This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft File: 80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft (raw, json) Hash identifier: 0bVfKMcWxLVQZQgyxQAGHcka59CexykJCnVKBFS0hj8= Subject key identifier: 0C:22:5A:30:EB:73:DB:F6:B5:64:36:F6:58:66:07:22:07:C1:1F:B9 Authority key identifier: 80:D8:9E:42:9E:BB:AA:D9:E0:9C:35:0D:9D:D8:FA:DC:91:7C:BA:1A Certificate issuer: /CN=80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A Certificate serial: 3D4672FF327A805E9F7EBCE23CB742A3148EB5A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft Manifest number: 0370 Signing time: Sat 31 Jan 2026 09:31:09 +0000 Manifest this update: Sat 31 Jan 2026 09:26:09 +0000 Manifest next update: Tue 03 Feb 2026 16:01:09 +0000 Files and hashes: 1: 3130332e37382e3130342e302f32332d3234203d3e203634333134.roa (hash: H9wL101+fO+XAXjmdLy2BsE4Gk5B/qm3589qLKncPgg=) 2: 80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.crl (hash: RFK4VCkkBL+sBYuZl3ngq0gFXaNmP3CQbSC6vqteeRc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.crl rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 16:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:46:72:ff:32:7a:80:5e:9f:7e:bc:e2:3c:b7:42:a3:14:8e:b5:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A Validity Not Before: Jan 31 09:26:09 2026 GMT Not After : Feb 3 16:01:09 2026 GMT Subject: CN=0C225A30EB73DBF6B56436F65866072207C11FB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:95:3d:c1:8a:e7:0c:ef:2a:ec:6a:73:53:24: c3:be:86:9c:52:38:84:af:4d:bd:b4:d5:52:48:7e: a9:d8:21:f6:f4:1c:c7:a8:fd:b8:52:6d:cb:f1:9c: b2:5b:64:58:f0:ea:40:65:1e:51:b1:b5:5c:b4:c5: 4a:96:2d:42:71:3b:e1:74:3e:4d:65:09:79:1e:06: 66:e6:86:86:69:d2:7d:9c:72:6c:9c:dc:dd:96:63: 6b:17:11:13:aa:a9:c3:be:eb:5f:72:80:a6:37:b9: c4:c1:98:04:ea:a6:1b:a4:17:94:07:16:18:3c:9a: 21:b4:db:f3:5b:35:23:cb:f6:a0:86:7a:7e:62:2b: fc:b5:bb:1c:2a:c1:ef:a1:e2:ff:1e:ba:6b:75:9f: 8e:de:91:62:f4:09:78:d7:bc:66:f9:12:96:d5:7c: ed:20:38:60:8c:f6:7c:ed:c2:7a:c0:05:95:45:3c: 79:a4:27:ff:08:ca:6e:8a:c3:a1:ba:6e:79:1d:7b: 3d:8b:c8:af:ad:47:2b:07:dc:35:06:13:60:6e:ff: 2e:be:1b:93:03:62:75:c3:0a:64:2b:9c:5e:ad:cc: a1:8b:92:02:bf:1b:13:7d:3e:87:d5:ad:46:cb:3f: 55:2a:36:9c:f4:e9:b4:ec:bf:55:d5:5c:17:80:0a: 4b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:22:5A:30:EB:73:DB:F6:B5:64:36:F6:58:66:07:22:07:C1:1F:B9 X509v3 Authority Key Identifier: keyid:80:D8:9E:42:9E:BB:AA:D9:E0:9C:35:0D:9D:D8:FA:DC:91:7C:BA:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:74:9c:8d:b5:a3:9e:bd:52:7e:2b:1c:18:9b:af:82:44:f6: a9:3a:f7:02:9c:cd:53:ed:c2:9d:4f:72:10:ab:4a:c0:6e:f7: f7:1e:0e:f3:7e:d4:91:87:c7:73:c0:49:a3:2c:96:a0:c2:be: 2e:23:ff:76:7e:4b:2e:41:00:b5:15:95:8d:78:8b:a1:f7:93: fd:13:96:28:c7:9f:0b:96:53:7b:1e:8b:b0:21:4c:0d:f7:14: cf:b2:32:65:5a:bf:9a:58:30:63:63:38:44:5f:b8:7f:f7:3a: eb:bb:7e:e5:1a:1c:8c:41:2c:25:58:01:57:0c:a9:cc:47:a8: 44:e7:50:f9:b5:0b:56:aa:6f:7a:ad:8b:05:70:f5:58:83:2d: a2:1a:0e:e2:b3:6a:6d:a4:19:f4:7a:44:1c:5e:49:84:57:bb: 4b:a7:fd:31:f3:74:d6:6a:44:c7:cf:6d:a4:be:e2:9d:5c:1b: 3c:e0:49:f5:75:06:a7:3c:5f:0d:a8:bd:23:96:c5:f7:e8:86: 50:e3:a1:5b:e8:62:c6:22:1f:f1:65:6d:96:43:3c:36:98:ca: bc:bc:c9:54:b7:7a:46:da:16:fe:c4:d1:0b:ed:00:e3:a3:cf: eb:d6:3f:a9:c9:12:21:32:57:ab:db:35:9b:c9:6f:ab:34:25: 81:43:ac:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPUZy/zJ6gF6ffrziPLdCoxSOtaQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODBEODlFNDI5RUJCQUFEOUUwOUMzNTBEOUREOEZBREM5 MTdDQkExQTAeFw0yNjAxMzEwOTI2MDlaFw0yNjAyMDMxNjAxMDlaMDMxMTAvBgNV BAMTKDBDMjI1QTMwRUI3M0RCRjZCNTY0MzZGNjU4NjYwNzIyMDdDMTFGQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnlT3BiucM7yrsanNTJMO+hpxS OISvTb201VJIfqnYIfb0HMeo/bhSbcvxnLJbZFjw6kBlHlGxtVy0xUqWLUJxO+F0 Pk1lCXkeBmbmhoZp0n2ccmyc3N2WY2sXEROqqcO+619ygKY3ucTBmATqphukF5QH Fhg8miG02/NbNSPL9qCGen5iK/y1uxwqwe+h4v8eumt1n47ekWL0CXjXvGb5EpbV fO0gOGCM9nztwnrABZVFPHmkJ/8Iym6Kw6G6bnkdez2LyK+tRysH3DUGE2Bu/y6+ G5MDYnXDCmQrnF6tzKGLkgK/GxN9PofVrUbLP1UqNpz06bTsv1XVXBeACktNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDCJaMOtz2/a1ZDb2WGYHIgfBH7kwHwYDVR0j BBgwFoAUgNieQp67qtngnDUNndj63JF8uhowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTEyYWM4OC0wMzNkLTQ5N2UtYmY2My01NTUzZDVkYzZkYzkvMC84MEQ4OUU0MjlF QkJBQUQ5RTA5QzM1MEQ5REQ4RkFEQzkxN0NCQTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODBEODlFNDI5RUJCQUFEOUUwOUMzNTBEOUREOEZBREM5MTdD QkExQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzkxMmFjODgtMDMzZC00OTdlLWJm NjMtNTU1M2Q1ZGM2ZGM5LzAvODBEODlFNDI5RUJCQUFEOUUwOUMzNTBEOUREOEZB REM5MTdDQkExQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABB0nI21o569Un4rHBibr4JE9qk69wKczVPt wp1PchCrSsBu9/ceDvN+1JGHx3PASaMslqDCvi4j/3Z+Sy5BALUVlY14i6H3k/0T lijHnwuWU3sei7AhTA33FM+yMmVav5pYMGNjOERfuH/3Ouu7fuUaHIxBLCVYAVcM qcxHqETnUPm1C1aqb3qtiwVw9ViDLaIaDuKzam2kGfR6RBxeSYRXu0un/THzdNZq RMfPbaS+4p1cGzzgSfV1Bqc8Xw2ovSOWxffohlDjoVvoYsYiH/FlbZZDPDaYyry8 yVS3ekbaFv7E0QvtAOOjz+vWP6nJEiEyV6vbNZvJb6s0JYFDrM0= -----END CERTIFICATE-----Generated at Mon Feb 2 10:02:51 2026 by rpki-client