This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft File: 8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft (raw, json) Hash identifier: Dvft5mp6U9lLkVLy2aZh156JmoNWfS1weo9fgoTNOxk= Subject key identifier: BA:28:6F:01:49:30:D8:9A:0C:1C:6B:8A:B1:17:E1:AD:F7:39:EB:11 Authority key identifier: 84:58:BC:36:9C:80:A7:6B:28:75:FC:97:DB:E5:D1:A0:9B:6A:F3:17 Certificate issuer: /CN=8458BC369C80A76B2875FC97DBE5D1A09B6AF317 Certificate serial: 12EC60D09AD90719BD82EC4716888CC67248334B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft Manifest number: 0549 Signing time: Sat 31 Jan 2026 04:51:48 +0000 Manifest this update: Sat 31 Jan 2026 04:46:48 +0000 Manifest next update: Tue 03 Feb 2026 13:06:48 +0000 Files and hashes: 1: 3130332e36362e36392e302f32342d3234203d3e203535363835.roa (hash: x+jv4TuSSXN4C68g+x8B9A51ZwulAwMClt9iXTwzSmY=) 2: 8458BC369C80A76B2875FC97DBE5D1A09B6AF317.crl (hash: njtM5d9PAWhiJnsRBZ9NO9Nlo47Au06j/zZxbEsaLFM=) 3: 3130332e36362e36382e302f32342d3234203d3e20313431363330.roa (hash: I/le6Te2VCdo9U/Jhbu6/dBd0G0Ft1HGDM8GZasvyxk=) 4: 3130332e36362e37302e302f32342d3234203d3e20313333383430.roa (hash: Wxz1us2zDXrNlhEeTyTFEnQyiq4EZlAgNa1zZuJQj0g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.crl rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 13:06:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:ec:60:d0:9a:d9:07:19:bd:82:ec:47:16:88:8c:c6:72:48:33:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8458BC369C80A76B2875FC97DBE5D1A09B6AF317 Validity Not Before: Jan 31 04:46:48 2026 GMT Not After : Feb 3 13:06:48 2026 GMT Subject: CN=BA286F014930D89A0C1C6B8AB117E1ADF739EB11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:89:7f:06:2c:bf:d8:c1:91:37:b9:37:c7:7e: d7:f8:df:29:b3:74:3f:fa:6e:29:ee:7c:e6:fe:48: 4d:a6:31:dc:81:8c:1f:ca:34:93:5f:d4:45:6f:99: c4:c2:46:b7:02:94:3b:3e:b7:9a:f0:ac:44:b4:91: 83:b5:a0:73:80:76:2c:b8:01:ef:05:f7:bd:ef:2b: ad:15:d7:20:8e:a6:bc:68:99:6f:b4:1b:16:db:27: 6a:04:b3:2c:b1:a0:df:bd:87:d5:8b:c5:ed:7d:e0: d8:45:ce:a9:6d:02:14:7e:5f:c7:66:a3:1c:53:bf: 60:95:16:5b:ff:36:72:b1:4c:c7:6b:92:e5:61:aa: 64:0e:53:4b:54:80:1b:00:20:ff:d2:9f:26:0a:cd: a8:03:d9:60:2f:4b:fd:a8:e4:41:53:9d:b8:17:64: 15:d2:5d:d4:64:ea:fa:4f:ba:07:70:f7:72:e3:fa: 1b:e2:72:d3:17:4c:de:5d:6a:99:d0:58:42:e7:a0: 8f:5a:80:9f:52:f2:0e:fd:35:d9:a5:31:f6:76:76: 36:10:53:ae:3c:f9:3f:4d:16:54:1b:1e:b7:3d:e6: 17:f8:ed:da:92:32:df:3f:18:28:87:b9:0c:0c:47: 67:f3:3f:8a:f6:37:d9:57:21:a6:c4:32:2f:85:82: a7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:28:6F:01:49:30:D8:9A:0C:1C:6B:8A:B1:17:E1:AD:F7:39:EB:11 X509v3 Authority Key Identifier: keyid:84:58:BC:36:9C:80:A7:6B:28:75:FC:97:DB:E5:D1:A0:9B:6A:F3:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:c6:67:d2:da:1d:a6:eb:84:fe:bf:c1:f2:ff:b0:e2:37:78: 14:89:1f:a4:b6:1f:d9:f7:57:a0:43:e0:13:a1:e9:e1:3c:e4: 25:25:96:87:6d:64:a2:e1:9f:20:cb:da:eb:4d:cb:d4:86:96: 0d:2e:9a:3c:d0:ec:9f:ea:50:4d:27:6a:00:83:7e:e3:73:63: 3e:da:a7:a4:17:16:e6:0a:d9:e4:1c:2a:ca:69:67:c6:af:6d: 67:cd:e5:65:a1:63:4a:97:0b:49:b6:e9:da:60:f3:6b:2f:26: 2d:39:65:40:d4:19:3c:d1:22:94:92:2c:96:c1:09:98:aa:e6: 14:7c:9d:31:53:a8:c4:d5:79:f2:7e:9f:04:69:5e:26:8f:84: c4:7c:db:82:be:c7:84:db:9d:a5:a3:bd:a5:aa:8f:4a:96:ea: 7b:9e:2b:d9:b1:4a:ec:0b:de:01:5a:2d:c9:0b:5f:b1:d4:4e: 5e:91:be:03:2f:fa:fe:4b:32:9b:b5:56:4b:82:23:5f:09:04: 87:91:38:d9:e6:b2:3b:8e:f1:72:ab:9f:ee:5f:3a:d6:c3:71: b6:d4:b6:c4:02:b8:10:9c:d9:01:f1:fc:b3:a9:28:53:73:93: 6f:22:78:e1:87:24:69:78:c9:06:5f:45:db:56:ea:84:51:57: cd:ab:7c:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEuxg0JrZBxm9guxHFoiMxnJIM0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ1OEJDMzY5QzgwQTc2QjI4NzVGQzk3REJFNUQxQTA5 QjZBRjMxNzAeFw0yNjAxMzEwNDQ2NDhaFw0yNjAyMDMxMzA2NDhaMDMxMTAvBgNV BAMTKEJBMjg2RjAxNDkzMEQ4OUEwQzFDNkI4QUIxMTdFMUFERjczOUVCMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUiX8GLL/YwZE3uTfHftf43ymz dD/6binufOb+SE2mMdyBjB/KNJNf1EVvmcTCRrcClDs+t5rwrES0kYO1oHOAdiy4 Ae8F973vK60V1yCOprxomW+0GxbbJ2oEsyyxoN+9h9WLxe194NhFzqltAhR+X8dm oxxTv2CVFlv/NnKxTMdrkuVhqmQOU0tUgBsAIP/SnyYKzagD2WAvS/2o5EFTnbgX ZBXSXdRk6vpPugdw93Lj+hvictMXTN5dapnQWELnoI9agJ9S8g79NdmlMfZ2djYQ U648+T9NFlQbHrc95hf47dqSMt8/GCiHuQwMR2fzP4r2N9lXIabEMi+Fgqc/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuihvAUkw2JoMHGuKsRfhrfc56xEwHwYDVR0j BBgwFoAUhFi8NpyAp2sodfyX2+XRoJtq8xcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MmFhMTZlYS0yYWVjLTQ5NWQtYTlhMy02OTI1NzMwZDVlMGYvMC84NDU4QkMzNjlD ODBBNzZCMjg3NUZDOTdEQkU1RDFBMDlCNkFGMzE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ1OEJDMzY5QzgwQTc2QjI4NzVGQzk3REJFNUQxQTA5QjZB RjMxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTJhYTE2ZWEtMmFlYy00OTVkLWE5 YTMtNjkyNTczMGQ1ZTBmLzAvODQ1OEJDMzY5QzgwQTc2QjI4NzVGQzk3REJFNUQx QTA5QjZBRjMxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ/GZ9LaHabrhP6/wfL/sOI3eBSJH6S2H9n3 V6BD4BOh6eE85CUllodtZKLhnyDL2utNy9SGlg0umjzQ7J/qUE0nagCDfuNzYz7a p6QXFuYK2eQcKsppZ8avbWfN5WWhY0qXC0m26dpg82svJi05ZUDUGTzRIpSSLJbB CZiq5hR8nTFTqMTVefJ+nwRpXiaPhMR824K+x4TbnaWjvaWqj0qW6nueK9mxSuwL 3gFaLckLX7HUTl6RvgMv+v5LMpu1VkuCI18JBIeRONnmsjuO8XKrn+5fOtbDcbbU tsQCuBCc2QHx/LOpKFNzk28ieOGHJGl4yQZfRdtW6oRRV82rfJ0= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:10 2026 by rpki-client