This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft File: 8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft (raw, json) Hash identifier: regQE7jSF+EOzCVa8J2pW9cf52TvXDGcyd+sHrl+/fk= Subject key identifier: 57:FC:92:48:FE:5D:DE:4B:E3:9F:48:9C:A0:58:F0:10:F7:F0:D5:60 Authority key identifier: 8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0 Certificate issuer: /CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0 Certificate serial: 4C241DF381CA1C9D671C6B91AFC02F7EE625F176 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft Manifest number: 0371 Signing time: Sun 25 Jan 2026 14:40:03 +0000 Manifest this update: Sun 25 Jan 2026 14:35:03 +0000 Manifest next update: Wed 28 Jan 2026 20:54:03 +0000 Files and hashes: 1: 8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl (hash: X4Lnldky+ngP8+18Nwf68NjGqgUwgmse13KFeAbP9dg=) 2: 3130332e3135392e3230322e302f32332d3234203d3e20313331313131.roa (hash: Ho5Y5TOHX49gl1fZYVO+j2M3OjYa1AKAk+KnhAmd/6M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:24:1d:f3:81:ca:1c:9d:67:1c:6b:91:af:c0:2f:7e:e6:25:f1:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0 Validity Not Before: Jan 25 14:35:03 2026 GMT Not After : Jan 28 20:54:03 2026 GMT Subject: CN=57FC9248FE5DDE4BE39F489CA058F010F7F0D560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b5:d2:3b:18:23:fc:bb:9f:6b:71:0a:e8:79: 1f:a0:d7:d4:b0:60:5a:b0:8a:e8:43:1a:93:9f:8d: d7:25:0c:bc:68:6f:94:0b:d8:4c:7e:d4:54:87:52: e9:5d:f4:89:8f:96:2a:91:34:5d:ba:7e:5c:2b:18: 27:1c:fe:5a:3d:53:eb:79:4d:bb:9f:31:66:b1:32: dc:19:65:83:8d:4f:00:06:01:5c:54:2b:d8:6a:2e: 20:07:1c:72:78:7f:c7:95:90:83:85:cc:3b:98:e1: f3:e9:f9:a7:59:ec:05:07:bc:91:c0:07:e6:83:15: a8:a0:de:88:6c:fd:03:7d:4c:c8:fc:c7:65:6d:29: 60:56:52:42:e8:22:6f:b1:cb:82:f3:31:2d:fd:40: d4:55:94:8a:4c:19:d6:61:af:2c:29:99:8b:69:4b: 7f:2f:1a:6a:72:19:d7:ac:db:36:2d:16:09:d8:cf: 8b:36:ef:fc:59:45:d6:25:62:83:e9:b0:41:d5:9c: b1:38:86:b4:e9:fe:fc:21:1f:39:14:fe:69:b8:31: 37:b0:f0:a9:22:d9:ba:72:f2:01:08:94:4b:38:14: fe:90:e6:57:d1:24:b8:7d:3c:3a:54:b8:22:65:9e: c2:be:8d:7e:3e:73:da:cb:a9:83:c2:ee:b1:bb:5f: 0d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:FC:92:48:FE:5D:DE:4B:E3:9F:48:9C:A0:58:F0:10:F7:F0:D5:60 X509v3 Authority Key Identifier: keyid:8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:32:d4:27:5b:d7:6c:ef:2c:d9:45:69:53:1f:d4:30:0a:45: a1:e4:fa:e5:c8:bc:82:75:ff:eb:46:fe:f5:1e:f8:fb:3e:12: 44:3d:5e:e1:0e:73:4e:0b:aa:7b:27:b7:bf:5e:16:01:ce:7f: de:85:e4:c5:a1:87:c0:2f:e1:43:2c:0e:c9:fb:2e:0d:a5:f0: c3:83:be:93:5d:1f:7d:8a:24:d0:5e:f0:ab:b1:34:a3:db:2e: ee:c3:9f:c2:ff:ab:67:c8:05:c6:8f:ee:1c:50:61:8f:44:14: 81:eb:61:62:3d:6a:57:0e:b0:44:95:3c:24:86:d6:bc:93:70: 7c:59:6f:40:a9:62:f6:92:26:b1:23:28:c0:e7:e5:9e:a2:10: b8:2c:fd:d4:86:79:2c:5f:46:a5:2c:03:77:d3:49:85:08:96: 8e:8e:e0:53:43:91:42:8a:be:cd:b2:83:b6:dc:99:ec:98:46: 01:31:12:39:d0:43:bc:c3:0e:1d:cb:5c:ff:a5:66:e3:97:32: 22:c4:29:b2:42:59:7e:38:9d:0a:e0:89:4c:80:72:7b:02:86: c4:89:bf:d4:f3:43:94:aa:48:22:f8:72:4a:62:0d:c7:75:5d: 36:70:59:74:4f:c8:7d:07:f0:c2:f7:bd:6b:e8:8c:3f:f9:53: 1e:8a:fd:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTCQd84HKHJ1nHGuRr8AvfuYl8XYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBENzBC RkVFNTVBMDAeFw0yNjAxMjUxNDM1MDNaFw0yNjAxMjgyMDU0MDNaMDMxMTAvBgNV BAMTKDU3RkM5MjQ4RkU1RERFNEJFMzlGNDg5Q0EwNThGMDEwRjdGMEQ1NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWtdI7GCP8u59rcQroeR+g19Sw YFqwiuhDGpOfjdclDLxob5QL2Ex+1FSHUuld9ImPliqRNF26flwrGCcc/lo9U+t5 TbufMWaxMtwZZYONTwAGAVxUK9hqLiAHHHJ4f8eVkIOFzDuY4fPp+adZ7AUHvJHA B+aDFaig3ohs/QN9TMj8x2VtKWBWUkLoIm+xy4LzMS39QNRVlIpMGdZhrywpmYtp S38vGmpyGdes2zYtFgnYz4s27/xZRdYlYoPpsEHVnLE4hrTp/vwhHzkU/mm4MTew 8Kki2bpy8gEIlEs4FP6Q5lfRJLh9PDpUuCJlnsK+jX4+c9rLqYPC7rG7Xw39AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV/ySSP5d3kvjn0icoFjwEPfw1WAwHwYDVR0j BBgwFoAUjFfFhgv5OLtX4LftD4kNcL/uVaAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjkxM2ZhMS0zM2FlLTRlMzMtYmJlMi04MWJkOWYwM2M4NGIvMC84QzU3QzU4NjBC RjkzOEJCNTdFMEI3RUQwRjg5MEQ3MEJGRUU1NUEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBENzBCRkVF NTVBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI5MTNmYTEtMzNhZS00ZTMzLWJi ZTItODFiZDlmMDNjODRiLzAvOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBE NzBCRkVFNTVBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFEy1Cdb12zvLNlFaVMf1DAKRaHk+uXIvIJ1 /+tG/vUe+Ps+EkQ9XuEOc04Lqnsnt79eFgHOf96F5MWhh8Av4UMsDsn7Lg2l8MOD vpNdH32KJNBe8KuxNKPbLu7Dn8L/q2fIBcaP7hxQYY9EFIHrYWI9alcOsESVPCSG 1ryTcHxZb0CpYvaSJrEjKMDn5Z6iELgs/dSGeSxfRqUsA3fTSYUIlo6O4FNDkUKK vs2yg7bcmeyYRgExEjnQQ7zDDh3LXP+lZuOXMiLEKbJCWX44nQrgiUyAcnsChsSJ v9TzQ5SqSCL4ckpiDcd1XTZwWXRPyH0H8ML3vWvojD/5Ux6K/Yk= -----END CERTIFICATE-----Generated at Mon Jan 26 04:02:13 2026 by rpki-client