This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft File: 8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft (raw, json) Hash identifier: kE/iTKIwpECnvr0g8AdkwZ56GKKKJNpXS7/T/g211n4= Subject key identifier: 5E:46:5C:00:CB:4A:7C:69:71:E6:7C:9A:12:02:25:FC:25:B6:1F:0E Authority key identifier: 8A:F2:4B:A6:BB:2F:67:CD:54:8B:D0:8B:64:D9:7B:9A:24:68:ED:80 Certificate issuer: /CN=8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80 Certificate serial: 5FBF69FD7C29D786F4251FDAD346ABAF3A143580 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft Manifest number: 017D Signing time: Sat 31 Jan 2026 14:51:50 +0000 Manifest this update: Sat 31 Jan 2026 14:46:50 +0000 Manifest next update: Tue 03 Feb 2026 21:40:50 +0000 Files and hashes: 1: 3130332e33382e3131302e302f32342d3234203d3e20313531353639.roa (hash: J0htEBbJtg13KY4rKcx5Rasf7tnVHbIZzu6sYSNQaxY=) 2: 323030313a6466333a3263303a3a2f34382d3438203d3e20313531353639.roa (hash: zVkKXHp1IUSWn6/DI0KODZ2Sd/LhWyDMOtuowY983gU=) 3: 3130332e33382e3131312e302f32342d3234203d3e20313531353639.roa (hash: dbxrQTgZv3GXn+UMmlKIl7zz9zo4NUqYuZDIWrYrKEU=) 4: 8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.crl (hash: nVuBqXsj5asyb3v5sLwIApQurG95ZMDRzRxKakwKMMk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.crl rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 21:40:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:bf:69:fd:7c:29:d7:86:f4:25:1f:da:d3:46:ab:af:3a:14:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80 Validity Not Before: Jan 31 14:46:50 2026 GMT Not After : Feb 3 21:40:50 2026 GMT Subject: CN=5E465C00CB4A7C6971E67C9A120225FC25B61F0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:82:bc:ae:10:45:69:f0:c6:ff:9b:a4:a0:02: 5c:ae:5d:cf:cb:1f:21:29:d9:bd:4a:b5:8c:4d:4e: e8:8d:49:15:d8:64:70:b1:ac:3b:29:70:3d:ea:43: 08:d3:f0:b9:8a:f8:6f:60:53:33:1f:4f:6a:b1:62: 7a:8e:63:84:cb:51:65:6f:06:d3:bb:5e:11:bf:8d: 46:10:49:64:44:eb:ea:54:40:6e:9a:31:7b:25:5f: 2a:3d:0e:7a:d4:5e:42:f4:54:e4:42:e8:4f:15:90: 19:72:22:1f:92:5a:bc:42:54:a0:8c:08:91:2b:25: 8d:82:52:53:9f:9b:d0:00:27:de:90:b6:a0:7f:c0: dc:ff:c1:d8:1a:e7:92:21:9b:20:17:63:4e:a9:31: 1d:ab:d5:09:be:c9:e6:a8:01:49:96:81:c7:43:e0: 6f:0a:cc:1b:5c:3c:e3:a6:2b:b2:0c:3b:77:88:86: 06:d9:e3:8c:9c:e0:40:99:fb:90:a6:d1:c4:01:d5: 32:31:d2:1e:3a:c7:fa:7d:ec:e9:ce:35:ab:f6:b6: 7a:b2:e5:bc:88:0a:8e:a9:fa:10:09:4e:e2:cd:8e: d5:9d:d0:41:ed:02:3c:9e:87:7b:97:08:9a:cf:b8: b2:4c:ca:84:21:ae:78:7d:c3:3a:12:96:c4:b2:29: 94:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:46:5C:00:CB:4A:7C:69:71:E6:7C:9A:12:02:25:FC:25:B6:1F:0E X509v3 Authority Key Identifier: keyid:8A:F2:4B:A6:BB:2F:67:CD:54:8B:D0:8B:64:D9:7B:9A:24:68:ED:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:3f:59:99:11:3d:27:5f:dd:24:c3:9d:90:37:48:cf:a6:3c: 97:61:53:83:59:bd:99:b4:77:6d:95:47:db:cd:27:4a:80:b3: cf:3a:7f:a1:f0:10:94:5f:7d:fc:07:4a:40:5e:3b:dd:28:4c: 70:db:53:67:38:05:c6:36:86:90:b9:9f:c9:e5:1d:cf:58:a4: e1:0d:53:bc:97:e0:df:99:ae:32:96:41:35:d0:6b:e4:0b:db: 1a:35:ff:04:52:d3:4c:c1:ec:d6:21:ee:e8:5c:2f:e3:59:74: 97:09:84:36:ec:9c:6e:bc:90:00:45:3a:77:30:68:9d:03:16: 54:bd:72:d1:eb:e2:de:2e:cd:f8:95:00:8a:52:79:b4:7f:56: 52:32:d0:53:b0:2d:4c:61:a3:9c:bc:4b:6b:8e:46:13:76:78: b2:7c:1e:81:8a:4e:e4:e6:7a:2a:fa:82:41:21:7f:dd:ff:c7: 2b:14:72:40:21:03:a2:b9:53:e3:d6:e6:88:87:e8:1d:74:9a: ef:0c:b9:9d:14:d3:d7:dd:be:c0:d9:d4:68:5d:9e:c6:21:cd: a1:51:e7:78:57:79:3d:f2:42:9f:db:ed:7d:01:d1:68:1b:03: 0d:2c:17:ad:f3:fa:38:2a:cd:9f:e1:6e:13:d9:95:e4:73:e7: 16:a5:04:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX79p/Xwp14b0JR/a00arrzoUNYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFGMjRCQTZCQjJGNjdDRDU0OEJEMDhCNjREOTdCOUEy NDY4RUQ4MDAeFw0yNjAxMzExNDQ2NTBaFw0yNjAyMDMyMTQwNTBaMDMxMTAvBgNV BAMTKDVFNDY1QzAwQ0I0QTdDNjk3MUU2N0M5QTEyMDIyNUZDMjVCNjFGMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGgryuEEVp8Mb/m6SgAlyuXc/L HyEp2b1KtYxNTuiNSRXYZHCxrDspcD3qQwjT8LmK+G9gUzMfT2qxYnqOY4TLUWVv BtO7XhG/jUYQSWRE6+pUQG6aMXslXyo9DnrUXkL0VORC6E8VkBlyIh+SWrxCVKCM CJErJY2CUlOfm9AAJ96QtqB/wNz/wdga55IhmyAXY06pMR2r1Qm+yeaoAUmWgcdD 4G8KzBtcPOOmK7IMO3eIhgbZ44yc4ECZ+5Cm0cQB1TIx0h46x/p97OnONav2tnqy 5byICo6p+hAJTuLNjtWd0EHtAjyeh3uXCJrPuLJMyoQhrnh9wzoSlsSyKZQLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXkZcAMtKfGlx5nyaEgIl/CW2Hw4wHwYDVR0j BBgwFoAUivJLprsvZ81Ui9CLZNl7miRo7YAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWJlZWJjYy1hMjQ3LTRmZGUtYWE4Ni1jNjY2OWVhYmNkODIvMC84QUYyNEJBNkJC MkY2N0NENTQ4QkQwOEI2NEQ5N0I5QTI0NjhFRDgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFGMjRCQTZCQjJGNjdDRDU0OEJEMDhCNjREOTdCOUEyNDY4 RUQ4MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FiZWViY2MtYTI0Ny00ZmRlLWFh ODYtYzY2NjllYWJjZDgyLzAvOEFGMjRCQTZCQjJGNjdDRDU0OEJEMDhCNjREOTdC OUEyNDY4RUQ4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHE/WZkRPSdf3STDnZA3SM+mPJdhU4NZvZm0 d22VR9vNJ0qAs886f6HwEJRfffwHSkBeO90oTHDbU2c4BcY2hpC5n8nlHc9YpOEN U7yX4N+ZrjKWQTXQa+QL2xo1/wRS00zB7NYh7uhcL+NZdJcJhDbsnG68kABFOncw aJ0DFlS9ctHr4t4uzfiVAIpSebR/VlIy0FOwLUxho5y8S2uORhN2eLJ8HoGKTuTm eir6gkEhf93/xysUckAhA6K5U+PW5oiH6B10mu8MuZ0U09fdvsDZ1GhdnsYhzaFR 53hXeT3yQp/b7X0B0WgbAw0sF63z+jgqzZ/hbhPZleRz5xalBIA= -----END CERTIFICATE-----Generated at Mon Feb 2 10:03:38 2026 by rpki-client