This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft File: 8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft (raw, json) Hash identifier: uYRevji7qX4QyfIFXKZQ0N85uFfMEXP+sGTo4TOmbOQ= Subject key identifier: 46:C2:36:06:1F:95:03:43:F5:E5:E0:33:A6:9E:F2:2F:DE:D1:AC:57 Authority key identifier: 8D:95:6C:F1:DF:56:85:0C:9C:F6:17:3D:F9:01:41:A9:C6:A4:68:68 Certificate issuer: /CN=8D956CF1DF56850C9CF6173DF90141A9C6A46868 Certificate serial: 5E0B676AB9020B60CD3BAAF1E240AB3D596413C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D956CF1DF56850C9CF6173DF90141A9C6A46868.cer Subject info access: rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft Manifest number: 0218 Signing time: Mon 02 Feb 2026 06:32:00 +0000 Manifest this update: Mon 02 Feb 2026 06:27:00 +0000 Manifest next update: Thu 05 Feb 2026 13:35:00 +0000 Files and hashes: 1: 8D956CF1DF56850C9CF6173DF90141A9C6A46868.crl (hash: rGDXYXY3kpMQZeqL1FdRfMU5mz0Xi3DsthPBqTEwVO4=) 2: 3130332e3135332e39372e302f32342d3234203d3e20313430343630.roa (hash: 2CDFzM/b08FBAmMsE5mkOznd4mOppWCjC4ZNYfj8Grs=) 3: 3130332e3135332e39362e302f32342d3234203d3e20313430343630.roa (hash: AlVmqpfL/WFpHYoBKjxWx/LAHevtz/DHHIwmIJ22kko=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.crl rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D956CF1DF56850C9CF6173DF90141A9C6A46868.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:0b:67:6a:b9:02:0b:60:cd:3b:aa:f1:e2:40:ab:3d:59:64:13:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D956CF1DF56850C9CF6173DF90141A9C6A46868 Validity Not Before: Feb 2 06:27:00 2026 GMT Not After : Feb 5 13:35:00 2026 GMT Subject: CN=46C236061F950343F5E5E033A69EF22FDED1AC57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:cd:30:d3:56:4f:01:06:12:a5:bc:0a:ef:f9: 3b:3f:1e:c7:d4:a7:77:84:2c:26:98:9e:76:cb:5c: fe:5c:e1:0a:36:2b:5b:db:94:9d:48:5e:e3:af:e8: 22:c2:d8:72:96:09:a9:bd:6b:da:64:27:9b:9c:88: 6c:df:ed:59:cd:e3:43:62:c8:00:41:08:21:e4:ca: 23:c2:b6:49:74:d4:b4:c8:25:da:89:f3:52:61:c8: 03:80:ad:3f:ae:8c:8a:99:82:6b:08:ea:45:64:ab: 88:ef:15:7a:9e:4b:54:d5:e3:33:7b:fe:6f:a4:2e: 61:73:14:03:58:d9:17:96:ca:06:b0:6f:23:eb:55: 74:b7:7c:21:eb:34:92:2d:9d:66:ca:7f:69:16:da: 6f:e8:75:c8:df:68:c9:fb:95:5a:b8:b4:dd:6a:73: aa:24:94:92:70:52:e0:b8:6c:59:95:2b:26:0b:98: 56:87:ee:0f:f1:e8:92:da:3f:a4:40:f5:3f:32:bf: d3:9b:ac:43:46:2f:30:3b:d1:0b:6d:53:ed:cd:e5: 20:1f:b6:a0:50:5b:e0:9b:55:9c:6b:dd:94:64:79: 2c:aa:e5:4e:72:f3:97:60:69:c8:f3:85:ea:e2:a3: bd:4c:6a:b4:b7:c0:94:55:18:69:22:b5:2d:fd:94: 86:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C2:36:06:1F:95:03:43:F5:E5:E0:33:A6:9E:F2:2F:DE:D1:AC:57 X509v3 Authority Key Identifier: keyid:8D:95:6C:F1:DF:56:85:0C:9C:F6:17:3D:F9:01:41:A9:C6:A4:68:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D956CF1DF56850C9CF6173DF90141A9C6A46868.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:4c:29:8b:de:55:3d:e2:fd:a5:be:59:f7:fb:b4:14:73:b8: a3:1a:88:f6:00:ab:67:67:3d:eb:f2:f6:13:76:2c:da:23:bc: 3c:fb:31:cd:73:d7:9f:e7:f8:93:78:1c:c4:cb:ee:0c:ae:c2: 47:fc:0d:a6:cb:52:b4:f8:8d:b7:83:73:f1:69:2f:5c:02:3e: 13:50:a9:41:cc:0d:dd:3b:e9:f3:ed:28:6d:0f:84:4f:8f:df: 60:26:6f:32:0d:80:0b:21:3e:c7:ff:53:0c:37:9b:b4:1d:0e: b0:bb:6e:b0:3b:4e:72:c3:db:9e:6d:d6:7b:41:81:7a:bf:78: 95:9e:0a:dd:e4:9f:86:f5:63:ab:72:60:44:80:33:e8:ce:85: e7:e3:3e:30:4f:9a:c8:cf:fe:73:1b:22:a8:1f:31:dc:c9:a3: d4:6d:b1:b4:c2:42:0c:ff:3c:66:44:ed:b8:ad:be:72:02:c1: 6c:a4:f7:a9:1c:b1:57:2a:bb:a9:48:1d:b3:ca:5d:a7:9d:19: e9:df:98:1e:6e:ae:c3:cf:01:c8:2f:74:a4:6d:4d:39:95:c9: ff:0a:be:06:32:4c:66:c1:20:b4:56:98:70:df:23:8b:06:f8: 54:e9:2b:bc:f5:52:0e:95:d9:a3:90:19:d3:bd:0b:f6:05:f8: 4f:d8:ea:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXgtnarkCC2DNO6rx4kCrPVlkE8QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ5NTZDRjFERjU2ODUwQzlDRjYxNzNERjkwMTQxQTlD NkE0Njg2ODAeFw0yNjAyMDIwNjI3MDBaFw0yNjAyMDUxMzM1MDBaMDMxMTAvBgNV BAMTKDQ2QzIzNjA2MUY5NTAzNDNGNUU1RTAzM0E2OUVGMjJGREVEMUFDNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpzTDTVk8BBhKlvArv+Ts/HsfU p3eELCaYnnbLXP5c4Qo2K1vblJ1IXuOv6CLC2HKWCam9a9pkJ5uciGzf7VnN40Ni yABBCCHkyiPCtkl01LTIJdqJ81JhyAOArT+ujIqZgmsI6kVkq4jvFXqeS1TV4zN7 /m+kLmFzFANY2ReWygawbyPrVXS3fCHrNJItnWbKf2kW2m/odcjfaMn7lVq4tN1q c6oklJJwUuC4bFmVKyYLmFaH7g/x6JLaP6RA9T8yv9ObrENGLzA70QttU+3N5SAf tqBQW+CbVZxr3ZRkeSyq5U5y85dgacjzherio71MarS3wJRVGGkitS39lIb5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURsI2Bh+VA0P15eAzpp7yL97RrFcwHwYDVR0j BBgwFoAUjZVs8d9WhQyc9hc9+QFBqcakaGgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTZhNzRkZi1kOTA3LTRhYWYtYTgzNi00M2U0ZTE5Njg1MjUvMC84RDk1NkNGMURG NTY4NTBDOUNGNjE3M0RGOTAxNDFBOUM2QTQ2ODY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ5NTZDRjFERjU2ODUwQzlDRjYxNzNERjkwMTQxQTlDNkE0 Njg2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjk2YTc0ZGYtZDkwNy00YWFmLWE4 MzYtNDNlNGUxOTY4NTI1LzAvOEQ5NTZDRjFERjU2ODUwQzlDRjYxNzNERjkwMTQx QTlDNkE0Njg2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALJMKYveVT3i/aW+Wff7tBRzuKMaiPYAq2dn Pevy9hN2LNojvDz7Mc1z15/n+JN4HMTL7gyuwkf8DabLUrT4jbeDc/FpL1wCPhNQ qUHMDd076fPtKG0PhE+P32AmbzINgAshPsf/Uww3m7QdDrC7brA7TnLD255t1ntB gXq/eJWeCt3kn4b1Y6tyYESAM+jOhefjPjBPmsjP/nMbIqgfMdzJo9RtsbTCQgz/ PGZE7bitvnICwWyk96kcsVcqu6lIHbPKXaedGenfmB5ursPPAcgvdKRtTTmVyf8K vgYyTGbBILRWmHDfI4sG+FTpK7z1Ug6V2aOQGdO9C/YF+E/Y6vk= -----END CERTIFICATE-----Generated at Mon Feb 2 10:04:20 2026 by rpki-client