This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft File: 85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft (raw, json) Hash identifier: 92USOcS9IDTJBJEYU1IWZHnz5go1j9hVahbuu8mocZU= Subject key identifier: 09:A8:54:A8:9D:65:A8:70:1B:C4:35:9B:27:37:26:B2:A3:D9:B1:A9 Authority key identifier: 85:E8:DE:B3:87:42:E3:90:C7:BF:B3:4B:1E:4A:BA:C3:1D:33:7A:C3 Certificate issuer: /CN=85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3 Certificate serial: 21ED647B99EDB503C3DE77991A84B546E7B9A7EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft Manifest number: 02DD Signing time: Sun 01 Feb 2026 03:31:41 +0000 Manifest this update: Sun 01 Feb 2026 03:26:41 +0000 Manifest next update: Wed 04 Feb 2026 03:33:41 +0000 Files and hashes: 1: 85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.crl (hash: IA+U6N8gdXCHeM30jX+RSYY+AbVTJLVikUnJhccwhIk=) 2: 3130332e3137382e3137342e302f32332d3234203d3e20313337333331.roa (hash: gonve5wIJ3O85bDiwHHm2xjnNdsU9xH6JAbxD3Ax5a8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.crl rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 03:33:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:ed:64:7b:99:ed:b5:03:c3:de:77:99:1a:84:b5:46:e7:b9:a7:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3 Validity Not Before: Feb 1 03:26:41 2026 GMT Not After : Feb 4 03:33:41 2026 GMT Subject: CN=09A854A89D65A8701BC4359B273726B2A3D9B1A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:3d:2a:20:8b:96:60:a3:7e:d3:6e:3a:e2:ef: 11:5e:c4:3a:7d:be:2e:1c:52:84:d7:f7:66:0b:30: b4:8c:70:15:34:64:31:b1:16:84:76:39:60:36:8b: 81:ba:a2:69:ab:28:19:d6:22:2d:f7:da:30:4f:fe: e9:6b:ab:86:68:81:f8:e7:da:d5:75:4f:d5:e7:52: b6:d3:51:d8:93:03:2f:fa:95:82:25:b4:43:0c:d1: d3:1a:e7:bb:15:27:be:58:e3:ed:74:6b:ab:dd:1d: b6:85:cd:f0:70:19:d6:07:70:a2:ba:44:3e:ef:3b: 96:9a:48:d4:0a:63:6a:bd:54:e6:a7:55:9e:9e:1b: 60:d0:fc:21:3d:31:5f:11:20:b2:48:38:fd:4e:76: 85:1b:7d:73:8e:4f:d7:f2:f0:82:6c:89:e2:04:3c: 54:3e:d3:a8:8b:c8:2a:4e:17:56:82:f8:97:ec:55: 00:bd:8b:83:91:8d:11:b9:81:b7:c5:b8:05:81:76: 68:c0:29:30:25:f4:95:19:37:7d:34:f3:a2:73:55: 4b:de:c0:1e:44:b1:f7:6a:b4:d3:b2:c8:36:47:0d: af:01:eb:d9:66:25:d0:47:96:00:87:f8:ac:48:58: d1:02:8b:dc:03:e0:08:23:ee:01:27:d3:4f:4a:41: 12:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A8:54:A8:9D:65:A8:70:1B:C4:35:9B:27:37:26:B2:A3:D9:B1:A9 X509v3 Authority Key Identifier: keyid:85:E8:DE:B3:87:42:E3:90:C7:BF:B3:4B:1E:4A:BA:C3:1D:33:7A:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:7b:e6:34:23:7e:7a:a3:6b:c8:4b:06:37:0b:32:69:65:2f: fe:e0:e8:15:0c:d5:42:5f:75:ac:da:80:d9:eb:e8:8d:a8:a4: b5:e1:ce:a3:a6:a1:ca:79:09:4e:09:6a:0f:f3:3e:3e:9f:52: 0b:ce:3f:11:67:78:20:38:47:7a:a8:94:a1:21:71:af:0f:56: e2:73:56:1b:d6:ac:42:6c:75:d3:11:ae:91:3e:0a:2c:dd:f3: b2:03:4c:88:97:86:6a:41:af:f5:f7:30:41:54:99:41:f9:f6: a3:5a:8f:cc:b0:dd:b0:69:d1:52:fc:99:f1:10:da:fd:22:fe: 28:cc:d7:9c:15:83:a1:48:7f:ec:76:2b:96:08:54:eb:fd:a7: bb:90:99:d7:9f:3f:8b:17:9e:33:d9:97:ad:92:df:bf:d1:34: ab:25:63:1c:59:a7:68:54:89:d3:b6:b1:4d:50:de:82:c2:18: aa:05:65:3d:b1:47:10:66:53:bc:b2:49:f1:ef:35:24:4c:04: 9e:b7:93:5a:b8:09:7d:6e:d0:20:4b:f9:2b:20:5a:44:4c:4d: 5d:cb:77:fc:42:cd:da:5b:d7:9a:7c:d1:cd:80:6c:50:65:61: fb:db:93:3c:ae:ce:31:0e:74:29:84:83:36:f1:40:d5:51:93: 10:a2:d5:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIe1ke5nttQPD3neZGoS1Rue5p+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVFOERFQjM4NzQyRTM5MEM3QkZCMzRCMUU0QUJBQzMx RDMzN0FDMzAeFw0yNjAyMDEwMzI2NDFaFw0yNjAyMDQwMzMzNDFaMDMxMTAvBgNV BAMTKDA5QTg1NEE4OUQ2NUE4NzAxQkM0MzU5QjI3MzcyNkIyQTNEOUIxQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsPSogi5Zgo37Tbjri7xFexDp9 vi4cUoTX92YLMLSMcBU0ZDGxFoR2OWA2i4G6ommrKBnWIi332jBP/ulrq4Zogfjn 2tV1T9XnUrbTUdiTAy/6lYIltEMM0dMa57sVJ75Y4+10a6vdHbaFzfBwGdYHcKK6 RD7vO5aaSNQKY2q9VOanVZ6eG2DQ/CE9MV8RILJIOP1OdoUbfXOOT9fy8IJsieIE PFQ+06iLyCpOF1aC+JfsVQC9i4ORjRG5gbfFuAWBdmjAKTAl9JUZN30086JzVUve wB5EsfdqtNOyyDZHDa8B69lmJdBHlgCH+KxIWNECi9wD4Agj7gEn009KQRIzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCahUqJ1lqHAbxDWbJzcmsqPZsakwHwYDVR0j BBgwFoAUhejes4dC45DHv7NLHkq6wx0zesMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDdmOWVmNC1mOTlmLTQ0ZmYtYjk2OC03MGQ0NTI0ZDcyMDcvMC84NUU4REVCMzg3 NDJFMzkwQzdCRkIzNEIxRTRBQkFDMzFEMzM3QUMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODVFOERFQjM4NzQyRTM5MEM3QkZCMzRCMUU0QUJBQzMxRDMz N0FDMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ3ZjllZjQtZjk5Zi00NGZmLWI5 NjgtNzBkNDUyNGQ3MjA3LzAvODVFOERFQjM4NzQyRTM5MEM3QkZCMzRCMUU0QUJB QzMxRDMzN0FDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMl75jQjfnqja8hLBjcLMmllL/7g6BUM1UJf dazagNnr6I2opLXhzqOmocp5CU4Jag/zPj6fUgvOPxFneCA4R3qolKEhca8PVuJz VhvWrEJsddMRrpE+Cizd87IDTIiXhmpBr/X3MEFUmUH59qNaj8yw3bBp0VL8mfEQ 2v0i/ijM15wVg6FIf+x2K5YIVOv9p7uQmdefP4sXnjPZl62S37/RNKslYxxZp2hU idO2sU1Q3oLCGKoFZT2xRxBmU7yySfHvNSRMBJ63k1q4CX1u0CBL+SsgWkRMTV3L d/xCzdpb15p80c2AbFBlYfvbkzyuzjEOdCmEgzbxQNVRkxCi1U4= -----END CERTIFICATE-----Generated at Mon Feb 2 10:06:38 2026 by rpki-client