This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft File: 86C8E3A4B496EB93A6EEF684150362C295A428DD.mft (raw, json) Hash identifier: 6lETddYALPKglLmI+oIWts1Je1OqtnT+g6l+Dp5Y+Yo= Subject key identifier: 1D:97:60:E4:44:D4:A0:AA:A7:0F:F7:47:0F:50:B5:6A:AC:2C:E9:8A Authority key identifier: 86:C8:E3:A4:B4:96:EB:93:A6:EE:F6:84:15:03:62:C2:95:A4:28:DD Certificate issuer: /CN=86C8E3A4B496EB93A6EEF684150362C295A428DD Certificate serial: 6BC7262FD50E9988B83460BB1C66DAA0E3C361A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft Manifest number: 0241 Signing time: Sun 25 Jan 2026 14:51:32 +0000 Manifest this update: Sun 25 Jan 2026 14:46:32 +0000 Manifest next update: Wed 28 Jan 2026 15:10:32 +0000 Files and hashes: 1: 3130332e3139302e3133352e302f32342d3234203d3e203538343935.roa (hash: ZAxHbiLP6Hqcx4Z+YjqoTqhIgfPAeHtLOg2HhiZ1uS0=) 2: 86C8E3A4B496EB93A6EEF684150362C295A428DD.crl (hash: 8dFhN+KP2Ug+8C7gtEZFym9xoigMQNviMJYJiSJ4Sj4=) 3: 3130332e3139302e3133342e302f32332d3234203d3e203538343935.roa (hash: NAu4MIqb2SIHlGa2lR/f4p07SuQ7a/mw3Vk71QHChF8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.crl rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:c7:26:2f:d5:0e:99:88:b8:34:60:bb:1c:66:da:a0:e3:c3:61:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86C8E3A4B496EB93A6EEF684150362C295A428DD Validity Not Before: Jan 25 14:46:32 2026 GMT Not After : Jan 28 15:10:32 2026 GMT Subject: CN=1D9760E444D4A0AAA70FF7470F50B56AAC2CE98A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:4d:c8:29:cb:7b:08:d2:ba:11:7b:27:b9:57: 4a:20:78:fe:01:9a:e5:6b:00:1a:f6:26:8b:9c:42: d9:3b:b4:cc:49:b4:dd:fa:c3:97:90:12:69:c4:af: 34:7c:c4:fb:9b:87:42:1c:80:20:92:ac:ab:84:a6: b6:72:60:e5:e9:2d:db:be:4f:81:04:6f:dc:3e:09: 92:a1:10:94:ce:e2:6b:b8:18:06:69:79:f5:cf:5f: 0b:b1:1e:50:f8:6d:f5:ab:05:28:b8:4e:23:44:30: 1b:aa:80:45:e7:07:59:24:b3:58:30:6a:27:03:05: 92:b2:be:4b:6e:a2:b5:36:c2:0a:5b:4a:f7:72:42: 35:d7:82:50:0a:25:4b:cd:1f:80:8c:ac:0d:e1:6d: 32:4c:80:f8:e9:52:48:9b:3d:a7:b4:9f:6c:b8:bd: c7:ad:4e:59:fe:45:49:9c:d3:7a:b1:fb:fc:2c:62: 25:e9:74:7a:a5:04:b1:cc:10:dd:3c:f0:01:77:b1: aa:06:b9:6f:ec:86:3b:64:38:58:22:88:af:bc:64: 95:2e:24:7c:22:d9:09:71:bc:3f:0e:69:b9:04:e3: c9:1e:fb:2e:51:ba:e6:c5:94:bf:94:49:6b:1d:a0: 3d:33:e3:62:7c:7f:c1:74:8a:70:cd:c1:bb:57:66: 22:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:97:60:E4:44:D4:A0:AA:A7:0F:F7:47:0F:50:B5:6A:AC:2C:E9:8A X509v3 Authority Key Identifier: keyid:86:C8:E3:A4:B4:96:EB:93:A6:EE:F6:84:15:03:62:C2:95:A4:28:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:d6:49:9a:9f:50:f2:de:f9:cf:26:a8:80:33:8d:dc:9e:d1: 9e:f8:c5:a9:f6:39:36:12:76:fb:7d:77:4b:e7:92:a1:94:e5: 5a:72:61:23:0d:8b:92:9c:a5:7e:ff:c6:de:83:53:ae:95:98: dd:06:14:1f:ae:d7:d1:21:8d:9e:64:0a:c0:d3:ec:19:f0:d8: cf:d4:c0:2e:59:ae:d0:1e:33:ec:0e:5a:85:54:fd:74:53:bb: 31:b6:3f:88:06:df:4d:17:4d:b6:d1:5e:10:1c:8a:ae:0d:a9: 98:3e:de:07:59:a4:98:3b:03:5a:b7:64:d8:17:09:6f:7e:69: ad:c3:35:43:c4:59:60:1e:af:80:61:f6:48:aa:19:a7:26:f3: 55:c7:12:1c:f1:c0:08:9c:e0:77:de:ad:b6:22:f0:96:c5:6a: cf:b6:ad:2d:59:45:74:c2:d3:b0:7b:31:81:55:30:74:d6:1a: 08:da:ce:b4:e8:a0:00:f2:95:a3:fa:97:b6:a2:e4:36:b1:ea: 23:35:36:cb:ca:cd:f8:5e:5f:f8:a9:47:8c:54:6c:47:c9:19: ce:cf:4b:9e:07:fb:75:0d:4a:9f:15:c9:cc:7e:b3:77:b8:13: 97:44:70:88:8f:4e:81:b7:c5:37:e4:7c:ff:d2:62:5d:b1:52: c8:43:93:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa8cmL9UOmYi4NGC7HGbaoOPDYagwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYyQzI5 NUE0MjhERDAeFw0yNjAxMjUxNDQ2MzJaFw0yNjAxMjgxNTEwMzJaMDMxMTAvBgNV BAMTKDFEOTc2MEU0NDRENEEwQUFBNzBGRjc0NzBGNTBCNTZBQUMyQ0U5OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkTcgpy3sI0roReye5V0ogeP4B muVrABr2JoucQtk7tMxJtN36w5eQEmnErzR8xPubh0IcgCCSrKuEprZyYOXpLdu+ T4EEb9w+CZKhEJTO4mu4GAZpefXPXwuxHlD4bfWrBSi4TiNEMBuqgEXnB1kks1gw aicDBZKyvktuorU2wgpbSvdyQjXXglAKJUvNH4CMrA3hbTJMgPjpUkibPae0n2y4 vcetTln+RUmc03qx+/wsYiXpdHqlBLHMEN088AF3saoGuW/shjtkOFgiiK+8ZJUu JHwi2QlxvD8OabkE48ke+y5RuubFlL+USWsdoD0z42J8f8F0inDNwbtXZiItAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHZdg5ETUoKqnD/dHD1C1aqws6YowHwYDVR0j BBgwFoAUhsjjpLSW65Om7vaEFQNiwpWkKN0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTYzYjdkNy1lYTgzLTRiZTktYjJmYy1iMzBlYjBiNDRkMGEvMC84NkM4RTNBNEI0 OTZFQjkzQTZFRUY2ODQxNTAzNjJDMjk1QTQyOERELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYyQzI5NUE0 MjhERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE2M2I3ZDctZWE4My00YmU5LWIy ZmMtYjMwZWIwYjQ0ZDBhLzAvODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYy QzI5NUE0MjhERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAfWSZqfUPLe+c8mqIAzjdye0Z74xan2OTYS dvt9d0vnkqGU5VpyYSMNi5KcpX7/xt6DU66VmN0GFB+u19EhjZ5kCsDT7Bnw2M/U wC5ZrtAeM+wOWoVU/XRTuzG2P4gG300XTbbRXhAciq4NqZg+3gdZpJg7A1q3ZNgX CW9+aa3DNUPEWWAer4Bh9kiqGacm81XHEhzxwAic4HferbYi8JbFas+2rS1ZRXTC 07B7MYFVMHTWGgjazrTooADylaP6l7ai5Dax6iM1NsvKzfheX/ipR4xUbEfJGc7P S54H+3UNSp8Vycx+s3e4E5dEcIiPToG3xTfkfP/SYl2xUshDk4o= -----END CERTIFICATE-----Generated at Sun Jan 25 22:00:30 2026 by rpki-client