This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft File: 8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft (raw, json) Hash identifier: jLVtIGwaJ2gcSwMpxYMPG2CPu61YWv0jjPx4TUrAgCY= Subject key identifier: EF:A4:B3:B3:7C:0C:42:2C:22:2A:6A:9A:30:5A:73:57:5C:21:AA:BE Authority key identifier: 87:14:17:2B:5D:3F:C9:C3:6A:83:EB:A2:7A:B9:46:FC:69:A4:F8:21 Certificate issuer: /CN=8714172B5D3FC9C36A83EBA27AB946FC69A4F821 Certificate serial: 46EC6172460E2631B59CF9E8890DB579F755FFD7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer Subject info access: rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft Manifest number: 022D Signing time: Fri 23 Jan 2026 19:32:29 +0000 Manifest this update: Fri 23 Jan 2026 19:27:29 +0000 Manifest next update: Tue 27 Jan 2026 01:52:29 +0000 Files and hashes: 1: 8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl (hash: c3Qc9oSL/aUvpc7VW7N+nIeJBh+7cfnBhTuCHIjto8Y=) 2: 3130332e32302e31362e302f32342d3234203d3e20313439393633.roa (hash: zDyrXTGOoVhoyVXFQzLfzvSBhhtitp+cvr9nrYj9PZk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 01:52:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:ec:61:72:46:0e:26:31:b5:9c:f9:e8:89:0d:b5:79:f7:55:ff:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8714172B5D3FC9C36A83EBA27AB946FC69A4F821 Validity Not Before: Jan 23 19:27:29 2026 GMT Not After : Jan 27 01:52:29 2026 GMT Subject: CN=EFA4B3B37C0C422C222A6A9A305A73575C21AABE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:02:c4:f2:cf:a1:5a:ea:fb:6e:4b:2c:98:dd: a6:be:78:af:37:8b:49:0a:f6:ba:c4:58:ee:61:c5: 05:62:0b:21:3f:b2:0d:7b:4d:d0:43:68:64:13:6d: 79:0d:d2:f5:61:24:f5:ef:96:6e:c3:fa:f6:aa:9b: 89:7f:3d:c2:df:af:53:0c:f4:a6:08:85:46:6a:0c: 32:7d:18:18:84:f0:fe:c6:77:ca:5c:c3:aa:3a:ed: 13:f7:7c:46:44:88:51:1b:1f:35:36:a8:5e:b6:62: 85:80:95:6b:3f:15:b9:1a:8a:5b:35:95:4b:e5:9e: 9f:17:a5:c9:00:62:0b:37:ca:a5:56:5f:31:00:08: 8b:04:93:ff:06:35:03:f1:3a:8d:87:db:8c:f8:ef: ae:08:e8:cb:2b:0e:eb:2f:39:72:db:f0:92:57:88: d4:d0:b9:ba:e8:64:b2:18:ea:90:ea:24:00:e0:03: 3d:e4:fc:d3:bd:29:22:3d:dc:de:10:f2:0c:1c:6e: 8b:9b:84:cf:1c:a1:b2:74:2b:39:e7:00:9f:a0:81: d3:0e:ab:7a:52:6d:06:02:29:54:83:97:62:9c:cf: 98:85:d0:32:02:66:a0:c8:2e:71:b4:0a:77:ac:8d: 5d:4b:4c:af:c4:2f:36:bd:63:d2:22:c4:a1:1e:a9: 3e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A4:B3:B3:7C:0C:42:2C:22:2A:6A:9A:30:5A:73:57:5C:21:AA:BE X509v3 Authority Key Identifier: keyid:87:14:17:2B:5D:3F:C9:C3:6A:83:EB:A2:7A:B9:46:FC:69:A4:F8:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:eb:1c:4f:df:4b:3a:e8:92:b7:04:b8:ed:f9:83:d1:30:2f: b8:b6:b8:66:e9:6a:fd:bb:c8:6c:6e:b5:19:d9:68:8e:b2:2a: e7:08:c2:ee:9f:37:78:11:21:74:ae:1b:e8:f0:8d:10:fc:17: 9a:0e:05:ef:a2:9d:92:a3:f2:7b:ed:1e:f8:bd:f2:67:85:0f: 97:26:a7:00:06:c9:57:d9:bb:1b:33:1d:50:5e:ef:2a:54:2f: 48:6f:05:c4:24:8a:1b:57:18:a2:e4:54:81:81:41:a5:7f:ec: 18:03:66:00:27:3e:0e:c1:34:a2:0c:07:68:7b:74:0d:53:93: 77:50:d4:69:71:4a:8b:e9:58:7a:c5:8c:58:9c:9d:c3:0a:b5: 73:3d:1c:39:50:87:66:f8:b5:18:7f:87:1d:89:4d:84:b1:4d: 99:e8:20:34:3c:ad:83:2c:a7:b2:d2:43:0f:a3:b0:64:cd:5f: 98:b4:71:b6:3f:97:66:e2:be:7e:ea:5f:68:21:6b:72:1a:af: 99:ba:ba:44:c2:78:00:ed:25:44:0e:ad:5b:7e:56:2a:be:ba: 04:12:bf:98:e4:c5:36:8d:35:ef:c6:9d:ea:12:11:a0:90:a5: d2:70:49:eb:86:7e:ed:7e:3d:46:fc:70:60:51:d2:80:70:ec: e8:dc:90:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURuxhckYOJjG1nPnoiQ21efdV/9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2RkM2 OUE0RjgyMTAeFw0yNjAxMjMxOTI3MjlaFw0yNjAxMjcwMTUyMjlaMDMxMTAvBgNV BAMTKEVGQTRCM0IzN0MwQzQyMkMyMjJBNkE5QTMwNUE3MzU3NUMyMUFBQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChAsTyz6Fa6vtuSyyY3aa+eK83 i0kK9rrEWO5hxQViCyE/sg17TdBDaGQTbXkN0vVhJPXvlm7D+vaqm4l/PcLfr1MM 9KYIhUZqDDJ9GBiE8P7Gd8pcw6o67RP3fEZEiFEbHzU2qF62YoWAlWs/Fbkails1 lUvlnp8XpckAYgs3yqVWXzEACIsEk/8GNQPxOo2H24z4764I6MsrDusvOXLb8JJX iNTQubroZLIY6pDqJADgAz3k/NO9KSI93N4Q8gwcboubhM8cobJ0KznnAJ+ggdMO q3pSbQYCKVSDl2Kcz5iF0DICZqDILnG0CnesjV1LTK/ELza9Y9IixKEeqT5rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU76Szs3wMQiwiKmqaMFpzV1whqr4wHwYDVR0j BBgwFoAUhxQXK10/ycNqg+uierlG/Gmk+CEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDNkYjdkMi1iM2ZkLTQyMTQtYjZhNC1kMDE2MmY5NWU3MmUvMC84NzE0MTcyQjVE M0ZDOUMzNkE4M0VCQTI3QUI5NDZGQzY5QTRGODIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2RkM2OUE0 RjgyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQzZGI3ZDItYjNmZC00MjE0LWI2 YTQtZDAxNjJmOTVlNzJlLzAvODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2 RkM2OUE0RjgyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKrrHE/fSzrokrcEuO35g9EwL7i2uGbpav27 yGxutRnZaI6yKucIwu6fN3gRIXSuG+jwjRD8F5oOBe+inZKj8nvtHvi98meFD5cm pwAGyVfZuxszHVBe7ypUL0hvBcQkihtXGKLkVIGBQaV/7BgDZgAnPg7BNKIMB2h7 dA1Tk3dQ1GlxSovpWHrFjFicncMKtXM9HDlQh2b4tRh/hx2JTYSxTZnoIDQ8rYMs p7LSQw+jsGTNX5i0cbY/l2bivn7qX2gha3Iar5m6ukTCeADtJUQOrVt+Viq+ugQS v5jkxTaNNe/GneoSEaCQpdJwSeuGfu1+PUb8cGBR0oBw7OjckE8= -----END CERTIFICATE-----Generated at Sun Jan 25 20:32:24 2026 by rpki-client