority Key Identifier: keyid:A8:CD:D5:76:A9:B5:E4:48:A8:69:BE:A4:D5:16:BA:FC:5A:87:95:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:3f:3c:30:ee:d5:5a:7a:15:11:42:47:3f:8e:23:57:cd:a4: 6a:f9:72:a3:1e:f9:e2:a4:81:dd:b1:c8:ab:4d:d0:09:ec:bd: 42:eb:f1:56:d9:9f:60:ae:f3:c7:0f:b5:b4:91:84:16:bf:50: 5d:ae:d5:a0:ba:d1:d0:b9:e3:2a:39:e4:df:af:5f:6d:4b:df: f6:52:aa:e5:da:81:3c:31:52:d8:55:a3:3a:8a:7f:26:fe:81: bf:0f:f1:fb:13:91:3a:3a:3a:29:4a:d9:53:49:8a:0e:fb:5f: 10:da:24:06:eb:71:4a:fe:c9:e0:c9:42:d6:17:e0:94:59:84: 63:39:19:4b:ad:2a:75:1c:51:db:55:b7:70:8c:4f:64:45:e7: f7:3c:50:ea:b0:a0:c4:cd:5d:70:2a:19:31:80:fd:fc:d0:db: 61:83:1b:a5:1c:82:6e:d4:de:e8:0d:9e:3d:24:23:18:f3:c5: 0f:e5:1f:5b:ee:21:9b:16:1b:05:31:dd:39:66:e4:60:0c:39: 6f:71:d6:0a:f5:16:4d:3d:48:e2:d4:a2:ba:22:29:59:17:9d: 29:f8:cb:02:7a:3f:53:29:1b:44:8f:fe:a1:22:0e:75:47:32: 22:8c:f3:87:4c:cc:2e:91:62:8c:dd:8b:87:f7:78:36:18:17: 2e:5a:c8:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGMMnoY96+xmbi212hEStf780bAUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJBRkM1 QTg3OTUwMzAeFw0yNjAxMDgyMTU3MzVaFw0yNjAxMTIwMjMxMzVaMDMxMTAvBgNV BAMTKDhGQzBDQ0JDNDU3RTExNzczQkMwQTBFMTc2QkYxM0RCMzExNDM0RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsFX1+5YIW8+VeDLsiIAEeeKQN Clc1vNOrIkzGQfkzQeSReLJ9PCgV1nuEnGzAPr96iOvnLFlnuX0piVXALA+ndNvQ 9bjSQx/yJQC59yBPTMEyODH1hXiaLINtZcB6HC+7iKimmfo/VTiOHU+TQmU1sM2e 2YszUniGQ1bCmpVVzdxKocEv7xnHG8nt71eubytMEcth+HuEtLMEPqn7skL5kJf2 YZKcB4RT4yUd9gUBhcEelhbu2ujU7vnnZINug+RshrgAN7WAw3LtcnO65ybBa7qq +gxLlYsKRTdqg5ru7Y7R2RXnLns+RS5O7o/TdJE94x1CfPbt/dq+OiLkwvqpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj8DMvEV+EXc7wKDhdr8T2zEUNPQwHwYDVR0j BBgwFoAUqM3Vdqm15Eioab6k1Ra6/FqHlQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MmU1ZmY4MS1iMDgyLTQzMzQtYWQyOS01NWRjOGQxZTUzYjkvMC9BOENERDU3NkE5 QjVFNDQ4QTg2OUJFQTRENTE2QkFGQzVBODc5NTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJBRkM1QTg3 OTUwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTJlNWZmODEtYjA4Mi00MzM0LWFk MjktNTVkYzhkMWU1M2I5LzAvQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJB RkM1QTg3OTUwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHM/PDDu1Vp6FRFCRz+OI1fNpGr5cqMe+eKk gd2xyKtN0AnsvULr8VbZn2Cu88cPtbSRhBa/UF2u1aC60dC54yo55N+vX21L3/ZS quXagTwxUthVozqKfyb+gb8P8fsTkTo6OilK2VNJig77XxDaJAbrcUr+yeDJQtYX 4JRZhGM5GUutKnUcUdtVt3CMT2RF5/c8UOqwoMTNXXAqGTGA/fzQ22GDG6Ucgm7U 3ugNnj0kIxjzxQ/lH1vuIZsWGwUx3Tlm5GAMOW9x1gr1Fk09SOLUoroiKVkXnSn4 ywJ6P1MpG0SP/qEiDnVHMiKM84dMzC6RYozdi4f3eDYYFy5ayBQ= -----END CERTIFICATE-----Generated at Fri Jan 9 18:41:16 2026 by rpki-client