This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft File: 8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft (raw, json) Hash identifier: 5ZCSrBDMALtMlpo3rDic8VhiDxULNP7Yfi2+QmmaRAs= Subject key identifier: DB:F9:BA:62:00:FD:94:D1:9E:59:F9:63:3F:CF:2F:3C:90:93:F0:5D Authority key identifier: 87:14:17:2B:5D:3F:C9:C3:6A:83:EB:A2:7A:B9:46:FC:69:A4:F8:21 Certificate issuer: /CN=8714172B5D3FC9C36A83EBA27AB946FC69A4F821 Certificate serial: 2B3AC967611B1B80F1E855BF8CB811BA90B600AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer Subject info access: rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft Manifest number: 0231 Signing time: Sun 01 Feb 2026 16:22:29 +0000 Manifest this update: Sun 01 Feb 2026 16:17:29 +0000 Manifest next update: Wed 04 Feb 2026 23:18:29 +0000 Files and hashes: 1: 8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl (hash: n0CZlP5ZmQ/5gyzEL71cRJ/oNng6WtTdtkug+huipH0=) 2: 3130332e32302e31362e302f32342d3234203d3e20313439393633.roa (hash: zDyrXTGOoVhoyVXFQzLfzvSBhhtitp+cvr9nrYj9PZk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 23:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:3a:c9:67:61:1b:1b:80:f1:e8:55:bf:8c:b8:11:ba:90:b6:00:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8714172B5D3FC9C36A83EBA27AB946FC69A4F821 Validity Not Before: Feb 1 16:17:29 2026 GMT Not After : Feb 4 23:18:29 2026 GMT Subject: CN=DBF9BA6200FD94D19E59F9633FCF2F3C9093F05D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6f:db:bd:8a:fa:2d:f5:ec:61:d4:eb:74:70: ba:a6:45:45:c9:19:3e:f6:48:11:d8:08:af:6b:af: 4b:dc:43:58:aa:a1:81:94:16:66:56:92:04:00:ec: c7:ac:f9:20:38:00:77:a2:38:5d:99:02:7d:fd:f8: a4:67:eb:3a:09:11:52:bd:85:34:18:be:68:8b:cf: 61:cd:6b:f7:d7:8e:b4:98:a6:ac:c7:e5:0d:f4:2e: c5:c8:64:a6:2e:4e:b2:2f:fd:47:45:43:a7:90:2f: 8f:35:73:01:44:47:25:9f:34:52:57:3d:7f:6c:95: c6:6f:f3:70:ab:4b:ea:1f:36:60:1c:62:eb:55:b6: b2:3a:3f:ba:c2:f5:d0:93:08:34:f2:d3:a2:12:c2: 38:ae:37:e3:22:ca:9c:93:21:7e:d3:51:9a:0a:22: 4b:c2:b1:70:3f:7c:bd:7b:2f:1f:43:e1:d6:fe:4d: 43:04:bd:04:f8:a6:1a:8b:80:a8:55:69:64:a6:1f: e1:ff:23:a7:ea:69:f9:be:af:f5:ea:1d:88:3b:68: 56:c3:d8:a4:b7:ed:ca:b7:73:25:30:e5:b2:7f:c9: 55:79:99:33:95:97:f4:fe:87:73:2d:47:97:35:12: c8:d4:5a:b6:cf:38:05:fb:4a:c5:5c:11:36:a3:04: 06:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F9:BA:62:00:FD:94:D1:9E:59:F9:63:3F:CF:2F:3C:90:93:F0:5D X509v3 Authority Key Identifier: keyid:87:14:17:2B:5D:3F:C9:C3:6A:83:EB:A2:7A:B9:46:FC:69:A4:F8:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:6c:d6:34:9a:45:3c:ca:bb:d6:81:4d:c4:c3:ff:fe:cb:bb: 54:27:07:65:84:7e:6a:4a:07:7a:5e:26:02:57:a7:1d:b6:8e: 1b:4c:63:52:0f:ea:c0:d8:1a:64:de:af:84:2a:9c:45:8c:5e: 12:a0:28:48:66:9d:d2:d0:eb:b4:0e:30:1e:5e:0d:4d:41:25: d7:22:b6:50:a0:2a:a1:04:2c:83:0e:55:8e:53:24:e4:d5:19: 39:14:e2:c9:80:8c:4a:7a:f4:f9:8a:c3:39:3a:a1:71:be:e7: 7b:9c:71:5b:93:ba:b0:ca:ed:78:cc:97:5d:e0:e1:11:f9:4d: fb:4c:d4:e9:53:84:e7:08:c3:95:a0:35:99:1d:b6:85:2e:28: 0b:f8:49:e8:56:9b:4b:1d:5c:d0:43:fe:4a:4f:f1:29:0c:87: eb:36:ae:af:39:3c:f9:64:3c:92:76:a6:00:2e:d0:40:6b:4c: 40:cb:a9:d6:ae:94:e3:d3:f3:e8:7c:40:fe:0a:29:b9:1c:d1: b2:0c:41:fd:38:87:b1:40:a8:82:6c:fa:16:de:30:ce:70:47: bc:c3:2c:c5:33:46:9e:b0:4b:f5:77:2e:2a:3c:1b:48:6a:50: e6:64:91:3b:09:96:09:ca:fb:90:37:76:0d:e9:ab:f9:09:0b: 03:1c:cc:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKzrJZ2EbG4Dx6FW/jLgRupC2AK0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2RkM2 OUE0RjgyMTAeFw0yNjAyMDExNjE3MjlaFw0yNjAyMDQyMzE4MjlaMDMxMTAvBgNV BAMTKERCRjlCQTYyMDBGRDk0RDE5RTU5Rjk2MzNGQ0YyRjNDOTA5M0YwNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtb9u9ivot9exh1Ot0cLqmRUXJ GT72SBHYCK9rr0vcQ1iqoYGUFmZWkgQA7Mes+SA4AHeiOF2ZAn39+KRn6zoJEVK9 hTQYvmiLz2HNa/fXjrSYpqzH5Q30LsXIZKYuTrIv/UdFQ6eQL481cwFERyWfNFJX PX9slcZv83CrS+ofNmAcYutVtrI6P7rC9dCTCDTy06ISwjiuN+MiypyTIX7TUZoK IkvCsXA/fL17Lx9D4db+TUMEvQT4phqLgKhVaWSmH+H/I6fqafm+r/XqHYg7aFbD 2KS37cq3cyUw5bJ/yVV5mTOVl/T+h3MtR5c1EsjUWrbPOAX7SsVcETajBAbZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2/m6YgD9lNGeWfljP88vPJCT8F0wHwYDVR0j BBgwFoAUhxQXK10/ycNqg+uierlG/Gmk+CEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDNkYjdkMi1iM2ZkLTQyMTQtYjZhNC1kMDE2MmY5NWU3MmUvMC84NzE0MTcyQjVE M0ZDOUMzNkE4M0VCQTI3QUI5NDZGQzY5QTRGODIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2RkM2OUE0 RjgyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQzZGI3ZDItYjNmZC00MjE0LWI2 YTQtZDAxNjJmOTVlNzJlLzAvODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2 RkM2OUE0RjgyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALJs1jSaRTzKu9aBTcTD//7Lu1QnB2WEfmpK B3peJgJXpx22jhtMY1IP6sDYGmTer4QqnEWMXhKgKEhmndLQ67QOMB5eDU1BJdci tlCgKqEELIMOVY5TJOTVGTkU4smAjEp69PmKwzk6oXG+53uccVuTurDK7XjMl13g 4RH5TftM1OlThOcIw5WgNZkdtoUuKAv4SehWm0sdXNBD/kpP8SkMh+s2rq85PPlk PJJ2pgAu0EBrTEDLqdaulOPT8+h8QP4KKbkc0bIMQf04h7FAqIJs+hbeMM5wR7zD LMUzRp6wS/V3Lio8G0hqUOZkkTsJlgnK+5A3dg3pq/kJCwMczJQ= -----END CERTIFICATE-----Generated at Mon Feb 2 09:47:19 2026 by rpki-client