This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft File: 8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft (raw, json) Hash identifier: FFkq0vI3nI2Ra12X6hWb4iIwjtTb4qEdT5czU/WjsRE= Subject key identifier: A6:B3:4D:7C:04:C4:1B:17:FF:F0:A6:82:A9:29:BB:C7:5E:DB:DE:65 Authority key identifier: 8C:6B:9F:E8:0E:F1:DA:40:B9:64:D4:42:9F:78:78:5A:DD:D2:9E:FB Certificate issuer: /CN=8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB Certificate serial: 7E8818622E430240774E1FA3AB194447FC904A51 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft Manifest number: 021F Signing time: Sat 31 Jan 2026 03:31:30 +0000 Manifest this update: Sat 31 Jan 2026 03:26:30 +0000 Manifest next update: Tue 03 Feb 2026 14:29:30 +0000 Files and hashes: 1: 3130332e31302e37302e302f32342d3234203d3e20313530323130.roa (hash: GkGrk3uoqwZ411t/pDhy3mlwE7XrelZ7UpYea4pdtg4=) 2: 8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl (hash: 6eGvDHqkYjPXh84/ASn4GNnlbxhOTy1VDOL/zSHEVEE=) 3: 3130332e31302e37312e302f32342d3234203d3e20313530323130.roa (hash: TWfIXIVXp0lanaqdmCjliuWn+ETz7xwRfOIaJAb7cvA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 14:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:88:18:62:2e:43:02:40:77:4e:1f:a3:ab:19:44:47:fc:90:4a:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB Validity Not Before: Jan 31 03:26:30 2026 GMT Not After : Feb 3 14:29:30 2026 GMT Subject: CN=A6B34D7C04C41B17FFF0A682A929BBC75EDBDE65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:16:6f:3c:6a:cf:07:f4:23:69:e3:b2:9e:5c: 9c:33:18:cf:3c:2e:54:98:d5:61:64:fc:cf:8a:09: 6c:98:87:34:00:2e:f5:f7:e9:22:e2:f0:db:ef:8d: 23:0e:7d:0f:d2:7a:a9:fd:cf:a7:05:dd:ef:ae:ba: fc:59:26:7c:12:30:ae:72:58:bd:8f:08:2f:c8:ec: 3a:17:46:b2:5e:ba:cb:0f:ad:3c:4f:d4:b0:44:28: 01:3b:4f:73:26:a1:af:52:32:fb:24:fa:b6:4d:d9: aa:32:48:3b:21:87:e8:e1:92:39:e4:c6:99:76:94: fc:ac:44:a3:ea:fd:ea:7d:4c:ae:4f:2d:35:0a:e4: 0c:cf:0c:a2:1c:cb:47:3c:b5:c1:0a:12:6e:ab:42: ad:06:f5:3c:18:15:d0:25:99:2d:f8:5c:fc:c5:c3: 75:d0:dd:ff:f7:ed:9b:c5:af:00:00:c8:2b:3e:a8: d8:1e:b9:07:3b:a7:cc:fd:04:7e:04:0b:cd:db:94: 06:ed:0d:eb:86:8b:5e:02:fe:45:9d:64:8d:99:eb: b2:5f:2b:84:c2:7d:3f:07:b0:32:d1:e4:2d:18:2b: 4b:9e:01:f6:e8:d7:b8:9a:af:b8:9a:0d:1b:be:12: 71:4b:88:5e:8e:41:ea:f6:23:fc:62:e9:2c:3f:26: 6d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:B3:4D:7C:04:C4:1B:17:FF:F0:A6:82:A9:29:BB:C7:5E:DB:DE:65 X509v3 Authority Key Identifier: keyid:8C:6B:9F:E8:0E:F1:DA:40:B9:64:D4:42:9F:78:78:5A:DD:D2:9E:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:71:87:3f:39:cb:88:28:96:a3:89:dd:51:ed:42:db:96:24: 5c:89:b7:2d:46:ef:d1:04:a2:a4:64:e0:ad:a9:46:4a:9f:ee: df:36:a5:3e:81:90:92:90:da:5f:b5:93:11:c6:77:53:ad:5a: 1d:df:d8:75:33:cb:b3:cd:0d:e3:68:61:09:39:a5:1a:db:63: 62:b0:2c:80:f8:a2:85:ae:0b:3c:03:7e:ad:51:0d:8d:9c:14: f6:7e:a8:6d:72:6b:9c:c0:39:29:8a:5e:67:d7:ce:3c:e3:fc: 41:66:d0:b5:9a:90:29:46:71:64:9d:74:22:35:d8:8c:73:42: 13:b0:4a:1f:d0:60:92:b5:1b:b7:57:b9:bf:72:f7:6c:24:16: bc:b1:5e:15:e0:da:f9:5e:7d:77:19:9d:fb:d6:15:00:6b:be: 9d:6c:68:a7:72:94:d6:ef:1c:46:10:32:16:1e:f7:54:81:f0: d8:25:9a:19:ab:ba:9e:d3:9e:e2:05:75:65:10:75:8d:67:28: df:59:4a:07:cc:96:cc:c0:6d:fa:c8:81:f2:5c:6f:cc:5f:65: f3:27:9a:6d:d2:74:b5:a5:6b:06:ab:3b:bc:da:b4:35:2b:9a: 2c:36:88:9e:48:ec:a5:5e:61:60:64:c2:ac:7b:e3:6b:4b:7b: 42:a9:6d:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfogYYi5DAkB3Th+jqxlER/yQSlEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4NUFE REQyOUVGQjAeFw0yNjAxMzEwMzI2MzBaFw0yNjAyMDMxNDI5MzBaMDMxMTAvBgNV BAMTKEE2QjM0RDdDMDRDNDFCMTdGRkYwQTY4MkE5MjlCQkM3NUVEQkRFNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwFm88as8H9CNp47KeXJwzGM88 LlSY1WFk/M+KCWyYhzQALvX36SLi8NvvjSMOfQ/Seqn9z6cF3e+uuvxZJnwSMK5y WL2PCC/I7DoXRrJeussPrTxP1LBEKAE7T3Mmoa9SMvsk+rZN2aoySDshh+jhkjnk xpl2lPysRKPq/ep9TK5PLTUK5AzPDKIcy0c8tcEKEm6rQq0G9TwYFdAlmS34XPzF w3XQ3f/37ZvFrwAAyCs+qNgeuQc7p8z9BH4EC83blAbtDeuGi14C/kWdZI2Z67Jf K4TCfT8HsDLR5C0YK0ueAfbo17iar7iaDRu+EnFLiF6OQer2I/xi6Sw/Jm1DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUprNNfATEGxf/8KaCqSm7x17b3mUwHwYDVR0j BBgwFoAUjGuf6A7x2kC5ZNRCn3h4Wt3SnvswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWNiNzE4Ny03YTVmLTRlMjMtYmU5NC01OTNhMGMyODhjYjkvMC84QzZCOUZFODBF RjFEQTQwQjk2NEQ0NDI5Rjc4Nzg1QURERDI5RUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4NUFEREQy OUVGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFjYjcxODctN2E1Zi00ZTIzLWJl OTQtNTkzYTBjMjg4Y2I5LzAvOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4 NUFEREQyOUVGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHFxhz85y4golqOJ3VHtQtuWJFyJty1G79EE oqRk4K2pRkqf7t82pT6BkJKQ2l+1kxHGd1OtWh3f2HUzy7PNDeNoYQk5pRrbY2Kw LID4ooWuCzwDfq1RDY2cFPZ+qG1ya5zAOSmKXmfXzjzj/EFm0LWakClGcWSddCI1 2IxzQhOwSh/QYJK1G7dXub9y92wkFryxXhXg2vlefXcZnfvWFQBrvp1saKdylNbv HEYQMhYe91SB8Nglmhmrup7TnuIFdWUQdY1nKN9ZSgfMlszAbfrIgfJcb8xfZfMn mm3SdLWlawarO7zatDUrmiw2iJ5I7KVeYWBkwqx742tLe0KpbTQ= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:16 2026 by rpki-client