This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft File: 8E87AB0332210D864175F7A371230D7C6099AE30.mft (raw, json) Hash identifier: Qg8xnpE7ut6IQBIcEzXJsvX5DfnFpUS4LtgwdsInBaw= Subject key identifier: 86:DD:AC:9F:D2:80:E0:FD:58:57:DF:2C:D3:DC:18:0A:AD:B3:A8:AE Authority key identifier: 8E:87:AB:03:32:21:0D:86:41:75:F7:A3:71:23:0D:7C:60:99:AE:30 Certificate issuer: /CN=8E87AB0332210D864175F7A371230D7C6099AE30 Certificate serial: 19F9A8328A212BD407340527698702EBE7D1CFB6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft Manifest number: 0259 Signing time: Sat 31 Jan 2026 11:51:49 +0000 Manifest this update: Sat 31 Jan 2026 11:46:49 +0000 Manifest next update: Tue 03 Feb 2026 18:21:49 +0000 Files and hashes: 1: 8E87AB0332210D864175F7A371230D7C6099AE30.crl (hash: QFnG8O3HiBaIb4W5PgSEuWx0gVeJfX8X2V/grpAds7s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.crl rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 18:21:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:f9:a8:32:8a:21:2b:d4:07:34:05:27:69:87:02:eb:e7:d1:cf:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E87AB0332210D864175F7A371230D7C6099AE30 Validity Not Before: Jan 31 11:46:49 2026 GMT Not After : Feb 3 18:21:49 2026 GMT Subject: CN=86DDAC9FD280E0FD5857DF2CD3DC180AADB3A8AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:25:c5:65:a9:18:30:73:8c:4d:07:fd:cf:2c: ab:6d:a4:09:c5:f7:46:1e:0c:55:dc:65:bc:45:57: 13:3a:56:d3:00:b7:8a:6a:10:7a:dc:9e:d9:01:b4: 6f:79:df:93:ca:32:5c:0f:ef:03:07:d3:59:73:45: d4:07:68:2e:3e:81:e3:89:85:6a:a4:57:ea:c8:bb: da:4e:4d:4e:f5:e2:f3:42:a7:5c:f1:f9:26:d4:08: ce:36:90:37:5b:2f:46:14:f4:fc:98:52:a3:be:da: fa:12:e4:eb:d7:17:ed:8e:f6:5e:2e:2d:bf:4e:90: 94:1d:91:5c:0b:22:4f:27:70:dd:a7:32:42:fa:c0: c5:c9:66:97:e0:c5:ee:bf:1e:ca:42:23:05:ee:07: 74:cb:99:dc:e6:21:e2:51:db:f5:ff:4c:b5:cd:5c: ed:39:3c:df:70:13:2a:d2:29:4d:f0:64:8a:c6:c4: a4:96:19:b7:60:be:be:b4:b2:57:5f:2e:2b:0a:5f: c5:3b:f1:45:8c:4f:f2:07:2d:ce:68:16:ef:e6:55: b2:b4:46:41:12:13:29:eb:c6:cc:3f:29:e7:b2:45: 04:15:ac:36:f9:a9:3f:0d:79:ef:2b:9a:d5:ed:35: 9f:80:a9:b1:bc:49:50:83:ac:1b:eb:b1:84:0d:d4: e5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:DD:AC:9F:D2:80:E0:FD:58:57:DF:2C:D3:DC:18:0A:AD:B3:A8:AE X509v3 Authority Key Identifier: keyid:8E:87:AB:03:32:21:0D:86:41:75:F7:A3:71:23:0D:7C:60:99:AE:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:ca:64:77:99:3d:3c:2d:26:76:8e:06:6a:55:3b:83:d3:43: 08:e6:7e:57:80:ef:b5:fd:1c:c4:cb:60:5c:dc:f3:15:1a:9e: cd:80:d8:6d:1b:31:31:2e:ba:8a:0f:04:56:cd:a7:2b:2c:7d: ba:95:ac:5e:dd:78:14:b9:b4:72:c5:0e:7c:ed:ad:3b:aa:33: b8:ff:1a:10:56:d6:70:87:32:4c:76:57:c3:42:9c:70:0e:4a: 71:9b:c3:af:6b:45:7c:fd:d5:b1:50:b3:6d:aa:dd:2b:bf:73: 1e:64:cf:1a:00:22:4b:bf:f4:eb:c2:cd:94:22:c2:19:89:a7: 2d:dd:81:0f:d0:00:3b:e6:4c:c0:6a:e4:08:18:cf:a9:2e:29: b6:d1:f5:8b:67:5b:87:2d:2c:ed:8c:58:04:7e:04:63:2a:ad: 0e:96:bb:a8:20:49:e8:60:8e:39:e0:ad:98:c1:9f:52:c7:42: 9f:44:c6:7c:83:5e:84:91:02:29:7a:47:30:d5:72:15:aa:d0: 5d:43:a7:24:16:99:7d:c0:d3:b9:36:3f:07:db:19:e6:a4:72: 54:82:4b:bf:33:46:bb:d1:a7:5c:68:ac:10:ce:6d:c7:60:29: 3d:d9:f0:c0:fa:31:93:38:1a:8a:ea:e4:fe:78:35:11:c9:ef: 02:a6:7e:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGfmoMoohK9QHNAUnaYcC6+fRz7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBEN0M2 MDk5QUUzMDAeFw0yNjAxMzExMTQ2NDlaFw0yNjAyMDMxODIxNDlaMDMxMTAvBgNV BAMTKDg2RERBQzlGRDI4MEUwRkQ1ODU3REYyQ0QzREMxODBBQURCM0E4QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOJcVlqRgwc4xNB/3PLKttpAnF 90YeDFXcZbxFVxM6VtMAt4pqEHrcntkBtG9535PKMlwP7wMH01lzRdQHaC4+geOJ hWqkV+rIu9pOTU714vNCp1zx+SbUCM42kDdbL0YU9PyYUqO+2voS5OvXF+2O9l4u Lb9OkJQdkVwLIk8ncN2nMkL6wMXJZpfgxe6/HspCIwXuB3TLmdzmIeJR2/X/TLXN XO05PN9wEyrSKU3wZIrGxKSWGbdgvr60sldfLisKX8U78UWMT/IHLc5oFu/mVbK0 RkESEynrxsw/KeeyRQQVrDb5qT8Nee8rmtXtNZ+AqbG8SVCDrBvrsYQN1OXjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUht2sn9KA4P1YV98s09wYCq2zqK4wHwYDVR0j BBgwFoAUjoerAzIhDYZBdfejcSMNfGCZrjAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTA0ZTRjNy03YTJkLTRkNjYtOGZiNC0yMDU1NjU3ODdmMjQvMC84RTg3QUIwMzMy MjEwRDg2NDE3NUY3QTM3MTIzMEQ3QzYwOTlBRTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBEN0M2MDk5 QUUzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjUwNGU0YzctN2EyZC00ZDY2LThm YjQtMjA1NTY1Nzg3ZjI0LzAvOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBE N0M2MDk5QUUzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKPKZHeZPTwtJnaOBmpVO4PTQwjmfleA77X9 HMTLYFzc8xUans2A2G0bMTEuuooPBFbNpyssfbqVrF7deBS5tHLFDnztrTuqM7j/ GhBW1nCHMkx2V8NCnHAOSnGbw69rRXz91bFQs22q3Su/cx5kzxoAIku/9OvCzZQi whmJpy3dgQ/QADvmTMBq5AgYz6kuKbbR9YtnW4ctLO2MWAR+BGMqrQ6Wu6ggSehg jjngrZjBn1LHQp9ExnyDXoSRAil6RzDVchWq0F1DpyQWmX3A07k2PwfbGeakclSC S78zRrvRp1xorBDObcdgKT3Z8MD6MZM4Gorq5P54NRHJ7wKmflg= -----END CERTIFICATE-----Generated at Mon Feb 2 10:05:28 2026 by rpki-client