This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft File: 8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft (raw, json) Hash identifier: yNDE9OQZxrRpHdN8I6bkbIew3hHQ0/qS2taazT3XUL4= Subject key identifier: 9C:2B:F4:AA:F9:89:17:45:A9:FA:EF:66:10:9D:7F:35:E9:B6:7B:3D Authority key identifier: 8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F Certificate issuer: /CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F Certificate serial: 69F41EB5C0F3F4294F5E2E18E0026E60BB2E4B64 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft Manifest number: 0559 Signing time: Fri 23 Jan 2026 04:21:46 +0000 Manifest this update: Fri 23 Jan 2026 04:16:46 +0000 Manifest next update: Mon 26 Jan 2026 08:22:46 +0000 Files and hashes: 1: 3231302e3234372e3235332e302f32342d3234203d3e20313331373435.roa (hash: SDQ6xpzFoeg0lTwEJkVJ2YC5ntC/O8NvcqwJeEYUXmo=) 2: 3231302e3234372e3234392e302f32342d3234203d3e20313331373435.roa (hash: 4G4aZfFUqaHECTTNNiBKb2BiuB7CRoLOY6G0O5P5Xsk=) 3: 3231302e3234372e3235352e302f32342d3234203d3e20313331373435.roa (hash: RS4Z5hPliFofbuZy6siMGSvvq53kTGe3aDopkAMtX7s=) 4: 3231302e3234372e3234322e302f32342d3234203d3e20313331373435.roa (hash: D991UEHbv0mT0xjDcSLCu5iaTm6ib67YwDcjKkL5vPw=) 5: 3231302e3234372e3234362e302f32342d3234203d3e20313331373435.roa (hash: FN3CKjxRonayrnINYbudYXLP7jZ9/YnqEvFYbd9U1hM=) 6: 3231302e3234372e3235322e302f32342d3234203d3e20313331373435.roa (hash: 0G3umGSNIafLUyMMJjc+XpTQjFcLRIMU7BoomAPsjew=) 7: 3231302e3234372e3235342e302f32342d3234203d3e20313331373435.roa (hash: 8bH62zhwf0kgF3amh047ZVAlbr2i3orRPBn9qkRCMJk=) 8: 8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl (hash: 9iqR4Sh3ARbjLE9q/MtiUrVsmsIZsyo3zyFqGfTmjJM=) 9: 3231302e3234372e3234352e302f32342d3234203d3e20313331373435.roa (hash: kHHBOgtxtA2O4NSmNMgW2PeMrc26bvv8HtnzwONr0bg=) 10: 3231302e3234372e3234342e302f32342d3234203d3e20313331373435.roa (hash: dBLrElsxS7m32RqtK+bS83Eb5ZTI1r6yldhEY0SWU34=) 11: 3231302e3234372e3234372e302f32342d3234203d3e20313331373435.roa (hash: exFF47IhXFNrUrw6HPUoTvZWZdOLZc/bApdp77HMNNg=) 12: 323430363a376530303a35393a3a2f34382d3438203d3e20313430343035.roa (hash: gnvURXZkhn/FEj22B4ytqTMsZk8ZLC9E8Tq6VbTdHlg=) 13: 3231302e3234372e3234302e302f32342d3234203d3e20313331373435.roa (hash: 6Xt6BmWqNlJ2rgGnrh/8HdtB+svaXm043WhGiQr8wxY=) 14: 3231302e3234372e3235302e302f32342d3234203d3e20313331373435.roa (hash: UaBtRg3Pe7eF6qAh+L1uU3ib10+G/2GiDGDbWzNrJJQ=) 15: 3231302e3234372e3235312e302f32342d3234203d3e20313331373435.roa (hash: P6u7QjpJVBQpJpJ2dL4GKUXqC1XLtlIwog/7NL3QJe0=) 16: 3231302e3234372e3234312e302f32342d3234203d3e20313430343035.roa (hash: M3nv0mC0g0dVK72c2OJ01BOoKTGk3r0NAIb60MF1lcw=) 17: 3231302e3234372e3234382e302f32342d3234203d3e20313331373435.roa (hash: fEAII0Y1Y5OrJRrreDOapy9Xzh9eNqz/FB7+aD7tXRA=) 18: 34392e3132382e3138342e302f32322d3234203d3e20313331373435.roa (hash: b1YIXb394hbQaEvgUpDDWq1EiTyAhc+KvTRls7LdNdE=) 19: 3231302e3234372e3234332e302f32342d3234203d3e20313331373435.roa (hash: lzhEeQ6DAkKFZoSDXb/ij7h8jtExSjFLGzcvwIopMPE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 08:22:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:f4:1e:b5:c0:f3:f4:29:4f:5e:2e:18:e0:02:6e:60:bb:2e:4b:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F Validity Not Before: Jan 23 04:16:46 2026 GMT Not After : Jan 26 08:22:46 2026 GMT Subject: CN=9C2BF4AAF9891745A9FAEF66109D7F35E9B67B3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:96:5f:3e:5c:cc:42:b7:e7:ec:3d:9a:11:4c: f6:c3:04:c8:7f:e0:fa:d1:b2:f7:4e:95:fe:21:36: 07:4c:3a:ea:ed:a3:a8:33:a3:d1:4b:e8:d6:35:e8: bb:df:57:f6:c0:3e:a1:e9:72:68:cc:9b:cc:12:da: be:73:89:8c:a7:fb:0e:5e:88:af:e4:77:7a:b7:f4: 8f:d9:9f:17:ac:79:9a:92:84:9e:c6:80:d2:0b:8a: 9b:09:58:d7:1b:cf:9f:47:2b:04:07:9b:58:e4:f4: f1:00:c8:16:62:cc:b1:1f:2f:b5:fa:f1:9e:e0:c5: 5b:50:38:7d:a5:e9:5a:11:7f:ed:43:e1:45:06:06: cf:99:ac:35:e0:91:78:e2:98:62:ed:1e:6c:71:8b: 3d:15:40:88:63:a5:6a:64:46:dd:ee:cf:e7:72:70: 41:03:e2:3f:2c:6c:76:ad:1c:75:03:51:a5:cb:41: fd:41:a3:63:05:0a:96:01:a3:92:3e:34:d7:3d:6d: d1:33:7b:e4:f6:db:54:51:f6:88:ce:98:92:c2:74: 62:f9:9e:bd:1e:23:c9:75:44:d0:ba:bd:85:b7:53: 39:50:56:d8:69:2d:5d:aa:f1:2e:1e:04:84:85:ef: 92:cf:67:7c:ac:93:c6:7a:08:3d:1b:2f:02:5e:bb: 6c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:2B:F4:AA:F9:89:17:45:A9:FA:EF:66:10:9D:7F:35:E9:B6:7B:3D X509v3 Authority Key Identifier: keyid:8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:fc:c1:9f:f4:ee:78:f6:ea:62:0f:d1:1e:04:6b:47:e0:c6: b5:c7:23:75:ca:86:f3:a9:64:bc:91:db:3d:02:47:c4:d9:63: eb:d2:26:e0:3f:33:d8:b1:d0:1e:2d:00:a7:e7:b5:fd:d4:30: 2e:61:28:b5:65:e8:dd:70:31:bc:da:8a:af:7c:69:12:79:07: 74:aa:01:95:5b:50:17:08:26:fc:63:d5:ef:77:2f:6e:91:e1: b4:40:27:da:14:31:f1:0f:4f:e5:b4:e7:62:b3:cf:b7:1b:f8: e4:a3:0e:b4:8f:d0:0e:5e:f0:d0:32:75:25:f5:2c:dc:b0:36: 2c:ae:df:85:e1:13:41:51:c6:1d:27:fa:28:8e:47:6b:d6:4d: 65:11:f7:b1:ae:4c:eb:4c:85:ff:86:a4:c2:66:56:e1:cb:62: 3e:b5:5b:5c:bb:9b:66:b0:dd:54:50:92:42:c0:64:58:92:12: 3f:09:fe:29:cf:6a:30:63:51:45:f4:e8:e9:77:30:07:b2:22: 3d:63:5e:2c:cb:f8:90:d6:3f:47:27:82:f5:02:c9:a7:ae:a6: f1:b7:d7:97:b2:0c:c2:f6:82:56:80:3f:c0:5c:df:38:a2:1b: 78:94:28:8c:a4:5b:92:68:0e:b7:9d:09:96:d9:bb:d0:df:f9: bd:d6:67:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUafQetcDz9ClPXi4Y4AJuYLsuS2QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFGRUJCNTFEMDBDOEUwNkFBRUE4NDJFMEMwQ0ZGQzJD QUI5NjEwRjAeFw0yNjAxMjMwNDE2NDZaFw0yNjAxMjYwODIyNDZaMDMxMTAvBgNV BAMTKDlDMkJGNEFBRjk4OTE3NDVBOUZBRUY2NjEwOUQ3RjM1RTlCNjdCM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYll8+XMxCt+fsPZoRTPbDBMh/ 4PrRsvdOlf4hNgdMOurto6gzo9FL6NY16LvfV/bAPqHpcmjMm8wS2r5ziYyn+w5e iK/kd3q39I/ZnxeseZqShJ7GgNILipsJWNcbz59HKwQHm1jk9PEAyBZizLEfL7X6 8Z7gxVtQOH2l6VoRf+1D4UUGBs+ZrDXgkXjimGLtHmxxiz0VQIhjpWpkRt3uz+dy cEED4j8sbHatHHUDUaXLQf1Bo2MFCpYBo5I+NNc9bdEze+T221RR9ojOmJLCdGL5 nr0eI8l1RNC6vYW3UzlQVthpLV2q8S4eBISF75LPZ3ysk8Z6CD0bLwJeu2wNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnCv0qvmJF0Wp+u9mEJ1/Nem2ez0wHwYDVR0j BBgwFoAUiv67UdAMjgaq6oQuDAz/wsq5YQ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NjEyNDMyOS1lYzIwLTQ0NjAtYWMzMS05YzM2Y2Y5NGYzZmIvMC84QUZFQkI1MUQw MEM4RTA2QUFFQTg0MkUwQzBDRkZDMkNBQjk2MTBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFGRUJCNTFEMDBDOEUwNkFBRUE4NDJFMEMwQ0ZGQzJDQUI5 NjEwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTYxMjQzMjktZWMyMC00NDYwLWFj MzEtOWMzNmNmOTRmM2ZiLzAvOEFGRUJCNTFEMDBDOEUwNkFBRUE4NDJFMEMwQ0ZG QzJDQUI5NjEwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJL8wZ/07nj26mIP0R4Ea0fgxrXHI3XKhvOp ZLyR2z0CR8TZY+vSJuA/M9ix0B4tAKfntf3UMC5hKLVl6N1wMbzaiq98aRJ5B3Sq AZVbUBcIJvxj1e93L26R4bRAJ9oUMfEPT+W052Kzz7cb+OSjDrSP0A5e8NAydSX1 LNywNiyu34XhE0FRxh0n+iiOR2vWTWUR97GuTOtMhf+GpMJmVuHLYj61W1y7m2aw 3VRQkkLAZFiSEj8J/inPajBjUUX06Ol3MAeyIj1jXizL+JDWP0cngvUCyaeupvG3 15eyDML2glaAP8Bc3ziiG3iUKIykW5JoDredCZbZu9Df+b3WZ+8= -----END CERTIFICATE-----Generated at Sat Jan 24 05:47:27 2026 by rpki-client