This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft File: 8DA8C02216F0C7D625FEFA7EF659021425920442.mft (raw, json) Hash identifier: jqKLnZgQvbwWnmgb2FFW7SeNyVu+xCUsPsI6vm3tz1c= Subject key identifier: AB:7F:F3:A7:A9:1F:D7:49:24:BE:86:40:29:4A:B5:51:79:2F:60:25 Authority key identifier: 8D:A8:C0:22:16:F0:C7:D6:25:FE:FA:7E:F6:59:02:14:25:92:04:42 Certificate issuer: /CN=8DA8C02216F0C7D625FEFA7EF659021425920442 Certificate serial: 0397F5A64DDBCA7929167CAF02DD5C3A1009C68B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA8C02216F0C7D625FEFA7EF659021425920442.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft Manifest number: 0202 Signing time: Sat 24 Jan 2026 22:31:46 +0000 Manifest this update: Sat 24 Jan 2026 22:26:46 +0000 Manifest next update: Tue 27 Jan 2026 23:50:46 +0000 Files and hashes: 1: 8DA8C02216F0C7D625FEFA7EF659021425920442.crl (hash: arddJldneOZG1w5nVpZbniRFnica7YzjHX63LPzPvsE=) 2: 3130332e37312e32352e302f32342d3234203d3e20313530323333.roa (hash: 75IsX464I80YzdtDMOG0/64Es8A4yar1LsqWA90nFOo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.crl rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA8C02216F0C7D625FEFA7EF659021425920442.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 23:50:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:97:f5:a6:4d:db:ca:79:29:16:7c:af:02:dd:5c:3a:10:09:c6:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DA8C02216F0C7D625FEFA7EF659021425920442 Validity Not Before: Jan 24 22:26:46 2026 GMT Not After : Jan 27 23:50:46 2026 GMT Subject: CN=AB7FF3A7A91FD74924BE8640294AB551792F6025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b0:eb:8c:bb:dc:3e:2f:10:d2:7c:f5:fd:37: 59:f6:33:43:2b:bd:d5:2d:7d:2a:2e:50:69:ce:8c: c3:de:22:e7:d2:56:ab:db:b6:71:5b:de:bf:e4:bb: 9c:8a:90:b0:4b:96:a6:e5:9a:d0:e1:68:50:7b:0d: d7:87:eb:c1:b5:30:4c:a6:dd:7a:7d:83:8c:ba:22: 92:7b:0e:ee:11:3c:84:06:03:0d:3d:f2:60:2a:9a: 7c:a8:04:a0:f5:d3:f9:5f:07:8c:ec:11:95:1e:19: 8d:aa:bc:47:30:86:71:af:37:d8:15:3e:1f:1a:37: ef:19:17:35:ce:02:57:73:9a:6e:1a:5d:81:c5:90: ae:ab:79:fe:78:61:e3:97:4c:b3:da:73:58:44:3e: 57:cd:70:d5:b7:75:5f:8b:16:19:8f:87:91:04:d0: 01:14:aa:fb:e5:e6:7a:05:f3:11:90:9e:18:db:cf: f2:8e:b3:be:00:2e:66:0a:74:23:24:d3:fb:09:95: ef:10:35:5b:75:f4:73:73:c0:cf:dc:e6:ca:6c:13: 95:c8:8e:31:70:a2:52:5e:7c:79:3d:4e:f8:67:f4: 66:d6:60:0b:f2:8e:7e:13:f0:bd:89:21:ba:50:18: 22:66:fe:72:2d:5a:e4:c8:cd:e7:25:13:1c:e1:7c: cb:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:7F:F3:A7:A9:1F:D7:49:24:BE:86:40:29:4A:B5:51:79:2F:60:25 X509v3 Authority Key Identifier: keyid:8D:A8:C0:22:16:F0:C7:D6:25:FE:FA:7E:F6:59:02:14:25:92:04:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA8C02216F0C7D625FEFA7EF659021425920442.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:03:b0:b2:6f:b4:36:ce:9b:85:eb:5a:0e:fb:7a:6e:46:ea: b8:c0:ef:ac:fc:d7:43:e2:89:15:48:9b:f6:35:9f:31:83:31: c4:38:20:0e:f2:1c:9c:a1:a3:4a:6c:2e:49:e9:c7:90:da:f7: 43:be:3d:d5:7b:70:11:d5:2f:5d:55:61:8a:c6:2b:4f:06:02: 87:57:59:3a:af:88:9a:29:77:3b:12:63:79:53:df:78:2a:21: 01:f7:f7:d6:45:78:02:93:27:ed:da:90:56:ea:b5:e5:3c:09: f7:2b:9c:bf:e1:ab:59:20:e3:99:95:b4:40:8c:3a:1c:7e:ef: c2:6f:10:6d:b8:d5:5c:69:06:30:23:db:5e:6e:d0:3d:e6:6b: 07:13:f5:e9:e6:ed:7a:dd:86:7e:f3:4c:b6:c3:21:d6:1e:33: 20:8f:d1:f0:f9:63:19:48:51:0a:70:27:69:91:61:76:2b:5d: 7c:4b:9b:d6:d4:36:77:f1:33:e7:4d:fd:8f:b5:bf:b7:e2:c9: d2:c4:c9:8e:b3:08:29:d7:07:6a:22:6a:51:09:53:8d:ec:ed: 9f:42:fd:17:87:71:4d:99:d7:15:4c:83:d8:ed:61:6b:18:bb: 20:8e:e3:81:04:f1:f6:9f:38:cc:b9:de:c6:58:e0:c7:50:21: 0d:14:9f:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA5f1pk3bynkpFnyvAt1cOhAJxoswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERBOEMwMjIxNkYwQzdENjI1RkVGQTdFRjY1OTAyMTQy NTkyMDQ0MjAeFw0yNjAxMjQyMjI2NDZaFw0yNjAxMjcyMzUwNDZaMDMxMTAvBgNV BAMTKEFCN0ZGM0E3QTkxRkQ3NDkyNEJFODY0MDI5NEFCNTUxNzkyRjYwMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWsOuMu9w+LxDSfPX9N1n2M0Mr vdUtfSouUGnOjMPeIufSVqvbtnFb3r/ku5yKkLBLlqblmtDhaFB7DdeH68G1MEym 3Xp9g4y6IpJ7Du4RPIQGAw098mAqmnyoBKD10/lfB4zsEZUeGY2qvEcwhnGvN9gV Ph8aN+8ZFzXOAldzmm4aXYHFkK6ref54YeOXTLPac1hEPlfNcNW3dV+LFhmPh5EE 0AEUqvvl5noF8xGQnhjbz/KOs74ALmYKdCMk0/sJle8QNVt19HNzwM/c5spsE5XI jjFwolJefHk9Tvhn9GbWYAvyjn4T8L2JIbpQGCJm/nItWuTIzeclExzhfMt5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq3/zp6kf10kkvoZAKUq1UXkvYCUwHwYDVR0j BBgwFoAUjajAIhbwx9Yl/vp+9lkCFCWSBEIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yzg2Y2I1ZC1mMDdkLTQyNmEtOGU1ZS1hNzdhOTc4ZGQyZWUvMC84REE4QzAyMjE2 RjBDN0Q2MjVGRUZBN0VGNjU5MDIxNDI1OTIwNDQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERBOEMwMjIxNkYwQzdENjI1RkVGQTdFRjY1OTAyMTQyNTky MDQ0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M4NmNiNWQtZjA3ZC00MjZhLThl NWUtYTc3YTk3OGRkMmVlLzAvOERBOEMwMjIxNkYwQzdENjI1RkVGQTdFRjY1OTAy MTQyNTkyMDQ0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQDsLJvtDbOm4XrWg77em5G6rjA76z810Pi iRVIm/Y1nzGDMcQ4IA7yHJyho0psLknpx5Da90O+PdV7cBHVL11VYYrGK08GAodX WTqviJopdzsSY3lT33gqIQH399ZFeAKTJ+3akFbqteU8CfcrnL/hq1kg45mVtECM Ohx+78JvEG241VxpBjAj215u0D3mawcT9enm7Xrdhn7zTLbDIdYeMyCP0fD5YxlI UQpwJ2mRYXYrXXxLm9bUNnfxM+dN/Y+1v7fiydLEyY6zCCnXB2oialEJU43s7Z9C /ReHcU2Z1xVMg9jtYWsYuyCO44EE8fafOMy53sZY4MdQIQ0Un4k= -----END CERTIFICATE-----Generated at Sun Jan 25 18:47:06 2026 by rpki-client