This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft File: 8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft (raw, json) Hash identifier: dLY7S83sN7tLofA/MeKfK7LnVqOQcmT6kAviTCydZHs= Subject key identifier: EB:58:16:AA:D1:4D:73:70:96:D4:8C:C1:ED:88:A9:22:CC:D1:18:01 Authority key identifier: 8B:E4:A7:01:F2:92:4B:4B:FB:8A:98:3A:1B:0B:D5:C8:86:3B:F3:FD Certificate issuer: /CN=8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD Certificate serial: 3BDEED7F771485CDBB5A3EF1FDB10CC3F2991E2A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft Manifest number: 0543 Signing time: Sat 31 Jan 2026 06:02:16 +0000 Manifest this update: Sat 31 Jan 2026 05:57:16 +0000 Manifest next update: Tue 03 Feb 2026 17:13:16 +0000 Files and hashes: 1: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: PfYYptDyBdUl4aWzZCjnvFHr6qQWRMjgNV762Lfvv/Q=) 2: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: 9ysblGZ5nRnpD9uRTt/CttmsXFnbP66QhYFS5MHljXI=) 3: 8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl (hash: ckv8lF6vrAjkj6vtiKQb+Hdjh1XqFQtA7vLU6lysFxA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 17:13:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:de:ed:7f:77:14:85:cd:bb:5a:3e:f1:fd:b1:0c:c3:f2:99:1e:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD Validity Not Before: Jan 31 05:57:16 2026 GMT Not After : Feb 3 17:13:16 2026 GMT Subject: CN=EB5816AAD14D737096D48CC1ED88A922CCD11801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1c:d7:e0:2f:dc:17:39:9f:e2:45:75:73:33: 2c:98:29:9e:17:2f:3e:9c:e9:ab:7b:bd:59:45:1c: ba:2a:34:74:ee:56:a7:9c:66:d0:fe:a3:08:f3:e0: c9:75:2b:12:66:c4:f4:e0:a5:1a:53:fa:64:50:e2: 8f:51:bb:dd:23:c4:4f:56:25:77:3a:22:eb:2f:ae: f6:7d:03:fe:dd:76:e3:0a:22:bd:99:2d:f1:e7:5e: 5c:30:07:c3:6c:a2:b8:53:51:38:4c:c6:ff:d9:24: df:a9:0e:72:ea:c8:e0:76:3b:fc:4b:09:8e:69:6d: 24:fa:9d:8f:7f:9b:18:56:3d:f2:b7:bc:53:a6:3f: a0:a3:28:5f:45:0b:12:3d:45:27:c9:0e:ce:84:b2: d7:d0:fb:f2:ad:53:21:84:26:b1:98:6c:58:e6:04: 62:8f:cd:3b:86:7e:10:41:e7:38:b5:40:59:ae:17: 3f:de:41:71:11:8a:d2:a7:cc:44:b3:c7:dc:3a:45: ed:b3:29:74:c5:f5:cc:39:ff:d2:5f:c6:41:c7:24: df:c6:92:95:9e:10:b7:f0:cf:5e:5b:b6:74:d7:eb: 81:d0:16:e0:d0:e9:b4:d1:bf:13:21:81:66:9b:fb: 5f:a5:9e:11:9f:6b:79:c8:83:f9:b9:97:d2:c0:a4: 1f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:58:16:AA:D1:4D:73:70:96:D4:8C:C1:ED:88:A9:22:CC:D1:18:01 X509v3 Authority Key Identifier: keyid:8B:E4:A7:01:F2:92:4B:4B:FB:8A:98:3A:1B:0B:D5:C8:86:3B:F3:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:27:3f:94:0b:41:0e:5d:b2:c6:79:ed:57:af:2b:d0:c4:48: 62:f6:56:b1:f1:c9:67:ae:03:9b:62:b2:b7:3c:b5:84:ec:a7: 62:b7:6b:ee:b0:28:fc:17:79:f0:b6:92:38:54:ab:f1:e5:8f: 19:ea:68:6f:6b:39:fa:0c:87:d4:9f:94:f2:0a:8c:40:74:b5: 89:df:83:5e:c4:17:02:83:be:f4:41:c3:a8:d4:8c:77:bd:6b: 71:c9:da:21:9a:ae:60:b3:c5:59:b1:9a:51:5b:38:8e:0d:40: 39:bf:54:11:7c:cc:0f:9d:9b:17:ee:87:83:8a:5d:c1:00:52: 70:0d:de:7a:22:4b:1b:d5:54:24:52:d5:c1:57:8d:76:b5:d8: 46:82:0c:cc:c1:a8:e8:1a:f3:44:e3:37:24:02:46:27:21:86: af:53:f4:4e:9a:28:71:10:c6:54:c9:f9:5a:d6:c1:62:d9:d8: 08:57:0f:dd:4b:61:31:f0:b8:42:b0:28:a4:cf:75:45:e4:6c: fe:83:18:02:ac:b8:12:42:fa:55:c5:3f:ca:a9:77:1a:fa:df: dd:c8:70:21:fb:59:2c:27:bf:01:81:e3:98:17:de:bd:7e:bd: 57:2f:12:1c:7c:7b:71:b4:bd:89:fd:00:06:96:c8:8e:e1:87: 64:25:2d:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO97tf3cUhc27Wj7x/bEMw/KZHiowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1Qzg4 NjNCRjNGRDAeFw0yNjAxMzEwNTU3MTZaFw0yNjAyMDMxNzEzMTZaMDMxMTAvBgNV BAMTKEVCNTgxNkFBRDE0RDczNzA5NkQ0OENDMUVEODhBOTIyQ0NEMTE4MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFHNfgL9wXOZ/iRXVzMyyYKZ4X Lz6c6at7vVlFHLoqNHTuVqecZtD+owjz4Ml1KxJmxPTgpRpT+mRQ4o9Ru90jxE9W JXc6IusvrvZ9A/7dduMKIr2ZLfHnXlwwB8NsorhTUThMxv/ZJN+pDnLqyOB2O/xL CY5pbST6nY9/mxhWPfK3vFOmP6CjKF9FCxI9RSfJDs6EstfQ+/KtUyGEJrGYbFjm BGKPzTuGfhBB5zi1QFmuFz/eQXERitKnzESzx9w6Re2zKXTF9cw5/9JfxkHHJN/G kpWeELfwz15btnTX64HQFuDQ6bTRvxMhgWab+1+lnhGfa3nIg/m5l9LApB99AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU61gWqtFNc3CW1IzB7YipIszRGAEwHwYDVR0j BBgwFoAUi+SnAfKSS0v7ipg6GwvVyIY78/0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDYzNDdmNC1lYTI2LTRkNGMtYTU2OC0xZDg2MzM2MGU0MjEvMC84QkU0QTcwMUYy OTI0QjRCRkI4QTk4M0ExQjBCRDVDODg2M0JGM0ZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1Qzg4NjNC RjNGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA2MzQ3ZjQtZWEyNi00ZDRjLWE1 NjgtMWQ4NjMzNjBlNDIxLzAvOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1 Qzg4NjNCRjNGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL8nP5QLQQ5dssZ57VevK9DESGL2VrHxyWeu A5tisrc8tYTsp2K3a+6wKPwXefC2kjhUq/HljxnqaG9rOfoMh9SflPIKjEB0tYnf g17EFwKDvvRBw6jUjHe9a3HJ2iGarmCzxVmxmlFbOI4NQDm/VBF8zA+dmxfuh4OK XcEAUnAN3noiSxvVVCRS1cFXjXa12EaCDMzBqOga80TjNyQCRichhq9T9E6aKHEQ xlTJ+VrWwWLZ2AhXD91LYTHwuEKwKKTPdUXkbP6DGAKsuBJC+lXFP8qpdxr6393I cCH7WSwnvwGB45gX3r1+vVcvEhx8e3G0vYn9AAaWyI7hh2QlLa0= -----END CERTIFICATE-----Generated at Mon Feb 2 12:51:45 2026 by rpki-client