This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft File: 8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft (raw, json) Hash identifier: 6WNgjZnJrYpQjUiILVcAYagCpmiKfF4T6EgPnIYyq1A= Subject key identifier: 9A:DB:81:72:CF:0B:0C:27:34:C1:FD:FB:53:97:43:1C:65:44:D1:6F Authority key identifier: 8C:DF:71:6F:25:D6:4D:EB:3E:10:36:E6:A3:6D:B7:24:CD:E1:E5:D0 Certificate issuer: /CN=8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0 Certificate serial: 1DF93AF52B89F0BB4B2557FB717ABB4010B421BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft Manifest number: 03C4 Signing time: Sat 31 Jan 2026 13:00:44 +0000 Manifest this update: Sat 31 Jan 2026 12:55:44 +0000 Manifest next update: Tue 03 Feb 2026 18:19:44 +0000 Files and hashes: 1: 8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.crl (hash: sGJC0EiWXbwcpHAxWnbV76qUoX0SqnTemJOnwBk5eGg=) 2: 3130332e3136322e3134362e302f32332d3234203d3e203137393935.roa (hash: glmRxvHF4g4HTvz1muaudxYOmNWHdjodUPYRc5xhUvY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.crl rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 18:19:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:f9:3a:f5:2b:89:f0:bb:4b:25:57:fb:71:7a:bb:40:10:b4:21:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0 Validity Not Before: Jan 31 12:55:44 2026 GMT Not After : Feb 3 18:19:44 2026 GMT Subject: CN=9ADB8172CF0B0C2734C1FDFB5397431C6544D16F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:66:a7:0d:64:be:9b:3b:44:1a:b8:a4:5d:5e: 7e:f4:71:21:83:47:31:1f:e1:1e:3b:72:4a:78:da: 03:39:e5:49:0f:78:ea:0f:b2:8f:48:65:57:76:dd: 05:8f:2b:fb:42:9d:f3:4d:d0:ed:b8:87:3f:49:5b: 81:2f:91:c2:ff:11:69:37:e4:08:07:e4:d1:ef:64: 33:9e:4e:11:96:7d:f8:11:23:6c:e8:19:f4:9c:20: 01:ad:33:e7:db:73:52:c0:09:44:db:8c:bd:6b:25: 04:84:71:2b:cd:05:d7:ea:42:f5:57:aa:3e:6a:fb: 2f:9a:a9:e9:1e:bc:80:5e:dc:cc:6b:d9:88:b3:5f: 94:f0:20:24:81:91:ec:05:71:cc:69:36:89:e5:59: 0c:98:e5:7f:a5:86:06:c4:54:34:39:82:96:4a:83: db:d5:5e:7f:3a:db:8a:05:b9:ee:ad:1e:e4:64:e1: e5:2d:19:18:fc:6a:7c:69:e5:09:a9:7a:c8:a2:06: d5:3a:d8:16:e9:85:15:f3:2d:7f:33:67:d9:14:64: 8a:6c:2a:1b:a3:02:f7:e9:55:50:32:06:c3:ee:f5: ce:69:21:b1:f6:89:9a:e3:db:ea:0b:03:25:a4:df: 06:53:23:b7:c1:c5:38:c9:7f:f0:7d:0c:86:d2:59: 2d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:DB:81:72:CF:0B:0C:27:34:C1:FD:FB:53:97:43:1C:65:44:D1:6F X509v3 Authority Key Identifier: keyid:8C:DF:71:6F:25:D6:4D:EB:3E:10:36:E6:A3:6D:B7:24:CD:E1:E5:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:c3:fa:ab:79:83:40:50:7d:7a:6e:f9:95:3d:c6:a0:ef:a6: 8c:d9:57:5b:53:08:58:0e:86:74:8e:0b:62:77:5d:29:0a:cf: f3:cc:b7:dd:df:43:13:e9:02:cb:27:eb:ad:78:fd:fe:07:0e: a5:8d:00:ba:85:37:ab:b4:73:0c:68:c9:30:68:75:b2:52:35: 5e:89:42:a2:d6:6c:b2:04:00:36:3d:40:6a:84:d6:c8:e4:94: 19:a0:a6:12:e9:b8:1c:31:a0:32:e5:56:f8:3e:95:9c:29:c5: 68:c8:de:15:9e:16:83:a4:e8:e5:f8:f0:79:6d:a7:8d:2c:9f: 99:25:9b:ca:ee:8f:a3:e7:fe:53:79:46:01:be:9e:4a:16:ac: 15:25:5f:38:d5:64:e8:03:4e:54:4c:9a:39:a9:a9:c6:3f:41: 5a:84:18:fe:bd:03:17:14:17:42:70:e1:1a:5e:7f:6b:44:b2: 70:3d:6e:23:44:66:39:0a:d5:69:8f:d2:81:92:81:e9:73:9e: 53:0e:cc:d9:36:8c:12:3a:fc:f8:a6:36:6a:8c:62:85:f0:27: ff:38:ad:f0:d0:be:d2:04:6e:6b:83:83:5d:9c:c2:0d:4f:ba: 4b:61:d5:31:fc:a2:12:e4:36:15:6e:e3:d7:d4:de:e5:3c:6e: d7:fd:e1:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHfk69SuJ8LtLJVf7cXq7QBC0IbowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENERjcxNkYyNUQ2NERFQjNFMTAzNkU2QTM2REI3MjRD REUxRTVEMDAeFw0yNjAxMzExMjU1NDRaFw0yNjAyMDMxODE5NDRaMDMxMTAvBgNV BAMTKDlBREI4MTcyQ0YwQjBDMjczNEMxRkRGQjUzOTc0MzFDNjU0NEQxNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpZqcNZL6bO0QauKRdXn70cSGD RzEf4R47ckp42gM55UkPeOoPso9IZVd23QWPK/tCnfNN0O24hz9JW4EvkcL/EWk3 5AgH5NHvZDOeThGWffgRI2zoGfScIAGtM+fbc1LACUTbjL1rJQSEcSvNBdfqQvVX qj5q+y+aqekevIBe3Mxr2YizX5TwICSBkewFccxpNonlWQyY5X+lhgbEVDQ5gpZK g9vVXn8624oFue6tHuRk4eUtGRj8anxp5QmpesiiBtU62BbphRXzLX8zZ9kUZIps KhujAvfpVVAyBsPu9c5pIbH2iZrj2+oLAyWk3wZTI7fBxTjJf/B9DIbSWS0VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmtuBcs8LDCc0wf37U5dDHGVE0W8wHwYDVR0j BBgwFoAUjN9xbyXWTes+EDbmo223JM3h5dAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDUyMGI1NC0zYmE3LTQ2MzEtYWYwYi01NTk4NGIwYmE3ZjIvMC84Q0RGNzE2RjI1 RDY0REVCM0UxMDM2RTZBMzZEQjcyNENERTFFNUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENERjcxNkYyNUQ2NERFQjNFMTAzNkU2QTM2REI3MjRDREUx RTVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjA1MjBiNTQtM2JhNy00NjMxLWFm MGItNTU5ODRiMGJhN2YyLzAvOENERjcxNkYyNUQ2NERFQjNFMTAzNkU2QTM2REI3 MjRDREUxRTVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAADD+qt5g0BQfXpu+ZU9xqDvpozZV1tTCFgO hnSOC2J3XSkKz/PMt93fQxPpAssn6614/f4HDqWNALqFN6u0cwxoyTBodbJSNV6J QqLWbLIEADY9QGqE1sjklBmgphLpuBwxoDLlVvg+lZwpxWjI3hWeFoOk6OX48Hlt p40sn5klm8ruj6Pn/lN5RgG+nkoWrBUlXzjVZOgDTlRMmjmpqcY/QVqEGP69AxcU F0Jw4Rpef2tEsnA9biNEZjkK1WmP0oGSgelznlMOzNk2jBI6/PimNmqMYoXwJ/84 rfDQvtIEbmuDg12cwg1Pukth1TH8ohLkNhVu49fU3uU8btf94Xo= -----END CERTIFICATE-----Generated at Mon Feb 2 10:05:28 2026 by rpki-client