This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft File: 8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft (raw, json) Hash identifier: AFAyA3kYnaYnA+r6PgarGMc9dccdRN1sqlrwnfEW2JE= Subject key identifier: 18:7C:50:17:AD:5E:15:31:D7:B3:7C:E7:A5:A5:8D:BE:BB:32:B5:51 Authority key identifier: 8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99 Certificate issuer: /CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799 Certificate serial: 3AA2967A621D8042AF2F41D8C5C1A02E6E263A90 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft Manifest number: 0547 Signing time: Sat 31 Jan 2026 15:11:11 +0000 Manifest this update: Sat 31 Jan 2026 15:06:11 +0000 Manifest next update: Tue 03 Feb 2026 15:31:11 +0000 Files and hashes: 1: 3130332e3133392e34362e302f32342d3234203d3e203137393935.roa (hash: hthNpAwJxjCDLni6mv2Gc1l+BPz0lcv9dxQLklW+A64=) 2: 8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl (hash: gZY1r2uxB/NVXDdSIi/6gEaXGjZTb9hA9uRgvtXhnJU=) 3: 3130332e3133392e34372e302f32342d3234203d3e203137393935.roa (hash: hRDdGequ+GhEEqBrX8O9Zq6WRslymD5ehiejKAFbvr0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 15:31:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:a2:96:7a:62:1d:80:42:af:2f:41:d8:c5:c1:a0:2e:6e:26:3a:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799 Validity Not Before: Jan 31 15:06:11 2026 GMT Not After : Feb 3 15:31:11 2026 GMT Subject: CN=187C5017AD5E1531D7B37CE7A5A58DBEBB32B551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:06:f8:d1:fc:d4:85:ae:55:26:85:9b:15:cb: 3a:9e:8b:2f:2d:a0:fe:3c:af:84:5d:d8:3f:18:64: c4:20:ab:98:d1:e9:6f:73:c2:86:c2:34:24:54:14: 2e:66:31:8c:e2:45:fe:61:03:4e:e7:7a:37:89:69: 2a:59:9c:85:03:ab:74:74:21:ea:dc:73:ab:ed:e5: 0d:15:e2:a0:7f:8a:d2:6d:d9:4f:49:02:0e:24:37: 73:cf:bb:e6:b8:96:bd:f7:df:58:e5:56:e5:22:bd: 5a:74:02:19:cf:69:0c:c9:1c:cf:9f:35:6c:04:d4: 31:e4:3a:60:67:b9:1e:1f:d3:5a:13:4e:47:4b:f7: 87:57:a5:1b:7d:b3:10:31:a3:91:75:bb:be:21:e0: 14:a1:7c:3c:0f:66:af:ba:03:49:a8:5a:91:6a:0b: 89:c1:af:38:6e:9a:51:e4:a0:ba:ad:1d:08:35:64: 7c:1a:a6:e3:e2:80:e6:89:06:3d:84:02:e0:99:61: 52:1d:4c:4b:14:29:88:17:9d:38:86:ba:04:14:ed: 42:10:b5:1a:34:45:02:7f:4a:da:2e:09:5f:83:b7: 6a:d9:00:f1:2d:7a:32:4b:44:70:82:ab:04:df:fb: 8b:54:2e:f8:58:c8:e7:1e:b2:5a:26:de:b1:c6:aa: 31:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:7C:50:17:AD:5E:15:31:D7:B3:7C:E7:A5:A5:8D:BE:BB:32:B5:51 X509v3 Authority Key Identifier: keyid:8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:64:15:14:a1:8c:1b:87:b3:33:0c:3c:b8:81:87:fa:d1:2a: b8:53:a0:c6:bb:2e:06:7d:e4:20:20:c8:9b:e5:ac:dd:a1:71: 13:c2:27:d2:a3:13:6c:d3:b4:aa:eb:07:89:86:3b:5f:70:46: 00:93:6a:87:9c:ad:e5:d3:8c:be:4d:87:8e:25:3d:fd:7b:91: fb:85:94:5c:98:b7:4c:10:fb:c3:aa:34:08:ea:ff:30:2e:17: 16:64:a8:2d:9e:9e:cf:5e:37:ff:10:0b:66:e4:60:13:12:b2: 7b:21:4c:9d:77:5f:41:7d:ab:57:d2:32:e9:09:fa:83:d1:5d: 19:d4:e8:50:92:e2:89:05:84:35:78:cf:43:06:26:ff:d9:0d: 4e:58:08:73:5a:c3:35:ad:54:38:2d:c6:8f:eb:56:d3:c5:d0: 16:5a:21:f0:9c:5a:93:c5:95:f4:cf:0f:be:b7:29:f7:27:cd: ad:29:ab:4d:13:22:a5:06:e7:68:dc:fd:37:47:ac:ca:ab:f9: 6d:cc:f0:29:7d:7b:fb:06:6d:5b:70:84:7c:45:72:6b:e4:32: 76:7c:1f:2a:00:23:7b:3b:62:fc:55:b1:bc:c9:07:85:c5:b2: 04:cb:79:97:73:7a:e7:44:e0:1d:de:2f:85:26:7b:20:f6:39: 38:6a:29:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOqKWemIdgEKvL0HYxcGgLm4mOpAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3MDFB MEE3Mjc5OTAeFw0yNjAxMzExNTA2MTFaFw0yNjAyMDMxNTMxMTFaMDMxMTAvBgNV BAMTKDE4N0M1MDE3QUQ1RTE1MzFEN0IzN0NFN0E1QTU4REJFQkIzMkI1NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLBvjR/NSFrlUmhZsVyzqeiy8t oP48r4Rd2D8YZMQgq5jR6W9zwobCNCRUFC5mMYziRf5hA07nejeJaSpZnIUDq3R0 Iercc6vt5Q0V4qB/itJt2U9JAg4kN3PPu+a4lr3331jlVuUivVp0AhnPaQzJHM+f NWwE1DHkOmBnuR4f01oTTkdL94dXpRt9sxAxo5F1u74h4BShfDwPZq+6A0moWpFq C4nBrzhumlHkoLqtHQg1ZHwapuPigOaJBj2EAuCZYVIdTEsUKYgXnTiGugQU7UIQ tRo0RQJ/StouCV+Dt2rZAPEtejJLRHCCqwTf+4tULvhYyOceslom3rHGqjHrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGHxQF61eFTHXs3znpaWNvrsytVEwHwYDVR0j BBgwFoAUigXr9YvsltlG7oXw8PhXAaCnJ5kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MjMwNzM5MC02ZWYzLTQ0NzYtYTZhYS1kMGM1NzgzZTFmMzcvMC84QTA1RUJGNThC RUM5NkQ5NDZFRTg1RjBGMEY4NTcwMUEwQTcyNzk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3MDFBMEE3 Mjc5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTIzMDczOTAtNmVmMy00NDc2LWE2 YWEtZDBjNTc4M2UxZjM3LzAvOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3 MDFBMEE3Mjc5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGhkFRShjBuHszMMPLiBh/rRKrhToMa7LgZ9 5CAgyJvlrN2hcRPCJ9KjE2zTtKrrB4mGO19wRgCTaoecreXTjL5Nh44lPf17kfuF lFyYt0wQ+8OqNAjq/zAuFxZkqC2ens9eN/8QC2bkYBMSsnshTJ13X0F9q1fSMukJ +oPRXRnU6FCS4okFhDV4z0MGJv/ZDU5YCHNawzWtVDgtxo/rVtPF0BZaIfCcWpPF lfTPD763Kfcnza0pq00TIqUG52jc/TdHrMqr+W3M8Cl9e/sGbVtwhHxFcmvkMnZ8 HyoAI3s7YvxVsbzJB4XFsgTLeZdzeudE4B3eL4UmeyD2OThqKek= -----END CERTIFICATE-----Generated at Mon Feb 2 09:45:06 2026 by rpki-client