This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft File: 8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft (raw, json) Hash identifier: 52wMeVAoMD+G8LQApWlkgLFpc1OZpZRHnlfdXuGLows= Subject key identifier: C3:13:43:B2:7D:29:A8:A5:E5:31:92:9C:C5:D9:BB:DF:2A:CC:1B:65 Authority key identifier: 8C:BC:E2:EE:00:62:56:C9:A6:20:79:49:31:4A:7D:1F:CC:41:5B:5A Certificate issuer: /CN=8CBCE2EE006256C9A6207949314A7D1FCC415B5A Certificate serial: 0288BDF497708DAC5360575198AB7C3C353B570B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft Manifest number: 0250 Signing time: Sat 24 Jan 2026 15:11:35 +0000 Manifest this update: Sat 24 Jan 2026 15:06:35 +0000 Manifest next update: Tue 27 Jan 2026 22:53:35 +0000 Files and hashes: 1: 8CBCE2EE006256C9A6207949314A7D1FCC415B5A.crl (hash: ureosWmspWiZ8b9m2qJYlEbEsS93vvbbLKhymDqazeE=) 2: 3130332e3138372e3131322e302f32332d3234203d3e20313439373230.roa (hash: tJd9lCwOT2E5aUEAYGLVk9Vox9W7mUTKc82A3hANFMo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.crl rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 22:53:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:88:bd:f4:97:70:8d:ac:53:60:57:51:98:ab:7c:3c:35:3b:57:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CBCE2EE006256C9A6207949314A7D1FCC415B5A Validity Not Before: Jan 24 15:06:35 2026 GMT Not After : Jan 27 22:53:35 2026 GMT Subject: CN=C31343B27D29A8A5E531929CC5D9BBDF2ACC1B65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:36:d9:16:10:e7:38:03:5c:a2:60:49:e8:82: 85:4c:81:b4:d0:e2:9b:50:da:70:1d:da:6a:06:e8: 67:dc:01:eb:30:8c:f6:c9:c0:43:ec:cc:2c:6c:43: aa:35:40:1d:3a:95:c5:36:8e:84:a1:60:ea:2d:84: 7c:93:ff:52:8b:68:a1:40:06:81:23:02:f2:7d:dd: 17:46:ff:65:fc:2c:b4:fe:b1:23:73:1d:fe:1e:78: 1e:b3:40:57:27:db:86:24:f0:3e:e3:09:b5:f2:59: f1:60:e2:43:38:8b:d1:da:78:34:4a:1e:f1:c9:57: 07:94:01:a9:a5:85:af:e1:5c:7a:57:8a:95:8a:b0: c0:3f:bf:3c:ab:80:8e:89:9b:ed:6c:96:b7:63:e6: 57:29:8d:80:f9:9b:e1:d3:e0:97:60:e4:7b:48:12: b9:dd:28:ed:b6:fe:cd:87:f1:74:11:cf:37:74:60: e9:20:82:fb:1f:b8:d4:e9:c9:27:30:17:c5:24:c6: e1:e8:2d:b4:80:20:1a:1b:47:ae:89:1f:63:59:8b: 39:81:5e:8c:0d:dd:5e:fd:34:09:c6:f2:5c:61:0a: f2:a8:55:f5:41:c2:d0:0c:34:c5:85:25:e4:7f:a0: 54:35:90:8e:47:b7:a6:ab:a0:1a:a8:8b:6b:87:7c: 48:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:13:43:B2:7D:29:A8:A5:E5:31:92:9C:C5:D9:BB:DF:2A:CC:1B:65 X509v3 Authority Key Identifier: keyid:8C:BC:E2:EE:00:62:56:C9:A6:20:79:49:31:4A:7D:1F:CC:41:5B:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:9c:b6:d5:17:be:8d:ea:51:2d:8c:ab:b2:29:5d:90:59:b9: 9d:ed:48:40:3f:00:80:84:15:80:7f:8f:57:89:41:e9:b4:35: b5:93:98:28:e0:a3:6f:fa:1e:91:6c:78:a2:15:e9:b0:38:de: 72:09:aa:30:cc:33:6f:30:9d:0d:2a:78:eb:17:a8:90:ee:e2: b0:e5:0b:8b:37:53:5d:11:c1:32:d5:19:64:43:db:1d:98:45: b3:79:b0:4f:68:86:ee:ef:18:a5:15:64:1b:34:c7:33:6c:65: 53:26:f3:fd:ac:d7:9f:5d:72:58:e1:46:f5:45:01:41:1f:7e: 70:77:78:62:2a:7f:c8:5d:2c:5d:34:ab:a7:bb:e7:59:35:c1: c3:06:b1:e1:55:c2:e8:f4:a5:28:9b:e9:04:62:09:aa:49:eb: b8:75:17:73:22:42:4c:d6:6b:d0:0e:cc:e0:fb:5b:a6:52:6b: 00:ae:ee:da:4e:7f:d4:b5:30:3c:57:12:3d:8f:cc:a6:32:c3: 52:ad:cc:8f:6e:a0:65:df:cb:69:5c:a5:76:b8:26:1f:4b:e8: 3c:c4:90:8f:41:bf:e8:29:cc:da:9b:e1:9f:e4:9a:9e:67:94: 69:f9:e0:ce:e8:85:d5:95:ff:e4:e2:4c:6f:9b:67:dd:0c:3a: 7a:95:bf:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAoi99JdwjaxTYFdRmKt8PDU7VwswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENCQ0UyRUUwMDYyNTZDOUE2MjA3OTQ5MzE0QTdEMUZD QzQxNUI1QTAeFw0yNjAxMjQxNTA2MzVaFw0yNjAxMjcyMjUzMzVaMDMxMTAvBgNV BAMTKEMzMTM0M0IyN0QyOUE4QTVFNTMxOTI5Q0M1RDlCQkRGMkFDQzFCNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfNtkWEOc4A1yiYEnogoVMgbTQ 4ptQ2nAd2moG6GfcAeswjPbJwEPszCxsQ6o1QB06lcU2joShYOothHyT/1KLaKFA BoEjAvJ93RdG/2X8LLT+sSNzHf4eeB6zQFcn24Yk8D7jCbXyWfFg4kM4i9HaeDRK HvHJVweUAamlha/hXHpXipWKsMA/vzyrgI6Jm+1slrdj5lcpjYD5m+HT4Jdg5HtI ErndKO22/s2H8XQRzzd0YOkggvsfuNTpyScwF8UkxuHoLbSAIBobR66JH2NZizmB XowN3V79NAnG8lxhCvKoVfVBwtAMNMWFJeR/oFQ1kI5Ht6aroBqoi2uHfEjNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwxNDsn0pqKXlMZKcxdm73yrMG2UwHwYDVR0j BBgwFoAUjLzi7gBiVsmmIHlJMUp9H8xBW1owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NThkYjg3Yi0xNmNkLTQzN2EtYTViNS0wOGNiMzVkYTk3ZjAvMC84Q0JDRTJFRTAw NjI1NkM5QTYyMDc5NDkzMTRBN0QxRkNDNDE1QjVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENCQ0UyRUUwMDYyNTZDOUE2MjA3OTQ5MzE0QTdEMUZDQzQx NUI1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzU4ZGI4N2ItMTZjZC00MzdhLWE1 YjUtMDhjYjM1ZGE5N2YwLzAvOENCQ0UyRUUwMDYyNTZDOUE2MjA3OTQ5MzE0QTdE MUZDQzQxNUI1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADucttUXvo3qUS2Mq7IpXZBZuZ3tSEA/AICE FYB/j1eJQem0NbWTmCjgo2/6HpFseKIV6bA43nIJqjDMM28wnQ0qeOsXqJDu4rDl C4s3U10RwTLVGWRD2x2YRbN5sE9ohu7vGKUVZBs0xzNsZVMm8/2s159dcljhRvVF AUEffnB3eGIqf8hdLF00q6e751k1wcMGseFVwuj0pSib6QRiCapJ67h1F3MiQkzW a9AOzOD7W6ZSawCu7tpOf9S1MDxXEj2PzKYyw1KtzI9uoGXfy2lcpXa4Jh9L6DzE kI9Bv+gpzNqb4Z/kmp5nlGn54M7ohdWV/+TiTG+bZ90MOnqVv6Q= -----END CERTIFICATE-----Generated at Sun Jan 25 20:32:31 2026 by rpki-client