This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft File: 9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft (raw, json) Hash identifier: NvgQ3SGVep6QXkyOVbHNTTtlwr56WxyAENxrDuqDGtM= Subject key identifier: 08:A9:1B:11:4D:4C:BD:19:16:DB:80:73:74:D3:67:AF:2B:4D:59:54 Authority key identifier: 98:52:AB:B8:50:8D:E5:51:F1:72:3B:C9:AC:5E:C3:9B:35:05:6A:E2 Certificate issuer: /CN=9852ABB8508DE551F1723BC9AC5EC39B35056AE2 Certificate serial: 3AABD3A82FE4DF8C9FB94DF3757BB1373FB50663 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft Manifest number: 0549 Signing time: Sun 01 Feb 2026 10:32:03 +0000 Manifest this update: Sun 01 Feb 2026 10:27:03 +0000 Manifest next update: Wed 04 Feb 2026 21:49:03 +0000 Files and hashes: 1: 9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl (hash: E2QqFex+pN3HyEzKf6rDeNCuiMkMNh5uXu7epMOZDtc=) 2: 323030313a6466343a366430303a3a2f34382d3438203d3e20313337333734.roa (hash: 415EQue+5BmAk6tXc9Eh3zzXOH8qdWNQfAsbBNLYlC0=) 3: 3130332e3131302e3138342e302f32332d3234203d3e20313337333734.roa (hash: t6DqUPB7zlmhbQqkH/Czn9ueyAzHtFeCOGR6aaj9LSw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 21:49:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:ab:d3:a8:2f:e4:df:8c:9f:b9:4d:f3:75:7b:b1:37:3f:b5:06:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9852ABB8508DE551F1723BC9AC5EC39B35056AE2 Validity Not Before: Feb 1 10:27:03 2026 GMT Not After : Feb 4 21:49:03 2026 GMT Subject: CN=08A91B114D4CBD1916DB807374D367AF2B4D5954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d1:22:cd:f3:4d:8f:54:71:08:d2:68:02:47: 25:09:c8:a2:f0:a7:16:91:ac:93:6f:c0:70:e0:81: 53:63:3f:08:aa:37:87:e7:5f:61:7a:76:60:06:ba: c6:0b:c2:09:bc:42:c5:92:da:c8:0b:40:3f:06:18: ea:c6:05:e9:8f:12:e6:d3:e6:ea:ce:f1:26:da:ff: 0c:21:fa:b5:58:f7:b4:36:0e:8a:a8:a5:b8:8f:16: 38:3c:f8:8e:96:98:e2:57:7e:88:33:4e:29:72:ab: 80:69:89:64:df:37:e7:e6:de:93:cd:ea:bf:d8:4f: 76:c6:5a:d8:f9:53:16:e0:70:64:87:c6:22:d1:88: ad:1a:e7:11:dc:b4:8d:26:6c:6a:00:ae:ec:cd:22: 56:45:11:42:47:2f:97:93:57:bd:8c:8c:80:de:fd: ac:68:4d:fb:73:38:db:4b:a5:24:6b:23:02:10:d7: 72:0c:84:a2:c5:ac:1a:39:93:c0:2e:d4:69:df:aa: 7c:24:98:ba:aa:3a:66:8f:32:15:69:0d:e9:0a:39: 54:1d:56:af:36:81:9a:2c:9b:61:0d:5a:ca:ee:af: 12:94:99:b0:fa:df:8d:85:44:de:ea:cf:42:38:f3: 25:72:fc:30:3b:c2:1c:7c:a0:99:a2:3f:86:df:98: 03:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A9:1B:11:4D:4C:BD:19:16:DB:80:73:74:D3:67:AF:2B:4D:59:54 X509v3 Authority Key Identifier: keyid:98:52:AB:B8:50:8D:E5:51:F1:72:3B:C9:AC:5E:C3:9B:35:05:6A:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:b3:a2:19:cd:d2:84:b2:0e:5e:26:23:18:ec:e1:74:bf:fe: e0:bb:83:93:a3:84:e8:49:79:e7:51:1d:20:fc:cb:84:7c:7e: 4c:84:f0:41:64:37:18:1f:27:e1:d6:bd:ec:1e:14:d3:32:1d: 73:3b:a9:93:93:38:53:21:89:28:3d:f2:88:e8:b1:fe:23:3d: 69:6f:e1:40:19:7b:12:35:f6:b7:eb:69:75:17:98:b2:ae:86: 7e:a7:b7:68:5b:5f:ff:8d:aa:18:2a:ab:f7:d7:51:db:97:65: d7:96:a1:e1:44:e8:59:70:1b:99:7f:30:02:1e:bb:28:3b:e9: 94:57:25:01:9f:11:bc:64:36:6f:6b:ff:f3:e7:c5:ec:87:2a: 8b:6b:8d:94:a0:16:0e:f4:1f:09:8e:9a:e3:42:72:06:77:2b: f2:3e:d3:0b:03:38:3b:7b:90:10:69:95:b1:20:9f:6d:cb:ec: c5:1a:e8:9a:74:a2:37:18:c1:5b:33:25:ca:16:27:06:07:86: d8:44:2d:0d:38:29:46:cc:74:72:e0:d3:49:eb:43:0c:aa:67: 29:68:8e:c5:4c:4d:b3:77:f9:fd:12:ce:24:4e:13:04:62:7f: 4c:10:54:b9:dc:4b:01:21:5f:3b:24:01:7b:19:f4:a2:31:54: 29:2a:d2:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOqvTqC/k34yfuU3zdXuxNz+1BmMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMzOUIz NTA1NkFFMjAeFw0yNjAyMDExMDI3MDNaFw0yNjAyMDQyMTQ5MDNaMDMxMTAvBgNV BAMTKDA4QTkxQjExNEQ0Q0JEMTkxNkRCODA3Mzc0RDM2N0FGMkI0RDU5NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC80SLN802PVHEI0mgCRyUJyKLw pxaRrJNvwHDggVNjPwiqN4fnX2F6dmAGusYLwgm8QsWS2sgLQD8GGOrGBemPEubT 5urO8Sba/wwh+rVY97Q2DoqopbiPFjg8+I6WmOJXfogzTilyq4BpiWTfN+fm3pPN 6r/YT3bGWtj5UxbgcGSHxiLRiK0a5xHctI0mbGoAruzNIlZFEUJHL5eTV72MjIDe /axoTftzONtLpSRrIwIQ13IMhKLFrBo5k8Au1GnfqnwkmLqqOmaPMhVpDekKOVQd Vq82gZosm2ENWsrurxKUmbD6342FRN7qz0I48yVy/DA7whx8oJmiP4bfmAMrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCKkbEU1MvRkW24BzdNNnrytNWVQwHwYDVR0j BBgwFoAUmFKruFCN5VHxcjvJrF7DmzUFauIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTY2ZjM1MC1lNjQyLTQwMmYtOGFjMy02YWVmN2UxMWFhYzMvMC85ODUyQUJCODUw OERFNTUxRjE3MjNCQzlBQzVFQzM5QjM1MDU2QUUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMzOUIzNTA1 NkFFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGE2NmYzNTAtZTY0Mi00MDJmLThh YzMtNmFlZjdlMTFhYWMzLzAvOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMz OUIzNTA1NkFFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMKzohnN0oSyDl4mIxjs4XS//uC7g5OjhOhJ eedRHSD8y4R8fkyE8EFkNxgfJ+HWveweFNMyHXM7qZOTOFMhiSg98ojosf4jPWlv 4UAZexI19rfraXUXmLKuhn6nt2hbX/+Nqhgqq/fXUduXZdeWoeFE6FlwG5l/MAIe uyg76ZRXJQGfEbxkNm9r//PnxeyHKotrjZSgFg70HwmOmuNCcgZ3K/I+0wsDODt7 kBBplbEgn23L7MUa6Jp0ojcYwVszJcoWJwYHhthELQ04KUbMdHLg00nrQwyqZylo jsVMTbN3+f0SziROEwRif0wQVLncSwEhXzskAXsZ9KIxVCkq0sg= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:32 2026 by rpki-client