This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft File: 8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft (raw, json) Hash identifier: QB2QfTcK+uv8/E9misuP0+et6e5QAgrW7jpgGGD4UTw= Subject key identifier: 8E:A3:62:67:99:F6:F7:C9:13:FC:1E:1B:A9:61:ED:C3:65:0B:B2:3A Authority key identifier: 8C:5F:A2:EB:D7:AF:40:39:38:83:FB:08:E7:1B:DF:41:AA:E2:0F:57 Certificate issuer: /CN=8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57 Certificate serial: 60F8DE8F665A5AB4D2CD2C17CE893C353CC3427A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft Manifest number: 04F2 Signing time: Sat 31 Jan 2026 08:01:31 +0000 Manifest this update: Sat 31 Jan 2026 07:56:31 +0000 Manifest next update: Tue 03 Feb 2026 11:15:31 +0000 Files and hashes: 1: 323430333a333163303a3a2f33322d3332203d3e20313337333736.roa (hash: yZdB1+Hb4ph9w/wvrnMAOAc9P831jd2qxlkZfuEjv8w=) 2: 3130332e3131382e3132342e302f32322d3234203d3e20313337333736.roa (hash: shtmTa57+pxWxFUP615U/s617hiWKy/m/Dpc5lxTH4w=) 3: 8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.crl (hash: +6VAeVnTJPFJAiNgknMBbtgek2tTfZE38lwbzG3BRYE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.crl rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 11:15:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:f8:de:8f:66:5a:5a:b4:d2:cd:2c:17:ce:89:3c:35:3c:c3:42:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57 Validity Not Before: Jan 31 07:56:31 2026 GMT Not After : Feb 3 11:15:31 2026 GMT Subject: CN=8EA3626799F6F7C913FC1E1BA961EDC3650BB23A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ad:8c:c9:94:c8:d6:c0:50:83:dd:a7:86:0c: dc:3b:75:aa:e9:2b:8b:2a:68:98:22:f1:b2:4d:b6: 4a:36:e4:72:25:0a:6c:75:c2:8d:26:c8:32:e1:c8: e2:9f:83:49:04:39:9d:a8:34:91:47:55:97:a8:50: 0e:73:f5:79:f5:65:07:9c:63:fd:24:f3:d1:06:ab: 16:7c:f7:73:68:72:69:f8:44:0a:a7:3f:fd:ae:9d: 6d:57:a6:92:b7:12:78:7b:ac:17:94:c4:37:1b:cd: b2:7a:ca:9b:26:cb:bf:64:19:d2:c9:6a:6c:eb:4c: 45:d9:c8:e9:29:b3:5c:6e:8f:59:78:8c:38:f5:82: 51:5b:0e:e1:a8:99:7d:a5:e4:33:6e:c7:1b:b1:6a: 99:be:94:b3:e9:28:23:0c:1d:6e:98:54:c3:c8:94: c9:a9:32:c7:8e:2c:4a:94:b3:6b:84:16:06:4f:b7: 48:96:60:bf:93:be:aa:bd:c5:80:41:5b:ea:42:2b: 43:df:ea:df:42:d7:e0:30:0c:b2:d9:dc:62:aa:ac: 25:55:14:28:e9:34:ae:13:f2:2b:88:19:d1:54:6a: 25:8d:63:3a:ec:1c:5e:17:17:ef:fc:91:4d:bb:5d: 0d:84:a5:16:08:94:c6:60:9b:b2:a8:de:2e:87:64: a3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A3:62:67:99:F6:F7:C9:13:FC:1E:1B:A9:61:ED:C3:65:0B:B2:3A X509v3 Authority Key Identifier: keyid:8C:5F:A2:EB:D7:AF:40:39:38:83:FB:08:E7:1B:DF:41:AA:E2:0F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:87:06:b5:ef:aa:e1:4a:0a:87:b6:13:cc:b8:29:da:97:7d: 54:7d:7a:6b:d9:21:9e:7b:97:78:5a:fe:34:ab:00:a1:db:a1: 80:2e:ae:0c:05:23:ad:be:99:c4:ef:92:3a:b3:09:a0:a8:64: 26:96:c5:e7:3b:b5:a0:ac:a2:d2:db:88:aa:54:a6:2a:83:12: 23:75:28:04:d3:ea:fc:47:ad:49:e0:2c:f9:7b:09:85:e9:36: bf:5e:86:2e:fa:1a:c9:ad:b5:f7:98:e5:d0:dc:df:be:b3:50: 72:75:f7:73:54:50:72:d0:1c:69:cc:59:a3:a9:49:be:48:33: 48:06:ff:9c:be:16:fb:6b:d8:b3:0e:8e:b8:32:cf:00:55:83: a2:6d:24:13:5a:23:b0:3d:50:e2:1a:56:6a:b8:20:85:73:59: 10:82:6f:8b:0b:b5:51:60:2d:7d:5b:41:19:d1:e0:d9:ac:a5: 02:c7:b9:31:d2:2f:7e:32:93:2e:ef:87:62:41:fe:6b:4b:5e: 07:7b:81:de:54:58:bd:ac:ba:bf:02:9d:ae:8e:27:e9:e8:e4: 12:9f:7b:a1:f3:86:0f:9d:67:58:cb:a4:81:e0:be:98:b7:4c: b4:5d:f1:08:80:be:a5:06:7c:51:81:da:87:5a:d0:47:17:88: d8:c0:5f:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYPjej2ZaWrTSzSwXzok8NTzDQnowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM1RkEyRUJEN0FGNDAzOTM4ODNGQjA4RTcxQkRGNDFB QUUyMEY1NzAeFw0yNjAxMzEwNzU2MzFaFw0yNjAyMDMxMTE1MzFaMDMxMTAvBgNV BAMTKDhFQTM2MjY3OTlGNkY3QzkxM0ZDMUUxQkE5NjFFREMzNjUwQkIyM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYrYzJlMjWwFCD3aeGDNw7darp K4sqaJgi8bJNtko25HIlCmx1wo0myDLhyOKfg0kEOZ2oNJFHVZeoUA5z9Xn1ZQec Y/0k89EGqxZ893Nocmn4RAqnP/2unW1XppK3Enh7rBeUxDcbzbJ6ypsmy79kGdLJ amzrTEXZyOkps1xuj1l4jDj1glFbDuGomX2l5DNuxxuxapm+lLPpKCMMHW6YVMPI lMmpMseOLEqUs2uEFgZPt0iWYL+Tvqq9xYBBW+pCK0Pf6t9C1+AwDLLZ3GKqrCVV FCjpNK4T8iuIGdFUaiWNYzrsHF4XF+/8kU27XQ2EpRYIlMZgm7Ko3i6HZKMDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjqNiZ5n298kT/B4bqWHtw2ULsjowHwYDVR0j BBgwFoAUjF+i69evQDk4g/sI5xvfQariD1cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDJhNWI1MS1iYzAwLTRkNmItODc2MS1jN2QwZDNmNmRlMTIvMC84QzVGQTJFQkQ3 QUY0MDM5Mzg4M0ZCMDhFNzFCREY0MUFBRTIwRjU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM1RkEyRUJEN0FGNDAzOTM4ODNGQjA4RTcxQkRGNDFBQUUy MEY1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQyYTViNTEtYmMwMC00ZDZiLTg3 NjEtYzdkMGQzZjZkZTEyLzAvOEM1RkEyRUJEN0FGNDAzOTM4ODNGQjA4RTcxQkRG NDFBQUUyMEY1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADWHBrXvquFKCoe2E8y4KdqXfVR9emvZIZ57 l3ha/jSrAKHboYAurgwFI62+mcTvkjqzCaCoZCaWxec7taCsotLbiKpUpiqDEiN1 KATT6vxHrUngLPl7CYXpNr9ehi76GsmttfeY5dDc376zUHJ193NUUHLQHGnMWaOp Sb5IM0gG/5y+Fvtr2LMOjrgyzwBVg6JtJBNaI7A9UOIaVmq4IIVzWRCCb4sLtVFg LX1bQRnR4NmspQLHuTHSL34yky7vh2JB/mtLXgd7gd5UWL2sur8Cna6OJ+no5BKf e6Hzhg+dZ1jLpIHgvpi3TLRd8QiAvqUGfFGB2oda0EcXiNjAX/w= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:33 2026 by rpki-client