This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft File: 8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft (raw, json) Hash identifier: fpMpGj2yX+oCgyiu85vzlpNt0sKM9lIsPabYspdolyE= Subject key identifier: 8D:F8:0E:B2:57:CF:3F:81:1E:8F:0F:F4:D6:F1:DA:F6:F3:EB:76:8D Authority key identifier: 89:20:EB:69:06:58:C0:13:C7:B4:AA:C2:8E:C6:B5:11:B3:9D:AE:3E Certificate issuer: /CN=8920EB690658C013C7B4AAC28EC6B511B39DAE3E Certificate serial: 36ADD99131D367F3AD3D8731DFC017CD5932E9FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft Manifest number: D2 Signing time: Mon 02 Feb 2026 04:10:06 +0000 Manifest this update: Mon 02 Feb 2026 04:05:06 +0000 Manifest next update: Thu 05 Feb 2026 15:11:06 +0000 Files and hashes: 1: 8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl (hash: yIAZNqdo5w9u+RLnZUU/OBS4JF7WtY7DzpNKYNtPI6s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:ad:d9:91:31:d3:67:f3:ad:3d:87:31:df:c0:17:cd:59:32:e9:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8920EB690658C013C7B4AAC28EC6B511B39DAE3E Validity Not Before: Feb 2 04:05:06 2026 GMT Not After : Feb 5 15:11:06 2026 GMT Subject: CN=8DF80EB257CF3F811E8F0FF4D6F1DAF6F3EB768D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:90:b5:fc:c2:21:58:ed:78:8a:7f:2c:79:58: b6:2c:0d:6e:36:0d:ed:cd:77:d1:dd:41:16:52:e7: 4e:f2:b2:ee:e9:0f:a5:18:8e:56:3f:f1:b0:ea:00: b6:b6:2b:1c:aa:40:4a:fc:c7:dc:eb:9f:a1:63:03: 8f:0c:95:7c:ec:d1:24:0c:f5:2a:fb:51:8a:77:1f: 7f:c6:37:d6:8b:f2:f4:4c:e7:27:19:5b:e6:e0:0f: da:67:20:bc:88:88:9a:e9:6e:11:e1:ce:d2:13:3a: 2b:61:00:75:e6:55:8e:39:74:75:c4:24:68:f0:81: b9:dc:0f:19:39:3d:82:93:6a:29:66:b3:aa:74:3d: f1:dd:d8:9b:82:c3:6c:9b:51:ff:0f:6b:b7:d7:ca: 75:62:ff:78:bc:68:1e:a3:f1:8d:df:a8:a9:a9:21: 92:a7:9d:de:09:d2:af:22:b1:52:91:35:77:08:5f: b6:1a:74:35:0e:4b:c8:83:12:43:cf:f3:0c:4c:76: 2c:ff:7e:d4:2b:a9:db:4f:d3:32:3c:da:1f:fd:56: 1f:5e:30:b0:11:38:73:0c:24:95:6f:cb:bd:62:33: fc:92:90:05:36:61:b3:09:d4:5c:77:d0:68:52:5c: b0:87:aa:54:9a:9b:e0:a3:c2:2e:e5:98:ec:a9:c4: 6a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:F8:0E:B2:57:CF:3F:81:1E:8F:0F:F4:D6:F1:DA:F6:F3:EB:76:8D X509v3 Authority Key Identifier: keyid:89:20:EB:69:06:58:C0:13:C7:B4:AA:C2:8E:C6:B5:11:B3:9D:AE:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:56:53:ae:21:f5:d6:d0:c3:8d:7e:d0:ea:b1:f2:ae:96:81: 85:53:bb:b6:32:e1:d7:c7:84:94:4c:b9:15:71:05:07:f2:e5: 68:62:e5:e5:60:e8:9f:fa:57:d8:01:3a:dc:fd:fb:3c:4b:b6: 36:e9:c7:ac:b6:5e:95:58:4c:fc:a9:2f:91:77:2e:58:69:3d: 6d:3f:04:04:d2:a1:a4:e6:9d:f1:53:76:b7:5e:b3:99:69:c6: 44:a6:f0:86:77:3d:13:42:90:d5:14:3e:a2:7d:64:92:1e:34: 8d:5b:3f:89:3a:ef:ec:ec:0e:d8:83:bb:33:36:cc:5e:1f:2c: 19:1e:2f:24:a5:fc:3b:db:ee:9e:0a:f6:0e:c5:d0:0c:30:ca: 38:2d:c2:ab:ba:ce:fd:39:2a:3c:2e:41:2a:df:30:cf:a1:92: b0:b7:72:72:f2:51:c2:fa:0d:a9:d6:a4:81:54:22:7c:96:47: a8:48:bf:54:ba:19:ad:03:95:88:02:e7:7b:f4:4a:e5:fa:6f: 52:1d:80:a4:b8:45:ac:a7:8c:0a:6f:5f:3d:89:ec:2b:f5:68: 82:05:b5:00:91:d8:06:5f:da:2f:25:fb:27:66:7e:90:43:48: 8b:78:63:f5:ac:cc:e3:c8:f2:64:dc:95:c3:23:4b:b1:dc:2d: b0:20:4b:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNq3ZkTHTZ/OtPYcx38AXzVky6f0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1MTFC MzlEQUUzRTAeFw0yNjAyMDIwNDA1MDZaFw0yNjAyMDUxNTExMDZaMDMxMTAvBgNV BAMTKDhERjgwRUIyNTdDRjNGODExRThGMEZGNEQ2RjFEQUY2RjNFQjc2OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXkLX8wiFY7XiKfyx5WLYsDW42 De3Nd9HdQRZS507ysu7pD6UYjlY/8bDqALa2KxyqQEr8x9zrn6FjA48MlXzs0SQM 9Sr7UYp3H3/GN9aL8vRM5ycZW+bgD9pnILyIiJrpbhHhztITOithAHXmVY45dHXE JGjwgbncDxk5PYKTailms6p0PfHd2JuCw2ybUf8Pa7fXynVi/3i8aB6j8Y3fqKmp IZKnnd4J0q8isVKRNXcIX7YadDUOS8iDEkPP8wxMdiz/ftQrqdtP0zI82h/9Vh9e MLAROHMMJJVvy71iM/ySkAU2YbMJ1Fx30GhSXLCHqlSam+Cjwi7lmOypxGpbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjfgOslfPP4Eejw/01vHa9vPrdo0wHwYDVR0j BBgwFoAUiSDraQZYwBPHtKrCjsa1EbOdrj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDM5NjM4OC0yZDZiLTQ3NmUtOTYzZC0xY2MzODEzNzRiMWMvMS84OTIwRUI2OTA2 NThDMDEzQzdCNEFBQzI4RUM2QjUxMUIzOURBRTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1MTFCMzlE QUUzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAzOTYzODgtMmQ2Yi00NzZlLTk2 M2QtMWNjMzgxMzc0YjFjLzEvODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1 MTFCMzlEQUUzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADpWU64h9dbQw41+0Oqx8q6WgYVTu7Yy4dfH hJRMuRVxBQfy5Whi5eVg6J/6V9gBOtz9+zxLtjbpx6y2XpVYTPypL5F3LlhpPW0/ BATSoaTmnfFTdrdes5lpxkSm8IZ3PRNCkNUUPqJ9ZJIeNI1bP4k67+zsDtiDuzM2 zF4fLBkeLySl/Dvb7p4K9g7F0Awwyjgtwqu6zv05KjwuQSrfMM+hkrC3cnLyUcL6 DanWpIFUInyWR6hIv1S6Ga0DlYgC53v0SuX6b1IdgKS4RaynjApvXz2J7Cv1aIIF tQCR2AZf2i8l+ydmfpBDSIt4Y/WszOPI8mTclcMjS7HcLbAgS4s= -----END CERTIFICATE-----Generated at Mon Feb 2 10:04:22 2026 by rpki-client