This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft File: 8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft (raw, json) Hash identifier: RtpCWCeZH4ysnHwelCyr/i3TXoZIt3CrztJ5WKk/bzM= Subject key identifier: 69:D4:F7:C9:17:01:6F:D5:A0:06:46:20:90:E2:B4:C2:3A:4D:40:04 Authority key identifier: 89:20:EB:69:06:58:C0:13:C7:B4:AA:C2:8E:C6:B5:11:B3:9D:AE:3E Certificate issuer: /CN=8920EB690658C013C7B4AAC28EC6B511B39DAE3E Certificate serial: 7BEA8F367369E48132C51DC7AC61F85664487A22 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft Manifest number: CE Signing time: Sat 24 Jan 2026 14:00:05 +0000 Manifest this update: Sat 24 Jan 2026 13:55:05 +0000 Manifest next update: Tue 27 Jan 2026 16:44:05 +0000 Files and hashes: 1: 8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl (hash: pzTZ4B5wsSTGS/Uf1ibXDIBa2r3L8z8fWV1znRt02Dk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 16:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:ea:8f:36:73:69:e4:81:32:c5:1d:c7:ac:61:f8:56:64:48:7a:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8920EB690658C013C7B4AAC28EC6B511B39DAE3E Validity Not Before: Jan 24 13:55:05 2026 GMT Not After : Jan 27 16:44:05 2026 GMT Subject: CN=69D4F7C917016FD5A006462090E2B4C23A4D4004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:93:0b:f3:80:71:62:64:79:8a:1f:01:a7:f1: 7c:74:5b:c2:5f:03:c5:41:c3:88:e9:30:a9:7e:f9: 57:95:78:6f:b9:ac:e2:6c:5c:5d:43:9c:f0:57:56: 57:29:b8:e2:df:8a:5b:5e:41:98:15:7c:ae:55:a7: 2d:dc:bb:24:c9:74:3a:0f:4c:82:f6:2c:53:c6:cb: 1c:17:30:77:e4:14:56:cb:c7:be:83:06:83:13:d4: 30:cc:b9:7e:ff:76:c5:5a:30:a2:78:da:8b:d4:0e: 92:2b:96:6d:9c:cd:6b:d6:47:fd:34:ca:00:07:36: 2b:6a:b5:7d:6c:a7:85:6d:a7:50:73:1e:f8:f1:7f: 10:b4:b2:16:51:7d:42:64:d1:9c:27:56:10:21:69: 31:2c:28:af:bf:0d:b8:db:86:5e:0f:89:4e:bf:a3: 72:94:c1:62:12:08:ec:dc:70:a0:71:90:ae:b4:c2: 49:59:21:11:3a:15:62:ad:1a:4d:7c:d3:a7:4b:2f: 94:81:56:e2:c9:7c:e7:c9:ac:8a:29:c6:57:3c:cb: 4f:eb:55:94:6f:fd:04:60:ef:d7:7f:f1:c1:fc:6c: 2e:b7:86:92:44:c2:68:bf:05:27:4b:65:c8:f7:7e: 80:fa:bf:2b:26:d3:a7:99:6c:0a:a4:81:7d:29:22: 76:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D4:F7:C9:17:01:6F:D5:A0:06:46:20:90:E2:B4:C2:3A:4D:40:04 X509v3 Authority Key Identifier: keyid:89:20:EB:69:06:58:C0:13:C7:B4:AA:C2:8E:C6:B5:11:B3:9D:AE:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:92:ad:ae:00:8c:79:ee:ba:f5:75:2b:0f:bb:a5:3d:85:15: d2:7a:39:47:d9:71:e7:0d:88:b1:d6:9f:a9:33:af:6a:68:ba: 80:b8:75:bc:bc:6c:26:52:3e:48:4c:bd:37:14:a1:b8:8c:14: 4d:4d:62:d5:b7:ac:2d:eb:eb:52:bc:77:bd:bb:65:69:72:67: 53:4f:78:d9:ec:b0:77:54:ea:7a:34:b9:60:51:f8:93:e5:83: 83:61:b2:89:0e:f2:13:36:54:8d:b2:3a:be:12:84:d1:2e:cc: 00:ef:30:bd:80:dc:01:f3:ab:d0:ca:61:b7:aa:6c:1e:43:40: a7:fe:8f:87:68:05:00:1c:8f:03:05:57:76:e2:56:9b:bf:57: ef:77:57:6a:71:da:3d:a0:3c:e9:b6:d6:c3:19:b3:58:db:23: 00:b4:f1:70:74:ea:af:d6:fe:f3:9f:f3:72:83:70:88:14:d7: f0:7c:fb:5e:c3:fc:c6:dc:96:e8:8b:34:ad:d6:c1:d7:cf:6f: 90:2c:ad:f9:00:09:c5:91:1e:32:f4:25:1f:01:73:58:47:b6: cb:2d:5f:d2:50:13:44:92:8d:a1:b4:b0:16:49:c9:65:9d:66: cc:ec:34:12:df:83:24:10:68:85:0a:8e:9d:89:d6:1a:00:5d: 32:85:dc:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe+qPNnNp5IEyxR3HrGH4VmRIeiIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1MTFC MzlEQUUzRTAeFw0yNjAxMjQxMzU1MDVaFw0yNjAxMjcxNjQ0MDVaMDMxMTAvBgNV BAMTKDY5RDRGN0M5MTcwMTZGRDVBMDA2NDYyMDkwRTJCNEMyM0E0RDQwMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCykwvzgHFiZHmKHwGn8Xx0W8Jf A8VBw4jpMKl++VeVeG+5rOJsXF1DnPBXVlcpuOLfilteQZgVfK5Vpy3cuyTJdDoP TIL2LFPGyxwXMHfkFFbLx76DBoMT1DDMuX7/dsVaMKJ42ovUDpIrlm2czWvWR/00 ygAHNitqtX1sp4Vtp1BzHvjxfxC0shZRfUJk0ZwnVhAhaTEsKK+/Dbjbhl4PiU6/ o3KUwWISCOzccKBxkK60wklZIRE6FWKtGk1806dLL5SBVuLJfOfJrIopxlc8y0/r VZRv/QRg79d/8cH8bC63hpJEwmi/BSdLZcj3foD6vysm06eZbAqkgX0pInbfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUadT3yRcBb9WgBkYgkOK0wjpNQAQwHwYDVR0j BBgwFoAUiSDraQZYwBPHtKrCjsa1EbOdrj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDM5NjM4OC0yZDZiLTQ3NmUtOTYzZC0xY2MzODEzNzRiMWMvMS84OTIwRUI2OTA2 NThDMDEzQzdCNEFBQzI4RUM2QjUxMUIzOURBRTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1MTFCMzlE QUUzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAzOTYzODgtMmQ2Yi00NzZlLTk2 M2QtMWNjMzgxMzc0YjFjLzEvODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1 MTFCMzlEQUUzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC2Sra4AjHnuuvV1Kw+7pT2FFdJ6OUfZcecN iLHWn6kzr2pouoC4dby8bCZSPkhMvTcUobiMFE1NYtW3rC3r61K8d727ZWlyZ1NP eNnssHdU6no0uWBR+JPlg4NhsokO8hM2VI2yOr4ShNEuzADvML2A3AHzq9DKYbeq bB5DQKf+j4doBQAcjwMFV3biVpu/V+93V2px2j2gPOm21sMZs1jbIwC08XB06q/W /vOf83KDcIgU1/B8+17D/MbcluiLNK3WwdfPb5AsrfkACcWRHjL0JR8Bc1hHtsst X9JQE0SSjaG0sBZJyWWdZszsNBLfgyQQaIUKjp2J1hoAXTKF3JQ= -----END CERTIFICATE-----Generated at Mon Jan 26 01:20:51 2026 by rpki-client