This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft File: 878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft (raw, json) Hash identifier: 9npc1Fy74cPbfdR2A0L/a4dKNk9Lx3tBQAHtBF3Pqzo= Subject key identifier: B8:49:94:6C:5E:FD:E7:F5:C6:5E:FE:7D:70:86:16:74:A7:15:FA:A1 Authority key identifier: 87:8D:F4:B7:E3:C7:76:B2:ED:C1:75:2F:CC:BC:5E:28:9C:45:3B:EE Certificate issuer: /CN=878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE Certificate serial: 2A7BC21589AFD4F8321381DD5E286CF819A89EB3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft Manifest number: 0215 Signing time: Sun 25 Jan 2026 13:51:33 +0000 Manifest this update: Sun 25 Jan 2026 13:46:33 +0000 Manifest next update: Wed 28 Jan 2026 23:37:33 +0000 Files and hashes: 1: 878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl (hash: PHJxSnottHQYxJ0PmMiH7cX0pmTBr53u3vLimsKN4IY=) 2: 3130332e3135362e39362e302f32342d3234203d3e20313431303837.roa (hash: cE5GTYNlB3yeu6BJgWNNyA2V1Ddxooz4i3udaZzgT3w=) 3: 323430363a383434303a3a2f33322d3332203d3e20313431303837.roa (hash: dBa568UK/EDi0HlAgRz6Gr8t22rnoRAjxn7WiN8bCyc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:7b:c2:15:89:af:d4:f8:32:13:81:dd:5e:28:6c:f8:19:a8:9e:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE Validity Not Before: Jan 25 13:46:33 2026 GMT Not After : Jan 28 23:37:33 2026 GMT Subject: CN=B849946C5EFDE7F5C65EFE7D70861674A715FAA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:89:60:8a:a1:ad:94:e4:85:db:87:c5:1a:7c: 94:af:49:af:3f:1b:d3:27:d5:c8:7c:1a:eb:4d:8a: 40:29:8b:6f:da:a4:86:3e:48:a7:5a:ec:5e:32:23: a5:ac:42:e5:bb:c6:05:d2:af:32:d6:91:f5:bf:c3: 33:4d:4d:fc:13:05:41:00:62:e3:4e:60:81:05:a0: 91:4c:00:03:b5:5c:f4:9a:ae:38:44:d9:03:78:f5: 1a:20:4f:07:4c:4e:c3:03:62:63:be:5d:d4:e4:23: 70:81:2d:63:cd:d2:6e:ec:c8:cc:00:d8:ee:e2:83: 2c:4e:62:df:73:0c:44:22:4d:ef:fa:d7:fb:de:f8: 33:c5:bd:46:11:66:2a:23:1d:b0:84:30:82:0d:2e: 7d:f6:ac:9b:0c:59:32:b7:6d:2f:9c:e7:73:f1:a0: b2:fd:92:18:ec:76:5e:47:2e:0f:5f:be:93:e1:53: a9:d9:e0:34:1e:fe:ec:78:b6:07:e3:8c:c3:8e:9f: b1:a4:3d:30:9b:9e:d0:3b:74:0c:d9:b4:d0:e8:7b: ce:d4:54:a1:94:7f:0b:59:7b:fb:18:6a:eb:c5:a1: 5f:0a:6b:8d:1e:7a:75:10:d8:31:51:10:69:58:ac: 34:9d:dd:ff:42:3f:d6:1f:4a:d2:46:d2:a0:74:9d: de:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:49:94:6C:5E:FD:E7:F5:C6:5E:FE:7D:70:86:16:74:A7:15:FA:A1 X509v3 Authority Key Identifier: keyid:87:8D:F4:B7:E3:C7:76:B2:ED:C1:75:2F:CC:BC:5E:28:9C:45:3B:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:bb:69:80:e2:57:f0:5f:99:83:4f:7a:19:d6:94:c7:12:30: 39:3d:06:d9:d3:e3:96:f0:cb:cb:25:3c:6d:a5:99:2a:36:f1: 7c:c0:dc:b5:71:d2:1e:f4:bf:ca:05:3c:65:01:42:19:75:f0: e7:99:ff:1c:6d:de:68:aa:88:4c:8e:4a:f8:42:3f:5f:64:80: 08:96:f5:b1:75:78:6e:06:71:f5:0f:3b:5b:ee:d9:8f:09:b3: e7:18:d6:71:df:f3:5e:9b:9f:01:49:a1:79:d4:8c:09:ef:2e: f7:55:b3:b8:28:d6:0f:90:a6:1b:f7:fe:38:47:eb:40:1e:f6: f5:c5:f4:56:62:5e:e0:5c:a6:1c:d7:1b:0b:1f:0c:ac:fc:55: d0:1d:3d:e8:26:bd:e8:0d:c1:18:1d:6c:4f:4b:a5:cb:40:41: bf:53:49:0a:88:b3:8f:de:ff:af:2a:e0:67:d0:bc:82:08:e9: 1e:90:88:02:74:bb:cf:04:5b:76:ce:e7:fc:fa:99:57:6f:f7: b6:36:89:44:f8:e4:5b:55:50:8a:27:bd:e1:ff:d6:0f:46:a6: 28:59:1a:02:7e:c0:36:dd:ab:38:7c:85:96:a2:65:1a:ea:f8: 81:14:f6:b4:1e:b0:fb:a6:c6:13:58:6d:a4:76:c5:b1:0e:5b: ca:3a:fa:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKnvCFYmv1PgyE4HdXihs+BmonrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVFMjg5 QzQ1M0JFRTAeFw0yNjAxMjUxMzQ2MzNaFw0yNjAxMjgyMzM3MzNaMDMxMTAvBgNV BAMTKEI4NDk5NDZDNUVGREU3RjVDNjVFRkU3RDcwODYxNjc0QTcxNUZBQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCriWCKoa2U5IXbh8UafJSvSa8/ G9Mn1ch8GutNikApi2/apIY+SKda7F4yI6WsQuW7xgXSrzLWkfW/wzNNTfwTBUEA YuNOYIEFoJFMAAO1XPSarjhE2QN49RogTwdMTsMDYmO+XdTkI3CBLWPN0m7syMwA 2O7igyxOYt9zDEQiTe/61/ve+DPFvUYRZiojHbCEMIINLn32rJsMWTK3bS+c53Px oLL9khjsdl5HLg9fvpPhU6nZ4DQe/ux4tgfjjMOOn7GkPTCbntA7dAzZtNDoe87U VKGUfwtZe/sYauvFoV8Ka40eenUQ2DFREGlYrDSd3f9CP9YfStJG0qB0nd4VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuEmUbF795/XGXv59cIYWdKcV+qEwHwYDVR0j BBgwFoAUh430t+PHdrLtwXUvzLxeKJxFO+4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Yzg5N2M0YS1lMGZmLTQ2NTItYTU5MS1mZjJkNDhlNzJjOTEvMC84NzhERjRCN0Uz Qzc3NkIyRURDMTc1MkZDQ0JDNUUyODlDNDUzQkVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVFMjg5QzQ1 M0JFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWM4OTdjNGEtZTBmZi00NjUyLWE1 OTEtZmYyZDQ4ZTcyYzkxLzAvODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVF Mjg5QzQ1M0JFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI+7aYDiV/BfmYNPehnWlMcSMDk9BtnT45bw y8slPG2lmSo28XzA3LVx0h70v8oFPGUBQhl18OeZ/xxt3miqiEyOSvhCP19kgAiW 9bF1eG4GcfUPO1vu2Y8Js+cY1nHf816bnwFJoXnUjAnvLvdVs7go1g+Qphv3/jhH 60Ae9vXF9FZiXuBcphzXGwsfDKz8VdAdPegmvegNwRgdbE9LpctAQb9TSQqIs4/e /68q4GfQvIII6R6QiAJ0u88EW3bO5/z6mVdv97Y2iUT45FtVUIonveH/1g9GpihZ GgJ+wDbdqzh8hZaiZRrq+IEU9rQesPumxhNYbaR2xbEOW8o6+nA= -----END CERTIFICATE-----Generated at Sun Jan 25 20:32:56 2026 by rpki-client