This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft File: 8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft (raw, json) Hash identifier: TDqoHyJWHCgMypf3YaV5hS/WR0wQ57dVONuhuSE6YWA= Subject key identifier: A1:FC:A9:60:06:2A:16:96:16:A7:4B:F0:08:A4:5A:0C:4E:0E:FB:10 Authority key identifier: 8F:58:89:3B:1C:E1:DB:85:55:D7:BE:CB:63:DE:34:2D:23:8B:67:79 Certificate issuer: /CN=8F58893B1CE1DB8555D7BECB63DE342D238B6779 Certificate serial: 765574B0B8E375264876C401041E8C32784DEEC5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft Manifest number: 04C5 Signing time: Sat 31 Jan 2026 09:10:55 +0000 Manifest this update: Sat 31 Jan 2026 09:05:55 +0000 Manifest next update: Tue 03 Feb 2026 13:25:55 +0000 Files and hashes: 1: 3130332e3135302e3134392e302f32342d3234203d3e203438343635.roa (hash: CuNnfQrbuM8+O8ZQH5Ej0XZg8NtbJlexDdCn1sFJRks=) 2: 3130332e3135302e3134382e302f32342d3234203d3e203438343635.roa (hash: sbwxpfNxTrYw0z44J1B/mwGbnIcVA+kjI7CcxPn5wJs=) 3: 3130332e3135302e3134382e302f32332d3233203d3e20313430333932.roa (hash: ZekBegmwkGhtEq1kwIjaVxEJBaW+y/p+5uyfM78H6mk=) 4: 8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl (hash: qF3OXT9/gewL2/llzrLX7G8EqTQkZTu2HmTIuWs4M88=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 13:25:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:55:74:b0:b8:e3:75:26:48:76:c4:01:04:1e:8c:32:78:4d:ee:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F58893B1CE1DB8555D7BECB63DE342D238B6779 Validity Not Before: Jan 31 09:05:55 2026 GMT Not After : Feb 3 13:25:55 2026 GMT Subject: CN=A1FCA960062A169616A74BF008A45A0C4E0EFB10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:6c:ba:1a:d7:51:42:3a:64:ea:cd:77:c6:41: 77:3e:67:f8:36:55:4c:64:5a:03:88:0e:70:15:5f: 7d:00:d3:60:f5:c2:cb:61:4f:9e:f7:47:81:4a:62: 73:ca:46:22:dc:0f:ab:02:7d:67:ca:b4:06:81:c5: cb:e9:f1:61:a3:8c:48:23:1f:0d:12:f3:33:f3:6c: 00:d5:06:fd:73:26:6c:7e:d8:00:f7:00:2e:1a:31: fe:da:a5:fc:89:d9:10:60:3e:ec:58:da:98:60:4b: d6:ec:f0:ca:33:dd:3b:61:17:03:53:8a:9b:e2:89: 49:95:32:ff:51:65:36:82:2a:71:f9:ef:bd:40:0a: 67:b6:f2:61:35:f0:2b:b2:74:51:57:09:03:8b:64: 4a:ad:98:93:b8:ef:7e:ff:63:07:4a:4e:12:5f:cf: ed:03:81:2d:e6:ce:a0:4d:e0:3e:02:43:52:ab:79: 1f:48:ed:bf:71:d9:02:d7:1d:31:5a:8b:3b:89:dc: 88:9f:04:2a:37:dd:e0:aa:ad:9b:e5:55:3c:99:f0: ef:ed:aa:0f:51:c8:63:91:6e:c4:d6:55:20:d8:b0: 00:a4:82:49:d8:59:69:ba:81:9c:f5:6c:5c:1f:dd: 52:f3:0f:8e:36:2e:c2:59:11:30:76:7f:c8:75:45: 0c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:FC:A9:60:06:2A:16:96:16:A7:4B:F0:08:A4:5A:0C:4E:0E:FB:10 X509v3 Authority Key Identifier: keyid:8F:58:89:3B:1C:E1:DB:85:55:D7:BE:CB:63:DE:34:2D:23:8B:67:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:9a:89:d8:65:85:81:20:aa:89:19:92:3e:0d:ea:b6:3d:98: c3:d1:bf:9a:a3:e9:71:73:3e:22:2d:dc:7a:32:3f:ec:e3:ec: 00:05:14:41:ca:a4:e8:9b:2e:6b:1d:c1:51:95:92:06:f6:46: 80:14:a6:3c:b6:7b:56:4c:ca:dd:19:91:3c:7d:0a:c5:79:5c: 2f:f0:9f:dd:b6:07:a5:86:0e:02:3f:4b:76:9a:ec:5d:1a:ea: 5e:7e:3a:af:6a:4e:f4:d0:ca:01:f8:e3:2d:b7:da:9f:0d:b3: ce:ac:c0:5f:c3:20:7c:b7:6f:6f:a9:be:a7:d6:36:2b:4b:22: b0:74:13:db:58:e2:b5:f0:4a:13:fb:31:df:79:3e:bd:6d:9b: 28:7c:2d:a6:fa:66:f4:9c:d1:aa:5e:af:b9:51:e8:9e:d8:e5: c7:12:5f:f6:02:c8:dc:cc:24:79:53:d4:32:cd:5d:18:0d:b0: b1:00:80:b7:5b:17:33:3c:0e:d3:6c:fb:c0:23:24:26:4e:f7: b4:d9:8e:e0:f8:ae:17:a3:d1:0b:e1:27:c1:a0:22:20:3e:a0: ce:2f:6c:e4:ba:fb:97:c2:51:c7:19:0c:5f:a3:08:5c:c1:8c: f9:22:37:33:b5:1b:42:6a:27:41:78:d7:69:8e:25:a9:7c:ff: 86:94:5d:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdlV0sLjjdSZIdsQBBB6MMnhN7sUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0MkQy MzhCNjc3OTAeFw0yNjAxMzEwOTA1NTVaFw0yNjAyMDMxMzI1NTVaMDMxMTAvBgNV BAMTKEExRkNBOTYwMDYyQTE2OTYxNkE3NEJGMDA4QTQ1QTBDNEUwRUZCMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsbLoa11FCOmTqzXfGQXc+Z/g2 VUxkWgOIDnAVX30A02D1wsthT573R4FKYnPKRiLcD6sCfWfKtAaBxcvp8WGjjEgj Hw0S8zPzbADVBv1zJmx+2AD3AC4aMf7apfyJ2RBgPuxY2phgS9bs8Moz3TthFwNT ipviiUmVMv9RZTaCKnH5771ACme28mE18CuydFFXCQOLZEqtmJO4737/YwdKThJf z+0DgS3mzqBN4D4CQ1KreR9I7b9x2QLXHTFaizuJ3IifBCo33eCqrZvlVTyZ8O/t qg9RyGORbsTWVSDYsACkgknYWWm6gZz1bFwf3VLzD442LsJZETB2f8h1RQx1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUofypYAYqFpYWp0vwCKRaDE4O+xAwHwYDVR0j BBgwFoAUj1iJOxzh24VV177LY940LSOLZ3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRlOTM2Yi01M2NmLTRiMDgtYjVmNy0yYjkwZGUyMWZlOTQvMC84RjU4ODkzQjFD RTFEQjg1NTVEN0JFQ0I2M0RFMzQyRDIzOEI2Nzc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0MkQyMzhC Njc3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkZTkzNmItNTNjZi00YjA4LWI1 ZjctMmI5MGRlMjFmZTk0LzAvOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0 MkQyMzhCNjc3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFuaidhlhYEgqokZkj4N6rY9mMPRv5qj6XFz PiIt3HoyP+zj7AAFFEHKpOibLmsdwVGVkgb2RoAUpjy2e1ZMyt0ZkTx9CsV5XC/w n922B6WGDgI/S3aa7F0a6l5+Oq9qTvTQygH44y232p8Ns86swF/DIHy3b2+pvqfW NitLIrB0E9tY4rXwShP7Md95Pr1tmyh8Lab6ZvSc0aper7lR6J7Y5ccSX/YCyNzM JHlT1DLNXRgNsLEAgLdbFzM8DtNs+8AjJCZO97TZjuD4rhej0QvhJ8GgIiA+oM4v bOS6+5fCUccZDF+jCFzBjPkiNzO1G0JqJ0F412mOJal8/4aUXWY= -----END CERTIFICATE-----Generated at Mon Feb 2 12:49:01 2026 by rpki-client