This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft File: 8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft (raw, json) Hash identifier: rGIT5SqVuaabqiHBNZRPjf0efZOUC8EeqEfuG256DWg= Subject key identifier: 83:27:CE:41:17:90:08:A7:CB:66:AF:4B:A5:90:18:10:93:46:03:74 Authority key identifier: 8B:0D:C7:9B:66:A9:6F:A7:FA:31:80:C2:0B:06:A5:C4:3C:9C:FE:A1 Certificate issuer: /CN=8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1 Certificate serial: 799891D95CB4B3405BB1B4C4CED1C5D075B6E973 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft Manifest number: 0354 Signing time: Sun 01 Feb 2026 13:22:31 +0000 Manifest this update: Sun 01 Feb 2026 13:17:31 +0000 Manifest next update: Wed 04 Feb 2026 14:47:31 +0000 Files and hashes: 1: 3130332e3131382e332e302f32342d3234203d3e20313337333732.roa (hash: CnYInR0edgXU+mYMJQGAiAKWjbNlk8PVPSzC/8WPG5g=) 2: 8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.crl (hash: QF3CZcj2r+Tdcb9seoHWVyZ4MEZpGAsaqRN28lqlJhM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.crl rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 14:47:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:98:91:d9:5c:b4:b3:40:5b:b1:b4:c4:ce:d1:c5:d0:75:b6:e9:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1 Validity Not Before: Feb 1 13:17:31 2026 GMT Not After : Feb 4 14:47:31 2026 GMT Subject: CN=8327CE41179008A7CB66AF4BA590181093460374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cb:54:43:f5:3f:82:39:4d:96:6e:f4:6e:8e: 8a:d2:b4:f0:74:9c:19:3b:ca:52:27:5b:4f:15:e6: dd:fa:a2:e3:1c:1d:ed:63:c7:64:23:9e:87:64:dc: 0f:b5:60:3b:8b:e5:2f:b0:e6:a6:c1:4a:20:1b:e4: aa:88:46:60:43:c5:a4:90:e1:0a:97:2d:ff:eb:89: c6:e5:3a:d6:b5:5e:7c:6c:b0:6e:80:3d:9c:d1:a3: d6:fc:1c:a3:d7:a2:64:19:31:4e:42:cd:27:0a:5f: 7f:bf:f1:28:4b:d4:73:13:e2:f1:5c:00:64:05:4c: 25:36:02:3e:c6:6b:97:d8:d9:ba:c2:0f:aa:8b:da: 60:51:ed:ca:d0:0c:dd:7f:c2:be:bd:6f:1d:3f:a4: db:96:92:c9:68:ac:38:a9:cf:71:a5:e5:1c:a3:fd: b0:76:83:eb:66:c5:1b:c1:39:32:fc:ca:c0:e2:ad: 16:3f:e4:3c:c0:bf:0f:d9:55:3e:ca:50:67:10:89: 9e:3b:ff:5f:9a:d2:11:7e:ef:73:60:bd:3a:fc:83: d9:da:69:3a:e0:a5:c2:5f:32:3a:84:04:05:8a:83: fb:dd:b6:16:7d:c1:3d:cb:60:73:3e:a3:6e:4c:08: af:8c:04:03:34:75:49:a2:d5:14:5b:21:91:5b:8e: 5d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:27:CE:41:17:90:08:A7:CB:66:AF:4B:A5:90:18:10:93:46:03:74 X509v3 Authority Key Identifier: keyid:8B:0D:C7:9B:66:A9:6F:A7:FA:31:80:C2:0B:06:A5:C4:3C:9C:FE:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:d9:e6:99:47:c8:d2:35:29:b8:e7:40:63:52:6e:50:3b:7b: e8:72:ba:ba:b5:6a:74:6d:83:7c:28:5a:33:0c:22:2d:1b:5b: 6b:a0:01:3e:1a:8a:ce:9a:41:cd:df:75:8f:97:fc:f7:68:ad: 70:f7:16:e0:ff:14:2f:65:02:31:33:0e:d5:8f:6b:10:e0:3f: 16:5d:43:6b:95:9b:89:ad:39:64:87:95:0a:14:8f:2f:c1:82: f2:16:ed:01:78:55:15:93:e2:23:bb:e6:cd:0e:89:5d:12:d2: 8b:7f:6b:f3:a9:79:e9:0e:4c:4c:85:07:fe:e2:af:f0:66:62: 30:c0:e9:44:13:ee:dd:6f:98:96:35:cf:da:98:df:4c:10:77: c3:10:a1:44:b6:90:21:f9:d0:16:91:56:bc:dd:49:5f:7d:ab: 30:ea:af:33:47:50:27:0e:27:62:e5:50:e4:b1:65:c8:dd:b8: 7e:5f:47:25:b0:01:08:8c:4b:c2:02:3f:56:b5:9a:63:fd:61: 78:8b:98:66:9b:c0:73:c8:d6:fc:7a:9b:a5:d6:0a:40:0f:98: df:22:d4:80:47:dc:ea:2b:ba:eb:cf:c9:e4:52:87:14:5e:7c: 44:e3:15:96:dc:e4:56:7d:ce:5d:65:c7:30:98:49:a1:37:02: de:1a:3f:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeZiR2Vy0s0BbsbTEztHF0HW26XMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIwREM3OUI2NkE5NkZBN0ZBMzE4MEMyMEIwNkE1QzQz QzlDRkVBMTAeFw0yNjAyMDExMzE3MzFaFw0yNjAyMDQxNDQ3MzFaMDMxMTAvBgNV BAMTKDgzMjdDRTQxMTc5MDA4QTdDQjY2QUY0QkE1OTAxODEwOTM0NjAzNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKy1RD9T+COU2WbvRujorStPB0 nBk7ylInW08V5t36ouMcHe1jx2Qjnodk3A+1YDuL5S+w5qbBSiAb5KqIRmBDxaSQ 4QqXLf/ricblOta1XnxssG6APZzRo9b8HKPXomQZMU5CzScKX3+/8ShL1HMT4vFc AGQFTCU2Aj7Ga5fY2brCD6qL2mBR7crQDN1/wr69bx0/pNuWkslorDipz3Gl5Ryj /bB2g+tmxRvBOTL8ysDirRY/5DzAvw/ZVT7KUGcQiZ47/1+a0hF+73NgvTr8g9na aTrgpcJfMjqEBAWKg/vdthZ9wT3LYHM+o25MCK+MBAM0dUmi1RRbIZFbjl1vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgyfOQReQCKfLZq9LpZAYEJNGA3QwHwYDVR0j BBgwFoAUiw3Hm2apb6f6MYDCCwalxDyc/qEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDViYmQ4MS0wMzMyLTQyMDItOWM5Mi1lYjE3NDZhOGNkOWQvMC84QjBEQzc5QjY2 QTk2RkE3RkEzMTgwQzIwQjA2QTVDNDNDOUNGRUExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIwREM3OUI2NkE5NkZBN0ZBMzE4MEMyMEIwNkE1QzQzQzlD RkVBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ1YmJkODEtMDMzMi00MjAyLTlj OTItZWIxNzQ2YThjZDlkLzAvOEIwREM3OUI2NkE5NkZBN0ZBMzE4MEMyMEIwNkE1 QzQzQzlDRkVBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACvZ5plHyNI1KbjnQGNSblA7e+hyurq1anRt g3woWjMMIi0bW2ugAT4ais6aQc3fdY+X/PdorXD3FuD/FC9lAjEzDtWPaxDgPxZd Q2uVm4mtOWSHlQoUjy/BgvIW7QF4VRWT4iO75s0OiV0S0ot/a/OpeekOTEyFB/7i r/BmYjDA6UQT7t1vmJY1z9qY30wQd8MQoUS2kCH50BaRVrzdSV99qzDqrzNHUCcO J2LlUOSxZcjduH5fRyWwAQiMS8ICP1a1mmP9YXiLmGabwHPI1vx6m6XWCkAPmN8i 1IBH3OoruuvPyeRShxRefETjFZbc5FZ9zl1lxzCYSaE3At4aP4o= -----END CERTIFICATE-----Generated at Mon Feb 2 10:04:23 2026 by rpki-client