This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft File: 8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft (raw, json) Hash identifier: /8tsvnQOz+A6BZ4jnibS/98/mm/J6h+kfyaJmDWapIk= Subject key identifier: 21:ED:E2:17:C4:D3:50:3A:C3:66:45:08:5B:F6:83:7E:AC:99:F9:97 Authority key identifier: 86:50:DE:F1:B1:C8:9D:70:1C:2B:B9:9C:A9:07:9E:ED:BC:CC:04:6D Certificate issuer: /CN=8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D Certificate serial: 398B50251DB5204B8CCD410E6657A99225DEE213 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft Manifest number: 0167 Signing time: Sat 31 Jan 2026 02:51:09 +0000 Manifest this update: Sat 31 Jan 2026 02:46:09 +0000 Manifest next update: Tue 03 Feb 2026 14:04:09 +0000 Files and hashes: 1: 3137352e3131312e39382e302f32342d3234203d3e20313338313230.roa (hash: aia3nUPKEa96BWO7Pv3XlqoUwx8dHqiYGIZfz0yhZhg=) 2: 8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl (hash: XQc4F5m+KW0DOuaxffQnPLXe9TJ+XLx8DwJ50dH/Nmk=) 3: 3137352e3131312e39392e302f32342d3234203d3e20313338313230.roa (hash: AghOU/pgzXbwtlWCSLhXHXuJqGUCoPtZzcPl6UwSVVA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 14:04:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:8b:50:25:1d:b5:20:4b:8c:cd:41:0e:66:57:a9:92:25:de:e2:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D Validity Not Before: Jan 31 02:46:09 2026 GMT Not After : Feb 3 14:04:09 2026 GMT Subject: CN=21EDE217C4D3503AC36645085BF6837EAC99F997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e0:e2:0c:2a:ce:4a:0e:4d:f2:4b:d8:6d:0b: 36:87:ef:f0:d6:61:3f:ad:24:f9:03:43:45:07:5b: 33:3e:8d:ff:77:99:6d:82:c0:a6:6e:0b:ff:cc:ba: b5:11:da:6a:fe:a4:c2:41:73:a3:95:bb:fb:97:63: 9c:5e:66:9b:5f:30:dd:95:95:54:26:6e:1c:8e:7d: d7:aa:d2:b3:80:07:3d:41:4b:a9:a1:50:d6:b0:8d: 41:6c:82:ce:5b:ba:67:6b:ca:f1:e1:b4:a8:2a:bc: ef:e3:7b:7f:a5:90:a2:ee:cf:a6:87:f0:d6:92:13: 41:4f:1c:ba:ae:c7:43:38:62:cb:14:13:8d:9b:ab: 5d:fc:7f:f6:80:23:3d:a6:d8:b2:44:fe:f5:6a:aa: 14:d9:66:a4:0a:af:5a:a1:5c:59:46:21:5e:91:2d: 4e:82:31:96:f5:1a:66:24:f2:f0:8b:ad:d7:28:a8: db:d2:4d:f7:85:e4:3b:b3:96:1c:73:cf:9b:bd:f3: c9:14:58:5e:35:fb:9a:11:e3:59:7d:24:3a:6c:d7: 4e:2a:a8:a3:0f:ec:34:23:8a:4b:c3:5b:f2:7b:94: e9:75:39:06:fc:10:2c:e6:45:04:4d:00:4c:96:9b: 08:84:17:bc:8b:27:0e:18:d6:1f:c1:33:4f:0a:5f: 5c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:ED:E2:17:C4:D3:50:3A:C3:66:45:08:5B:F6:83:7E:AC:99:F9:97 X509v3 Authority Key Identifier: keyid:86:50:DE:F1:B1:C8:9D:70:1C:2B:B9:9C:A9:07:9E:ED:BC:CC:04:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:74:b6:d7:8d:74:fd:fb:01:ce:e8:5a:0a:a5:28:0d:9a:17: 73:79:1f:48:a6:50:6f:b9:92:bc:74:a3:c3:fb:d6:be:3b:f5: e6:df:aa:c4:39:6b:70:e6:4a:95:6a:b6:00:61:34:82:3b:86: c2:34:21:f9:cd:99:14:8f:47:b6:59:36:bd:8e:52:a1:70:76: 8c:37:02:b7:aa:b9:0f:57:5d:09:40:40:2d:e5:8c:ab:38:f9: b7:ea:fd:c9:4f:a5:70:e3:2d:7d:27:bb:1a:10:ee:f3:34:7f: 7a:a8:13:7c:ce:18:81:20:6d:7f:80:e8:47:df:da:17:0d:f2: e6:af:e8:e1:5b:e0:3c:19:56:bb:9b:9f:3b:28:5b:47:94:2b: 26:23:d0:2f:0c:bd:22:32:8a:18:06:86:27:af:ae:d1:21:94: 16:9a:bd:d9:f7:dd:f2:9c:87:b4:30:26:97:3b:b8:3f:68:9c: cb:6d:0f:9e:98:14:66:f0:bb:1e:cf:a5:ad:91:cb:f2:99:8f: 05:26:0b:2c:1a:55:2f:82:03:90:8c:12:69:48:47:53:29:a4: 6a:c8:14:4f:86:5f:32:94:a2:0e:5b:1c:f9:71:e3:38:85:61: ad:b8:f7:b1:9e:d8:94:c4:76:ba:e7:06:16:64:ce:8e:1c:eb: a5:9a:47:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOYtQJR21IEuMzUEOZlepkiXe4hMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlFRURC Q0NDMDQ2RDAeFw0yNjAxMzEwMjQ2MDlaFw0yNjAyMDMxNDA0MDlaMDMxMTAvBgNV BAMTKDIxRURFMjE3QzREMzUwM0FDMzY2NDUwODVCRjY4MzdFQUM5OUY5OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk4OIMKs5KDk3yS9htCzaH7/DW YT+tJPkDQ0UHWzM+jf93mW2CwKZuC//MurUR2mr+pMJBc6OVu/uXY5xeZptfMN2V lVQmbhyOfdeq0rOABz1BS6mhUNawjUFsgs5bumdryvHhtKgqvO/je3+lkKLuz6aH 8NaSE0FPHLqux0M4YssUE42bq138f/aAIz2m2LJE/vVqqhTZZqQKr1qhXFlGIV6R LU6CMZb1GmYk8vCLrdcoqNvSTfeF5Duzlhxzz5u988kUWF41+5oR41l9JDps104q qKMP7DQjikvDW/J7lOl1OQb8ECzmRQRNAEyWmwiEF7yLJw4Y1h/BM08KX1zpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIe3iF8TTUDrDZkUIW/aDfqyZ+ZcwHwYDVR0j BBgwFoAUhlDe8bHInXAcK7mcqQee7bzMBG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YmE4Y2Y2NS1kNDY4LTQzMDktOWYzMC05YjlmMjZkOWNlMmQvMC84NjUwREVGMUIx Qzg5RDcwMUMyQkI5OUNBOTA3OUVFREJDQ0MwNDZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlFRURCQ0ND MDQ2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWJhOGNmNjUtZDQ2OC00MzA5LTlm MzAtOWI5ZjI2ZDljZTJkLzAvODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlF RURCQ0NDMDQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJ0tteNdP37Ac7oWgqlKA2aF3N5H0imUG+5 krx0o8P71r479ebfqsQ5a3DmSpVqtgBhNII7hsI0IfnNmRSPR7ZZNr2OUqFwdow3 ArequQ9XXQlAQC3ljKs4+bfq/clPpXDjLX0nuxoQ7vM0f3qoE3zOGIEgbX+A6Eff 2hcN8uav6OFb4DwZVrubnzsoW0eUKyYj0C8MvSIyihgGhievrtEhlBaavdn33fKc h7QwJpc7uD9onMttD56YFGbwux7Ppa2Ry/KZjwUmCywaVS+CA5CMEmlIR1MppGrI FE+GXzKUog5bHPlx4ziFYa2497Ge2JTEdrrnBhZkzo4c66WaRxc= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:52 2026 by rpki-client