This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.mft File: 8E9447BD6E58024BA4182380EFF3743772CEBED8.mft (raw, json) Hash identifier: 7pwamjycLtVuZRQw1HsnaaPkpkSFUZ7E6Vg0k4TcCe4= Subject key identifier: 0F:55:BE:63:5E:9D:80:2A:99:36:E7:2B:34:26:FA:E2:6E:EF:29:5C Authority key identifier: 8E:94:47:BD:6E:58:02:4B:A4:18:23:80:EF:F3:74:37:72:CE:BE:D8 Certificate issuer: /CN=8E9447BD6E58024BA4182380EFF3743772CEBED8 Certificate serial: 170AC107B974640B6FDCEA171C6A8D4E89E3FEA0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E9447BD6E58024BA4182380EFF3743772CEBED8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.mft Manifest number: 0222 Signing time: Sat 24 Jan 2026 02:52:30 +0000 Manifest this update: Sat 24 Jan 2026 02:47:30 +0000 Manifest next update: Tue 27 Jan 2026 07:54:30 +0000 Files and hashes: 1: 8E9447BD6E58024BA4182380EFF3743772CEBED8.crl (hash: xI6t71twmcg5IHZtNmq3zzfoHEJaLqY7DBDmf9Naq9g=) 2: 3130332e3136302e33372e302f32342d3234203d3e20313431353834.roa (hash: +IMY2tCHHq00hfSj0qqAGK3VJsbjGklWL5sab/AdO2Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.crl rsync://repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E9447BD6E58024BA4182380EFF3743772CEBED8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 07:54:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:0a:c1:07:b9:74:64:0b:6f:dc:ea:17:1c:6a:8d:4e:89:e3:fe:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E9447BD6E58024BA4182380EFF3743772CEBED8 Validity Not Before: Jan 24 02:47:30 2026 GMT Not After : Jan 27 07:54:30 2026 GMT Subject: CN=0F55BE635E9D802A9936E72B3426FAE26EEF295C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4c:73:90:1b:9c:34:01:21:af:73:08:b1:f8: bf:73:56:d1:37:5c:fe:f4:77:71:ed:c4:71:72:dd: 0f:f4:65:ad:fd:73:63:50:8a:d1:57:3e:6b:5b:ed: 49:a2:fc:6d:bc:58:8c:a1:a2:e3:f1:81:37:4b:ac: 1b:d1:88:59:78:bf:6c:8e:df:71:5d:8a:4a:bc:22: 6c:4a:b4:d0:0b:07:95:da:fe:df:86:7f:13:15:b1: 1d:ad:29:b6:ea:9c:d3:69:fd:e8:7d:de:da:21:0c: 55:17:77:ed:5d:af:d0:4c:d6:88:57:d1:48:04:ca: 42:93:71:da:21:a6:55:9f:41:ac:da:a4:81:ab:2f: f6:fb:90:03:73:94:d2:36:bd:42:68:13:83:42:09: 6c:67:e2:3e:19:21:0b:af:51:8c:cd:9a:4b:7a:54: b5:e4:a9:3d:a9:11:95:ac:5e:cb:ce:a1:ab:59:f5: d0:6c:13:ec:fb:dd:96:03:1d:93:8e:fb:2f:04:7c: 83:fc:c3:b6:24:48:19:d1:53:91:e1:48:38:e8:d4: a8:da:27:0a:49:ef:79:81:4a:aa:3b:88:a7:77:ee: 59:56:c5:a1:fc:84:42:85:2f:5b:9d:26:39:ca:8b: 1a:35:f1:ae:aa:15:95:8b:0e:f1:b0:60:b6:98:06: fc:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:55:BE:63:5E:9D:80:2A:99:36:E7:2B:34:26:FA:E2:6E:EF:29:5C X509v3 Authority Key Identifier: keyid:8E:94:47:BD:6E:58:02:4B:A4:18:23:80:EF:F3:74:37:72:CE:BE:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E9447BD6E58024BA4182380EFF3743772CEBED8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:5d:a7:5c:8a:ed:14:ed:43:a9:10:fc:31:1a:8c:e6:f3:e1: 0d:66:3c:fa:b7:fe:3a:9c:e5:a4:e2:3d:33:a5:f5:cf:6e:3e: d3:fe:02:ff:4d:ff:6d:36:a5:50:83:f8:ce:27:7d:cf:1f:20: 67:a1:58:e7:47:d4:42:4e:3d:a6:bf:95:5d:7f:20:ad:3e:a6: 25:d5:70:b2:05:10:93:f3:56:0d:d9:37:94:95:78:90:65:02: e3:01:50:c3:67:2d:0e:99:a1:fd:47:c9:54:1c:4c:25:75:f7: 3e:a7:55:c5:b0:c6:e8:e4:ff:8a:d5:52:59:a5:b0:97:b0:8a: 94:64:6c:6a:c2:8d:7c:ba:bf:89:7c:cb:b9:71:0e:70:65:1c: b1:79:75:c9:8e:11:6f:66:73:15:23:8b:60:e3:ad:df:72:2d: 68:fc:5b:db:b9:ac:ba:bc:b7:65:1c:98:80:76:3a:b8:14:e3: 06:b0:92:30:79:8a:52:bd:a4:f6:e4:71:ff:c1:d0:8a:51:f1: 11:28:01:20:a5:80:fa:f7:59:c0:01:74:76:c2:a4:c5:86:6d: 45:f6:13:90:e7:79:ba:93:86:b9:df:4e:b4:58:e9:b9:72:98: d4:32:ee:2b:b8:48:f1:f9:75:15:e5:34:21:2e:9f:31:41:08: 6f:e9:c2:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFwrBB7l0ZAtv3OoXHGqNTonj/qAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU5NDQ3QkQ2RTU4MDI0QkE0MTgyMzgwRUZGMzc0Mzc3 MkNFQkVEODAeFw0yNjAxMjQwMjQ3MzBaFw0yNjAxMjcwNzU0MzBaMDMxMTAvBgNV BAMTKDBGNTVCRTYzNUU5RDgwMkE5OTM2RTcyQjM0MjZGQUUyNkVFRjI5NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVTHOQG5w0ASGvcwix+L9zVtE3 XP70d3HtxHFy3Q/0Za39c2NQitFXPmtb7Umi/G28WIyhouPxgTdLrBvRiFl4v2yO 33Fdikq8ImxKtNALB5Xa/t+GfxMVsR2tKbbqnNNp/eh93tohDFUXd+1dr9BM1ohX 0UgEykKTcdohplWfQazapIGrL/b7kANzlNI2vUJoE4NCCWxn4j4ZIQuvUYzNmkt6 VLXkqT2pEZWsXsvOoatZ9dBsE+z73ZYDHZOO+y8EfIP8w7YkSBnRU5HhSDjo1Kja JwpJ73mBSqo7iKd37llWxaH8hEKFL1udJjnKixo18a6qFZWLDvGwYLaYBvwtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD1W+Y16dgCqZNucrNCb64m7vKVwwHwYDVR0j BBgwFoAUjpRHvW5YAkukGCOA7/N0N3LOvtgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ODQ2ZmVkNy1mODhlLTQ4ZWEtYTZkMS02Zjc1NmJjZjhkYjYvMC84RTk0NDdCRDZF NTgwMjRCQTQxODIzODBFRkYzNzQzNzcyQ0VCRUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEU5NDQ3QkQ2RTU4MDI0QkE0MTgyMzgwRUZGMzc0Mzc3MkNF QkVEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzg0NmZlZDctZjg4ZS00OGVhLWE2 ZDEtNmY3NTZiY2Y4ZGI2LzAvOEU5NDQ3QkQ2RTU4MDI0QkE0MTgyMzgwRUZGMzc0 Mzc3MkNFQkVEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ9dp1yK7RTtQ6kQ/DEajObz4Q1mPPq3/jqc 5aTiPTOl9c9uPtP+Av9N/202pVCD+M4nfc8fIGehWOdH1EJOPaa/lV1/IK0+piXV cLIFEJPzVg3ZN5SVeJBlAuMBUMNnLQ6Zof1HyVQcTCV19z6nVcWwxujk/4rVUlml sJewipRkbGrCjXy6v4l8y7lxDnBlHLF5dcmOEW9mcxUji2Djrd9yLWj8W9u5rLq8 t2UcmIB2OrgU4wawkjB5ilK9pPbkcf/B0IpR8REoASClgPr3WcABdHbCpMWGbUX2 E5DnebqThrnfTrRY6blymNQy7iu4SPH5dRXlNCEunzFBCG/pwvw= -----END CERTIFICATE-----Generated at Sun Jan 25 23:57:01 2026 by rpki-client