This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft File: 8C888E996588527BC5EF8ABD293676C3463A1A22.mft (raw, json) Hash identifier: FNvtrs5dTSq2vXaGhFIDAwXFlIM27NFX4YlD6ca4R0k= Subject key identifier: 70:24:80:FA:0F:B9:BD:A3:F1:B9:F9:B2:0B:40:56:6B:8C:74:8B:67 Authority key identifier: 8C:88:8E:99:65:88:52:7B:C5:EF:8A:BD:29:36:76:C3:46:3A:1A:22 Certificate issuer: /CN=8C888E996588527BC5EF8ABD293676C3463A1A22 Certificate serial: 1567E5EEDA8B003C98391EAB17847379BA47E8F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft Manifest number: 0278 Signing time: Sat 31 Jan 2026 07:21:43 +0000 Manifest this update: Sat 31 Jan 2026 07:16:43 +0000 Manifest next update: Tue 03 Feb 2026 07:53:43 +0000 Files and hashes: 1: 8C888E996588527BC5EF8ABD293676C3463A1A22.crl (hash: zY363Qc3CxUs2l86yij3Xyxk0fPk94+BKg/PBKM/gh4=) 2: 323430313a383034303a3a2f33322d3332203d3e20313336313237.roa (hash: UuD6w5FXiXpEb3WA0CSDEKfMUpwCYuxys7TXvAGTTaE=) 3: 3130332e39372e342e302f32342d3234203d3e20313336313237.roa (hash: oyn1Uio0Qvr9sm/GPuAcnqkMPKHi72fQr6RvUU829kw=) 4: 3130332e39372e342e302f32322d3234203d3e20313336313237.roa (hash: cSbzW37UFSp4uDE4SjobLjyIHBQEPum3WY749moxuxA=) 5: 3130332e39372e372e302f32342d3234203d3e20313336313237.roa (hash: Qqqk2T1cKP78pedxPHc7hCxMQjf7DnhA0KfJusumKno=) 6: 3130332e39372e362e302f32342d3234203d3e20313336313237.roa (hash: TtoAt5XF5k/VvO7s/IJgg3qpfYPoYBpMQ3uw/EaHESY=) 7: 3130332e39372e352e302f32342d3234203d3e20313336313237.roa (hash: WKEiaTlm3HRRnumgx69gRc0fNHyTzs1yLm0l6WuuEfo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.crl rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 07:53:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:67:e5:ee:da:8b:00:3c:98:39:1e:ab:17:84:73:79:ba:47:e8:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C888E996588527BC5EF8ABD293676C3463A1A22 Validity Not Before: Jan 31 07:16:43 2026 GMT Not After : Feb 3 07:53:43 2026 GMT Subject: CN=702480FA0FB9BDA3F1B9F9B20B40566B8C748B67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:65:23:79:5f:2d:38:6e:b7:8e:47:7b:c9:1e: 8b:89:cc:7d:de:8c:cf:53:5e:b1:e5:c0:5f:d0:ce: 44:09:5b:bb:a8:3b:bb:3b:94:b6:19:b3:6e:ce:16: ae:5e:df:57:50:fe:40:81:fc:c7:8f:c1:1b:3e:32: 07:60:49:e5:ca:07:9c:45:b5:15:61:d7:bf:5c:a5: 21:a5:ed:9c:37:9f:f6:fc:21:59:2e:ca:c2:93:3b: 2f:91:bb:37:92:82:a2:e7:59:79:2e:4d:d4:a8:83: a4:73:dc:2d:c9:04:f1:01:ff:69:16:c6:3f:02:65: 6c:07:2a:fd:36:85:52:30:62:30:fb:50:ef:d7:e2: 97:c1:ac:5c:cc:a0:6e:10:1c:00:4b:ca:8c:f5:37: 8b:0b:0d:59:89:32:c6:32:7c:e0:5f:9c:41:29:d3: 82:20:c8:b6:dc:dc:73:c5:26:9d:59:ae:b1:f1:e3: dc:fd:ab:9e:13:ad:56:79:18:70:ed:56:b1:16:c1: 64:f7:39:d1:f4:ad:73:8f:36:03:8f:e1:b8:67:ee: 76:5c:54:2d:01:ca:14:42:9b:5f:58:da:38:63:42: 8b:08:77:5f:5b:c9:a2:64:49:53:ac:cd:60:7b:d2: a6:44:d5:3e:c8:5c:c2:fa:ca:db:6d:3e:fb:b3:a8: 51:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:24:80:FA:0F:B9:BD:A3:F1:B9:F9:B2:0B:40:56:6B:8C:74:8B:67 X509v3 Authority Key Identifier: keyid:8C:88:8E:99:65:88:52:7B:C5:EF:8A:BD:29:36:76:C3:46:3A:1A:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:b1:b3:8b:e6:d0:d6:32:73:7c:46:1c:41:06:31:74:39:90: 37:1d:5d:6e:f6:90:22:dc:27:82:eb:bb:fe:17:af:ef:16:40: bc:96:79:51:be:35:99:18:a4:67:ec:fb:58:26:fb:3f:41:dc: 98:12:bd:07:f9:2a:bb:d1:dd:76:91:92:11:04:8b:d7:e6:7a: 48:39:51:af:a1:e1:ec:13:e7:77:3c:f6:08:2d:2b:8f:fa:75: 04:0d:2f:84:12:7b:16:34:9e:25:ee:d0:08:7e:08:a2:90:a9: 29:cb:6b:1e:8e:a6:59:9a:49:07:c4:8e:66:27:20:45:c3:01: 14:47:77:8f:d3:d2:f3:52:b1:e1:52:6e:db:66:5e:86:2a:48: ee:d3:bc:29:5a:ac:f2:58:e9:bb:d1:0f:8a:a5:3d:77:1c:4c: 44:2f:39:44:7f:0c:c2:f3:a3:a7:3e:87:44:cd:8f:20:df:e0: 21:d2:78:be:18:f0:e7:b4:96:37:e9:83:7b:2f:fd:41:f0:d7: 5a:b1:f8:da:b7:a5:58:95:83:1e:a5:18:78:46:7f:f9:4e:f9: 44:1f:5e:f3:d5:87:5a:6d:ca:ec:81:8e:be:cc:89:7c:c0:25: 5a:80:1e:0e:62:29:dd:e1:ee:b9:41:fd:f5:ed:ce:4c:02:f7: 1d:3e:0a:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFWfl7tqLADyYOR6rF4RzebpH6PUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM4ODhFOTk2NTg4NTI3QkM1RUY4QUJEMjkzNjc2QzM0 NjNBMUEyMjAeFw0yNjAxMzEwNzE2NDNaFw0yNjAyMDMwNzUzNDNaMDMxMTAvBgNV BAMTKDcwMjQ4MEZBMEZCOUJEQTNGMUI5RjlCMjBCNDA1NjZCOEM3NDhCNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBZSN5Xy04breOR3vJHouJzH3e jM9TXrHlwF/QzkQJW7uoO7s7lLYZs27OFq5e31dQ/kCB/MePwRs+MgdgSeXKB5xF tRVh179cpSGl7Zw3n/b8IVkuysKTOy+RuzeSgqLnWXkuTdSog6Rz3C3JBPEB/2kW xj8CZWwHKv02hVIwYjD7UO/X4pfBrFzMoG4QHABLyoz1N4sLDVmJMsYyfOBfnEEp 04IgyLbc3HPFJp1ZrrHx49z9q54TrVZ5GHDtVrEWwWT3OdH0rXOPNgOP4bhn7nZc VC0ByhRCm19Y2jhjQosId19byaJkSVOszWB70qZE1T7IXML6ytttPvuzqFHPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcCSA+g+5vaPxufmyC0BWa4x0i2cwHwYDVR0j BBgwFoAUjIiOmWWIUnvF74q9KTZ2w0Y6GiIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NGIyNzMwMy05ZTNkLTRkNDItYWYyNS02YTBmMTE4MDhmMjcvMC84Qzg4OEU5OTY1 ODg1MjdCQzVFRjhBQkQyOTM2NzZDMzQ2M0ExQTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM4ODhFOTk2NTg4NTI3QkM1RUY4QUJEMjkzNjc2QzM0NjNB MUEyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDRiMjczMDMtOWUzZC00ZDQyLWFm MjUtNmEwZjExODA4ZjI3LzAvOEM4ODhFOTk2NTg4NTI3QkM1RUY4QUJEMjkzNjc2 QzM0NjNBMUEyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFWxs4vm0NYyc3xGHEEGMXQ5kDcdXW72kCLc J4Lru/4Xr+8WQLyWeVG+NZkYpGfs+1gm+z9B3JgSvQf5KrvR3XaRkhEEi9fmekg5 Ua+h4ewT53c89ggtK4/6dQQNL4QSexY0niXu0Ah+CKKQqSnLax6OplmaSQfEjmYn IEXDARRHd4/T0vNSseFSbttmXoYqSO7TvClarPJY6bvRD4qlPXccTEQvOUR/DMLz o6c+h0TNjyDf4CHSeL4Y8Oe0ljfpg3sv/UHw11qx+Nq3pViVgx6lGHhGf/lO+UQf XvPVh1ptyuyBjr7MiXzAJVqAHg5iKd3h7rlB/fXtzkwC9x0+Cmg= -----END CERTIFICATE-----Generated at Mon Feb 2 10:06:34 2026 by rpki-client