This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft File: 86C8E3A4B496EB93A6EEF684150362C295A428DD.mft (raw, json) Hash identifier: Sga3XBd+V50QLKufUwGSgJcVTXYV5w9A+bfVOdnW9Q4= Subject key identifier: 4B:2A:CD:94:0D:CD:4E:81:90:AA:71:C4:61:E7:DE:03:AD:14:5D:17 Authority key identifier: 86:C8:E3:A4:B4:96:EB:93:A6:EE:F6:84:15:03:62:C2:95:A4:28:DD Certificate issuer: /CN=86C8E3A4B496EB93A6EEF684150362C295A428DD Certificate serial: 16340444D5EE9ECB98AA4EFBB2264747EE5842F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft Manifest number: 0244 Signing time: Sat 31 Jan 2026 21:11:36 +0000 Manifest this update: Sat 31 Jan 2026 21:06:36 +0000 Manifest next update: Tue 03 Feb 2026 21:13:36 +0000 Files and hashes: 1: 86C8E3A4B496EB93A6EEF684150362C295A428DD.crl (hash: Fi1Gpc3HfYT5+pn0cNcXcQOie1hQrPd0t1X8+/5BnZo=) 2: 3130332e3139302e3133352e302f32342d3234203d3e203538343935.roa (hash: ZAxHbiLP6Hqcx4Z+YjqoTqhIgfPAeHtLOg2HhiZ1uS0=) 3: 3130332e3139302e3133342e302f32332d3234203d3e203538343935.roa (hash: NAu4MIqb2SIHlGa2lR/f4p07SuQ7a/mw3Vk71QHChF8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.crl rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 21:13:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:34:04:44:d5:ee:9e:cb:98:aa:4e:fb:b2:26:47:47:ee:58:42:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86C8E3A4B496EB93A6EEF684150362C295A428DD Validity Not Before: Jan 31 21:06:36 2026 GMT Not After : Feb 3 21:13:36 2026 GMT Subject: CN=4B2ACD940DCD4E8190AA71C461E7DE03AD145D17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fe:b4:68:62:da:69:26:84:1a:5d:cd:bf:af: 4a:4a:bf:81:f8:ae:17:e5:44:12:0f:c9:d0:2d:91: 5f:67:12:d2:ee:89:a3:35:45:95:92:82:6d:55:38: ca:94:41:25:ff:bb:5f:d8:06:53:dd:1a:95:67:c4: 25:f1:47:54:7e:10:6f:d3:db:e9:52:04:00:64:d5: 2b:a1:f0:b3:fc:ab:59:c3:de:d0:73:2e:23:5b:ea: a3:25:ce:74:ab:a2:ae:54:8a:af:3d:52:dc:fa:6e: 33:5c:bf:5a:7d:6d:bd:e3:5b:2b:d9:04:40:9b:44: 12:7c:48:b1:8b:f1:de:8b:16:13:b5:e0:af:a5:32: 4c:d9:d9:1a:ac:7d:f3:06:36:ea:f9:cd:1e:66:0a: 44:c6:2c:37:93:e0:4f:be:57:f9:9e:54:d8:8f:7c: d2:11:f4:c1:c9:99:9f:74:22:55:6b:90:54:69:6c: 44:10:24:50:c0:90:b7:fa:4b:3b:84:ea:1d:d1:5a: ad:b6:89:c0:3f:f6:73:9f:f5:95:e8:58:fe:c0:e4: f5:aa:0c:92:c3:0d:ef:a7:d7:77:1a:93:1c:78:ca: 29:f1:a2:ee:f4:d1:ad:b8:28:12:95:92:fb:7a:77: 89:8d:93:76:63:c7:4e:a9:63:f1:79:f8:d6:07:9d: 1b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:2A:CD:94:0D:CD:4E:81:90:AA:71:C4:61:E7:DE:03:AD:14:5D:17 X509v3 Authority Key Identifier: keyid:86:C8:E3:A4:B4:96:EB:93:A6:EE:F6:84:15:03:62:C2:95:A4:28:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:01:0d:d4:a5:94:f7:24:b4:67:6a:06:f2:b5:9d:16:2c:f6: 57:28:1e:90:a2:bf:f5:b8:01:c4:43:2a:87:67:71:cf:7c:97: aa:94:c0:d8:f7:c0:fc:84:96:69:1d:1f:e3:b8:50:80:3b:df: ae:4f:bc:d6:cf:03:8e:0e:af:2c:6f:e8:2f:0e:53:ca:10:6e: 13:19:2f:07:03:48:0c:b5:9e:3f:f2:fd:88:9d:1d:f0:bf:aa: 0e:02:4f:bd:5f:00:67:5d:a0:35:5e:41:e8:79:c6:dd:28:05: 44:0a:ea:9b:18:74:cc:da:04:f5:41:59:1d:5b:59:3a:6a:75: cd:74:f4:39:53:6e:c4:67:0f:99:7a:36:7a:0a:a0:2a:1e:7c: e1:cb:51:3e:01:61:28:2f:1f:a8:6d:d7:fd:f2:95:45:2f:e7: 62:e6:fe:e1:67:02:85:23:57:e2:99:cc:e4:3f:3a:a7:5e:80: 53:44:fc:b1:e7:49:46:92:e0:e7:a0:cc:d7:a0:2e:7f:a8:d0: 56:14:1d:ce:9f:b3:bd:45:25:f4:e0:b2:a1:e9:84:7b:21:56: 4b:f1:ba:12:f6:2d:5d:e5:ce:02:78:00:0c:fe:6a:c0:68:47: 1d:ac:ae:91:9c:03:11:d9:15:db:5f:11:7b:b1:13:22:54:2e: 51:b7:58:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFjQERNXunsuYqk77siZHR+5YQvYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYyQzI5 NUE0MjhERDAeFw0yNjAxMzEyMTA2MzZaFw0yNjAyMDMyMTEzMzZaMDMxMTAvBgNV BAMTKDRCMkFDRDk0MERDRDRFODE5MEFBNzFDNDYxRTdERTAzQUQxNDVEMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM/rRoYtppJoQaXc2/r0pKv4H4 rhflRBIPydAtkV9nEtLuiaM1RZWSgm1VOMqUQSX/u1/YBlPdGpVnxCXxR1R+EG/T 2+lSBABk1Suh8LP8q1nD3tBzLiNb6qMlznSroq5Uiq89Utz6bjNcv1p9bb3jWyvZ BECbRBJ8SLGL8d6LFhO14K+lMkzZ2RqsffMGNur5zR5mCkTGLDeT4E++V/meVNiP fNIR9MHJmZ90IlVrkFRpbEQQJFDAkLf6SzuE6h3RWq22icA/9nOf9ZXoWP7A5PWq DJLDDe+n13cakxx4yinxou700a24KBKVkvt6d4mNk3Zjx06pY/F5+NYHnRv/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSyrNlA3NToGQqnHEYefeA60UXRcwHwYDVR0j BBgwFoAUhsjjpLSW65Om7vaEFQNiwpWkKN0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTYzYjdkNy1lYTgzLTRiZTktYjJmYy1iMzBlYjBiNDRkMGEvMC84NkM4RTNBNEI0 OTZFQjkzQTZFRUY2ODQxNTAzNjJDMjk1QTQyOERELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYyQzI5NUE0 MjhERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE2M2I3ZDctZWE4My00YmU5LWIy ZmMtYjMwZWIwYjQ0ZDBhLzAvODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYy QzI5NUE0MjhERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHoBDdSllPcktGdqBvK1nRYs9lcoHpCiv/W4 AcRDKodncc98l6qUwNj3wPyElmkdH+O4UIA7365PvNbPA44Oryxv6C8OU8oQbhMZ LwcDSAy1nj/y/YidHfC/qg4CT71fAGddoDVeQeh5xt0oBUQK6psYdMzaBPVBWR1b WTpqdc109DlTbsRnD5l6NnoKoCoefOHLUT4BYSgvH6ht1/3ylUUv52Lm/uFnAoUj V+KZzOQ/OqdegFNE/LHnSUaS4OegzNegLn+o0FYUHc6fs71FJfTgsqHphHshVkvx uhL2LV3lzgJ4AAz+asBoRx2srpGcAxHZFdtfEXuxEyJULlG3WKo= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:20 2026 by rpki-client