This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft File: 8DAFDBD814B60F568505D65130E4661FCD7D665F.mft (raw, json) Hash identifier: T0MUMp8Z/nXpeueK8xxCHM58RwBino2r7MNg7DWX+Nk= Subject key identifier: E7:84:EE:80:30:FA:10:1B:0C:24:44:4A:0A:DC:27:15:0F:7E:FE:02 Authority key identifier: 8D:AF:DB:D8:14:B6:0F:56:85:05:D6:51:30:E4:66:1F:CD:7D:66:5F Certificate issuer: /CN=8DAFDBD814B60F568505D65130E4661FCD7D665F Certificate serial: 5E15930BBC0E5E4FE3D2726ADCF42878CE876204 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft Manifest number: 026F Signing time: Tue 20 Jan 2026 14:52:02 +0000 Manifest this update: Tue 20 Jan 2026 14:47:02 +0000 Manifest next update: Fri 23 Jan 2026 16:43:02 +0000 Files and hashes: 1: 3130332e3136382e3139302e302f32342d3234203d3e20313432333139.roa (hash: /4nmgLfcCNw5dynQDZtGk4IBxc3BmveSB9gkF4R0RCk=) 2: 8DAFDBD814B60F568505D65130E4661FCD7D665F.crl (hash: Z7NLX+PkCU4WvK1Sag+KTYHIx6OTDXzWOmibpcodlE4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.crl rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 16:43:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:15:93:0b:bc:0e:5e:4f:e3:d2:72:6a:dc:f4:28:78:ce:87:62:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DAFDBD814B60F568505D65130E4661FCD7D665F Validity Not Before: Jan 20 14:47:02 2026 GMT Not After : Jan 23 16:43:02 2026 GMT Subject: CN=E784EE8030FA101B0C24444A0ADC27150F7EFE02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:bb:bb:2d:3f:5d:e2:8f:72:b2:42:e8:9d:c8: 9f:cd:b9:a9:4e:62:55:5d:ad:56:4e:80:0a:39:45: 1e:fa:2d:33:c4:8a:92:e2:6a:95:82:d1:46:e7:2a: b4:ee:5d:3e:9b:d3:34:fa:c7:90:ca:cd:d8:5d:9b: 03:f9:d0:06:08:4d:8e:21:95:62:c7:1e:d4:0a:83: 06:20:a0:8a:91:39:ed:3b:5f:a6:49:cd:4e:b7:27: 34:e0:58:83:ce:23:4f:37:c1:5f:56:d5:af:8f:88: 77:90:be:9d:2f:45:93:8c:51:59:75:e1:fc:f2:50: c8:f3:df:15:d5:f7:1f:96:5c:c3:ff:2a:db:01:06: 6b:50:ff:8e:45:99:a6:c5:0f:96:bf:37:fe:c3:22: 0f:97:7d:bb:69:0a:ad:37:c5:41:c6:36:1b:4e:f4: e3:65:b9:10:a4:91:6e:1b:95:a4:3f:a2:f9:21:0c: a8:ad:fa:cd:9f:78:2f:83:3e:08:21:06:85:f6:7d: 49:4c:a4:b0:84:b1:33:fc:d7:d8:18:9a:87:85:1a: ac:8a:c8:68:03:88:24:7c:dc:28:49:c1:f6:de:29: e7:22:7c:3b:e6:35:3d:73:b7:9a:93:55:af:ef:58: 2b:77:dc:90:6c:da:30:ee:33:fe:56:df:80:a2:94: 8c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:84:EE:80:30:FA:10:1B:0C:24:44:4A:0A:DC:27:15:0F:7E:FE:02 X509v3 Authority Key Identifier: keyid:8D:AF:DB:D8:14:B6:0F:56:85:05:D6:51:30:E4:66:1F:CD:7D:66:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:ec:3d:7d:44:0c:3e:f9:17:6f:4b:06:4b:aa:3f:66:17:44: c5:b4:ef:e8:0a:72:78:93:c8:f9:72:1a:15:23:67:c5:a9:ad: 94:1c:a5:f1:3a:ef:cb:b8:a6:7b:a4:eb:46:9d:27:31:15:86: d4:dc:23:07:1c:25:18:e5:2e:fa:78:10:a9:88:50:d2:ea:78: f2:c4:01:ae:c0:e0:87:c2:b1:98:ec:d4:71:12:65:be:77:57: 75:be:43:ba:58:3a:70:b1:02:52:59:a2:1d:5a:02:d1:9b:89: fd:26:b7:9a:e3:bd:f6:ff:da:d3:18:c3:e4:b4:7b:81:6f:b1: 97:df:db:2d:8b:14:61:66:42:c9:1e:fc:44:3e:ed:08:a8:fe: 55:e6:b7:bc:4b:84:4d:d6:50:8d:37:1a:be:38:0d:53:98:03: e8:35:28:96:e0:40:b7:e6:1a:be:aa:4b:e1:84:65:ea:d6:4f: ee:d4:e4:7c:ad:7e:c1:be:9f:d5:7c:cf:1f:39:34:70:f4:1b: 88:f2:c0:55:ca:90:26:ce:5b:06:5b:da:73:de:d8:36:2a:30: 61:e1:f0:d1:50:d9:c2:70:4e:98:79:ab:a6:14:c2:4b:03:59: 94:3c:51:31:ec:26:53:23:e8:51:24:e7:7c:a5:72:0b:af:87: ae:d7:60:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXhWTC7wOXk/j0nJq3PQoeM6HYgQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2MUZD RDdENjY1RjAeFw0yNjAxMjAxNDQ3MDJaFw0yNjAxMjMxNjQzMDJaMDMxMTAvBgNV BAMTKEU3ODRFRTgwMzBGQTEwMUIwQzI0NDQ0QTBBREMyNzE1MEY3RUZFMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeu7stP13ij3KyQuidyJ/NualO YlVdrVZOgAo5RR76LTPEipLiapWC0UbnKrTuXT6b0zT6x5DKzdhdmwP50AYITY4h lWLHHtQKgwYgoIqROe07X6ZJzU63JzTgWIPOI083wV9W1a+PiHeQvp0vRZOMUVl1 4fzyUMjz3xXV9x+WXMP/KtsBBmtQ/45FmabFD5a/N/7DIg+XfbtpCq03xUHGNhtO 9ONluRCkkW4blaQ/ovkhDKit+s2feC+DPgghBoX2fUlMpLCEsTP819gYmoeFGqyK yGgDiCR83ChJwfbeKecifDvmNT1zt5qTVa/vWCt33JBs2jDuM/5W34CilIy3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU54TugDD6EBsMJERKCtwnFQ9+/gIwHwYDVR0j BBgwFoAUja/b2BS2D1aFBdZRMORmH819Zl8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTliMGJhZC02NmI5LTRmMjgtYTdjNS1lOWE5ZmUxMjBhZDcvMC84REFGREJEODE0 QjYwRjU2ODUwNUQ2NTEzMEU0NjYxRkNEN0Q2NjVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2MUZDRDdE NjY1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU5YjBiYWQtNjZiOS00ZjI4LWE3 YzUtZTlhOWZlMTIwYWQ3LzAvOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2 MUZDRDdENjY1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJLsPX1EDD75F29LBkuqP2YXRMW07+gKcniT yPlyGhUjZ8WprZQcpfE678u4pnuk60adJzEVhtTcIwccJRjlLvp4EKmIUNLqePLE Aa7A4IfCsZjs1HESZb53V3W+Q7pYOnCxAlJZoh1aAtGbif0mt5rjvfb/2tMYw+S0 e4FvsZff2y2LFGFmQske/EQ+7Qio/lXmt7xLhE3WUI03Gr44DVOYA+g1KJbgQLfm Gr6qS+GEZerWT+7U5HytfsG+n9V8zx85NHD0G4jywFXKkCbOWwZb2nPe2DYqMGHh 8NFQ2cJwTph5q6YUwksDWZQ8UTHsJlMj6FEk53ylcguvh67XYLs= -----END CERTIFICATE-----Generated at Wed Jan 21 14:44:20 2026 by rpki-client