This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.mft File: 8115D30091F8948B76AE0AAC8B4F68550DA321CD.mft (raw, json) Hash identifier: FWkmDeGTGLTDGsHt4Q8XkkWaG5+I5OGb3DGT4g1FqBk= Subject key identifier: 79:E4:65:F8:68:3A:45:66:DE:AC:1A:BE:92:55:83:D0:10:24:CF:9A Authority key identifier: 81:15:D3:00:91:F8:94:8B:76:AE:0A:AC:8B:4F:68:55:0D:A3:21:CD Certificate issuer: /CN=8115D30091F8948B76AE0AAC8B4F68550DA321CD Certificate serial: 23CCD211F609D317BB7E2C690E337A7BF0E93496 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8115D30091F8948B76AE0AAC8B4F68550DA321CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.mft Manifest number: 0240 Signing time: Sat 24 Jan 2026 09:20:03 +0000 Manifest this update: Sat 24 Jan 2026 09:15:03 +0000 Manifest next update: Tue 27 Jan 2026 11:29:03 +0000 Files and hashes: 1: 323030313a6466303a62633a3a2f34382d3438203d3e203435373331.roa (hash: 0Va8dfmQpSBmOg74IAPb4RGOIS0UpCgpkBTTVh/iLok=) 2: 3138302e3233352e3134382e302f32322d3234203d3e203435373331.roa (hash: HxGB/bUslsxHfeCfoct3SORx0s0Y1RxTBE2WHAbQK5w=) 3: 8115D30091F8948B76AE0AAC8B4F68550DA321CD.crl (hash: Bg+HLMGKh/uD85ZHL03nqJnFGMXJdsiJRNWzIUWn3cw=) 4: 34332e3232392e3234382e302f32322d3234203d3e203435373331.roa (hash: 6QYiowaUHr77b6SHtMm/wFHLHsnE4/CHR6s2UKLu4J0=) 5: 3130332e362e35322e302f32322d3234203d3e203435373331.roa (hash: 6tOL4hJTfKy0QTohf2XnIaRbJ/5EvxeyWw/OGANzGm8=) 6: 3131332e32302e32382e302f32322d3234203d3e203435373331.roa (hash: 4OyDyZeEQND65aawqOInlxqrAJlZe0Z4Rsi7/2+kKVI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.crl rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8115D30091F8948B76AE0AAC8B4F68550DA321CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 11:29:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:cc:d2:11:f6:09:d3:17:bb:7e:2c:69:0e:33:7a:7b:f0:e9:34:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8115D30091F8948B76AE0AAC8B4F68550DA321CD Validity Not Before: Jan 24 09:15:03 2026 GMT Not After : Jan 27 11:29:03 2026 GMT Subject: CN=79E465F8683A4566DEAC1ABE925583D01024CF9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:31:62:cf:12:9a:9d:41:50:21:85:82:63:c6: 84:46:2f:b5:0b:6b:5b:92:19:09:7d:0e:bc:bf:d4: 91:57:8d:00:06:fa:6c:13:74:49:12:37:26:fe:db: f4:8e:cf:3d:3d:6c:9d:9b:b2:c1:7d:f2:38:61:6e: b9:af:7a:8c:a4:15:58:51:47:0f:22:64:d7:ec:86: 69:08:3a:7c:ba:af:ed:3b:1d:64:63:5c:62:8c:bb: 68:eb:08:50:e3:ca:0b:84:41:6c:d9:56:30:94:8b: a9:dc:e8:ba:e2:34:81:96:89:cb:6a:63:79:94:25: 5a:22:c6:81:6e:27:2c:7c:70:ba:49:c2:a6:23:14: 8d:4e:0c:45:9a:52:8b:a7:b6:98:4f:c6:f5:99:68: 8e:ea:36:16:a4:45:56:a0:ad:5a:da:28:70:e2:20: 9c:f5:05:8d:fd:3b:56:da:f0:89:f8:17:2a:ba:e0: 20:a8:13:64:87:37:dd:80:90:20:c2:a8:c2:4b:07: ee:02:c2:61:59:03:04:73:2a:73:95:4c:d5:2d:d8: 4c:1c:83:b1:64:fb:fd:80:68:67:cd:77:5c:8e:9a: 43:06:da:e9:bc:4d:4d:1a:ac:e3:be:3c:d9:43:ac: db:9c:d9:46:ef:63:5c:91:91:b7:c8:74:2b:ec:f2: 95:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:E4:65:F8:68:3A:45:66:DE:AC:1A:BE:92:55:83:D0:10:24:CF:9A X509v3 Authority Key Identifier: keyid:81:15:D3:00:91:F8:94:8B:76:AE:0A:AC:8B:4F:68:55:0D:A3:21:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8115D30091F8948B76AE0AAC8B4F68550DA321CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:3d:cb:59:ae:6c:3b:c0:dd:e8:0f:9c:43:a3:f3:b8:a8:df: f7:32:d0:f4:3e:55:d2:8c:55:de:8a:9c:69:10:fa:08:10:5d: ea:21:cf:3e:e6:f0:cf:4c:b9:96:a4:47:4c:5a:44:b0:c2:37: 19:ac:f3:22:5f:fe:9d:0d:d9:8f:1c:fe:64:53:5c:e6:d0:8c: 1c:51:ad:98:8d:a9:21:40:a0:95:46:6b:24:1e:af:a2:21:2b: 08:d8:02:61:fa:dc:2f:25:8b:64:54:5f:03:e3:9a:97:ed:2a: 50:eb:41:1b:29:65:7a:ce:2c:56:e7:56:a9:e8:1a:68:64:66: d8:f2:79:e0:72:dd:10:7d:bc:bf:8f:52:d0:70:79:29:a9:8d: 5c:db:31:23:c2:df:a8:74:42:16:48:71:fd:d5:5a:e9:4f:06: ef:d6:5e:bc:c1:eb:fd:a0:4b:84:64:94:b8:db:f4:5a:76:e1: 41:9d:27:7b:75:af:af:95:1d:60:35:28:28:a6:2c:ad:c7:f5: 85:09:08:95:87:9a:3f:c9:cd:2a:8a:e9:0e:76:91:8c:89:4f: 92:68:3b:70:ca:21:f3:ef:36:31:af:52:10:ce:fe:b9:6b:df: 96:99:c2:34:94:e4:d3:0c:12:ae:bf:6b:15:ac:84:bb:6f:c2: 36:f6:89:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI8zSEfYJ0xe7fixpDjN6e/DpNJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODExNUQzMDA5MUY4OTQ4Qjc2QUUwQUFDOEI0RjY4NTUw REEzMjFDRDAeFw0yNjAxMjQwOTE1MDNaFw0yNjAxMjcxMTI5MDNaMDMxMTAvBgNV BAMTKDc5RTQ2NUY4NjgzQTQ1NjZERUFDMUFCRTkyNTU4M0QwMTAyNENGOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEMWLPEpqdQVAhhYJjxoRGL7UL a1uSGQl9Dry/1JFXjQAG+mwTdEkSNyb+2/SOzz09bJ2bssF98jhhbrmveoykFVhR Rw8iZNfshmkIOny6r+07HWRjXGKMu2jrCFDjyguEQWzZVjCUi6nc6LriNIGWictq Y3mUJVoixoFuJyx8cLpJwqYjFI1ODEWaUountphPxvWZaI7qNhakRVagrVraKHDi IJz1BY39O1ba8In4Fyq64CCoE2SHN92AkCDCqMJLB+4CwmFZAwRzKnOVTNUt2Ewc g7Fk+/2AaGfNd1yOmkMG2um8TU0arOO+PNlDrNuc2UbvY1yRkbfIdCvs8pVhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeeRl+Gg6RWberBq+klWD0BAkz5owHwYDVR0j BBgwFoAUgRXTAJH4lIt2rgqsi09oVQ2jIc0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YmRiYmMwOC00ZThlLTQ0YmEtYTRjZi0wNWUyMzNkZGEzYTUvMC84MTE1RDMwMDkx Rjg5NDhCNzZBRTBBQUM4QjRGNjg1NTBEQTMyMUNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODExNUQzMDA5MUY4OTQ4Qjc2QUUwQUFDOEI0RjY4NTUwREEz MjFDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2JkYmJjMDgtNGU4ZS00NGJhLWE0 Y2YtMDVlMjMzZGRhM2E1LzAvODExNUQzMDA5MUY4OTQ4Qjc2QUUwQUFDOEI0RjY4 NTUwREEzMjFDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANI9y1mubDvA3egPnEOj87io3/cy0PQ+VdKM Vd6KnGkQ+ggQXeohzz7m8M9MuZakR0xaRLDCNxms8yJf/p0N2Y8c/mRTXObQjBxR rZiNqSFAoJVGayQer6IhKwjYAmH63C8li2RUXwPjmpftKlDrQRspZXrOLFbnVqno GmhkZtjyeeBy3RB9vL+PUtBweSmpjVzbMSPC36h0QhZIcf3VWulPBu/WXrzB6/2g S4RklLjb9Fp24UGdJ3t1r6+VHWA1KCimLK3H9YUJCJWHmj/JzSqK6Q52kYyJT5Jo O3DKIfPvNjGvUhDO/rlr35aZwjSU5NMMEq6/axWshLtvwjb2iaE= -----END CERTIFICATE-----Generated at Sun Jan 25 20:26:42 2026 by rpki-client