This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft File: 8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft (raw, json) Hash identifier: F62VCEMU719H9JCFUA6DpD70pzB9CVUVrOC9SE5uueo= Subject key identifier: C0:F0:2A:A9:23:7E:A1:53:F8:AB:EC:71:E9:83:8B:CF:ED:20:F9:3B Authority key identifier: 8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99 Certificate issuer: /CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799 Certificate serial: 29683E9D033ADEE63DFA4AD9277880AC23773639 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft Manifest number: 0544 Signing time: Sat 24 Jan 2026 16:21:11 +0000 Manifest this update: Sat 24 Jan 2026 16:16:11 +0000 Manifest next update: Tue 27 Jan 2026 18:58:11 +0000 Files and hashes: 1: 3130332e3133392e34362e302f32342d3234203d3e203137393935.roa (hash: hthNpAwJxjCDLni6mv2Gc1l+BPz0lcv9dxQLklW+A64=) 2: 3130332e3133392e34372e302f32342d3234203d3e203137393935.roa (hash: hRDdGequ+GhEEqBrX8O9Zq6WRslymD5ehiejKAFbvr0=) 3: 8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl (hash: 3lOjy1jPckEVqXz16xBkxGCjK9AiOLxYLYI9egsGDkE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 15:32:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:68:3e:9d:03:3a:de:e6:3d:fa:4a:d9:27:78:80:ac:23:77:36:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799 Validity Not Before: Jan 24 16:16:11 2026 GMT Not After : Jan 27 18:58:11 2026 GMT Subject: CN=C0F02AA9237EA153F8ABEC71E9838BCFED20F93B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:99:60:26:69:99:b7:c3:73:61:db:3a:bf:3d: 75:89:f6:a8:6a:77:d0:22:8c:22:bf:6c:37:b3:70: f7:3a:be:21:11:7f:4d:7b:59:81:78:53:5f:61:af: 41:7c:58:df:81:f8:69:26:ef:0f:0a:67:27:48:2c: c0:31:59:37:6c:fc:60:cc:28:dc:eb:be:3f:5a:3a: 91:d0:e6:a0:31:3d:9f:fc:01:ce:e0:1e:2b:32:b8: c5:9a:14:8c:88:8e:db:f7:64:6c:93:26:73:85:f6: 00:f6:16:ed:ed:95:f3:3e:8d:c0:e1:b2:34:e9:9d: 2a:70:5f:64:4d:6d:6a:2e:6b:11:d6:3e:87:b5:5d: 8c:a2:cf:cb:fb:0b:58:7c:7e:d8:8b:ea:e6:46:41: 56:45:d5:24:7f:23:0c:69:41:58:0d:50:7a:6b:57: 20:a7:ec:d0:5d:6d:83:c2:e8:40:ec:e1:1d:c9:06: e5:51:9a:4a:3a:04:25:9e:be:de:21:01:c5:fd:9d: 30:7b:3a:ef:ef:e7:c0:56:74:57:a9:16:90:9e:ad: c3:40:ff:cc:45:63:40:db:bd:f8:b8:89:01:7a:bf: 6e:55:95:55:21:a6:47:3e:27:81:46:ed:72:60:fe: 89:9e:ff:e5:24:32:89:6b:f5:a5:e4:2b:b7:7a:d2: ce:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F0:2A:A9:23:7E:A1:53:F8:AB:EC:71:E9:83:8B:CF:ED:20:F9:3B X509v3 Authority Key Identifier: keyid:8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:ec:f2:d7:98:4a:ac:bb:6d:f0:66:07:54:14:2a:4b:3b:71: b1:7e:91:53:f1:7f:92:50:0a:7c:e9:f3:da:67:09:1e:f4:0f: 69:db:d8:d2:51:fe:32:9e:68:1d:7c:ae:a5:a5:93:85:2a:99: 29:30:03:b0:94:df:8f:24:be:39:23:87:34:83:46:f7:b6:31: 02:68:05:4d:72:06:2e:16:1d:42:0f:23:bd:4d:b7:5c:87:2b: 45:8b:e8:e3:64:85:2f:e1:36:80:44:ac:e1:8e:cc:48:ce:1c: 9b:e0:ed:7d:ae:04:da:49:76:64:4b:a4:39:75:72:61:62:16: b1:75:fd:89:4b:29:d6:d4:e5:cb:c1:a0:d4:77:ae:d6:c7:08: 64:82:51:a8:dd:dc:6b:b3:b4:f6:c7:10:e6:fc:7e:52:63:88: 3d:4a:40:0b:ba:de:6b:37:b2:a1:ba:f2:0b:4b:fc:80:e6:90: eb:e8:61:4b:97:2a:2f:57:f1:c2:45:ab:e7:d5:0b:81:38:07: 2a:00:56:70:ac:2f:5e:6f:16:54:07:c8:b2:35:c3:a2:83:d4: 39:b5:aa:8b:1c:11:00:8a:dd:da:ba:6a:d8:32:5f:9d:34:ab: 59:c9:cb:da:0f:93:b8:9c:c6:a8:9a:e5:58:4a:a8:68:1f:40: 78:93:49:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKWg+nQM63uY9+krZJ3iArCN3NjkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3MDFB MEE3Mjc5OTAeFw0yNjAxMjQxNjE2MTFaFw0yNjAxMjcxODU4MTFaMDMxMTAvBgNV BAMTKEMwRjAyQUE5MjM3RUExNTNGOEFCRUM3MUU5ODM4QkNGRUQyMEY5M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0mWAmaZm3w3Nh2zq/PXWJ9qhq d9AijCK/bDezcPc6viERf017WYF4U19hr0F8WN+B+Gkm7w8KZydILMAxWTds/GDM KNzrvj9aOpHQ5qAxPZ/8Ac7gHisyuMWaFIyIjtv3ZGyTJnOF9gD2Fu3tlfM+jcDh sjTpnSpwX2RNbWouaxHWPoe1XYyiz8v7C1h8ftiL6uZGQVZF1SR/IwxpQVgNUHpr VyCn7NBdbYPC6EDs4R3JBuVRmko6BCWevt4hAcX9nTB7Ou/v58BWdFepFpCercNA /8xFY0Dbvfi4iQF6v25VlVUhpkc+J4FG7XJg/ome/+UkMolr9aXkK7d60s6tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwPAqqSN+oVP4q+xx6YOLz+0g+TswHwYDVR0j BBgwFoAUigXr9YvsltlG7oXw8PhXAaCnJ5kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MjMwNzM5MC02ZWYzLTQ0NzYtYTZhYS1kMGM1NzgzZTFmMzcvMC84QTA1RUJGNThC RUM5NkQ5NDZFRTg1RjBGMEY4NTcwMUEwQTcyNzk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3MDFBMEE3 Mjc5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTIzMDczOTAtNmVmMy00NDc2LWE2 YWEtZDBjNTc4M2UxZjM3LzAvOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3 MDFBMEE3Mjc5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMXs8teYSqy7bfBmB1QUKks7cbF+kVPxf5JQ Cnzp89pnCR70D2nb2NJR/jKeaB18rqWlk4UqmSkwA7CU348kvjkjhzSDRve2MQJo BU1yBi4WHUIPI71Nt1yHK0WL6ONkhS/hNoBErOGOzEjOHJvg7X2uBNpJdmRLpDl1 cmFiFrF1/YlLKdbU5cvBoNR3rtbHCGSCUajd3GuztPbHEOb8flJjiD1KQAu63ms3 sqG68gtL/IDmkOvoYUuXKi9X8cJFq+fVC4E4ByoAVnCsL15vFlQHyLI1w6KD1Dm1 qoscEQCK3dq6atgyX500q1nJy9oPk7icxqia5VhKqGgfQHiTSSE= -----END CERTIFICATE-----Generated at Sun Jan 25 11:32:37 2026 by rpki-client