This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft File: B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft (raw, json) Hash identifier: gdpwsMVgTQHlCrjWKOOf8ZspWBlK1sKawb9Y3RAlWSw= Subject key identifier: 02:7E:4F:C9:E5:DA:21:FD:ED:E0:C2:E8:A6:84:D6:9B:BC:29:C1:ED Authority key identifier: B8:43:6A:CB:7C:E8:F8:C2:F5:72:45:FF:E4:E6:BA:2F:52:39:3F:4D Certificate issuer: /CN=B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D Certificate serial: 7F238240C733D312BBFAEA9237AD0279F4303D19 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft Manifest number: 03AB Signing time: Sat 31 Jan 2026 15:31:52 +0000 Manifest this update: Sat 31 Jan 2026 15:26:52 +0000 Manifest next update: Wed 04 Feb 2026 01:54:52 +0000 Files and hashes: 1: 3130332e3135342e32342e302f32342d3234203d3e20313430343738.roa (hash: OPJ+0bfTR2bNFtVvMzF36s5tfMJLI0pXwTypT9BsLeE=) 2: B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl (hash: q64TqWxYaTyKdT5UrhUJLvfuwvLqSHRiXNDesR+lzoI=) 3: 3130332e3135342e32342e302f32332d3233203d3e20313430343738.roa (hash: s1nmEcWlMGfpOr6XkgkIDAhuvP77SQ9zj5c2Qr3sr/E=) 4: 3130332e3135342e32352e302f32342d3234203d3e20313430343738.roa (hash: YWVKY2G+Nvg6caG2vXoeK6bw0DFIbKqpsrtcWOftF08=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 01:54:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:23:82:40:c7:33:d3:12:bb:fa:ea:92:37:ad:02:79:f4:30:3d:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D Validity Not Before: Jan 31 15:26:52 2026 GMT Not After : Feb 4 01:54:52 2026 GMT Subject: CN=027E4FC9E5DA21FDEDE0C2E8A684D69BBC29C1ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:00:17:c9:75:5c:7c:a7:91:70:d4:7e:cd:98: 55:0a:fb:b6:78:95:df:76:ae:ab:99:cc:de:b6:ed: de:c1:76:64:67:8b:ed:68:22:47:4e:f8:17:25:2f: 02:bc:e9:f4:ec:39:fa:e2:6d:92:f4:26:77:bb:2d: 32:31:dd:60:ac:78:10:53:ba:64:a3:3e:8b:a9:77: 52:da:b9:e1:2c:fd:a2:8c:d6:52:1f:5b:82:bb:ec: c3:89:1f:d9:cc:db:8f:c6:ce:6a:db:b0:b2:77:c8: 57:e5:63:43:2a:f1:ec:28:9f:db:17:66:85:b0:f9: 43:3a:5b:84:82:35:0b:f6:f3:3a:e5:57:ee:19:0a: 7f:a0:d3:e5:08:10:b4:b9:06:12:4a:c4:19:e9:30: f9:45:b7:1b:bc:04:c5:55:43:1b:b2:3d:88:14:98: 70:57:29:fb:25:10:62:b5:39:3d:e0:30:41:16:b0: 7e:7a:56:f1:7f:21:79:98:02:65:1b:27:9e:69:f7: 2c:18:c1:7a:5e:38:bb:7d:97:cb:cd:94:5e:89:a7: aa:53:8b:11:e7:75:96:44:06:c9:41:0b:2d:eb:05: 4e:f1:b6:61:48:ea:21:cd:a0:83:17:16:4a:6e:50: 61:47:34:3f:fc:9a:69:5a:fe:60:a4:e1:6d:ab:00: 63:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:7E:4F:C9:E5:DA:21:FD:ED:E0:C2:E8:A6:84:D6:9B:BC:29:C1:ED X509v3 Authority Key Identifier: keyid:B8:43:6A:CB:7C:E8:F8:C2:F5:72:45:FF:E4:E6:BA:2F:52:39:3F:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:80:de:d9:92:3c:9a:34:2a:6d:76:3d:e2:c0:93:c9:da:31: 49:6a:03:15:e2:af:7e:49:0f:83:43:05:45:18:b7:f6:1a:8e: da:5c:41:cd:38:12:4b:4c:48:18:5a:10:bb:52:74:b9:57:10: 81:1d:15:87:44:66:f4:d6:0e:f9:e5:d6:8e:ad:ad:0c:cb:00: 12:91:ac:db:0b:45:fc:80:75:df:5d:b6:53:a4:da:39:76:52: ff:20:ac:e3:24:e2:61:bc:9a:1b:f5:7c:ad:a9:84:a0:94:65: c1:e3:37:2a:c8:22:56:eb:05:f0:9f:13:99:6a:c4:e7:68:10: ad:d2:99:bd:2f:3b:af:2f:52:c9:d4:c8:0f:10:cd:2f:7d:2a: 5b:75:50:6c:c5:f9:cd:f2:a6:22:e9:6f:a9:25:12:56:4f:76: 2e:ac:da:f0:b7:3b:05:c1:fc:c6:2a:00:0a:33:17:4b:d4:a4: 91:bf:70:73:79:4f:2d:38:78:59:70:88:a4:84:e4:49:65:35: 16:7e:f7:b4:d4:a0:67:38:04:5d:46:ef:35:a3:58:b9:8b:a2: 1a:c3:56:49:d9:a1:f0:42:0d:0c:4a:66:55:f2:5d:57:b3:c8: 9d:35:bb:ea:b3:db:4e:85:62:5b:04:89:5a:b7:f4:89:07:44: b8:34:fb:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfyOCQMcz0xK7+uqSN60CefQwPRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg0MzZBQ0I3Q0U4RjhDMkY1NzI0NUZGRTRFNkJBMkY1 MjM5M0Y0RDAeFw0yNjAxMzExNTI2NTJaFw0yNjAyMDQwMTU0NTJaMDMxMTAvBgNV BAMTKDAyN0U0RkM5RTVEQTIxRkRFREUwQzJFOEE2ODRENjlCQkMyOUMxRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxABfJdVx8p5Fw1H7NmFUK+7Z4 ld92rquZzN627d7BdmRni+1oIkdO+BclLwK86fTsOfribZL0Jne7LTIx3WCseBBT umSjPoupd1LaueEs/aKM1lIfW4K77MOJH9nM24/GzmrbsLJ3yFflY0Mq8ewon9sX ZoWw+UM6W4SCNQv28zrlV+4ZCn+g0+UIELS5BhJKxBnpMPlFtxu8BMVVQxuyPYgU mHBXKfslEGK1OT3gMEEWsH56VvF/IXmYAmUbJ55p9ywYwXpeOLt9l8vNlF6Jp6pT ixHndZZEBslBCy3rBU7xtmFI6iHNoIMXFkpuUGFHND/8mmla/mCk4W2rAGMPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAn5PyeXaIf3t4MLopoTWm7wpwe0wHwYDVR0j BBgwFoAUuENqy3zo+ML1ckX/5Oa6L1I5P00wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YmVmYmYwNC00MWJlLTQ4ZDctYWMwMC04YTNjNDk4Y2E5YWUvMC9CODQzNkFDQjdD RThGOEMyRjU3MjQ1RkZFNEU2QkEyRjUyMzkzRjRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg0MzZBQ0I3Q0U4RjhDMkY1NzI0NUZGRTRFNkJBMkY1MjM5 M0Y0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWJlZmJmMDQtNDFiZS00OGQ3LWFj MDAtOGEzYzQ5OGNhOWFlLzAvQjg0MzZBQ0I3Q0U4RjhDMkY1NzI0NUZGRTRFNkJB MkY1MjM5M0Y0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEKA3tmSPJo0Km12PeLAk8naMUlqAxXir35J D4NDBUUYt/YajtpcQc04EktMSBhaELtSdLlXEIEdFYdEZvTWDvnl1o6trQzLABKR rNsLRfyAdd9dtlOk2jl2Uv8grOMk4mG8mhv1fK2phKCUZcHjNyrIIlbrBfCfE5lq xOdoEK3Smb0vO68vUsnUyA8QzS99Klt1UGzF+c3ypiLpb6klElZPdi6s2vC3OwXB /MYqAAozF0vUpJG/cHN5Ty04eFlwiKSE5EllNRZ+97TUoGc4BF1G7zWjWLmLohrD VknZofBCDQxKZlXyXVezyJ01u+qz206FYlsEiVq39IkHRLg0+8M= -----END CERTIFICATE-----Generated at Mon Feb 2 10:02:19 2026 by rpki-client