This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft File: 8D4158039A86C34D5D36A83DDC40C959EDA21342.mft (raw, json) Hash identifier: 3LulDqKoJKjTHXbUP1zovbryY/hUV7yRJcbIUVjcGsk= Subject key identifier: 11:A8:AE:9E:42:C6:E2:0F:FD:F1:2D:DB:84:82:18:4F:C6:5C:12:57 Authority key identifier: 8D:41:58:03:9A:86:C3:4D:5D:36:A8:3D:DC:40:C9:59:ED:A2:13:42 Certificate issuer: /CN=8D4158039A86C34D5D36A83DDC40C959EDA21342 Certificate serial: 03007EFBDF36416723C4CF27332A9B1920D8AEC8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft Manifest number: FC Signing time: Wed 21 Jan 2026 12:01:11 +0000 Manifest this update: Wed 21 Jan 2026 11:56:10 +0000 Manifest next update: Sat 24 Jan 2026 12:26:10 +0000 Files and hashes: 1: 8D4158039A86C34D5D36A83DDC40C959EDA21342.crl (hash: DeMYa4N+VNuBKpDGvSAiLJcK25etPDZ42rnMKi8mSYg=) 2: 323030313a6466333a643363303a3a2f34382d3438203d3e20313532373930.roa (hash: XrGI552jWV7sNKcYT4/cR05JGNQdxhyBqphUE36lIJ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.crl rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 12:26:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:00:7e:fb:df:36:41:67:23:c4:cf:27:33:2a:9b:19:20:d8:ae:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D4158039A86C34D5D36A83DDC40C959EDA21342 Validity Not Before: Jan 21 11:56:10 2026 GMT Not After : Jan 24 12:26:10 2026 GMT Subject: CN=11A8AE9E42C6E20FFDF12DDB8482184FC65C1257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:57:3a:5a:dc:1f:61:39:22:9b:da:c3:93:a6: 32:6d:81:d1:ef:47:57:55:d1:fb:1f:93:e5:11:f5: 12:11:28:83:86:a0:e5:56:18:66:2e:33:b1:a6:7f: e8:c1:2d:e9:09:32:d8:1b:4d:db:42:88:2b:17:3d: f1:34:a2:8c:27:8f:1f:a7:57:01:46:41:57:aa:6e: 82:7f:c0:d3:17:06:5f:af:2c:ea:6d:c2:92:bd:08: ff:61:61:7d:09:4c:3a:4c:d3:3e:6e:38:7a:84:0d: 61:69:a1:ff:45:a1:db:9f:e9:e0:82:5e:23:4e:28: 73:19:7c:3c:0f:04:10:a9:ac:32:b7:a4:08:62:f2: 36:03:79:a9:e2:ee:90:37:00:e7:bc:46:c0:90:a5: 93:aa:ae:99:30:d3:de:c5:5a:0e:11:14:4c:08:28: bc:7c:fb:fd:ff:69:39:8e:fe:a3:62:f3:16:72:c4: 95:ea:35:0b:7b:28:b4:29:1d:cd:eb:18:16:fc:c6: 03:18:b2:23:2b:b4:ea:b2:93:1a:49:d2:f2:eb:75: 5d:5e:2e:7e:18:57:aa:26:88:35:74:1e:b0:61:26: 32:f8:ec:5d:b2:c2:bd:cb:22:17:f5:0b:f5:45:2a: bc:97:d0:7f:ae:2f:a9:69:ae:7e:ee:87:60:11:5a: 6c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A8:AE:9E:42:C6:E2:0F:FD:F1:2D:DB:84:82:18:4F:C6:5C:12:57 X509v3 Authority Key Identifier: keyid:8D:41:58:03:9A:86:C3:4D:5D:36:A8:3D:DC:40:C9:59:ED:A2:13:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:2b:65:7c:6a:44:b9:4f:19:f2:20:e1:78:13:26:14:ce:11: 8e:98:00:3c:40:85:db:d3:0b:52:35:81:6c:c9:96:f6:c0:da: e3:6f:aa:fc:80:74:93:26:19:cf:4b:2a:98:4e:eb:d8:d7:2c: 75:c7:02:ab:40:8a:e5:fa:72:52:a2:bf:ad:85:e7:16:6f:6b: c1:5b:bc:ce:8f:1e:fe:71:9e:c3:f0:0c:6f:5f:52:1a:04:81: a7:79:8f:1c:fb:08:a7:e6:92:24:88:52:6f:7b:c2:5a:b9:cc: 16:cc:9a:cc:d1:9c:d2:e9:4a:02:d7:52:c8:9d:6b:a9:f1:67: e8:38:d8:2b:41:c3:d4:81:3a:1c:06:ea:70:37:6c:98:f8:79: ca:76:df:32:0e:1e:83:23:7e:81:25:39:4a:3f:6c:43:d2:d6: 9f:02:28:25:b9:aa:49:71:76:18:91:98:8b:ba:c7:b1:02:29: 5b:32:09:5e:3d:38:3d:5a:5e:1f:b2:27:62:76:64:51:ba:51: 6f:a0:3c:8f:74:a5:b8:5c:ed:bd:2c:15:72:70:89:81:7c:1e: f1:a0:6b:89:55:73:96:3f:f8:92:17:68:54:90:c7:9e:10:c1: 51:c2:0a:30:f8:6b:1c:67:f6:8f:9d:00:fc:83:7b:19:4d:44: ac:65:94:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAwB++982QWcjxM8nMyqbGSDYrsgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5NTlF REEyMTM0MjAeFw0yNjAxMjExMTU2MTBaFw0yNjAxMjQxMjI2MTBaMDMxMTAvBgNV BAMTKDExQThBRTlFNDJDNkUyMEZGREYxMkREQjg0ODIxODRGQzY1QzEyNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFVzpa3B9hOSKb2sOTpjJtgdHv R1dV0fsfk+UR9RIRKIOGoOVWGGYuM7Gmf+jBLekJMtgbTdtCiCsXPfE0oownjx+n VwFGQVeqboJ/wNMXBl+vLOptwpK9CP9hYX0JTDpM0z5uOHqEDWFpof9Foduf6eCC XiNOKHMZfDwPBBCprDK3pAhi8jYDeani7pA3AOe8RsCQpZOqrpkw097FWg4RFEwI KLx8+/3/aTmO/qNi8xZyxJXqNQt7KLQpHc3rGBb8xgMYsiMrtOqykxpJ0vLrdV1e Ln4YV6omiDV0HrBhJjL47F2ywr3LIhf1C/VFKryX0H+uL6lprn7uh2ARWmzzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEaiunkLG4g/98S3bhIIYT8ZcElcwHwYDVR0j BBgwFoAUjUFYA5qGw01dNqg93EDJWe2iE0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmI1ZmE0YS1iZWE2LTQ2NGYtYjQwOS0xMWQ5YTM3NjFhNmMvMS84RDQxNTgwMzlB ODZDMzRENUQzNkE4M0REQzQwQzk1OUVEQTIxMzQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5NTlFREEy MTM0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJiNWZhNGEtYmVhNi00NjRmLWI0 MDktMTFkOWEzNzYxYTZjLzEvOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5 NTlFREEyMTM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB8rZXxqRLlPGfIg4XgTJhTOEY6YADxAhdvT C1I1gWzJlvbA2uNvqvyAdJMmGc9LKphO69jXLHXHAqtAiuX6clKiv62F5xZva8Fb vM6PHv5xnsPwDG9fUhoEgad5jxz7CKfmkiSIUm97wlq5zBbMmszRnNLpSgLXUsid a6nxZ+g42CtBw9SBOhwG6nA3bJj4ecp23zIOHoMjfoElOUo/bEPS1p8CKCW5qklx dhiRmIu6x7ECKVsyCV49OD1aXh+yJ2J2ZFG6UW+gPI90pbhc7b0sFXJwiYF8HvGg a4lVc5Y/+JIXaFSQx54QwVHCCjD4axxn9o+dAPyDexlNRKxllCg= -----END CERTIFICATE-----Generated at Thu Jan 22 03:21:52 2026 by rpki-client