This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.mft File: 871B4235DFC56C482416E7BBA192562092FFE055.mft (raw, json) Hash identifier: ZuQ/4t5AUHg5O2TXme7Z4DsBSj4oo+DwVpn6yI1Nufw= Subject key identifier: 62:FA:79:BB:7F:4B:3B:E8:D3:2C:94:DD:C0:1E:6D:6E:27:80:D7:10 Authority key identifier: 87:1B:42:35:DF:C5:6C:48:24:16:E7:BB:A1:92:56:20:92:FF:E0:55 Certificate issuer: /CN=871B4235DFC56C482416E7BBA192562092FFE055 Certificate serial: 6EFE8ED284C0EBDB9D8E366DDCA3BF45345172B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/871B4235DFC56C482416E7BBA192562092FFE055.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.mft Manifest number: 0133 Signing time: Sun 25 Jan 2026 12:32:17 +0000 Manifest this update: Sun 25 Jan 2026 12:27:17 +0000 Manifest next update: Wed 28 Jan 2026 17:59:17 +0000 Files and hashes: 1: 871B4235DFC56C482416E7BBA192562092FFE055.crl (hash: xuN7Sq/qa4uWPoqoZs667h0IhV+k1oxw6fKcg43PULA=) 2: 3135372e32302e39322e302f32342d3234203d3e20313532343037.roa (hash: QrSBRaxGaWU8ZoD0zYmeD1ZaWtynoFSmr/bVUUg5r5E=) 3: 3135372e32302e39332e302f32342d3234203d3e20313532343037.roa (hash: 7xhwBLoxBcZfSoTZvdUTvLkraKKygpQjYGPK+6LQ1oA=) 4: 3135372e32302e39322e302f32332d3233203d3e20313532343037.roa (hash: P7Y8t8QlzVHnPDCRyEAdHrWqFac2Md1CGzVdP33gimk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.crl rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/871B4235DFC56C482416E7BBA192562092FFE055.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 17:59:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:fe:8e:d2:84:c0:eb:db:9d:8e:36:6d:dc:a3:bf:45:34:51:72:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871B4235DFC56C482416E7BBA192562092FFE055 Validity Not Before: Jan 25 12:27:17 2026 GMT Not After : Jan 28 17:59:17 2026 GMT Subject: CN=62FA79BB7F4B3BE8D32C94DDC01E6D6E2780D710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8a:36:c6:6f:99:3f:46:06:b3:41:e8:e5:36: e2:cb:0b:53:b4:fb:a6:05:ff:85:71:60:a8:fa:64: 74:0b:05:07:7f:b0:a0:f9:18:ec:07:09:31:57:c7: 80:1e:c8:7f:c1:b5:eb:d1:9e:89:36:08:21:2f:39: ee:7d:59:c6:20:c3:1f:2b:47:6e:ef:da:66:f8:6c: 98:c7:79:d1:91:ba:b6:ab:18:82:9d:ea:7c:d9:85: 17:51:82:4e:f6:8d:55:a1:0d:e4:ea:b5:4c:12:1d: fb:1b:54:1f:bc:5b:54:6d:2d:b4:e8:89:61:b1:a6: 55:12:24:30:b0:05:c3:78:16:8d:d8:05:3d:da:06: b8:bc:90:3e:02:c7:14:8b:af:71:8c:bc:51:b8:fe: d2:e9:56:1d:2b:1d:e4:6d:95:b6:42:f3:51:bd:ab: 60:84:99:45:2d:af:73:15:3a:73:6f:52:f5:a1:a6: 34:da:b2:96:62:f5:d3:48:3b:d6:a4:41:0b:38:4f: 32:59:fa:5e:e7:51:d6:69:14:ce:19:40:b1:9f:f3: 83:39:9e:b0:49:33:d6:4f:44:b3:4b:79:15:d9:de: e0:42:af:ae:02:e5:20:06:be:66:98:4b:98:58:bd: cb:a3:92:23:c5:46:59:3d:dc:93:50:75:5c:fd:66: be:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:FA:79:BB:7F:4B:3B:E8:D3:2C:94:DD:C0:1E:6D:6E:27:80:D7:10 X509v3 Authority Key Identifier: keyid:87:1B:42:35:DF:C5:6C:48:24:16:E7:BB:A1:92:56:20:92:FF:E0:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/871B4235DFC56C482416E7BBA192562092FFE055.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:9b:ff:b7:6e:cb:53:39:3e:f6:e6:8d:04:4c:44:a2:45:cd: b2:da:9f:29:d8:c5:7e:f1:8e:a7:84:4f:5b:73:7b:bb:dd:f8: 9e:2f:20:96:fc:ff:73:e4:bc:00:52:b2:ca:6f:5b:99:a0:5f: 02:fc:67:c0:da:aa:30:2c:5d:86:3a:86:15:17:05:3f:ac:45: 6b:70:c6:33:58:2d:2f:25:c5:cf:c9:b9:42:21:cb:76:3a:76: 00:b6:c4:e4:34:e7:4f:1a:a0:47:87:6a:c3:8e:60:da:7b:53: 88:01:66:81:96:a0:eb:e7:f6:5a:5b:8e:06:3c:13:8b:05:b6: cd:ae:4c:f3:51:c5:7d:d6:d4:1e:05:58:21:c8:1c:6b:43:4c: e7:aa:d0:79:89:ad:19:23:f4:24:25:bc:b9:6a:49:90:35:04: 88:1e:27:60:6e:1c:a1:ed:be:f2:e2:a2:7f:0f:fe:69:cc:4b: 6b:27:fd:40:40:81:86:75:79:86:8e:9e:bc:a5:99:96:3f:0a: e6:bf:e2:a7:2a:bd:83:88:30:07:28:e1:6e:81:8f:5a:4e:ec: fe:c4:51:dd:39:a4:06:6e:ea:cf:26:c0:4a:e9:24:80:d3:66: 94:8f:43:b8:7e:ab:89:f8:69:8b:82:6d:da:82:1a:28:2a:1b: f2:19:29:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbv6O0oTA69udjjZt3KO/RTRRcrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcxQjQyMzVERkM1NkM0ODI0MTZFN0JCQTE5MjU2MjA5 MkZGRTA1NTAeFw0yNjAxMjUxMjI3MTdaFw0yNjAxMjgxNzU5MTdaMDMxMTAvBgNV BAMTKDYyRkE3OUJCN0Y0QjNCRThEMzJDOTREREMwMUU2RDZFMjc4MEQ3MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEijbGb5k/RgazQejlNuLLC1O0 +6YF/4VxYKj6ZHQLBQd/sKD5GOwHCTFXx4AeyH/BtevRnok2CCEvOe59WcYgwx8r R27v2mb4bJjHedGRurarGIKd6nzZhRdRgk72jVWhDeTqtUwSHfsbVB+8W1RtLbTo iWGxplUSJDCwBcN4Fo3YBT3aBri8kD4CxxSLr3GMvFG4/tLpVh0rHeRtlbZC81G9 q2CEmUUtr3MVOnNvUvWhpjTaspZi9dNIO9akQQs4TzJZ+l7nUdZpFM4ZQLGf84M5 nrBJM9ZPRLNLeRXZ3uBCr64C5SAGvmaYS5hYvcujkiPFRlk93JNQdVz9Zr6JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYvp5u39LO+jTLJTdwB5tbieA1xAwHwYDVR0j BBgwFoAUhxtCNd/FbEgkFue7oZJWIJL/4FUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YTg5NmZkYy01NjM4LTQxZDItOGE5OS02OGNlODE2YmQzY2YvMC84NzFCNDIzNURG QzU2QzQ4MjQxNkU3QkJBMTkyNTYyMDkyRkZFMDU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODcxQjQyMzVERkM1NkM0ODI0MTZFN0JCQTE5MjU2MjA5MkZG RTA1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmE4OTZmZGMtNTYzOC00MWQyLThh OTktNjhjZTgxNmJkM2NmLzAvODcxQjQyMzVERkM1NkM0ODI0MTZFN0JCQTE5MjU2 MjA5MkZGRTA1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEeb/7duy1M5PvbmjQRMRKJFzbLanynYxX7x jqeET1tze7vd+J4vIJb8/3PkvABSsspvW5mgXwL8Z8DaqjAsXYY6hhUXBT+sRWtw xjNYLS8lxc/JuUIhy3Y6dgC2xOQ0508aoEeHasOOYNp7U4gBZoGWoOvn9lpbjgY8 E4sFts2uTPNRxX3W1B4FWCHIHGtDTOeq0HmJrRkj9CQlvLlqSZA1BIgeJ2BuHKHt vvLion8P/mnMS2sn/UBAgYZ1eYaOnrylmZY/Cua/4qcqvYOIMAco4W6Bj1pO7P7E Ud05pAZu6s8mwErpJIDTZpSPQ7h+q4n4aYuCbdqCGigqG/IZKeg= -----END CERTIFICATE-----Generated at Mon Jan 26 04:58:12 2026 by rpki-client