This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft File: 85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft (raw, json) Hash identifier: zkS/ty2+748FZrlsrEIrMEY/T67nSX+Kma6ll9WQ+Rk= Subject key identifier: AB:9B:C9:73:A9:26:E6:34:59:A4:2D:50:BE:E2:38:DB:87:56:C5:B1 Authority key identifier: 85:EA:86:75:63:71:BA:89:BB:1A:E8:46:B5:C3:0D:DB:81:6A:CD:B9 Certificate issuer: /CN=85EA86756371BA89BB1AE846B5C30DDB816ACDB9 Certificate serial: 1A31503A4CF3873BBBC5E9ACBD69DDD90A41251D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft Manifest number: 0246 Signing time: Sun 01 Feb 2026 03:50:03 +0000 Manifest this update: Sun 01 Feb 2026 03:45:03 +0000 Manifest next update: Wed 04 Feb 2026 15:39:03 +0000 Files and hashes: 1: 85EA86756371BA89BB1AE846B5C30DDB816ACDB9.crl (hash: WTNJ0FHHU9KHDb5NC7VZ2WMnC+2nB3ijkz+c1OvehBk=) 2: 3130332e3137342e37382e302f32342d3234203d3e20313331363939.roa (hash: lKFSHdHF3wWJIcTGvyjieSUWfDWF+TAqKVs638owOUk=) 3: 3130332e3137342e37392e302f32342d3234203d3e20313331363939.roa (hash: gMUmsfmmNczaAd+9ZeeQYOcgGDct+Ydmufmg2U5oVEk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.crl rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 15:39:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:31:50:3a:4c:f3:87:3b:bb:c5:e9:ac:bd:69:dd:d9:0a:41:25:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85EA86756371BA89BB1AE846B5C30DDB816ACDB9 Validity Not Before: Feb 1 03:45:03 2026 GMT Not After : Feb 4 15:39:03 2026 GMT Subject: CN=AB9BC973A926E63459A42D50BEE238DB8756C5B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:af:a8:c6:62:09:a5:55:08:09:4f:af:69:38: 54:32:b8:cc:6d:e9:56:80:39:5c:98:9b:2b:df:e1: 21:2d:ff:ca:1e:94:3f:88:27:e1:1e:da:d8:4c:d7: 30:30:5a:3b:1e:94:f8:1b:1f:16:db:9e:85:1d:a1: f5:89:7a:10:12:10:78:21:63:7a:ae:fb:5d:eb:e6: 4d:cc:f8:49:af:ad:35:fb:8d:4d:eb:a3:f9:10:70: 97:d1:00:37:a9:36:f8:cb:4a:bd:22:68:a4:d6:83: 14:2e:3f:90:fc:1a:49:c6:26:58:8f:6f:5c:54:36: c6:29:b7:34:9b:3c:c3:a8:51:58:9c:30:57:f1:3d: 9e:62:ed:e5:f8:02:b7:97:49:74:8e:2a:c3:d8:ad: 89:e5:b0:fa:7e:a7:01:de:24:d9:4a:38:02:9a:9b: 82:ca:be:3b:12:24:ba:3a:cb:20:9b:9e:da:44:9c: 01:5e:27:3e:7d:71:cb:b0:cd:f9:27:e4:00:5e:34: 12:c6:92:46:2e:28:18:67:f6:32:7e:94:97:42:06: 5f:54:d2:4b:74:c6:e6:46:c9:85:70:2a:67:a1:3c: 65:69:e3:e8:38:58:24:b1:02:11:7e:00:fd:e9:da: 0a:65:24:d0:ff:32:f6:55:3b:07:62:ef:53:84:8b: 64:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:9B:C9:73:A9:26:E6:34:59:A4:2D:50:BE:E2:38:DB:87:56:C5:B1 X509v3 Authority Key Identifier: keyid:85:EA:86:75:63:71:BA:89:BB:1A:E8:46:B5:C3:0D:DB:81:6A:CD:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:d1:d8:eb:75:16:d1:32:d8:df:02:e6:ed:16:df:91:18:39: b7:92:e7:32:19:62:8e:8e:17:fe:69:b5:91:d7:64:9a:4d:59: 1c:f7:b9:0f:a7:79:6b:2e:86:fc:34:c5:89:ea:19:6b:94:f8: a1:9b:e6:01:75:45:bc:f0:5e:31:0e:ee:09:f1:6d:70:c2:5f: b1:ab:46:64:95:f2:5c:1f:5c:65:3a:14:ea:8d:fa:83:c3:ad: 87:bc:11:51:33:b0:35:9b:93:3f:32:ea:d3:8b:6e:44:4d:f1: 04:be:1b:46:00:9d:fe:2a:62:2d:c2:8a:9b:77:1a:06:7e:61: 90:06:91:98:8a:d0:cb:97:b0:44:84:02:95:f2:69:6a:13:61: 4d:06:35:c5:0c:f0:c9:a2:47:7d:8a:1b:76:77:dc:cb:25:45: b3:99:82:5f:71:04:ce:38:8d:e0:4a:fa:42:23:27:b6:43:5a: 98:7a:55:e8:a2:c6:f6:37:42:0c:51:5c:21:a1:8b:50:62:8d: 92:63:14:6e:90:89:26:40:c9:be:7f:56:f4:76:88:5d:45:44: 7c:5e:cc:6e:c2:50:51:65:34:11:7d:0f:c5:b3:d8:77:68:4a: d2:98:82:21:c5:9d:f9:dc:66:b4:8b:bc:7b:51:61:29:f9:a1: 45:cc:e2:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGjFQOkzzhzu7xemsvWnd2QpBJR0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVFQTg2NzU2MzcxQkE4OUJCMUFFODQ2QjVDMzBEREI4 MTZBQ0RCOTAeFw0yNjAyMDEwMzQ1MDNaFw0yNjAyMDQxNTM5MDNaMDMxMTAvBgNV BAMTKEFCOUJDOTczQTkyNkU2MzQ1OUE0MkQ1MEJFRTIzOERCODc1NkM1QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyr6jGYgmlVQgJT69pOFQyuMxt 6VaAOVyYmyvf4SEt/8oelD+IJ+Ee2thM1zAwWjselPgbHxbbnoUdofWJehASEHgh Y3qu+13r5k3M+EmvrTX7jU3ro/kQcJfRADepNvjLSr0iaKTWgxQuP5D8GknGJliP b1xUNsYptzSbPMOoUVicMFfxPZ5i7eX4AreXSXSOKsPYrYnlsPp+pwHeJNlKOAKa m4LKvjsSJLo6yyCbntpEnAFeJz59ccuwzfkn5ABeNBLGkkYuKBhn9jJ+lJdCBl9U 0kt0xuZGyYVwKmehPGVp4+g4WCSxAhF+AP3p2gplJND/MvZVOwdi71OEi2RtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq5vJc6km5jRZpC1QvuI424dWxbEwHwYDVR0j BBgwFoAUheqGdWNxuom7GuhGtcMN24FqzbkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmM2ZGExOS04NGJlLTRhNTAtYjQ2Ni0xZTg2ZGRiY2MzNWYvMC84NUVBODY3NTYz NzFCQTg5QkIxQUU4NDZCNUMzMEREQjgxNkFDREI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODVFQTg2NzU2MzcxQkE4OUJCMUFFODQ2QjVDMzBEREI4MTZB Q0RCOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGJjNmRhMTktODRiZS00YTUwLWI0 NjYtMWU4NmRkYmNjMzVmLzAvODVFQTg2NzU2MzcxQkE4OUJCMUFFODQ2QjVDMzBE REI4MTZBQ0RCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABjR2Ot1FtEy2N8C5u0W35EYObeS5zIZYo6O F/5ptZHXZJpNWRz3uQ+neWsuhvw0xYnqGWuU+KGb5gF1RbzwXjEO7gnxbXDCX7Gr RmSV8lwfXGU6FOqN+oPDrYe8EVEzsDWbkz8y6tOLbkRN8QS+G0YAnf4qYi3Cipt3 GgZ+YZAGkZiK0MuXsESEApXyaWoTYU0GNcUM8MmiR32KG3Z33MslRbOZgl9xBM44 jeBK+kIjJ7ZDWph6VeiixvY3QgxRXCGhi1BijZJjFG6QiSZAyb5/VvR2iF1FRHxe zG7CUFFlNBF9D8Wz2HdoStKYgiHFnfncZrSLvHtRYSn5oUXM4tQ= -----END CERTIFICATE-----Generated at Mon Feb 2 09:50:42 2026 by rpki-client