This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft File: 8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft (raw, json) Hash identifier: zN+S1nLl6s/ZYHE4qNMld0S4dU0gukiMym03i7i2htw= Subject key identifier: 86:D5:40:A1:59:CD:7E:4F:8A:2F:35:34:E7:31:E9:26:25:CF:D4:38 Authority key identifier: 8D:5A:49:C9:E4:2E:37:1B:FD:1E:67:AC:E1:B3:D5:5E:C1:AB:F7:3F Certificate issuer: /CN=8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F Certificate serial: 716494C44339D80DFABC780DAA8A314B94ACF189 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft Manifest number: DC Signing time: Sat 31 Jan 2026 08:20:58 +0000 Manifest this update: Sat 31 Jan 2026 08:15:58 +0000 Manifest next update: Tue 03 Feb 2026 09:08:58 +0000 Files and hashes: 1: 8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl (hash: 1s9eBhb2OtJDfUFrbIPOAL6cRLd6kFL03vdRH/8pRig=) 2: 3130332e3231362e3130352e302f32342d3234203d3e20313531353830.roa (hash: LW5rOerEeQ4o2LL00sXUmEen9sAHKxhrciVztv4Q/SE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 09:08:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:64:94:c4:43:39:d8:0d:fa:bc:78:0d:aa:8a:31:4b:94:ac:f1:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F Validity Not Before: Jan 31 08:15:58 2026 GMT Not After : Feb 3 09:08:58 2026 GMT Subject: CN=86D540A159CD7E4F8A2F3534E731E92625CFD438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:70:7e:de:61:bd:da:7d:c6:6a:02:fb:48:1d: 9b:88:d9:54:b8:7f:5a:6c:ca:0f:97:b5:94:da:5f: 41:ef:9d:82:fc:f7:a5:7c:f4:30:20:dc:19:e3:fc: cc:84:28:50:e7:f9:8d:50:ab:3b:18:c1:e0:4e:3b: 0f:0d:47:ec:3f:c1:44:93:0e:c0:7a:5e:8b:6f:fb: 6a:3d:75:fc:24:d7:1a:28:a7:37:ea:81:c4:9a:b1: f1:ac:9b:70:e3:40:3e:df:2f:35:38:8a:bb:9b:1b: 02:a1:99:3c:4a:25:6d:fd:92:d7:6e:31:06:82:5c: fb:a4:2a:1e:a0:c0:a5:59:34:b1:16:80:e2:c5:b9: e9:f9:1e:aa:f6:cd:58:c5:5a:07:d2:2c:5e:92:0f: e7:54:72:5e:58:41:ab:eb:b7:99:35:81:4f:b1:ef: 12:0c:53:a6:da:eb:e8:62:7f:ea:30:4b:2c:56:5d: b3:59:6f:a3:2f:cf:38:2f:f5:c5:f6:ca:f6:d3:b2: 2a:12:bb:0e:0c:02:1b:8d:5b:10:9c:84:d2:42:95: a5:01:68:e1:ba:20:4b:7b:4b:8a:48:ba:22:a7:f0: 41:0f:25:56:c2:2b:d3:8b:86:c6:9d:83:36:88:22: 69:36:4a:97:72:8f:23:0c:88:7f:9d:69:26:d1:e7: c9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D5:40:A1:59:CD:7E:4F:8A:2F:35:34:E7:31:E9:26:25:CF:D4:38 X509v3 Authority Key Identifier: keyid:8D:5A:49:C9:E4:2E:37:1B:FD:1E:67:AC:E1:B3:D5:5E:C1:AB:F7:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:96:b4:a0:04:9c:a7:e2:80:6c:7c:d0:cd:91:db:91:54:86: 78:62:83:8a:f0:60:d2:22:cd:21:e3:06:e7:66:e3:ac:86:95: 60:11:f2:e7:00:dd:88:da:29:03:46:02:60:b5:93:4a:9c:0f: ac:2c:b2:92:fd:09:48:29:c1:4f:7b:41:1d:c5:bf:00:60:ce: ee:63:5a:95:8e:1d:30:be:a4:4b:df:c2:4c:4e:8a:1b:16:af: d5:1b:c6:f3:55:e0:52:e9:5f:62:d5:41:af:f4:45:e3:d4:fc: 30:f0:ac:f9:82:f3:f0:e0:ab:00:ca:e5:49:55:8e:a8:ef:bc: 73:3d:59:12:f3:0a:de:01:1a:66:97:53:49:84:09:85:65:ea: 2e:45:f1:99:1a:35:a6:0f:0d:8a:e1:41:e1:67:31:09:2e:fd: 32:d1:20:07:d3:2c:d7:fb:6c:34:ff:eb:b2:da:55:de:6e:f2: 88:5b:44:8b:bf:d2:b4:44:a9:85:eb:98:b7:61:49:79:ad:d0: 04:b0:5b:11:37:57:00:2a:75:47:e0:0a:e2:d0:80:d5:64:2d: 44:9e:c7:37:fd:8b:d3:e3:4a:eb:8a:25:35:f0:cb:5b:e1:cb: 1a:dc:b0:47:d5:b2:17:37:c7:79:1d:8b:c4:52:06:41:29:bf: 67:25:e0:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcWSUxEM52A36vHgNqooxS5Ss8YkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1NUVD MUFCRjczRjAeFw0yNjAxMzEwODE1NThaFw0yNjAyMDMwOTA4NThaMDMxMTAvBgNV BAMTKDg2RDU0MEExNTlDRDdFNEY4QTJGMzUzNEU3MzFFOTI2MjVDRkQ0MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQcH7eYb3afcZqAvtIHZuI2VS4 f1psyg+XtZTaX0HvnYL896V89DAg3Bnj/MyEKFDn+Y1QqzsYweBOOw8NR+w/wUST DsB6Xotv+2o9dfwk1xoopzfqgcSasfGsm3DjQD7fLzU4irubGwKhmTxKJW39ktdu MQaCXPukKh6gwKVZNLEWgOLFuen5Hqr2zVjFWgfSLF6SD+dUcl5YQavrt5k1gU+x 7xIMU6ba6+hif+owSyxWXbNZb6Mvzzgv9cX2yvbTsioSuw4MAhuNWxCchNJClaUB aOG6IEt7S4pIuiKn8EEPJVbCK9OLhsadgzaIImk2SpdyjyMMiH+daSbR58mVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhtVAoVnNfk+KLzU05zHpJiXP1DgwHwYDVR0j BBgwFoAUjVpJyeQuNxv9Hmes4bPVXsGr9z8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmY1OTg2Yi1jNzY0LTRjZDctYjQxNC1hMjViZDA1YzNmOTIvMC84RDVBNDlDOUU0 MkUzNzFCRkQxRTY3QUNFMUIzRDU1RUMxQUJGNzNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1NUVDMUFC RjczRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJmNTk4NmItYzc2NC00Y2Q3LWI0 MTQtYTI1YmQwNWMzZjkyLzAvOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1 NUVDMUFCRjczRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADWWtKAEnKfigGx80M2R25FUhnhig4rwYNIi zSHjBudm46yGlWAR8ucA3YjaKQNGAmC1k0qcD6wsspL9CUgpwU97QR3FvwBgzu5j WpWOHTC+pEvfwkxOihsWr9UbxvNV4FLpX2LVQa/0RePU/DDwrPmC8/DgqwDK5UlV jqjvvHM9WRLzCt4BGmaXU0mECYVl6i5F8ZkaNaYPDYrhQeFnMQku/TLRIAfTLNf7 bDT/67LaVd5u8ohbRIu/0rREqYXrmLdhSXmt0ASwWxE3VwAqdUfgCuLQgNVkLUSe xzf9i9PjSuuKJTXwy1vhyxrcsEfVshc3x3kdi8RSBkEpv2cl4Io= -----END CERTIFICATE-----Generated at Mon Feb 2 10:02:55 2026 by rpki-client