This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft File: 8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft (raw, json) Hash identifier: xLBu2dz96m48t1Y4EX2EHzMOO0+FTN0FbmFXS5Y2zXQ= Subject key identifier: 56:0E:A6:11:3C:6A:E1:53:A1:6F:97:90:3D:18:6E:D2:DA:26:05:C7 Authority key identifier: 89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E Certificate issuer: /CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E Certificate serial: 358756132563FDA51E438442A9498C02DC657E48 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft Manifest number: 0146 Signing time: Sat 24 Jan 2026 21:10:04 +0000 Manifest this update: Sat 24 Jan 2026 21:05:04 +0000 Manifest next update: Wed 28 Jan 2026 04:17:04 +0000 Files and hashes: 1: 3230322e34372e3136302e302f32342d3234203d3e20313532303736.roa (hash: SOoZmysbJDZktqnuTuwq0n/y13DKsF/IrNzLNUAhqCQ=) 2: 8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl (hash: OMkmHgzn5ES+3/RaIVlsHn79t7MiMRwBwtiO8v44rQk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 04:17:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:87:56:13:25:63:fd:a5:1e:43:84:42:a9:49:8c:02:dc:65:7e:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E Validity Not Before: Jan 24 21:05:04 2026 GMT Not After : Jan 28 04:17:04 2026 GMT Subject: CN=560EA6113C6AE153A16F97903D186ED2DA2605C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:0e:84:d4:64:2e:9e:be:67:64:94:e3:d8:50: a7:f5:ff:6e:5e:bd:30:d1:fb:20:15:96:ac:07:04: c8:09:6e:15:65:b8:76:a0:4f:1a:4a:13:6d:cd:fa: 4f:9b:01:52:8c:26:ab:83:2d:4b:5e:5c:3d:33:48: eb:92:bd:66:e4:f9:f4:27:32:61:c9:bb:d8:61:cf: da:c3:c6:5d:ab:65:ec:8b:83:82:39:60:95:99:02: f5:78:c5:72:53:29:4d:97:dc:9b:b7:07:52:d2:93: 1c:b2:d5:ca:22:6a:4a:aa:1f:3f:15:6f:75:11:55: c0:7e:2a:87:fa:6d:4b:29:e3:3c:98:6d:8c:cd:40: 07:4b:7b:02:fa:7e:d2:ec:0f:ae:8b:89:2f:b6:bd: 1f:4e:3a:02:c1:17:0e:d5:8b:71:18:b5:89:b9:63: 17:51:13:27:33:6c:c1:39:83:d3:2a:70:05:98:c9: 48:6c:c8:c9:12:59:d6:06:ee:04:9a:18:82:8b:07: 2e:37:9d:00:da:0f:12:cc:ea:a6:20:0c:f9:98:28: 82:fb:ff:e4:56:cf:92:d7:92:fb:a4:b9:63:2c:82: 9b:ca:88:da:43:9b:89:11:00:e6:a2:28:07:c5:48: a0:05:04:be:f9:fa:37:bf:cb:c3:21:04:46:3b:3a: f4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:0E:A6:11:3C:6A:E1:53:A1:6F:97:90:3D:18:6E:D2:DA:26:05:C7 X509v3 Authority Key Identifier: keyid:89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:33:b9:48:b5:0a:1c:e0:44:19:7e:1d:9e:0e:ba:05:d3:cc: 26:9c:a7:b3:3b:1c:25:8f:0e:72:89:e3:b0:2f:70:67:d9:76: 08:f5:f8:dd:23:47:f9:3c:bf:20:e4:b4:8f:c2:45:8f:c8:37: 4e:26:aa:69:3c:fa:69:22:6b:03:51:0a:ee:e2:8c:87:fc:da: ef:aa:1d:05:6a:ba:d0:db:17:ab:e5:c0:1d:9d:d1:cb:cd:eb: 4b:0b:d2:db:6a:f2:39:d6:2e:75:53:8e:9b:b3:58:22:37:b3: be:29:cc:42:29:78:7e:43:0f:83:79:36:ed:0d:36:57:0d:cd: 18:7f:ed:39:f7:39:c8:ec:e8:86:63:94:9a:a7:f1:20:f5:97: 40:1d:ce:e4:2a:b5:bc:cd:5a:46:43:65:a0:86:84:6e:f9:6b: ef:a3:b9:f7:a3:f6:cf:96:45:f6:11:e0:76:f6:13:ac:2d:da: 37:b4:a7:e2:01:4e:57:d8:38:05:30:5c:d0:53:9e:e9:0e:5a: 58:2f:61:72:44:90:ed:76:4a:7d:ed:88:80:9d:87:09:68:30: d9:14:5e:fe:1a:20:07:90:71:16:1b:08:8e:6d:6b:e6:93:fc: b0:8b:0e:81:f0:cc:fe:b6:bd:1f:f5:e1:78:40:45:0e:90:a6: 12:88:22:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNYdWEyVj/aUeQ4RCqUmMAtxlfkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYwQzU0 QjBGNUYxRTAeFw0yNjAxMjQyMTA1MDRaFw0yNjAxMjgwNDE3MDRaMDMxMTAvBgNV BAMTKDU2MEVBNjExM0M2QUUxNTNBMTZGOTc5MDNEMTg2RUQyREEyNjA1QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD9DoTUZC6evmdklOPYUKf1/25e vTDR+yAVlqwHBMgJbhVluHagTxpKE23N+k+bAVKMJquDLUteXD0zSOuSvWbk+fQn MmHJu9hhz9rDxl2rZeyLg4I5YJWZAvV4xXJTKU2X3Ju3B1LSkxyy1coiakqqHz8V b3URVcB+Kof6bUsp4zyYbYzNQAdLewL6ftLsD66LiS+2vR9OOgLBFw7Vi3EYtYm5 YxdREyczbME5g9MqcAWYyUhsyMkSWdYG7gSaGIKLBy43nQDaDxLM6qYgDPmYKIL7 /+RWz5LXkvukuWMsgpvKiNpDm4kRAOaiKAfFSKAFBL75+je/y8MhBEY7OvQvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVg6mETxq4VOhb5eQPRhu0tomBccwHwYDVR0j BBgwFoAUiVjrHqACLe94PRfxxbbwxUsPXx4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Mjg4NzYyYy0zZmM1LTQ5Y2MtOTQ5YS01OTRiMzMxYTEzYTEvMC84OTU4RUIxRUEw MDIyREVGNzgzRDE3RjFDNUI2RjBDNTRCMEY1RjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYwQzU0QjBG NUYxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI4ODc2MmMtM2ZjNS00OWNjLTk0 OWEtNTk0YjMzMWExM2ExLzAvODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYw QzU0QjBGNUYxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIczuUi1ChzgRBl+HZ4OugXTzCacp7M7HCWP DnKJ47AvcGfZdgj1+N0jR/k8vyDktI/CRY/IN04mqmk8+mkiawNRCu7ijIf82u+q HQVqutDbF6vlwB2d0cvN60sL0ttq8jnWLnVTjpuzWCI3s74pzEIpeH5DD4N5Nu0N NlcNzRh/7Tn3Ocjs6IZjlJqn8SD1l0AdzuQqtbzNWkZDZaCGhG75a++jufej9s+W RfYR4Hb2E6wt2je0p+IBTlfYOAUwXNBTnukOWlgvYXJEkO12Sn3tiICdhwloMNkU Xv4aIAeQcRYbCI5ta+aT/LCLDoHwzP62vR/14XhARQ6QphKIImQ= -----END CERTIFICATE-----Generated at Sun Jan 25 20:38:01 2026 by rpki-client