This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.mft File: 8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.mft (raw, json) Hash identifier: j9EadRbZvQjSasZZhGFxwZfTe1/vMETUL1pW+tJ7QS8= Subject key identifier: 10:24:E9:A2:66:8B:6F:13:26:0F:A4:2D:36:4C:70:91:AC:AA:4A:B6 Authority key identifier: 80:30:ED:8A:48:ED:98:5A:5D:D8:8E:9B:C1:C0:D0:15:F4:36:FF:DF Certificate issuer: /CN=8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF Certificate serial: 724ED669781BE56A944F81BF0BD331BE39CF2810 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.mft Manifest number: 022C Signing time: Sun 25 Jan 2026 16:11:52 +0000 Manifest this update: Sun 25 Jan 2026 16:06:52 +0000 Manifest next update: Wed 28 Jan 2026 16:42:52 +0000 Files and hashes: 1: 8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.crl (hash: nz/eFAqNPvBTl5HM22kLM0c5fm3QxKZUWGK2p0iNOaM=) 2: 3130332e3138392e3235342e302f32342d3234203d3e20313439393135.roa (hash: Fo/wu0BFSpF55NefZU/m5we3g29g18juirYZ6ANAiIw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.crl rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:4e:d6:69:78:1b:e5:6a:94:4f:81:bf:0b:d3:31:be:39:cf:28:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF Validity Not Before: Jan 25 16:06:52 2026 GMT Not After : Jan 28 16:42:52 2026 GMT Subject: CN=1024E9A2668B6F13260FA42D364C7091ACAA4AB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d1:aa:01:2d:a4:97:64:99:6b:69:b9:33:5c: 41:ad:79:c0:db:d3:1e:83:3d:0b:c8:f1:28:61:6d: ee:aa:6b:2e:59:03:68:a2:b5:01:09:35:0f:17:57: a9:9c:3e:02:fb:ca:e2:0c:7a:58:dd:6c:0c:91:08: 29:93:6e:0c:2d:e0:2f:b4:ec:32:b2:f3:a0:c1:e5: a5:34:67:9f:e0:96:de:67:0f:eb:eb:2b:6b:b9:4b: d2:c4:61:81:73:e3:70:45:0b:45:a6:a2:7a:75:e5: 24:2c:1d:68:8d:22:af:54:63:5c:13:6a:0b:7c:c6: 43:f7:4f:7b:1e:50:9e:5c:2d:b4:d2:f0:ed:af:18: 17:65:0b:9a:14:aa:cb:30:22:16:d9:90:0e:64:0e: 98:99:80:28:33:d3:f0:af:dc:af:cb:fd:c2:d5:b7: 0f:df:f7:da:87:7d:44:82:af:ce:06:03:ca:0b:d9: 09:52:ae:ff:36:08:59:34:31:92:76:5f:5a:d0:02: 84:84:a5:e5:f0:46:fc:f6:c7:29:16:f0:1e:d9:b8: a5:85:89:f7:50:92:27:a1:8a:95:97:82:62:df:1e: 90:46:7d:f0:da:78:4f:03:e8:82:9e:cd:32:5b:05: a9:e2:cd:67:1f:24:82:04:44:80:a7:a4:47:94:7b: 1e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:24:E9:A2:66:8B:6F:13:26:0F:A4:2D:36:4C:70:91:AC:AA:4A:B6 X509v3 Authority Key Identifier: keyid:80:30:ED:8A:48:ED:98:5A:5D:D8:8E:9B:C1:C0:D0:15:F4:36:FF:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:51:02:33:01:1a:8c:42:ca:30:d0:35:d4:e4:5f:b6:89:2d: a1:16:9b:c7:bf:45:42:34:c8:4e:ce:14:51:20:c2:af:a5:25: 95:1a:cf:31:03:c0:03:1f:39:37:4f:2d:82:04:12:ee:c5:f3: c3:2e:39:18:55:18:55:4e:ce:6e:9b:74:1f:2c:cf:fd:42:85: 37:36:4e:09:3b:e6:11:67:60:de:bf:be:1a:c3:9a:6f:84:3f: ec:93:cd:71:b6:1b:fc:09:d0:29:29:8f:05:fa:54:23:ab:2c: 8c:b9:a4:bf:e4:ff:48:b2:1e:0d:2f:a5:5f:92:b0:ff:28:07: f9:ff:c4:94:5c:77:91:10:0c:3b:ce:3a:a4:e7:e3:b2:e7:70: 71:8c:24:e5:2c:4d:90:22:8a:c9:61:11:28:86:dc:ad:99:d1: af:57:3f:20:66:9f:8e:81:7f:c5:04:42:73:7d:3f:b3:d4:b9: cc:85:91:fd:00:a6:b3:e9:d2:33:7c:de:d8:55:72:18:3d:f8: 2a:51:df:64:00:82:6e:24:aa:69:2c:dd:80:49:7e:c7:2a:55: f8:ea:6a:bc:7b:45:3e:12:36:6a:0f:6d:9f:9c:37:a9:4e:dc: c1:41:51:47:73:55:a4:ab:67:34:0f:23:cd:89:a7:af:80:f2: a0:0f:89:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUck7WaXgb5WqUT4G/C9MxvjnPKBAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODAzMEVEOEE0OEVEOTg1QTVERDg4RTlCQzFDMEQwMTVG NDM2RkZERjAeFw0yNjAxMjUxNjA2NTJaFw0yNjAxMjgxNjQyNTJaMDMxMTAvBgNV BAMTKDEwMjRFOUEyNjY4QjZGMTMyNjBGQTQyRDM2NEM3MDkxQUNBQTRBQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr0aoBLaSXZJlrabkzXEGtecDb 0x6DPQvI8Shhbe6qay5ZA2iitQEJNQ8XV6mcPgL7yuIMeljdbAyRCCmTbgwt4C+0 7DKy86DB5aU0Z5/glt5nD+vrK2u5S9LEYYFz43BFC0Wmonp15SQsHWiNIq9UY1wT agt8xkP3T3seUJ5cLbTS8O2vGBdlC5oUqsswIhbZkA5kDpiZgCgz0/Cv3K/L/cLV tw/f99qHfUSCr84GA8oL2QlSrv82CFk0MZJ2X1rQAoSEpeXwRvz2xykW8B7ZuKWF ifdQkiehipWXgmLfHpBGffDaeE8D6IKezTJbBanizWcfJIIERICnpEeUex6jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUECTpomaLbxMmD6QtNkxwkayqSrYwHwYDVR0j BBgwFoAUgDDtikjtmFpd2I6bwcDQFfQ2/98wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzAwNTZiNC1mMDI3LTQ0ZmEtOTc0ZC00YTFlZDE5MWFlNTYvMC84MDMwRUQ4QTQ4 RUQ5ODVBNUREODhFOUJDMUMwRDAxNUY0MzZGRkRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODAzMEVEOEE0OEVEOTg1QTVERDg4RTlCQzFDMEQwMTVGNDM2 RkZERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMwMDU2YjQtZjAyNy00NGZhLTk3 NGQtNGExZWQxOTFhZTU2LzAvODAzMEVEOEE0OEVEOTg1QTVERDg4RTlCQzFDMEQw MTVGNDM2RkZERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC5RAjMBGoxCyjDQNdTkX7aJLaEWm8e/RUI0 yE7OFFEgwq+lJZUazzEDwAMfOTdPLYIEEu7F88MuORhVGFVOzm6bdB8sz/1ChTc2 Tgk75hFnYN6/vhrDmm+EP+yTzXG2G/wJ0CkpjwX6VCOrLIy5pL/k/0iyHg0vpV+S sP8oB/n/xJRcd5EQDDvOOqTn47LncHGMJOUsTZAiislhESiG3K2Z0a9XPyBmn46B f8UEQnN9P7PUucyFkf0AprPp0jN83thVchg9+CpR32QAgm4kqmks3YBJfscqVfjq arx7RT4SNmoPbZ+cN6lO3MFBUUdzVaSrZzQPI82Jp6+A8qAPifU= -----END CERTIFICATE-----Generated at Sun Jan 25 18:59:28 2026 by rpki-client