This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft File: 8DA8C02216F0C7D625FEFA7EF659021425920442.mft (raw, json) Hash identifier: me2QlQRvVhik9Khx6xgrTl0y6lYMRC2lI29+XlBLQRY= Subject key identifier: DE:7E:AF:60:11:E0:F2:32:D8:68:80:A1:5A:79:1E:87:F2:36:39:0C Authority key identifier: 8D:A8:C0:22:16:F0:C7:D6:25:FE:FA:7E:F6:59:02:14:25:92:04:42 Certificate issuer: /CN=8DA8C02216F0C7D625FEFA7EF659021425920442 Certificate serial: 64C34C068AB62756C43B27809FF10E0DC81C5A01 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA8C02216F0C7D625FEFA7EF659021425920442.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft Manifest number: 0205 Signing time: Sat 31 Jan 2026 07:21:48 +0000 Manifest this update: Sat 31 Jan 2026 07:16:48 +0000 Manifest next update: Tue 03 Feb 2026 13:55:48 +0000 Files and hashes: 1: 3130332e37312e32352e302f32342d3234203d3e20313530323333.roa (hash: 75IsX464I80YzdtDMOG0/64Es8A4yar1LsqWA90nFOo=) 2: 8DA8C02216F0C7D625FEFA7EF659021425920442.crl (hash: sWt9CBkon2H1nqHmGBNIm4FyBQkR8CGTEn2ZNWTX1cc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.crl rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA8C02216F0C7D625FEFA7EF659021425920442.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 13:55:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:c3:4c:06:8a:b6:27:56:c4:3b:27:80:9f:f1:0e:0d:c8:1c:5a:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DA8C02216F0C7D625FEFA7EF659021425920442 Validity Not Before: Jan 31 07:16:48 2026 GMT Not After : Feb 3 13:55:48 2026 GMT Subject: CN=DE7EAF6011E0F232D86880A15A791E87F236390C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:38:8f:9e:d2:35:20:99:f7:48:01:d4:cf:de: c6:ed:ea:7f:0d:a8:01:17:38:ef:3f:c8:b0:73:39: 32:ab:3d:b6:79:a6:da:aa:7e:2f:ec:f9:d2:48:9c: a4:f2:61:fa:89:ad:a3:d2:3b:5d:28:96:e8:19:f4: 87:79:4d:f4:18:51:a5:a2:3c:0a:e3:1b:c5:d2:bd: d6:71:9f:94:3e:c4:67:ad:c9:fb:54:f5:21:2d:1b: 90:8b:bd:a8:81:2f:4c:7f:97:34:be:59:a9:4f:50: fb:0a:24:fc:38:20:82:fa:fa:c0:66:d7:90:7f:38: 58:44:b2:14:24:b6:ec:f6:74:c7:fa:1b:02:a4:0c: fa:50:a4:c7:b8:c3:ce:85:1f:18:7d:0b:64:8b:18: 64:26:5e:ca:af:4f:4e:73:1d:3e:fe:0c:a1:ce:f0: af:63:d2:9c:69:9f:fd:25:85:1e:19:41:50:16:79: d5:4f:82:48:67:b0:f1:f3:7c:27:b0:b9:e9:ee:cb: 70:9c:14:a6:2b:e5:f6:a7:57:43:64:90:b9:7c:13: ac:89:1a:13:e5:0d:26:20:cf:2a:0f:ff:b1:d0:09: 72:6d:e8:1e:ef:a1:bd:0b:e0:b8:a5:d1:17:35:bb: 3c:d3:0e:96:6f:43:05:81:4f:dd:c8:1d:76:79:1b: 76:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:7E:AF:60:11:E0:F2:32:D8:68:80:A1:5A:79:1E:87:F2:36:39:0C X509v3 Authority Key Identifier: keyid:8D:A8:C0:22:16:F0:C7:D6:25:FE:FA:7E:F6:59:02:14:25:92:04:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA8C02216F0C7D625FEFA7EF659021425920442.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:c4:71:0e:10:ce:d8:62:7d:2b:30:64:2f:c7:8b:dc:d4:d0: 99:b6:cc:ad:25:1f:4a:69:29:70:50:a2:a2:e2:76:f5:35:ac: 3a:1e:7d:29:5e:2e:4f:9c:f5:45:4c:fd:2e:62:6e:8f:f4:52: c1:06:12:aa:a3:25:75:db:4f:e1:90:8b:0f:9e:61:b2:92:19: e5:33:99:17:7e:8f:92:43:16:d9:b2:a7:94:55:05:0d:eb:e0: f0:f4:20:01:e5:e2:ca:3b:84:c9:bc:97:6e:2b:6a:43:97:a5: 7f:2f:4d:d1:c5:fb:c1:6c:1b:86:25:3e:b5:41:31:f5:37:c4: c0:48:6c:76:ec:cb:5c:24:37:5c:b2:25:cb:c2:42:09:7d:9a: 2c:f6:d8:35:42:ae:a6:5c:fd:05:d3:27:eb:1b:56:07:8d:b1: e5:e6:e5:c4:25:8d:a8:88:0c:36:22:22:d3:9c:e9:e8:8b:ee: 5a:98:72:15:7a:13:b3:7e:ca:84:52:9f:bf:45:f2:62:df:50: 54:54:5b:e8:81:84:f2:34:68:7f:76:1f:6b:7a:dd:ee:0e:09: 0e:bd:37:21:4f:99:28:c3:b4:d1:bf:2e:f3:5b:77:16:0a:c6: fd:2f:6b:ff:5b:a3:8a:94:2b:39:70:e9:04:af:6b:50:77:d7: b0:3f:37:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZMNMBoq2J1bEOyeAn/EODcgcWgEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERBOEMwMjIxNkYwQzdENjI1RkVGQTdFRjY1OTAyMTQy NTkyMDQ0MjAeFw0yNjAxMzEwNzE2NDhaFw0yNjAyMDMxMzU1NDhaMDMxMTAvBgNV BAMTKERFN0VBRjYwMTFFMEYyMzJEODY4ODBBMTVBNzkxRTg3RjIzNjM5MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxOI+e0jUgmfdIAdTP3sbt6n8N qAEXOO8/yLBzOTKrPbZ5ptqqfi/s+dJInKTyYfqJraPSO10olugZ9Id5TfQYUaWi PArjG8XSvdZxn5Q+xGetyftU9SEtG5CLvaiBL0x/lzS+WalPUPsKJPw4IIL6+sBm 15B/OFhEshQktuz2dMf6GwKkDPpQpMe4w86FHxh9C2SLGGQmXsqvT05zHT7+DKHO 8K9j0pxpn/0lhR4ZQVAWedVPgkhnsPHzfCewuenuy3CcFKYr5fanV0NkkLl8E6yJ GhPlDSYgzyoP/7HQCXJt6B7vob0L4Lil0Rc1uzzTDpZvQwWBT93IHXZ5G3bFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3n6vYBHg8jLYaIChWnkeh/I2OQwwHwYDVR0j BBgwFoAUjajAIhbwx9Yl/vp+9lkCFCWSBEIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yzg2Y2I1ZC1mMDdkLTQyNmEtOGU1ZS1hNzdhOTc4ZGQyZWUvMC84REE4QzAyMjE2 RjBDN0Q2MjVGRUZBN0VGNjU5MDIxNDI1OTIwNDQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERBOEMwMjIxNkYwQzdENjI1RkVGQTdFRjY1OTAyMTQyNTky MDQ0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M4NmNiNWQtZjA3ZC00MjZhLThl NWUtYTc3YTk3OGRkMmVlLzAvOERBOEMwMjIxNkYwQzdENjI1RkVGQTdFRjY1OTAy MTQyNTkyMDQ0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADbEcQ4QzthifSswZC/Hi9zU0Jm2zK0lH0pp KXBQoqLidvU1rDoefSleLk+c9UVM/S5ibo/0UsEGEqqjJXXbT+GQiw+eYbKSGeUz mRd+j5JDFtmyp5RVBQ3r4PD0IAHl4so7hMm8l24rakOXpX8vTdHF+8FsG4YlPrVB MfU3xMBIbHbsy1wkN1yyJcvCQgl9miz22DVCrqZc/QXTJ+sbVgeNseXm5cQljaiI DDYiItOc6eiL7lqYchV6E7N+yoRSn79F8mLfUFRUW+iBhPI0aH92H2t63e4OCQ69 NyFPmSjDtNG/LvNbdxYKxv0va/9bo4qUKzlw6QSva1B317A/NzQ= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:48 2026 by rpki-client