This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.mft File: 8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.mft (raw, json) Hash identifier: Iyr8uY13ArQ3fE1ksKP7g4waXc9ywL4xW7RziSQaEKA= Subject key identifier: A8:5B:1A:0E:0C:35:C2:5E:0C:7C:41:9D:30:24:64:A1:A0:14:31:A8 Authority key identifier: 8E:20:59:B2:D2:44:85:85:D1:1E:D2:B0:14:3F:EF:C0:E9:B2:DA:36 Certificate issuer: /CN=8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36 Certificate serial: 70643DFED40D3044CEA9B3FB7133D5250F75164D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.mft Manifest number: EB Signing time: Sat 31 Jan 2026 16:00:50 +0000 Manifest this update: Sat 31 Jan 2026 15:55:50 +0000 Manifest next update: Tue 03 Feb 2026 17:42:50 +0000 Files and hashes: 1: 8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.crl (hash: aUE6HE16jbFn/ouHYj6pNdkuPvDbkhRfEoRneS6Pq2Y=) 2: 3136302e32322e3235302e302f32332d3233203d3e20313430343536.roa (hash: NLnyyxEhnshl8M0vZmmh6y422VBLzdBQzG682UNLOQc=) 3: 3136302e32322e3235302e302f32342d3234203d3e20313430343536.roa (hash: OJeztSNPa6Ny2Jrl9pv1yxSSkQT/t6rbcjh/ieoX/VA=) 4: 3136302e32322e3235312e302f32342d3234203d3e20313430343536.roa (hash: 9NuukBIDDZ7f6DuKuIwjkGDhtnMzcPyVVkUYuDF3dPM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.crl rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 17:42:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:64:3d:fe:d4:0d:30:44:ce:a9:b3:fb:71:33:d5:25:0f:75:16:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36 Validity Not Before: Jan 31 15:55:50 2026 GMT Not After : Feb 3 17:42:50 2026 GMT Subject: CN=A85B1A0E0C35C25E0C7C419D302464A1A01431A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9a:0a:16:9d:10:9c:3c:45:c4:71:c8:77:e8: 38:76:f0:ba:94:4b:5e:64:17:59:54:ac:d6:3a:1e: 30:32:1c:fb:26:41:d9:55:aa:1c:ca:5a:5e:20:5a: bd:0a:d2:7d:78:b5:ac:52:7f:e7:e2:21:01:43:10: e1:fa:ed:19:81:f4:90:59:01:e1:1a:dc:ed:17:0f: 60:ae:23:1b:77:cd:ab:eb:67:1a:52:70:3e:8b:2a: aa:88:85:fc:06:ba:fc:61:b8:c7:03:e5:02:e5:d7: 4b:b2:ec:3b:70:4a:4c:7e:43:8d:d4:08:d8:d2:64: f5:5d:a0:db:25:33:ce:67:66:2d:91:e3:50:e1:f5: 98:ea:26:6a:22:37:5f:ae:ff:a6:aa:a3:22:ec:80: 9f:b9:00:d8:47:17:13:10:c5:2b:a7:76:37:ee:cf: ac:e4:a8:fa:22:0a:a2:4a:4b:fc:8a:09:e9:a8:eb: 5e:71:69:92:ed:0b:af:55:02:92:a2:2d:74:9e:9e: f3:50:b2:8b:51:6d:6c:21:eb:28:26:f2:ad:99:3a: 41:9d:3f:86:52:9c:40:8a:db:9e:c1:82:a6:91:25: bb:cd:d3:04:16:9c:58:17:97:6e:1b:72:e1:bc:d4: 5e:16:aa:da:4b:d5:20:ce:77:42:dc:a3:57:11:35: b7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:5B:1A:0E:0C:35:C2:5E:0C:7C:41:9D:30:24:64:A1:A0:14:31:A8 X509v3 Authority Key Identifier: keyid:8E:20:59:B2:D2:44:85:85:D1:1E:D2:B0:14:3F:EF:C0:E9:B2:DA:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:e8:a6:b2:e0:f8:07:df:6a:16:48:7f:88:5e:5c:74:7b:90: 40:07:25:d1:0d:00:b0:b5:39:12:dc:3f:e5:c8:e4:48:1b:81: 92:ea:1d:08:e7:28:32:c2:c9:d4:d4:cd:4f:f4:a7:d3:95:4b: dc:32:5f:e1:b6:16:a3:f7:eb:20:7c:e1:bf:6f:e5:60:c7:04: fe:c3:be:9f:4c:54:44:d6:75:b7:d3:45:a5:b0:8a:e2:84:0f: e5:71:ac:6f:7c:df:ba:e8:b9:ae:e9:ff:1b:12:da:10:7a:3e: d9:2b:01:76:33:b2:a7:6c:79:6b:ca:e9:52:e9:18:1f:fc:c6: d1:57:30:42:ab:44:df:19:a1:72:4b:38:2f:a1:bf:e2:d4:cc: 96:9f:a6:bb:27:8d:68:3c:a6:79:93:3d:a6:48:dd:28:cd:cd: 60:df:b1:18:62:b7:32:04:b3:da:b3:9f:ac:67:3e:8e:1e:9e: a9:61:3b:48:d9:3e:53:e0:76:98:c8:c9:e5:d0:8e:0e:b2:a4: 0c:41:89:9e:72:85:84:3e:bc:65:ca:c3:d0:09:04:3e:e8:18: 01:10:38:f6:de:68:8d:1d:bd:35:ba:31:96:43:c1:ee:17:53: 70:c1:24:ae:82:8b:cd:33:ef:f9:03:22:c3:b9:bf:25:1e:65: b5:23:97:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcGQ9/tQNMETOqbP7cTPVJQ91Fk0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUyMDU5QjJEMjQ0ODU4NUQxMUVEMkIwMTQzRkVGQzBF OUIyREEzNjAeFw0yNjAxMzExNTU1NTBaFw0yNjAyMDMxNzQyNTBaMDMxMTAvBgNV BAMTKEE4NUIxQTBFMEMzNUMyNUUwQzdDNDE5RDMwMjQ2NEExQTAxNDMxQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9mgoWnRCcPEXEcch36Dh28LqU S15kF1lUrNY6HjAyHPsmQdlVqhzKWl4gWr0K0n14taxSf+fiIQFDEOH67RmB9JBZ AeEa3O0XD2CuIxt3zavrZxpScD6LKqqIhfwGuvxhuMcD5QLl10uy7DtwSkx+Q43U CNjSZPVdoNslM85nZi2R41Dh9ZjqJmoiN1+u/6aqoyLsgJ+5ANhHFxMQxSundjfu z6zkqPoiCqJKS/yKCemo615xaZLtC69VApKiLXSenvNQsotRbWwh6ygm8q2ZOkGd P4ZSnECK257BgqaRJbvN0wQWnFgXl24bcuG81F4WqtpL1SDOd0Lco1cRNbfjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqFsaDgw1wl4MfEGdMCRkoaAUMagwHwYDVR0j BBgwFoAUjiBZstJEhYXRHtKwFD/vwOmy2jYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDhhYjE1Ny1kODI3LTQ5YTgtYmI4Ni0yOGJlMTMxYzNkMjYvMC84RTIwNTlCMkQy NDQ4NTg1RDExRUQyQjAxNDNGRUZDMEU5QjJEQTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEUyMDU5QjJEMjQ0ODU4NUQxMUVEMkIwMTQzRkVGQzBFOUIy REEzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTA4YWIxNTctZDgyNy00OWE4LWJi ODYtMjhiZTEzMWMzZDI2LzAvOEUyMDU5QjJEMjQ0ODU4NUQxMUVEMkIwMTQzRkVG QzBFOUIyREEzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAHoprLg+AffahZIf4heXHR7kEAHJdENALC1 ORLcP+XI5EgbgZLqHQjnKDLCydTUzU/0p9OVS9wyX+G2FqP36yB84b9v5WDHBP7D vp9MVETWdbfTRaWwiuKED+VxrG9837roua7p/xsS2hB6PtkrAXYzsqdseWvK6VLp GB/8xtFXMEKrRN8ZoXJLOC+hv+LUzJafprsnjWg8pnmTPaZI3SjNzWDfsRhitzIE s9qzn6xnPo4enqlhO0jZPlPgdpjIyeXQjg6ypAxBiZ5yhYQ+vGXKw9AJBD7oGAEQ OPbeaI0dvTW6MZZDwe4XU3DBJK6Ci80z7/kDIsO5vyUeZbUjl+s= -----END CERTIFICATE-----Generated at Mon Feb 2 20:55:49 2026 by rpki-client