This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft File: 8955B36815B4084BAFC7908A639810631BEED49F.mft (raw, json) Hash identifier: gCaXyFtwgV4vJh04IIeyTMaeVMiJEbDVqUzoERJgpAQ= Subject key identifier: EF:7E:3F:60:C8:F7:59:27:2F:6E:F5:86:1D:B6:82:D6:98:38:75:C5 Authority key identifier: 89:55:B3:68:15:B4:08:4B:AF:C7:90:8A:63:98:10:63:1B:EE:D4:9F Certificate issuer: /CN=8955B36815B4084BAFC7908A639810631BEED49F Certificate serial: 1F5287A3EA5AD49E7C5D8035317361DB5972ABF7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8955B36815B4084BAFC7908A639810631BEED49F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft Manifest number: 0534 Signing time: Sun 25 Jan 2026 00:20:51 +0000 Manifest this update: Sun 25 Jan 2026 00:15:51 +0000 Manifest next update: Wed 28 Jan 2026 09:55:51 +0000 Files and hashes: 1: 8955B36815B4084BAFC7908A639810631BEED49F.crl (hash: IWdCbPxxwHwF475XmSsoY0FOejpherxhsSgfrpYZiM0=) 2: 3130332e3135332e3234342e302f32342d3234203d3e20313430343734.roa (hash: anheo7/IFUA2/H9FN8liseYHAvu0fSEkGprdILkGE3g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.crl rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8955B36815B4084BAFC7908A639810631BEED49F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 09:55:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:52:87:a3:ea:5a:d4:9e:7c:5d:80:35:31:73:61:db:59:72:ab:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8955B36815B4084BAFC7908A639810631BEED49F Validity Not Before: Jan 25 00:15:51 2026 GMT Not After : Jan 28 09:55:51 2026 GMT Subject: CN=EF7E3F60C8F759272F6EF5861DB682D6983875C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:14:7a:d6:89:00:1c:ec:0e:91:45:1e:a2:15: e2:ca:5f:4d:c4:6a:a3:9f:d2:d9:e2:80:3a:bb:1c: b9:5a:ad:52:84:1a:80:86:ef:d5:9f:a6:6d:72:6d: 25:ef:66:64:ba:ed:d1:54:56:0a:be:8f:f3:1d:e3: 95:6f:d7:30:82:fc:9d:07:5a:1c:d1:9d:af:ee:fc: 9d:4b:76:c2:d9:4d:d5:5d:37:88:51:91:82:57:e5: ba:f8:0f:48:ef:e3:0e:31:a8:6d:fe:2e:be:03:21: 73:97:e5:2c:b6:e7:3e:14:c7:d5:5f:66:e6:8e:44: 04:f6:af:89:c8:d8:a0:33:74:d2:49:8f:a1:6a:9a: e9:99:19:d8:d6:41:45:9c:9b:95:cf:69:f1:6b:34: 26:47:2b:2d:7a:2d:6e:11:ea:18:8e:6c:54:63:86: c0:10:d9:09:4b:68:4e:b5:b5:2f:80:02:13:63:7b: 4f:af:57:e7:ee:12:d6:32:fc:80:73:a3:7a:7c:b4: 79:11:fd:ae:a2:ca:19:67:86:ba:87:d1:d2:39:f4: 0f:1c:34:ca:67:d1:60:60:63:8f:e3:b8:e9:fc:44: 1e:f9:2d:9a:0b:09:a0:00:2f:96:93:75:69:51:5f: 56:19:8a:c0:08:3c:de:f4:d3:ee:29:e3:00:6a:de: b4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:7E:3F:60:C8:F7:59:27:2F:6E:F5:86:1D:B6:82:D6:98:38:75:C5 X509v3 Authority Key Identifier: keyid:89:55:B3:68:15:B4:08:4B:AF:C7:90:8A:63:98:10:63:1B:EE:D4:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8955B36815B4084BAFC7908A639810631BEED49F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:64:6a:3d:06:e3:13:29:67:8d:3e:be:ba:f9:e4:fd:5f:cd: d8:b7:95:6e:11:95:85:c6:7f:1e:8a:ed:d7:58:d7:e3:6e:da: 9d:85:43:99:42:a0:0e:7f:79:a6:e4:5d:01:d8:bb:e7:65:27: 0f:41:f3:df:61:f9:2b:83:00:ec:25:f1:67:ce:48:37:12:9d: 4c:c1:7e:66:66:57:d8:a1:63:a2:11:31:5f:69:4f:4c:d1:0d: 94:66:df:66:18:a5:df:26:06:79:a3:6d:de:b0:df:8c:1b:44: 83:03:18:5b:15:4f:4b:aa:f5:27:37:53:af:6a:4f:fd:20:16: 19:56:42:6f:e6:a6:69:89:74:03:c7:1c:aa:bb:74:14:30:52: 5b:a3:7e:50:ee:2d:1d:3c:a3:9e:27:87:2a:e8:0c:ef:62:8c: 05:de:e8:11:c8:2a:1a:b4:71:f4:20:91:5c:41:d0:4b:c8:c7: 1d:2b:e1:20:d7:07:4c:00:54:6b:3e:a2:80:09:26:15:1c:48: 40:8f:11:b0:13:09:c7:36:8d:77:ec:fa:81:3b:83:a3:b7:a3: 2f:40:e7:89:0a:54:f7:c4:b2:aa:66:ed:76:8d:72:01:b4:51: a3:99:33:10:6e:5d:e8:34:8e:f9:86:3b:6e:05:2b:37:8c:40: 65:c8:33:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH1KHo+pa1J58XYA1MXNh21lyq/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk1NUIzNjgxNUI0MDg0QkFGQzc5MDhBNjM5ODEwNjMx QkVFRDQ5RjAeFw0yNjAxMjUwMDE1NTFaFw0yNjAxMjgwOTU1NTFaMDMxMTAvBgNV BAMTKEVGN0UzRjYwQzhGNzU5MjcyRjZFRjU4NjFEQjY4MkQ2OTgzODc1QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOFHrWiQAc7A6RRR6iFeLKX03E aqOf0tnigDq7HLlarVKEGoCG79Wfpm1ybSXvZmS67dFUVgq+j/Md45Vv1zCC/J0H WhzRna/u/J1LdsLZTdVdN4hRkYJX5br4D0jv4w4xqG3+Lr4DIXOX5Sy25z4Ux9Vf ZuaORAT2r4nI2KAzdNJJj6FqmumZGdjWQUWcm5XPafFrNCZHKy16LW4R6hiObFRj hsAQ2QlLaE61tS+AAhNje0+vV+fuEtYy/IBzo3p8tHkR/a6iyhlnhrqH0dI59A8c NMpn0WBgY4/juOn8RB75LZoLCaAAL5aTdWlRX1YZisAIPN700+4p4wBq3rS/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU734/YMj3WScvbvWGHbaC1pg4dcUwHwYDVR0j BBgwFoAUiVWzaBW0CEuvx5CKY5gQYxvu1J8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2UyNmFhMy0zMDczLTQyNzYtYmQ3NC1hZDg2ZjA5OWMyNTMvMC84OTU1QjM2ODE1 QjQwODRCQUZDNzkwOEE2Mzk4MTA2MzFCRUVENDlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk1NUIzNjgxNUI0MDg0QkFGQzc5MDhBNjM5ODEwNjMxQkVF RDQ5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTdlMjZhYTMtMzA3My00Mjc2LWJk NzQtYWQ4NmYwOTljMjUzLzAvODk1NUIzNjgxNUI0MDg0QkFGQzc5MDhBNjM5ODEw NjMxQkVFRDQ5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAZkaj0G4xMpZ40+vrr55P1fzdi3lW4RlYXG fx6K7ddY1+Nu2p2FQ5lCoA5/eabkXQHYu+dlJw9B899h+SuDAOwl8WfOSDcSnUzB fmZmV9ihY6IRMV9pT0zRDZRm32YYpd8mBnmjbd6w34wbRIMDGFsVT0uq9Sc3U69q T/0gFhlWQm/mpmmJdAPHHKq7dBQwUlujflDuLR08o54nhyroDO9ijAXe6BHIKhq0 cfQgkVxB0EvIxx0r4SDXB0wAVGs+ooAJJhUcSECPEbATCcc2jXfs+oE7g6O3oy9A 54kKVPfEsqpm7XaNcgG0UaOZMxBuXeg0jvmGO24FKzeMQGXIMyA= -----END CERTIFICATE-----Generated at Sun Jan 25 18:36:36 2026 by rpki-client