This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft File: 8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft (raw, json) Hash identifier: k3Ansx7KuXbsWiXzwWV2AAaPJRZno567VBqDmF+IdnU= Subject key identifier: 47:35:08:46:00:FB:0C:52:F6:DE:35:A9:FD:E8:95:93:A2:21:7B:FF Authority key identifier: 87:11:D0:5D:82:BA:FB:7B:EA:B2:75:E0:79:A7:2D:DD:55:40:64:EA Certificate issuer: /CN=8711D05D82BAFB7BEAB275E079A72DDD554064EA Certificate serial: 6BBA0066E5A01F0FDB61F45D038E4C3022D4AE58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8711D05D82BAFB7BEAB275E079A72DDD554064EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft Manifest number: 0215 Signing time: Sun 01 Feb 2026 23:02:08 +0000 Manifest this update: Sun 01 Feb 2026 22:57:08 +0000 Manifest next update: Thu 05 Feb 2026 08:24:08 +0000 Files and hashes: 1: 8711D05D82BAFB7BEAB275E079A72DDD554064EA.crl (hash: oQyokpOtKg60smXofbl8dcdsB5UEuvjVR+61/lAK0ZI=) 2: 3130332e31372e3137392e302f32342d3234203d3e20313530323236.roa (hash: iULKdZ+8YBgk+IOzMqKF0bAFFPZHjP7Zi+XVSi5s7yc=) 3: 3130332e31372e3137382e302f32342d3234203d3e20313530323236.roa (hash: mvjYp+1vrLLE5z7eCg/M+MdscRpVan6q1wn/N7ffyk4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.crl rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8711D05D82BAFB7BEAB275E079A72DDD554064EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:ba:00:66:e5:a0:1f:0f:db:61:f4:5d:03:8e:4c:30:22:d4:ae:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8711D05D82BAFB7BEAB275E079A72DDD554064EA Validity Not Before: Feb 1 22:57:08 2026 GMT Not After : Feb 5 08:24:08 2026 GMT Subject: CN=4735084600FB0C52F6DE35A9FDE89593A2217BFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:aa:e1:b3:aa:d6:ae:d1:48:1e:b9:c4:0d:ba: d4:56:c3:a1:5d:de:a1:96:ee:80:71:36:06:cc:68: 1f:92:e3:17:6b:dc:97:45:e4:d3:ff:8e:83:3b:ec: 57:6c:2e:75:37:c0:56:8d:e2:d1:61:c7:63:b1:8a: e7:b2:3d:6d:82:49:ac:8a:65:53:39:cf:ab:f6:65: 90:2c:05:11:48:3f:44:e8:10:95:8f:ed:01:b4:3f: a9:90:0a:59:0a:94:7b:61:69:55:4e:20:9a:b3:69: 0a:0e:6d:5e:81:85:cc:80:60:97:a1:3e:66:65:a2: 2c:0e:f3:57:7a:2a:53:c8:9e:a5:30:ec:5c:54:ed: dd:e6:04:f7:34:a1:2a:8c:cf:ef:32:c9:e1:2b:dd: 53:25:f1:28:37:ce:3f:5d:ca:c9:e1:8d:14:26:1f: 6a:36:30:7e:59:e3:bd:b1:3a:f8:03:85:b8:97:8e: 46:56:fd:09:4b:31:b9:2e:69:ca:93:5c:cd:c0:44: ed:4a:e7:c8:55:bf:e9:05:fd:03:5b:08:d9:d5:b6: f4:f6:24:6d:65:94:bb:6b:e2:a2:b3:a1:b0:a0:bb: d2:ee:60:16:1d:33:eb:df:a5:71:e4:f8:41:a0:0a: 3d:c9:55:68:00:9b:24:4d:8a:75:2a:3e:b9:a9:05: 76:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:35:08:46:00:FB:0C:52:F6:DE:35:A9:FD:E8:95:93:A2:21:7B:FF X509v3 Authority Key Identifier: keyid:87:11:D0:5D:82:BA:FB:7B:EA:B2:75:E0:79:A7:2D:DD:55:40:64:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8711D05D82BAFB7BEAB275E079A72DDD554064EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:69:24:50:99:10:84:88:8b:ac:ec:40:ba:df:9c:c9:e5:ea: 27:3c:bc:e9:b0:37:ab:84:ea:91:42:a5:f9:21:31:87:5e:cc: 8b:78:76:d6:06:be:f8:36:33:00:f6:80:4a:15:90:56:59:6a: 70:65:d7:2c:d7:7f:97:b8:85:12:60:4b:a8:33:64:2c:56:96: 6a:5a:93:f0:18:5e:28:6a:a3:ef:e7:9f:b1:24:d6:d1:2e:b1: e4:c6:04:9f:5c:38:5c:6f:df:bf:54:53:06:2c:2b:c6:79:75: c4:cd:bd:ee:1d:35:24:84:38:06:f4:19:61:45:fe:3b:b3:dc: c0:02:6c:f0:67:cf:d4:27:6d:86:5e:93:43:0f:d5:cd:34:50: 9a:43:bd:d6:2d:ef:8c:10:0b:60:b1:ff:ab:97:5e:bf:0d:b8: ba:9f:a6:09:7d:ff:38:a3:d9:69:9d:09:58:1a:5b:da:3b:03: 28:7c:85:45:af:fc:40:2b:3f:6c:61:f0:d2:2a:04:ae:a1:bb: 94:d1:84:92:f5:b2:9c:10:c5:0b:84:1b:d7:8b:63:15:1d:fe: fa:57:85:06:73:7e:ba:d4:a2:c2:31:da:4a:4f:2b:23:54:52: 84:75:59:59:a5:f3:33:a0:0c:b2:11:8d:5e:64:7d:c5:5a:3c: 91:46:21:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa7oAZuWgHw/bYfRdA45MMCLUrlgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcxMUQwNUQ4MkJBRkI3QkVBQjI3NUUwNzlBNzJEREQ1 NTQwNjRFQTAeFw0yNjAyMDEyMjU3MDhaFw0yNjAyMDUwODI0MDhaMDMxMTAvBgNV BAMTKDQ3MzUwODQ2MDBGQjBDNTJGNkRFMzVBOUZERTg5NTkzQTIyMTdCRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHquGzqtau0UgeucQNutRWw6Fd 3qGW7oBxNgbMaB+S4xdr3JdF5NP/joM77FdsLnU3wFaN4tFhx2OxiueyPW2CSayK ZVM5z6v2ZZAsBRFIP0ToEJWP7QG0P6mQClkKlHthaVVOIJqzaQoObV6BhcyAYJeh PmZloiwO81d6KlPInqUw7FxU7d3mBPc0oSqMz+8yyeEr3VMl8Sg3zj9dysnhjRQm H2o2MH5Z472xOvgDhbiXjkZW/QlLMbkuacqTXM3ARO1K58hVv+kF/QNbCNnVtvT2 JG1llLtr4qKzobCgu9LuYBYdM+vfpXHk+EGgCj3JVWgAmyRNinUqPrmpBXabAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURzUIRgD7DFL23jWp/eiVk6Ihe/8wHwYDVR0j BBgwFoAUhxHQXYK6+3vqsnXgeact3VVAZOowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWY4MzdiMy1kZmQyLTQyY2MtOWI3OS03NGI2YmFmZDRlMmQvMC84NzExRDA1RDgy QkFGQjdCRUFCMjc1RTA3OUE3MkRERDU1NDA2NEVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODcxMUQwNUQ4MkJBRkI3QkVBQjI3NUUwNzlBNzJEREQ1NTQw NjRFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVmODM3YjMtZGZkMi00MmNjLTli NzktNzRiNmJhZmQ0ZTJkLzAvODcxMUQwNUQ4MkJBRkI3QkVBQjI3NUUwNzlBNzJE REQ1NTQwNjRFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAElpJFCZEISIi6zsQLrfnMnl6ic8vOmwN6uE 6pFCpfkhMYdezIt4dtYGvvg2MwD2gEoVkFZZanBl1yzXf5e4hRJgS6gzZCxWlmpa k/AYXihqo+/nn7Ek1tEuseTGBJ9cOFxv379UUwYsK8Z5dcTNve4dNSSEOAb0GWFF /juz3MACbPBnz9QnbYZek0MP1c00UJpDvdYt74wQC2Cx/6uXXr8NuLqfpgl9/zij 2WmdCVgaW9o7Ayh8hUWv/EArP2xh8NIqBK6hu5TRhJL1spwQxQuEG9eLYxUd/vpX hQZzfrrUosIx2kpPKyNUUoR1WVml8zOgDLIRjV5kfcVaPJFGIWc= -----END CERTIFICATE-----Generated at Mon Feb 2 09:42:24 2026 by rpki-client