This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft File: 8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft (raw, json) Hash identifier: W+WOP8rgCt0CpsyQFA+5J3FieaybaHcBGEwHWchvJeY= Subject key identifier: B6:5D:87:1B:0A:65:D1:F7:75:D1:2B:50:F0:F7:43:38:43:B2:83:EA Authority key identifier: 8D:5A:49:C9:E4:2E:37:1B:FD:1E:67:AC:E1:B3:D5:5E:C1:AB:F7:3F Certificate issuer: /CN=8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F Certificate serial: 0B30A7C12E2F1D75B71BEB53568B8ADFCF74170C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft Manifest number: D9 Signing time: Sat 24 Jan 2026 05:40:58 +0000 Manifest this update: Sat 24 Jan 2026 05:35:58 +0000 Manifest next update: Tue 27 Jan 2026 16:02:58 +0000 Files and hashes: 1: 8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl (hash: MPCYXl9Iw6VkL7wBszVOzdWIvAFx23NzA2icX1C6ibk=) 2: 3130332e3231362e3130352e302f32342d3234203d3e20313531353830.roa (hash: LW5rOerEeQ4o2LL00sXUmEen9sAHKxhrciVztv4Q/SE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 16:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:30:a7:c1:2e:2f:1d:75:b7:1b:eb:53:56:8b:8a:df:cf:74:17:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F Validity Not Before: Jan 24 05:35:58 2026 GMT Not After : Jan 27 16:02:58 2026 GMT Subject: CN=B65D871B0A65D1F775D12B50F0F7433843B283EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:02:4d:c2:64:d6:a9:0e:7c:5f:bc:74:73:d7: 19:54:06:85:06:f7:68:78:3d:45:1e:ad:f4:df:0d: b1:44:38:7d:d1:8a:33:d8:b8:6c:65:9c:ca:5f:fa: c4:7f:06:ec:2d:69:be:5a:bf:02:78:03:5f:ea:4c: 3a:41:d8:82:b1:4f:94:2a:a3:e2:6f:2b:ed:e7:75: 60:2b:05:8d:c0:60:9a:52:8c:d9:0e:0d:01:24:2c: 21:db:3c:40:52:b1:43:9a:cb:d2:dd:32:49:aa:5e: 7c:43:8e:d3:92:df:e0:8d:c8:e8:7c:9d:ad:7c:2d: dc:08:d1:b4:f3:ad:36:fb:6a:43:b3:86:30:7f:d3: ca:60:f4:fc:c9:36:b0:e3:e9:86:d4:48:78:ee:91: ad:fd:09:82:f0:5a:c7:de:58:48:41:31:b7:7c:b9: a9:2c:ef:a4:5b:de:cb:83:8a:87:d3:4a:54:65:9b: 17:cd:52:e3:89:bf:ef:67:61:b7:92:0c:48:92:79: ad:61:30:20:ff:1e:9b:f1:be:8f:81:34:9c:5d:5f: 94:6f:94:b4:4a:bf:a3:f8:c2:c5:14:b1:14:64:b7: 9e:a0:73:97:49:b3:20:d0:0b:ab:9c:ca:ed:68:32: bc:2a:6f:c2:e5:c4:40:b8:0b:b5:e8:83:f5:1d:26: 56:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:5D:87:1B:0A:65:D1:F7:75:D1:2B:50:F0:F7:43:38:43:B2:83:EA X509v3 Authority Key Identifier: keyid:8D:5A:49:C9:E4:2E:37:1B:FD:1E:67:AC:E1:B3:D5:5E:C1:AB:F7:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:ea:bb:7c:70:72:dd:9f:26:2e:a1:25:7b:44:70:93:e2:92: 5e:cf:8e:94:3d:af:c0:2d:5e:e9:68:4a:6b:14:38:0a:3c:97: d6:f6:70:cf:0e:40:ca:3f:e1:61:dd:e5:64:74:f1:e7:d6:2c: ff:cc:94:3f:a3:04:c2:ce:50:e4:a0:fe:98:44:a3:ca:27:71: f6:2f:d5:2a:14:22:28:c9:86:0c:08:58:37:85:28:39:ea:b1: f8:2d:79:c5:c4:8a:09:c1:18:b1:f3:ce:ec:93:fd:26:a0:f0: a2:f3:0e:ce:23:16:3f:dd:4d:4d:b6:71:17:e7:3c:db:10:7e: f8:7d:ae:d0:87:2b:f8:2b:f8:9b:ae:87:02:22:85:f7:53:19: 62:81:30:82:33:f9:da:f2:54:1a:af:09:7e:ef:00:ae:81:cd: 88:ac:6c:fa:56:88:28:3e:85:8e:89:2a:a4:5f:b8:42:de:84: 05:3e:5c:b0:5e:70:f3:8d:1c:16:20:2d:86:0c:c6:2f:3c:09: 9f:34:dc:88:04:59:e1:6b:d9:8f:8c:af:bd:b2:ac:1b:8c:b8: c1:78:10:62:99:a4:ad:eb:e8:68:04:71:f8:8c:37:5d:55:a3: ef:30:cb:d6:c8:1c:9e:d1:f4:54:d2:1d:1c:52:50:d3:f9:8d: b9:1f:f1:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCzCnwS4vHXW3G+tTVouK3890FwwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1NUVD MUFCRjczRjAeFw0yNjAxMjQwNTM1NThaFw0yNjAxMjcxNjAyNThaMDMxMTAvBgNV BAMTKEI2NUQ4NzFCMEE2NUQxRjc3NUQxMkI1MEYwRjc0MzM4NDNCMjgzRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdAk3CZNapDnxfvHRz1xlUBoUG 92h4PUUerfTfDbFEOH3RijPYuGxlnMpf+sR/Buwtab5avwJ4A1/qTDpB2IKxT5Qq o+JvK+3ndWArBY3AYJpSjNkODQEkLCHbPEBSsUOay9LdMkmqXnxDjtOS3+CNyOh8 na18LdwI0bTzrTb7akOzhjB/08pg9PzJNrDj6YbUSHjuka39CYLwWsfeWEhBMbd8 uaks76Rb3suDiofTSlRlmxfNUuOJv+9nYbeSDEiSea1hMCD/Hpvxvo+BNJxdX5Rv lLRKv6P4wsUUsRRkt56gc5dJsyDQC6ucyu1oMrwqb8LlxEC4C7Xog/UdJlYhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtl2HGwpl0fd10StQ8PdDOEOyg+owHwYDVR0j BBgwFoAUjVpJyeQuNxv9Hmes4bPVXsGr9z8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmY1OTg2Yi1jNzY0LTRjZDctYjQxNC1hMjViZDA1YzNmOTIvMC84RDVBNDlDOUU0 MkUzNzFCRkQxRTY3QUNFMUIzRDU1RUMxQUJGNzNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1NUVDMUFC RjczRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJmNTk4NmItYzc2NC00Y2Q3LWI0 MTQtYTI1YmQwNWMzZjkyLzAvOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1 NUVDMUFCRjczRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHPqu3xwct2fJi6hJXtEcJPikl7PjpQ9r8At XuloSmsUOAo8l9b2cM8OQMo/4WHd5WR08efWLP/MlD+jBMLOUOSg/phEo8oncfYv 1SoUIijJhgwIWDeFKDnqsfgtecXEignBGLHzzuyT/Sag8KLzDs4jFj/dTU22cRfn PNsQfvh9rtCHK/gr+JuuhwIihfdTGWKBMIIz+dryVBqvCX7vAK6BzYisbPpWiCg+ hY6JKqRfuELehAU+XLBecPONHBYgLYYMxi88CZ803IgEWeFr2Y+Mr72yrBuMuMF4 EGKZpK3r6GgEcfiMN11Vo+8wy9bIHJ7R9FTSHRxSUNP5jbkf8Xs= -----END CERTIFICATE-----Generated at Sun Jan 25 22:00:18 2026 by rpki-client