This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft File: 8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft (raw, json) Hash identifier: XQEPt1WOwXfHCYLwNHOCWFLUWwVO7Pj99qjob8j0VKg= Subject key identifier: 98:E1:96:C8:99:6A:B0:21:9B:96:DA:CB:8D:AC:F1:E9:C1:F9:93:4E Authority key identifier: 89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E Certificate issuer: /CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E Certificate serial: 315E42CA3EF7FC9AA4B6CEDB56963A0412FF311F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft Manifest number: 0149 Signing time: Sun 01 Feb 2026 01:00:04 +0000 Manifest this update: Sun 01 Feb 2026 00:55:04 +0000 Manifest next update: Wed 04 Feb 2026 02:31:04 +0000 Files and hashes: 1: 3230322e34372e3136302e302f32342d3234203d3e20313532303736.roa (hash: SOoZmysbJDZktqnuTuwq0n/y13DKsF/IrNzLNUAhqCQ=) 2: 8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl (hash: u9O74OEBcpZmHijrlq/vR4EQMEF9O5EJjc+AhKu8Wdw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 02:31:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:5e:42:ca:3e:f7:fc:9a:a4:b6:ce:db:56:96:3a:04:12:ff:31:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E Validity Not Before: Feb 1 00:55:04 2026 GMT Not After : Feb 4 02:31:04 2026 GMT Subject: CN=98E196C8996AB0219B96DACB8DACF1E9C1F9934E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:8f:0b:51:64:6c:ff:5a:ff:89:13:a1:af:cb: f2:91:a4:3d:77:f0:b3:f6:89:66:cc:47:f1:9e:70: 72:fb:97:8c:d1:14:3e:9b:a8:e8:fd:40:7a:5c:60: 92:5e:5a:35:77:47:7d:56:cf:0d:58:40:40:d3:92: e4:cc:cd:d4:3c:28:9f:bb:a6:71:29:c9:70:3d:f5: 99:f0:23:ea:52:e9:aa:43:4c:40:31:84:90:3a:92: be:f2:bd:01:72:87:78:81:ff:98:1f:ff:89:49:63: 81:63:4e:be:e8:07:47:ee:c0:b6:7b:43:0b:3c:aa: 88:56:6e:ea:80:12:f0:33:40:97:dc:1d:37:2f:7c: 70:58:82:75:9b:60:f2:ff:b5:3a:19:7c:66:74:cf: 81:9b:3b:b5:89:ce:4b:d7:c8:68:e2:5b:21:8c:18: 3c:11:1e:18:b6:9c:a1:08:c0:80:c1:c9:80:91:95: 46:f7:d0:19:7d:5c:6f:29:05:2d:b7:f8:12:11:f2: 51:aa:0f:6e:6a:63:8d:2f:11:f2:30:cb:0d:78:d0: dc:dd:b8:58:02:8e:02:0c:a6:a9:42:f4:f0:b6:27: 2a:20:41:48:c5:7b:7a:19:e7:15:93:f7:90:f8:b4: d5:e4:1f:17:c2:40:6e:e8:d5:dc:53:81:ec:18:e7: b0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E1:96:C8:99:6A:B0:21:9B:96:DA:CB:8D:AC:F1:E9:C1:F9:93:4E X509v3 Authority Key Identifier: keyid:89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:29:67:2d:19:c7:3c:8e:a9:89:66:bd:a0:41:a0:6c:40:9a: 6b:77:70:16:20:7f:67:42:2f:18:5b:84:1a:f9:f8:9b:cd:6d: 6e:df:b2:09:44:6f:0c:91:62:6a:f5:25:2d:b7:a3:58:06:13: db:4b:c2:ed:59:14:32:4f:10:cd:83:0f:5a:23:8d:09:db:2d: e3:fe:77:a1:5b:d9:71:c0:2f:11:c5:91:2b:3d:b9:1f:14:b1: d1:75:e9:a6:40:61:b2:fa:2a:f2:b5:d3:e9:b5:96:19:d5:43: 2c:0b:70:4e:6d:40:54:36:9c:87:30:4d:e1:31:c6:ad:78:dd: d2:1d:e2:e6:e0:42:7b:9a:63:2d:a6:65:ae:f1:7f:2d:db:51: 39:ea:6f:00:7c:88:37:37:1a:e2:3a:72:68:ad:c0:f7:35:e7: 3d:4d:25:84:b4:29:f3:f7:c2:64:ef:af:d9:bd:3e:61:dd:86: b3:11:52:75:33:9b:65:26:3e:c2:dd:82:dd:52:42:f7:be:a1: 7e:12:b6:2e:5b:62:22:2d:3b:a3:82:60:4d:27:b9:20:75:74: e2:ef:ea:e9:5c:69:a9:1e:cb:7d:d4:a3:1d:a4:b2:36:03:16: 0e:0b:a4:ec:8f:54:6a:60:a6:02:b4:3d:5b:e6:86:49:a5:b2: cc:39:bf:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMV5Cyj73/Jqkts7bVpY6BBL/MR8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYwQzU0 QjBGNUYxRTAeFw0yNjAyMDEwMDU1MDRaFw0yNjAyMDQwMjMxMDRaMDMxMTAvBgNV BAMTKDk4RTE5NkM4OTk2QUIwMjE5Qjk2REFDQjhEQUNGMUU5QzFGOTkzNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgjwtRZGz/Wv+JE6Gvy/KRpD13 8LP2iWbMR/GecHL7l4zRFD6bqOj9QHpcYJJeWjV3R31Wzw1YQEDTkuTMzdQ8KJ+7 pnEpyXA99ZnwI+pS6apDTEAxhJA6kr7yvQFyh3iB/5gf/4lJY4FjTr7oB0fuwLZ7 Qws8qohWbuqAEvAzQJfcHTcvfHBYgnWbYPL/tToZfGZ0z4GbO7WJzkvXyGjiWyGM GDwRHhi2nKEIwIDByYCRlUb30Bl9XG8pBS23+BIR8lGqD25qY40vEfIwyw140Nzd uFgCjgIMpqlC9PC2JyogQUjFe3oZ5xWT95D4tNXkHxfCQG7o1dxTgewY57CLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmOGWyJlqsCGbltrLjazx6cH5k04wHwYDVR0j BBgwFoAUiVjrHqACLe94PRfxxbbwxUsPXx4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Mjg4NzYyYy0zZmM1LTQ5Y2MtOTQ5YS01OTRiMzMxYTEzYTEvMC84OTU4RUIxRUEw MDIyREVGNzgzRDE3RjFDNUI2RjBDNTRCMEY1RjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYwQzU0QjBG NUYxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI4ODc2MmMtM2ZjNS00OWNjLTk0 OWEtNTk0YjMzMWExM2ExLzAvODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYw QzU0QjBGNUYxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIopZy0ZxzyOqYlmvaBBoGxAmmt3cBYgf2dC LxhbhBr5+JvNbW7fsglEbwyRYmr1JS23o1gGE9tLwu1ZFDJPEM2DD1ojjQnbLeP+ d6Fb2XHALxHFkSs9uR8UsdF16aZAYbL6KvK10+m1lhnVQywLcE5tQFQ2nIcwTeEx xq143dId4ubgQnuaYy2mZa7xfy3bUTnqbwB8iDc3GuI6cmitwPc15z1NJYS0KfP3 wmTvr9m9PmHdhrMRUnUzm2UmPsLdgt1SQve+oX4Sti5bYiItO6OCYE0nuSB1dOLv 6ulcaakey33Uox2ksjYDFg4LpOyPVGpgpgK0PVvmhkmlssw5v1Q= -----END CERTIFICATE-----Generated at Mon Feb 2 09:49:52 2026 by rpki-client