This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft File: 8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft (raw, json) Hash identifier: cyhkXRdcnQyOrxPLNEJ2ZLXoLMKN5hiXdiAJEvPbK2s= Subject key identifier: 72:0D:D5:E3:F2:4A:24:0E:84:18:C9:E0:F1:31:AE:14:D7:94:E7:31 Authority key identifier: 8F:91:64:71:4A:1B:3B:90:6C:F8:A8:B3:71:F3:42:EB:A3:54:0C:D9 Certificate issuer: /CN=8F9164714A1B3B906CF8A8B371F342EBA3540CD9 Certificate serial: 5A06425A724CBFD6D844B445AA99906B928463D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft Manifest number: 023E Signing time: Sat 24 Jan 2026 18:40:39 +0000 Manifest this update: Sat 24 Jan 2026 18:35:39 +0000 Manifest next update: Tue 27 Jan 2026 20:01:39 +0000 Files and hashes: 1: 3130332e3138382e3131392e302f32342d3234203d3e20313439373435.roa (hash: VHhhP8m98Q6XFX6o9Io0DEj5+ACOMVpb0NESi8BC7x8=) 2: 8F9164714A1B3B906CF8A8B371F342EBA3540CD9.crl (hash: vpfte/gT7PYWov6DdagctONDmFqPdwkTouKLRYqU+4k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.crl rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 20:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:06:42:5a:72:4c:bf:d6:d8:44:b4:45:aa:99:90:6b:92:84:63:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F9164714A1B3B906CF8A8B371F342EBA3540CD9 Validity Not Before: Jan 24 18:35:39 2026 GMT Not After : Jan 27 20:01:39 2026 GMT Subject: CN=720DD5E3F24A240E8418C9E0F131AE14D794E731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:4c:d2:72:ed:87:8f:a4:b1:71:00:29:62:fe: 5b:e9:e7:5b:1a:f7:cf:17:86:9d:d9:f1:f0:bd:99: c8:f3:5d:be:d5:5a:52:d0:8d:bf:01:53:cb:38:44: 2c:24:51:17:1a:e7:fb:6a:8f:5e:13:6f:97:20:5d: ca:cb:f6:45:6e:04:4f:b4:27:5b:a6:d3:10:24:34: d9:57:c0:cd:40:ed:80:b9:fe:26:0a:c8:ab:cb:35: 69:fe:d6:8c:ed:01:d6:69:d2:b3:95:5b:28:db:e5: f5:28:93:6f:93:f3:d4:2b:41:7d:9c:35:92:30:d9: c5:1b:c3:9b:99:83:c0:bf:31:36:4c:75:f1:55:b5: 82:42:53:27:64:b2:42:82:7e:19:8b:69:2f:e1:29: 86:bf:e1:47:c4:02:5f:68:24:1d:ea:e9:d0:a5:d0: 40:7a:7c:c9:63:5e:dd:5f:18:f1:7f:61:ae:1c:f6: d4:ac:fd:5f:53:7a:cd:43:00:41:d9:7c:ba:12:0c: 9e:4b:7e:1c:83:99:db:3c:a0:65:9c:7a:57:56:9f: 43:3b:07:02:88:37:e9:5b:28:ec:cb:eb:fa:e1:45: e0:cc:1f:66:1a:86:dc:c3:35:15:9e:7c:84:61:a2: 83:92:74:a0:55:4c:9c:1c:6f:42:22:2c:bd:af:e4: fc:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:0D:D5:E3:F2:4A:24:0E:84:18:C9:E0:F1:31:AE:14:D7:94:E7:31 X509v3 Authority Key Identifier: keyid:8F:91:64:71:4A:1B:3B:90:6C:F8:A8:B3:71:F3:42:EB:A3:54:0C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:2e:f4:4f:53:ad:11:ad:a1:7b:9a:80:08:fc:1a:78:5e:b1: 61:2c:43:03:a0:ed:65:cc:93:5e:61:b0:02:f5:99:bb:6f:33: 53:00:87:38:a4:45:a2:d5:74:65:ef:d1:d9:2c:a9:46:c8:c1: e3:92:c0:86:aa:21:00:2b:06:21:87:db:28:22:5f:f6:f7:f9: 9a:87:97:64:bd:ca:4d:19:03:91:81:cc:55:40:44:4e:f9:d7: 3a:08:96:71:85:8d:44:63:eb:4f:56:ab:f3:f4:2e:c4:d0:ac: 0f:89:f8:81:d5:5c:be:ed:e8:e4:12:7a:07:74:fa:09:8d:34: 74:9c:15:1b:e9:d9:67:52:84:6a:aa:d7:98:58:6d:e2:05:9e: 57:fc:d1:50:a9:72:2d:d9:bc:f9:b8:0b:36:4f:ed:62:1b:a4: 2b:ae:a8:ab:ef:97:68:20:da:21:11:78:d9:c8:95:84:85:12: 7d:43:b9:55:25:cc:ed:1e:c2:1a:f0:19:18:14:96:0a:1b:98: d2:16:8d:2d:7a:90:b8:4a:d5:62:1f:8e:83:9b:f1:80:b1:0a: 49:d7:9b:c7:85:60:af:b9:49:38:43:7d:da:cf:1e:32:5c:23: d3:52:6f:45:18:73:12:6f:b1:89:d0:1e:cd:13:3e:73:3b:14: 3f:01:8a:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWgZCWnJMv9bYRLRFqpmQa5KEY9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY5MTY0NzE0QTFCM0I5MDZDRjhBOEIzNzFGMzQyRUJB MzU0MENEOTAeFw0yNjAxMjQxODM1MzlaFw0yNjAxMjcyMDAxMzlaMDMxMTAvBgNV BAMTKDcyMERENUUzRjI0QTI0MEU4NDE4QzlFMEYxMzFBRTE0RDc5NEU3MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2TNJy7YePpLFxACli/lvp51sa 988Xhp3Z8fC9mcjzXb7VWlLQjb8BU8s4RCwkURca5/tqj14Tb5cgXcrL9kVuBE+0 J1um0xAkNNlXwM1A7YC5/iYKyKvLNWn+1oztAdZp0rOVWyjb5fUok2+T89QrQX2c NZIw2cUbw5uZg8C/MTZMdfFVtYJCUydkskKCfhmLaS/hKYa/4UfEAl9oJB3q6dCl 0EB6fMljXt1fGPF/Ya4c9tSs/V9Tes1DAEHZfLoSDJ5LfhyDmds8oGWceldWn0M7 BwKIN+lbKOzL6/rhReDMH2YahtzDNRWefIRhooOSdKBVTJwcb0IiLL2v5PyjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcg3V4/JKJA6EGMng8TGuFNeU5zEwHwYDVR0j BBgwFoAUj5FkcUobO5Bs+KizcfNC66NUDNkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDc1OGU4ZS00OWM4LTQ4YjgtYmRjYi0zNTMzOWUyYWU2MDEvMC84RjkxNjQ3MTRB MUIzQjkwNkNGOEE4QjM3MUYzNDJFQkEzNTQwQ0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY5MTY0NzE0QTFCM0I5MDZDRjhBOEIzNzFGMzQyRUJBMzU0 MENEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQ3NThlOGUtNDljOC00OGI4LWJk Y2ItMzUzMzllMmFlNjAxLzAvOEY5MTY0NzE0QTFCM0I5MDZDRjhBOEIzNzFGMzQy RUJBMzU0MENEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI4u9E9TrRGtoXuagAj8GnhesWEsQwOg7WXM k15hsAL1mbtvM1MAhzikRaLVdGXv0dksqUbIweOSwIaqIQArBiGH2ygiX/b3+ZqH l2S9yk0ZA5GBzFVARE751zoIlnGFjURj609Wq/P0LsTQrA+J+IHVXL7t6OQSegd0 +gmNNHScFRvp2WdShGqq15hYbeIFnlf80VCpci3ZvPm4CzZP7WIbpCuuqKvvl2gg 2iEReNnIlYSFEn1DuVUlzO0ewhrwGRgUlgobmNIWjS16kLhK1WIfjoOb8YCxCknX m8eFYK+5SThDfdrPHjJcI9NSb0UYcxJvsYnQHs0TPnM7FD8BijY= -----END CERTIFICATE-----Generated at Sun Jan 25 20:32:35 2026 by rpki-client