This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.mft File: 821049BBD22C335A50850F16AB159C0C6BCC28E5.mft (raw, json) Hash identifier: hVi4+dVViGv6kwyActL4u2nMdElOYc+OYrWoafWNnlI= Subject key identifier: C8:C6:8E:49:37:D6:CA:84:A8:B4:71:5B:AA:8E:59:D3:F7:D2:54:A8 Authority key identifier: 82:10:49:BB:D2:2C:33:5A:50:85:0F:16:AB:15:9C:0C:6B:CC:28:E5 Certificate issuer: /CN=821049BBD22C335A50850F16AB159C0C6BCC28E5 Certificate serial: 66C61C9782F87973D1DD968CE61C216AC9F66D53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821049BBD22C335A50850F16AB159C0C6BCC28E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.mft Manifest number: 027C Signing time: Sat 31 Jan 2026 12:41:45 +0000 Manifest this update: Sat 31 Jan 2026 12:36:45 +0000 Manifest next update: Tue 03 Feb 2026 21:32:45 +0000 Files and hashes: 1: 3130332e32312e39332e302f32342d3234203d3e20313331373338.roa (hash: Hx5e9eX/0MDiWg+S8NREaCwOHPQ1Onm3jq45DAvThoc=) 2: 3130332e32312e39342e302f32342d3234203d3e20313331373338.roa (hash: KCUnGn0DyBychM59+lv18yYznYr1wdm5Tf5W0sYTxbE=) 3: 821049BBD22C335A50850F16AB159C0C6BCC28E5.crl (hash: vHovIb/k8vPyXCG/JUq8wkAREZ6iMiKEQ8SuJyz0Bps=) 4: 3130332e32312e39322e302f32342d3234203d3e20313331373338.roa (hash: ndyvXGLmi+s4jvx/l0C4JrK1SIn52emjpfzG2w+2lsw=) 5: 3130332e32312e39352e302f32342d3234203d3e203435323935.roa (hash: WHp6+633q2Em0ghmTjJeCMByUXIoDLeS8IvSNmEh0gE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.crl rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821049BBD22C335A50850F16AB159C0C6BCC28E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 21:32:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:c6:1c:97:82:f8:79:73:d1:dd:96:8c:e6:1c:21:6a:c9:f6:6d:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821049BBD22C335A50850F16AB159C0C6BCC28E5 Validity Not Before: Jan 31 12:36:45 2026 GMT Not After : Feb 3 21:32:45 2026 GMT Subject: CN=C8C68E4937D6CA84A8B4715BAA8E59D3F7D254A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:74:39:99:9b:58:58:69:77:54:13:34:b9:d3: 91:b6:8f:27:43:37:6c:ca:59:9b:80:f4:9b:5e:c1: 2a:9c:d3:25:d0:d7:27:b4:26:6d:fb:64:2e:4f:3e: 6d:47:3a:9a:19:d2:10:54:50:40:bf:46:01:de:68: 14:24:91:3b:16:85:fc:79:ca:b4:61:d9:22:13:c9: 14:c2:63:76:b6:31:ee:ef:e2:11:05:c5:2c:58:b0: 3d:70:0f:22:16:03:fc:12:17:3d:da:75:61:a3:db: 43:19:25:c3:01:08:e5:86:48:b1:ce:c1:3f:b1:e3: b3:d8:cc:b4:0e:95:ea:0d:50:8f:93:d6:66:fc:21: 44:a6:0c:aa:61:00:9a:bd:4e:cf:99:e4:d0:98:d0: 37:5b:3c:1d:45:97:c7:01:6e:0f:31:86:2a:fa:da: 65:27:b6:3f:7b:0f:4a:d3:01:77:00:33:18:f8:1d: ce:6c:62:73:e4:a5:d9:aa:48:70:a8:74:d5:98:af: b9:44:93:a6:e0:ae:df:cd:e3:f2:67:37:8c:18:f0: e1:fb:1f:0f:ad:65:c2:7e:fa:e4:23:a6:e8:03:b8: 33:1e:8d:e2:d7:1c:db:f5:ec:e6:e9:b3:3b:2a:af: 01:61:4c:5b:3f:39:7c:8d:9e:6a:6c:79:0d:3c:44: 93:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C6:8E:49:37:D6:CA:84:A8:B4:71:5B:AA:8E:59:D3:F7:D2:54:A8 X509v3 Authority Key Identifier: keyid:82:10:49:BB:D2:2C:33:5A:50:85:0F:16:AB:15:9C:0C:6B:CC:28:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821049BBD22C335A50850F16AB159C0C6BCC28E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:98:d2:6e:3d:66:37:4d:82:9a:f2:15:94:ac:66:1b:f8:52: 34:1d:b5:ea:ae:ac:14:c3:4a:90:24:67:8a:9f:7a:48:6b:69: c0:02:95:d6:5b:a4:91:26:d0:78:1d:e4:ed:39:d3:48:d6:f1: b9:ce:f0:bc:fa:c9:3f:9c:87:78:1f:a4:a3:3d:48:ab:00:23: 36:e3:a7:2e:de:e1:57:6a:58:31:41:cc:41:a8:9d:08:47:0e: 7d:ac:32:c7:a3:07:66:8a:09:d3:42:95:5a:de:4a:ba:ad:cb: 69:6d:97:96:10:02:5b:37:7c:ab:15:b5:cd:3c:1c:84:03:1f: 3a:bc:43:c0:67:d7:c5:3f:86:56:9a:3b:63:b9:f7:ed:ea:f2: aa:2e:1d:1e:99:33:ab:13:4e:ab:a3:99:4a:97:91:42:e9:a6: 19:27:7d:a3:42:03:17:0a:47:b9:aa:7e:b3:1e:9d:63:f0:ca: ea:71:b9:78:43:ff:4f:4e:06:ff:a8:0c:ae:00:ed:3e:8f:c3: 26:7b:29:39:a9:56:d6:87:a4:28:bb:eb:04:d3:b0:7e:b6:68: a6:55:50:d3:45:b0:80:c6:9e:3f:3d:b4:e6:fb:2c:08:08:5b: a4:88:35:52:2a:c1:4d:89:7d:66:d9:81:1d:c7:ba:aa:59:19: 58:f2:ac:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZsYcl4L4eXPR3ZaM5hwhasn2bVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIxMDQ5QkJEMjJDMzM1QTUwODUwRjE2QUIxNTlDMEM2 QkNDMjhFNTAeFw0yNjAxMzExMjM2NDVaFw0yNjAyMDMyMTMyNDVaMDMxMTAvBgNV BAMTKEM4QzY4RTQ5MzdENkNBODRBOEI0NzE1QkFBOEU1OUQzRjdEMjU0QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAdDmZm1hYaXdUEzS505G2jydD N2zKWZuA9JtewSqc0yXQ1ye0Jm37ZC5PPm1HOpoZ0hBUUEC/RgHeaBQkkTsWhfx5 yrRh2SITyRTCY3a2Me7v4hEFxSxYsD1wDyIWA/wSFz3adWGj20MZJcMBCOWGSLHO wT+x47PYzLQOleoNUI+T1mb8IUSmDKphAJq9Ts+Z5NCY0DdbPB1Fl8cBbg8xhir6 2mUntj97D0rTAXcAMxj4Hc5sYnPkpdmqSHCodNWYr7lEk6bgrt/N4/JnN4wY8OH7 Hw+tZcJ++uQjpugDuDMejeLXHNv17ObpszsqrwFhTFs/OXyNnmpseQ08RJOJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyMaOSTfWyoSotHFbqo5Z0/fSVKgwHwYDVR0j BBgwFoAUghBJu9IsM1pQhQ8WqxWcDGvMKOUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGU4ZTE4ZC1hMDQ3LTQ1OTAtOWU1Ni00NjRhNzNlMjNjNmMvMC84MjEwNDlCQkQy MkMzMzVBNTA4NTBGMTZBQjE1OUMwQzZCQ0MyOEU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODIxMDQ5QkJEMjJDMzM1QTUwODUwRjE2QUIxNTlDMEM2QkND MjhFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRlOGUxOGQtYTA0Ny00NTkwLTll NTYtNDY0YTczZTIzYzZjLzAvODIxMDQ5QkJEMjJDMzM1QTUwODUwRjE2QUIxNTlD MEM2QkNDMjhFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKiY0m49ZjdNgpryFZSsZhv4UjQdtequrBTD SpAkZ4qfekhracACldZbpJEm0Hgd5O0500jW8bnO8Lz6yT+ch3gfpKM9SKsAIzbj py7e4VdqWDFBzEGonQhHDn2sMsejB2aKCdNClVreSrqty2ltl5YQAls3fKsVtc08 HIQDHzq8Q8Bn18U/hlaaO2O59+3q8qouHR6ZM6sTTqujmUqXkULpphknfaNCAxcK R7mqfrMenWPwyupxuXhD/09OBv+oDK4A7T6PwyZ7KTmpVtaHpCi76wTTsH62aKZV UNNFsIDGnj89tOb7LAgIW6SINVIqwU2JfWbZgR3HuqpZGVjyrKk= -----END CERTIFICATE-----Generated at Mon Feb 2 09:58:31 2026 by rpki-client