This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft File: 8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft (raw, json) Hash identifier: x6hqX1H39C4STIlFJNMUKa3b0NPhtV7waYFx3DqFbdI= Subject key identifier: 39:01:42:C6:B2:62:65:0E:57:EB:39:D5:8E:2F:10:E4:28:B2:EA:0F Authority key identifier: 8D:BE:CF:31:4B:D3:C8:29:92:3A:3A:97:BF:C6:21:13:A6:1F:8E:E1 Certificate issuer: /CN=8DBECF314BD3C829923A3A97BFC62113A61F8EE1 Certificate serial: 3383530674567144082D75B99D0CF233B76BB144 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft Manifest number: 0241 Signing time: Sat 31 Jan 2026 16:21:17 +0000 Manifest this update: Sat 31 Jan 2026 16:16:17 +0000 Manifest next update: Tue 03 Feb 2026 22:48:17 +0000 Files and hashes: 1: 3130332e3138362e39302e302f32332d3233203d3e20313439373037.roa (hash: IxE4f1xQzeKQZjsPZmdFbJyZKv94xhwmFh4/4Aw/W0I=) 2: 8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl (hash: LBDaJ3/ynyO66d111KNS/OI+k4yRowUrpu3AUYAaDJM=) 3: 3130332e3138362e39312e302f32342d3234203d3e20313439373037.roa (hash: v7WXEnDaWLgLHCCs0/IjJD0cW6T6d8CeSIJNddKA634=) 4: 3130332e3138362e39302e302f32342d3234203d3e20313439373037.roa (hash: 656gLN35OIXcG6Vik35XhI6XoKD7dIobeeOabAVD0UQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 22:48:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:83:53:06:74:56:71:44:08:2d:75:b9:9d:0c:f2:33:b7:6b:b1:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DBECF314BD3C829923A3A97BFC62113A61F8EE1 Validity Not Before: Jan 31 16:16:17 2026 GMT Not After : Feb 3 22:48:17 2026 GMT Subject: CN=390142C6B262650E57EB39D58E2F10E428B2EA0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f8:98:85:d5:3b:33:4e:03:42:e7:be:ac:ff: 8f:00:b2:2f:e4:fb:08:0d:96:10:47:3c:e1:b2:04: cb:08:be:2e:12:10:1a:f2:43:49:fd:09:56:89:42: 2f:3b:0c:4c:82:cf:2f:2e:51:cc:79:54:fd:d1:3d: 38:61:68:cd:4f:42:3c:35:5a:eb:14:1d:91:90:ab: 9d:12:bc:0d:e7:54:59:a9:b1:86:72:57:6c:e3:b4: f6:11:94:e0:3d:03:4a:a8:ab:3b:77:69:be:d5:55: ff:66:ce:c6:ce:f6:41:c3:d3:93:99:92:20:e5:3d: 1d:5c:3d:08:fc:e9:fa:3d:1c:13:f1:9a:f4:3e:cb: 88:61:9b:c8:bc:68:77:c0:b5:e1:15:13:7b:08:cd: 13:0f:38:f8:56:54:50:67:c6:27:0e:a9:61:8a:03: bf:04:6e:2d:ea:a1:97:44:0d:c0:ce:19:07:2d:a7: 37:df:4d:14:b6:66:7a:9d:41:18:3f:5e:7c:09:8b: 40:8e:af:71:26:ea:2a:5c:56:98:0f:59:50:83:e8: 0c:6e:c7:f2:94:78:5f:f3:98:c1:30:fe:d7:c7:fe: 92:08:b9:d5:9d:1b:04:d6:eb:28:07:50:c6:0b:6d: 4c:bb:cc:aa:3f:6d:10:6f:c8:90:6e:9b:96:02:98: 25:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:01:42:C6:B2:62:65:0E:57:EB:39:D5:8E:2F:10:E4:28:B2:EA:0F X509v3 Authority Key Identifier: keyid:8D:BE:CF:31:4B:D3:C8:29:92:3A:3A:97:BF:C6:21:13:A6:1F:8E:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:59:1a:dc:4b:14:d0:b7:54:1d:d5:7a:6c:f8:d6:38:10:4f: 81:76:0e:8b:da:45:fd:8f:0e:a3:18:ed:60:69:0a:d2:19:39: ad:32:8c:05:1f:8a:91:79:c9:9b:50:13:a3:98:69:57:a2:18: ee:1e:05:51:10:1b:0c:5c:c4:ee:42:81:4f:ae:0d:3f:75:36: 9e:42:89:e5:cc:03:1b:5b:e0:8c:9a:e1:5d:f1:f4:cd:22:c1: d8:59:ad:0f:87:e1:b9:d2:fe:52:4f:14:bf:c9:d6:c1:74:3b: 8f:79:3b:17:42:3b:c5:b5:ab:6f:3f:5a:ba:f4:18:3a:61:36: df:eb:9b:8b:e2:2b:fe:62:de:27:dc:21:55:04:c8:cb:41:58: 28:dd:ea:cf:b9:96:1a:ec:62:72:df:19:d2:d8:49:74:6e:20: ea:d0:35:d1:82:e4:4a:eb:10:0e:06:59:c8:53:ba:d4:2e:5e: a2:6e:aa:2f:98:7d:fb:a2:04:f7:f5:19:b8:33:b1:a8:d4:29: ab:9e:b2:aa:3d:6b:51:bf:74:f0:f4:3e:1f:bc:a5:52:0d:96: 0d:bd:9a:e0:d2:1e:6a:e0:b3:66:a2:24:34:8a:4b:6d:01:ae: 62:e9:b1:c2:1a:77:c4:dd:f7:bc:50:56:a8:d3:70:16:1c:46: 5d:f4:f2:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM4NTBnRWcUQILXW5nQzyM7drsUQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERCRUNGMzE0QkQzQzgyOTkyM0EzQTk3QkZDNjIxMTNB NjFGOEVFMTAeFw0yNjAxMzExNjE2MTdaFw0yNjAyMDMyMjQ4MTdaMDMxMTAvBgNV BAMTKDM5MDE0MkM2QjI2MjY1MEU1N0VCMzlENThFMkYxMEU0MjhCMkVBMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM+JiF1TszTgNC576s/48Asi/k +wgNlhBHPOGyBMsIvi4SEBryQ0n9CVaJQi87DEyCzy8uUcx5VP3RPThhaM1PQjw1 WusUHZGQq50SvA3nVFmpsYZyV2zjtPYRlOA9A0qoqzt3ab7VVf9mzsbO9kHD05OZ kiDlPR1cPQj86fo9HBPxmvQ+y4hhm8i8aHfAteEVE3sIzRMPOPhWVFBnxicOqWGK A78Ebi3qoZdEDcDOGQctpzffTRS2ZnqdQRg/XnwJi0COr3Em6ipcVpgPWVCD6Axu x/KUeF/zmMEw/tfH/pIIudWdGwTW6ygHUMYLbUy7zKo/bRBvyJBum5YCmCX5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOQFCxrJiZQ5X6znVji8Q5Ciy6g8wHwYDVR0j BBgwFoAUjb7PMUvTyCmSOjqXv8YhE6YfjuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OTRjMWU5NS1hNzM4LTRlNDctOGU1Yy03YWY2ODFiMzZiMDAvMC84REJFQ0YzMTRC RDNDODI5OTIzQTNBOTdCRkM2MjExM0E2MUY4RUUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERCRUNGMzE0QkQzQzgyOTkyM0EzQTk3QkZDNjIxMTNBNjFG OEVFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjk0YzFlOTUtYTczOC00ZTQ3LThl NWMtN2FmNjgxYjM2YjAwLzAvOERCRUNGMzE0QkQzQzgyOTkyM0EzQTk3QkZDNjIx MTNBNjFGOEVFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADpZGtxLFNC3VB3Vemz41jgQT4F2DovaRf2P DqMY7WBpCtIZOa0yjAUfipF5yZtQE6OYaVeiGO4eBVEQGwxcxO5CgU+uDT91Np5C ieXMAxtb4Iya4V3x9M0iwdhZrQ+H4bnS/lJPFL/J1sF0O495OxdCO8W1q28/Wrr0 GDphNt/rm4viK/5i3ifcIVUEyMtBWCjd6s+5lhrsYnLfGdLYSXRuIOrQNdGC5Err EA4GWchTutQuXqJuqi+YffuiBPf1GbgzsajUKauesqo9a1G/dPD0Ph+8pVINlg29 muDSHmrgs2aiJDSKS20BrmLpscIad8Td97xQVqjTcBYcRl308vE= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:18 2026 by rpki-client