This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft File: 861DE86D91E4C7508D388EDBC70834681B43B5CA.mft (raw, json) Hash identifier: 7xnEyjvRfmKSIJosiBVWg/ofS8jH+o/asC25NfEQNsk= Subject key identifier: 6B:C8:5C:26:14:EA:32:96:FC:F3:0E:CA:E7:FF:F9:D8:F8:4F:7E:09 Authority key identifier: 86:1D:E8:6D:91:E4:C7:50:8D:38:8E:DB:C7:08:34:68:1B:43:B5:CA Certificate issuer: /CN=861DE86D91E4C7508D388EDBC70834681B43B5CA Certificate serial: 4F73D7115D82993A629DF7C13B5FA9CE8B212B3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/861DE86D91E4C7508D388EDBC70834681B43B5CA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft Manifest number: 04FD Signing time: Sat 31 Jan 2026 05:21:40 +0000 Manifest this update: Sat 31 Jan 2026 05:16:40 +0000 Manifest next update: Tue 03 Feb 2026 12:49:40 +0000 Files and hashes: 1: 861DE86D91E4C7508D388EDBC70834681B43B5CA.crl (hash: fSr8fnrBGZZrDW6spyKm4bDPE54LWxnMXYFh06klw9o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.crl rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/861DE86D91E4C7508D388EDBC70834681B43B5CA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 12:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:73:d7:11:5d:82:99:3a:62:9d:f7:c1:3b:5f:a9:ce:8b:21:2b:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=861DE86D91E4C7508D388EDBC70834681B43B5CA Validity Not Before: Jan 31 05:16:40 2026 GMT Not After : Feb 3 12:49:40 2026 GMT Subject: CN=6BC85C2614EA3296FCF30ECAE7FFF9D8F84F7E09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a5:f5:cd:7b:35:1f:81:f8:c3:82:ac:c4:32: 0c:53:b5:f2:f7:dd:01:51:17:6a:c3:63:6a:a0:12: 19:a7:c6:b9:e8:2b:99:36:d1:10:f2:17:91:fa:c1: 19:84:e6:7f:22:98:07:6d:51:9e:51:14:a5:f9:aa: 23:24:81:7d:07:87:38:39:7c:01:f2:d5:95:8f:de: b1:f8:ca:2f:64:fe:1b:7f:d2:f1:cf:5e:97:e0:e1: 7d:25:91:95:ea:b3:85:5d:92:76:c8:94:e4:58:ca: db:b4:b1:5c:17:62:24:ea:68:03:5f:97:ab:b6:68: c7:0d:ff:71:d5:32:d5:7f:f6:64:db:d7:25:99:37: 65:27:f4:f8:01:fc:91:40:e9:4c:80:0a:7e:e0:fb: 54:c3:9b:f5:14:ab:72:39:a1:fc:4d:3e:9f:8e:fd: fa:8c:12:5a:69:ab:97:a0:5d:69:14:2d:ea:e0:ec: 17:d1:ab:78:a9:b3:92:96:0c:0f:3d:af:0f:69:17: db:7b:3d:06:34:33:97:29:97:65:aa:6d:bb:db:37: f5:da:58:b1:1a:21:fc:fe:bf:6e:3f:91:f3:d2:54: 3a:60:c2:77:e0:08:8b:ab:62:ce:c3:e4:eb:92:37: b9:92:8d:98:7e:a2:3e:cc:f8:94:a0:48:79:18:30: b5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C8:5C:26:14:EA:32:96:FC:F3:0E:CA:E7:FF:F9:D8:F8:4F:7E:09 X509v3 Authority Key Identifier: keyid:86:1D:E8:6D:91:E4:C7:50:8D:38:8E:DB:C7:08:34:68:1B:43:B5:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/861DE86D91E4C7508D388EDBC70834681B43B5CA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:ed:f4:60:7f:e2:f0:7e:3d:4a:7c:5b:84:c4:1a:2c:ef:7b: 5f:97:07:34:7a:ff:f0:6e:98:7a:23:f8:45:47:fe:ce:0e:04: 4b:26:f9:6f:cd:01:a8:64:96:8c:72:a4:5f:08:04:85:66:92: d1:1d:14:1a:80:2c:8f:d3:7f:bc:a3:9b:a9:5d:75:41:2c:aa: 8b:c8:fc:9c:33:bd:8b:90:3b:f1:e5:5a:be:21:a9:6e:10:36: 99:37:cd:86:f0:88:18:48:f6:7a:42:9b:3e:cb:01:11:15:e3: 60:ee:03:be:fd:fc:fb:26:79:8d:03:81:8c:4e:31:8c:44:6c: f5:d1:0e:26:53:d3:7e:ee:78:3e:78:c9:d7:79:ee:bb:98:5f: ae:f9:6d:5c:3e:d3:bf:1c:73:44:b6:23:5b:b5:e2:42:23:36: d9:39:9e:ff:f9:1a:c3:b6:01:ba:f7:ad:23:e4:e5:94:cc:18: 86:73:7c:a0:f6:4a:3f:e0:f6:6a:92:d8:21:5e:a2:e8:11:b0: 66:3f:e9:c0:1e:5c:7e:56:1d:68:74:59:e2:b2:b4:7f:40:09: 15:dd:00:f2:7c:42:4a:d2:73:78:5e:71:a8:34:0a:5e:57:91: 16:0d:08:0d:84:c0:18:52:03:78:4e:05:94:4d:c9:b6:f8:14: 28:d0:6c:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT3PXEV2CmTpinffBO1+pzoshKzwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODYxREU4NkQ5MUU0Qzc1MDhEMzg4RURCQzcwODM0Njgx QjQzQjVDQTAeFw0yNjAxMzEwNTE2NDBaFw0yNjAyMDMxMjQ5NDBaMDMxMTAvBgNV BAMTKDZCQzg1QzI2MTRFQTMyOTZGQ0YzMEVDQUU3RkZGOUQ4Rjg0RjdFMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9pfXNezUfgfjDgqzEMgxTtfL3 3QFRF2rDY2qgEhmnxrnoK5k20RDyF5H6wRmE5n8imAdtUZ5RFKX5qiMkgX0Hhzg5 fAHy1ZWP3rH4yi9k/ht/0vHPXpfg4X0lkZXqs4VdknbIlORYytu0sVwXYiTqaANf l6u2aMcN/3HVMtV/9mTb1yWZN2Un9PgB/JFA6UyACn7g+1TDm/UUq3I5ofxNPp+O /fqMElppq5egXWkULerg7BfRq3ips5KWDA89rw9pF9t7PQY0M5cpl2WqbbvbN/Xa WLEaIfz+v24/kfPSVDpgwnfgCIurYs7D5OuSN7mSjZh+oj7M+JSgSHkYMLUzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa8hcJhTqMpb88w7K5//52PhPfgkwHwYDVR0j BBgwFoAUhh3obZHkx1CNOI7bxwg0aBtDtcowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NjlmMjk4OC1jYWIzLTQ1YWEtOTdlNS02Mzg1ZjA3ZmYxY2QvMC84NjFERTg2RDkx RTRDNzUwOEQzODhFREJDNzA4MzQ2ODFCNDNCNUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODYxREU4NkQ5MUU0Qzc1MDhEMzg4RURCQzcwODM0NjgxQjQz QjVDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODY5ZjI5ODgtY2FiMy00NWFhLTk3 ZTUtNjM4NWYwN2ZmMWNkLzAvODYxREU4NkQ5MUU0Qzc1MDhEMzg4RURCQzcwODM0 NjgxQjQzQjVDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE3t9GB/4vB+PUp8W4TEGizve1+XBzR6//Bu mHoj+EVH/s4OBEsm+W/NAahkloxypF8IBIVmktEdFBqALI/Tf7yjm6lddUEsqovI /JwzvYuQO/HlWr4hqW4QNpk3zYbwiBhI9npCmz7LAREV42DuA779/PsmeY0DgYxO MYxEbPXRDiZT037ueD54ydd57ruYX675bVw+078cc0S2I1u14kIjNtk5nv/5GsO2 Abr3rSPk5ZTMGIZzfKD2Sj/g9mqS2CFeougRsGY/6cAeXH5WHWh0WeKytH9ACRXd APJ8QkrSc3hecag0Cl5XkRYNCA2EwBhSA3hOBZRNybb4FCjQbBs= -----END CERTIFICATE-----Generated at Mon Feb 2 09:57:44 2026 by rpki-client