This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.mft File: 885B7C008CE44036CA0659FD8E1379321C0AB5F2.mft (raw, json) Hash identifier: LH1uu2KyhJ3eK9+jX7g2/DDuotWhq8f9dDpdAnClLwE= Subject key identifier: F0:4D:B0:FD:46:9E:2C:2C:05:43:08:4D:37:50:0F:A0:69:C0:DC:72 Authority key identifier: 88:5B:7C:00:8C:E4:40:36:CA:06:59:FD:8E:13:79:32:1C:0A:B5:F2 Certificate issuer: /CN=885B7C008CE44036CA0659FD8E1379321C0AB5F2 Certificate serial: 2E4BF5B6D59BDBB23BB7E9C770579954E840CBB2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.mft Manifest number: 0A Signing time: Mon 19 Jan 2026 20:20:03 +0000 Manifest this update: Mon 19 Jan 2026 20:15:03 +0000 Manifest next update: Thu 22 Jan 2026 22:04:03 +0000 Files and hashes: 1: 885B7C008CE44036CA0659FD8E1379321C0AB5F2.crl (hash: mHpqb99zqPU+QaZEvSGQMolmFbxmdy5Z8VRAWzesuYA=) 2: 3133382e3235322e3133392e302f32342d3234203d3e20313534333837.roa (hash: qprBpEFsUmfzT7L8DfRHRiIYOBmZH2oG8ByFHZ6SCUo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.crl rsync://repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Jan 2026 22:04:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:4b:f5:b6:d5:9b:db:b2:3b:b7:e9:c7:70:57:99:54:e8:40:cb:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885B7C008CE44036CA0659FD8E1379321C0AB5F2 Validity Not Before: Jan 19 20:15:03 2026 GMT Not After : Jan 22 22:04:03 2026 GMT Subject: CN=F04DB0FD469E2C2C0543084D37500FA069C0DC72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:21:19:48:d9:10:2c:53:90:bb:92:61:d5:33: 4a:d8:8b:9c:b9:dc:a9:12:06:d7:59:3f:89:9c:4a: b2:7c:59:c3:2b:3f:01:26:6c:c4:a6:9d:5c:03:dd: 0d:25:35:06:3f:cf:28:0c:56:a3:35:5a:79:79:12: 6f:a7:32:87:e0:48:90:89:45:19:cb:1e:b2:7b:a6: 27:38:1a:7e:a2:04:55:aa:e3:97:2a:30:53:de:74: 13:b2:e5:31:e4:04:c9:43:80:6a:3b:ab:cb:96:5a: a9:46:09:98:de:3e:68:09:53:6c:ed:fa:68:46:58: cc:1c:e5:39:88:46:22:ca:c0:e8:96:b2:38:61:fb: a2:9e:52:29:54:a5:3e:14:ee:41:d7:38:38:63:02: bc:23:65:be:8a:07:d9:ab:e5:61:a5:d1:08:67:fb: 4c:b3:a4:50:e4:bd:44:05:29:b0:cc:6f:69:f2:a0: 15:e7:b9:8b:67:f5:5b:b6:85:de:cf:7b:a2:14:cc: 8e:d1:54:ec:7e:1d:d7:06:17:7d:6b:ec:f4:74:e1: 5e:41:ba:6e:51:1c:44:fa:4a:6c:69:28:70:26:de: ce:0c:1e:d9:74:85:b2:ea:89:d5:50:b0:54:c0:ab: bc:1b:e5:79:07:ce:0a:5c:6a:d6:f6:86:44:a5:d8: ee:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:4D:B0:FD:46:9E:2C:2C:05:43:08:4D:37:50:0F:A0:69:C0:DC:72 X509v3 Authority Key Identifier: keyid:88:5B:7C:00:8C:E4:40:36:CA:06:59:FD:8E:13:79:32:1C:0A:B5:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:1a:02:81:2f:3c:39:4f:23:d7:e5:29:db:e3:86:91:21:29: cf:2e:00:5c:d0:38:3a:ed:54:cf:02:de:56:ef:2a:e3:9c:99: c6:5d:70:34:50:c7:df:50:73:4c:8d:c1:31:1b:f0:6f:d0:a7: 7a:0d:9d:14:16:ee:4a:ef:7d:0b:06:b1:ce:cc:e7:66:00:1d: dc:4c:18:d7:87:b5:ce:af:d6:cb:5e:6c:4a:d5:62:40:68:81: 11:e6:56:25:61:7c:1d:3b:2e:a1:a8:31:5d:0f:ab:07:c1:f9: a0:39:f7:40:43:52:fa:12:50:38:e8:ce:06:58:23:33:33:ea: aa:d2:50:0d:7d:90:e2:cf:30:f1:d6:e9:91:de:aa:ce:b3:73: 36:c9:14:7e:c8:71:b9:2a:48:b3:41:da:7c:41:33:2d:1c:cd: 87:ed:68:48:9b:49:b9:bc:a3:cf:74:eb:44:79:94:00:7e:f9: 48:bc:3c:c8:2f:d9:30:99:e0:64:28:87:aa:64:13:77:ed:1b: 47:70:29:5c:41:18:75:37:1c:81:8b:2a:f1:9a:e6:44:65:33: 65:88:6f:9c:08:26:5e:b8:49:db:b2:65:d7:c2:1e:06:63:69: 3a:0f:8e:ab:c4:c1:5f:31:46:4e:88:49:40:a4:7c:3e:a5:13: fa:6d:d8:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULkv1ttWb27I7t+nHcFeZVOhAy7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg1QjdDMDA4Q0U0NDAzNkNBMDY1OUZEOEUxMzc5MzIx QzBBQjVGMjAeFw0yNjAxMTkyMDE1MDNaFw0yNjAxMjIyMjA0MDNaMDMxMTAvBgNV BAMTKEYwNERCMEZENDY5RTJDMkMwNTQzMDg0RDM3NTAwRkEwNjlDMERDNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHIRlI2RAsU5C7kmHVM0rYi5y5 3KkSBtdZP4mcSrJ8WcMrPwEmbMSmnVwD3Q0lNQY/zygMVqM1Wnl5Em+nMofgSJCJ RRnLHrJ7pic4Gn6iBFWq45cqMFPedBOy5THkBMlDgGo7q8uWWqlGCZjePmgJU2zt +mhGWMwc5TmIRiLKwOiWsjhh+6KeUilUpT4U7kHXODhjArwjZb6KB9mr5WGl0Qhn +0yzpFDkvUQFKbDMb2nyoBXnuYtn9Vu2hd7Pe6IUzI7RVOx+HdcGF31r7PR04V5B um5RHET6SmxpKHAm3s4MHtl0hbLqidVQsFTAq7wb5XkHzgpcatb2hkSl2O75AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8E2w/UaeLCwFQwhNN1APoGnA3HIwHwYDVR0j BBgwFoAUiFt8AIzkQDbKBln9jhN5MhwKtfIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDc4YjUwYi00NDljLTQ1NGItODUwZC1mMjA4MDM3ODliNTgvMS84ODVCN0MwMDhD RTQ0MDM2Q0EwNjU5RkQ4RTEzNzkzMjFDMEFCNUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODg1QjdDMDA4Q0U0NDAzNkNBMDY1OUZEOEUxMzc5MzIxQzBB QjVGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQ3OGI1MGItNDQ5Yy00NTRiLTg1 MGQtZjIwODAzNzg5YjU4LzEvODg1QjdDMDA4Q0U0NDAzNkNBMDY1OUZEOEUxMzc5 MzIxQzBBQjVGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJkaAoEvPDlPI9flKdvjhpEhKc8uAFzQODrt VM8C3lbvKuOcmcZdcDRQx99Qc0yNwTEb8G/Qp3oNnRQW7krvfQsGsc7M52YAHdxM GNeHtc6v1stebErVYkBogRHmViVhfB07LqGoMV0PqwfB+aA590BDUvoSUDjozgZY IzMz6qrSUA19kOLPMPHW6ZHeqs6zczbJFH7IcbkqSLNB2nxBMy0czYftaEibSbm8 o89060R5lAB++Ui8PMgv2TCZ4GQoh6pkE3ftG0dwKVxBGHU3HIGLKvGa5kRlM2WI b5wIJl64SduyZdfCHgZjaToPjqvEwV8xRk6ISUCkfD6lE/pt2G0= -----END CERTIFICATE-----Generated at Wed Jan 21 12:01:09 2026 by rpki-client