This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft File: 8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft (raw, json) Hash identifier: YBoPAWku5gZ5s/DfCXpj+C7T+1aeZZ1IclyOA+uAxts= Subject key identifier: CE:C5:D9:4F:14:E1:69:D8:F8:EF:F6:F0:DF:44:BC:FC:4D:88:32:BB Authority key identifier: 8A:4F:F8:36:58:8B:BD:C5:E5:CC:52:6B:BB:EB:66:D5:14:0D:1B:86 Certificate issuer: /CN=8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86 Certificate serial: 25DD100A524B0B4E7F2E3DCCED4CBD9CC5AB419A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft Manifest number: 0373 Signing time: Sat 31 Jan 2026 12:11:24 +0000 Manifest this update: Sat 31 Jan 2026 12:06:24 +0000 Manifest next update: Tue 03 Feb 2026 20:27:24 +0000 Files and hashes: 1: 3130332e3137312e33302e302f32332d3234203d3e20313331313131.roa (hash: 0IdcwPtxZArM5JrmLtgkLYtthS0u5GSXZS6q7IiPcxg=) 2: 8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl (hash: rlCDuKzHOfXFGtgzzHah/BMYXnPgnN1xqs9aI0ZNbY4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 20:27:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:dd:10:0a:52:4b:0b:4e:7f:2e:3d:cc:ed:4c:bd:9c:c5:ab:41:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86 Validity Not Before: Jan 31 12:06:24 2026 GMT Not After : Feb 3 20:27:24 2026 GMT Subject: CN=CEC5D94F14E169D8F8EFF6F0DF44BCFC4D8832BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:91:ad:f5:dd:4b:8a:6c:0c:95:e9:de:94:90: 66:c0:c2:23:60:af:66:5c:d6:8e:c7:15:63:e0:6a: b7:95:24:90:b1:fe:dc:88:ce:88:34:b7:8c:8f:94: 2f:a1:7f:64:5b:d1:01:48:1e:96:f6:2e:77:e3:77: 4c:44:ee:30:0b:c8:bb:ea:93:46:ad:85:67:7f:00: 74:8d:f6:9a:c3:e5:9a:99:91:77:d8:d0:e3:60:2a: ee:e9:98:81:56:21:d4:63:6b:a6:a7:00:57:50:82: 80:10:6f:54:2a:dc:db:f0:01:5c:d0:c1:0c:1e:30: c6:10:94:45:b6:58:4b:e3:22:07:cd:06:85:26:de: 1e:9e:d3:da:f6:9d:0a:48:c5:b3:55:75:4f:e1:7c: bd:8f:02:30:e6:6b:e0:c4:10:c7:da:69:1e:6c:e8: ac:cb:6f:0a:76:10:b0:59:ca:e5:1f:95:76:54:96: 09:cf:90:57:45:3c:63:e5:63:02:f9:30:a7:ac:13: d4:0b:27:20:cd:0a:3d:3b:84:b2:a1:8d:b2:4f:0c: 6c:22:ca:31:86:e8:ec:69:09:66:4f:d5:4c:f8:84: 27:59:56:df:e3:e2:7e:ae:ea:37:50:87:da:18:e6: 91:1d:e3:ed:52:cf:3c:ec:5f:d5:9d:ec:0c:be:43: 74:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:C5:D9:4F:14:E1:69:D8:F8:EF:F6:F0:DF:44:BC:FC:4D:88:32:BB X509v3 Authority Key Identifier: keyid:8A:4F:F8:36:58:8B:BD:C5:E5:CC:52:6B:BB:EB:66:D5:14:0D:1B:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:8d:dc:f2:98:35:63:97:b2:9d:60:b4:c2:3f:70:c6:01:11: d9:ce:4a:67:97:6f:1f:11:bf:14:fc:89:8d:11:a8:40:d7:e4: 51:a5:19:a7:10:bd:b0:ef:17:d0:27:dd:4e:14:57:b3:86:7d: 56:c7:03:73:cc:7a:be:cc:6f:62:49:6e:45:d9:e5:67:00:0c: 5f:46:6c:77:51:40:2a:22:4f:a8:94:9e:12:79:05:74:3d:17: 24:6f:71:9c:9f:ec:59:69:e7:ac:13:25:5d:cc:34:8b:47:94: 15:b5:9b:1b:64:e3:f4:18:14:6f:52:a8:1a:a5:5d:1e:e7:0f: d5:ed:7c:97:ac:26:6a:18:da:84:27:0e:cd:df:d0:d1:49:6b: d5:a9:af:2e:c9:4f:a4:7d:8e:c3:97:79:52:0b:de:40:c0:d7: 3e:6c:d2:6f:3f:85:26:3e:18:4c:dd:67:0c:3f:9a:36:be:e8: d7:23:42:e5:83:2c:0f:44:06:7a:c9:1c:ab:bd:7d:d2:31:b9: 46:57:bc:ed:6c:f4:62:f8:03:32:0d:0a:4e:02:49:5f:e9:ca: 48:59:15:34:d0:6f:7a:98:1f:88:7a:be:18:e9:b3:cf:f8:d1: 10:14:52:93:51:95:24:07:6d:f9:d5:8e:a4:92:43:7e:76:47: df:43:a6:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJd0QClJLC05/Lj3M7Uy9nMWrQZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE0RkY4MzY1ODhCQkRDNUU1Q0M1MjZCQkJFQjY2RDUx NDBEMUI4NjAeFw0yNjAxMzExMjA2MjRaFw0yNjAyMDMyMDI3MjRaMDMxMTAvBgNV BAMTKENFQzVEOTRGMTRFMTY5RDhGOEVGRjZGMERGNDRCQ0ZDNEQ4ODMyQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ka313UuKbAyV6d6UkGbAwiNg r2Zc1o7HFWPgareVJJCx/tyIzog0t4yPlC+hf2Rb0QFIHpb2Lnfjd0xE7jALyLvq k0athWd/AHSN9prD5ZqZkXfY0ONgKu7pmIFWIdRja6anAFdQgoAQb1Qq3NvwAVzQ wQweMMYQlEW2WEvjIgfNBoUm3h6e09r2nQpIxbNVdU/hfL2PAjDma+DEEMfaaR5s 6KzLbwp2ELBZyuUflXZUlgnPkFdFPGPlYwL5MKesE9QLJyDNCj07hLKhjbJPDGwi yjGG6OxpCWZP1Uz4hCdZVt/j4n6u6jdQh9oY5pEd4+1SzzzsX9Wd7Ay+Q3RvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzsXZTxThadj47/bw30S8/E2IMrswHwYDVR0j BBgwFoAUik/4NliLvcXlzFJru+tm1RQNG4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWU3YTI4YS02MmYwLTRkMTQtODcwMi00MDNhNTE5MGVhZTEvMC84QTRGRjgzNjU4 OEJCREM1RTVDQzUyNkJCQkVCNjZENTE0MEQxQjg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE0RkY4MzY1ODhCQkRDNUU1Q0M1MjZCQkJFQjY2RDUxNDBE MUI4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjllN2EyOGEtNjJmMC00ZDE0LTg3 MDItNDAzYTUxOTBlYWUxLzAvOEE0RkY4MzY1ODhCQkRDNUU1Q0M1MjZCQkJFQjY2 RDUxNDBEMUI4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA6N3PKYNWOXsp1gtMI/cMYBEdnOSmeXbx8R vxT8iY0RqEDX5FGlGacQvbDvF9An3U4UV7OGfVbHA3PMer7Mb2JJbkXZ5WcADF9G bHdRQCoiT6iUnhJ5BXQ9FyRvcZyf7Flp56wTJV3MNItHlBW1mxtk4/QYFG9SqBql XR7nD9XtfJesJmoY2oQnDs3f0NFJa9Wpry7JT6R9jsOXeVIL3kDA1z5s0m8/hSY+ GEzdZww/mja+6NcjQuWDLA9EBnrJHKu9fdIxuUZXvO1s9GL4AzINCk4CSV/pykhZ FTTQb3qYH4h6vhjps8/40RAUUpNRlSQHbfnVjqSSQ352R99DpsI= -----END CERTIFICATE-----Generated at Mon Feb 2 10:05:12 2026 by rpki-client