This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft File: 8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft (raw, json) Hash identifier: PxMLFL917pWoQPsYptCauV4F3aWS/ifEGMGprfDlkr8= Subject key identifier: D0:59:1F:D0:01:44:36:09:73:06:03:01:2C:55:79:88:A8:18:80:79 Authority key identifier: 8B:19:AC:E0:A7:39:14:92:B1:8B:E2:7A:C0:1D:2A:60:28:72:BF:C0 Certificate issuer: /CN=8B19ACE0A7391492B18BE27AC01D2A602872BFC0 Certificate serial: 6B8D39800CC04877700F2B4E13716BE3B09A0A7B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft Manifest number: 01C7 Signing time: Fri 23 Jan 2026 14:30:04 +0000 Manifest this update: Fri 23 Jan 2026 14:25:04 +0000 Manifest next update: Mon 26 Jan 2026 18:46:04 +0000 Files and hashes: 1: 8B19ACE0A7391492B18BE27AC01D2A602872BFC0.crl (hash: UuvpKT0+7EzppghOnCTRsaV9bEkpAZcjoBcTQhvRuOQ=) 2: 3130332e3132322e392e302f32342d3234203d3e20313530393635.roa (hash: QeU0/vEBTo6jIDTAqgbH9ossdE4o8/cj7giBqcJ2VYs=) 3: 3130332e3132322e382e302f32342d3234203d3e20313530393635.roa (hash: OBSu5NWIqhavEgs//Z/O6dTCa3LFoSwUa21LGk85Vss=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.crl rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 18:46:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:8d:39:80:0c:c0:48:77:70:0f:2b:4e:13:71:6b:e3:b0:9a:0a:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B19ACE0A7391492B18BE27AC01D2A602872BFC0 Validity Not Before: Jan 23 14:25:04 2026 GMT Not After : Jan 26 18:46:04 2026 GMT Subject: CN=D0591FD001443609730603012C557988A8188079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:47:3f:07:62:0b:d8:c8:7e:23:7f:b3:51:4b: 85:fb:85:c6:9c:13:42:79:13:6f:25:e8:d1:cf:ae: 8c:2a:8b:46:80:9a:72:e5:09:4f:79:11:44:f5:97: b6:6b:c9:7a:0b:95:23:5e:95:17:df:fd:d9:75:9c: db:57:fa:5a:30:58:c2:0c:42:e4:bc:43:ce:4b:87: 2a:97:11:fb:5d:c0:04:fa:cf:36:e2:49:4b:34:82: ce:9e:5f:d3:95:3f:83:67:55:31:0e:1c:0c:22:d2: 23:df:52:03:d8:75:40:09:0f:7d:82:b8:ea:24:e2: 9d:7b:1d:df:45:ad:06:95:84:2a:f6:d0:f6:91:c4: 9b:3e:98:6f:d5:ba:b2:16:30:22:4f:db:3c:3c:d8: 3e:c0:9e:4b:ce:e0:56:9d:bc:74:c9:fe:9f:60:82: 48:9d:b3:55:81:c1:c9:84:6a:5e:a2:77:51:f5:0c: 89:48:a3:e4:7f:48:12:ff:79:66:65:40:a3:ba:b4: c7:26:00:2a:86:c9:40:17:8e:d6:16:9a:d5:c8:68: 16:49:e8:04:44:97:11:7e:99:bc:d8:20:2c:00:fe: d0:33:35:c4:85:5d:32:4e:1e:1c:f5:e4:7b:17:ed: bf:cc:5d:94:42:4f:ec:20:0c:ff:e7:4f:14:d5:d6: 02:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:59:1F:D0:01:44:36:09:73:06:03:01:2C:55:79:88:A8:18:80:79 X509v3 Authority Key Identifier: keyid:8B:19:AC:E0:A7:39:14:92:B1:8B:E2:7A:C0:1D:2A:60:28:72:BF:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:04:b9:51:28:ff:77:91:42:55:6b:92:11:96:e3:56:96:74: 8e:13:6d:c9:2b:89:61:76:c9:8e:86:20:bd:31:aa:58:a7:9a: 33:6f:0c:1d:4a:6f:89:15:67:d6:36:20:9a:8e:ff:2e:d8:5d: ab:69:7a:5b:72:ce:10:9b:c5:35:5d:50:79:eb:7d:7e:04:81: 32:56:b1:c1:00:73:2c:4b:c3:da:50:b1:a7:f6:05:ed:85:e9: 3c:38:4b:dc:61:eb:70:f9:cc:dc:d2:6d:09:aa:21:f5:c1:1d: 0e:7d:aa:a5:05:78:22:90:84:3e:e4:20:94:28:53:65:31:f3: 59:28:13:76:66:6e:7b:21:7c:72:93:35:34:59:c1:d9:82:8a: c6:18:76:c0:a5:38:ab:0c:e6:cd:2f:ce:51:d6:e0:8b:6b:d5: 4d:8c:49:6d:6c:80:4a:8b:5c:f7:b9:c7:1b:ab:22:ce:f5:43: 17:e5:95:ab:1b:9d:46:f3:89:de:29:28:33:ec:63:e3:3c:90: 88:9d:74:71:01:71:d4:bb:e2:50:cc:a3:ec:83:34:ac:a3:91: b6:ef:8a:00:9b:de:f2:ba:b2:38:1b:08:65:51:4c:89:9a:93: 52:a3:90:f1:43:a2:ae:e3:ec:b9:bd:21:71:ba:91:04:9e:f2: 56:f4:d7:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa405gAzASHdwDytOE3Fr47CaCnswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIxOUFDRTBBNzM5MTQ5MkIxOEJFMjdBQzAxRDJBNjAy ODcyQkZDMDAeFw0yNjAxMjMxNDI1MDRaFw0yNjAxMjYxODQ2MDRaMDMxMTAvBgNV BAMTKEQwNTkxRkQwMDE0NDM2MDk3MzA2MDMwMTJDNTU3OTg4QTgxODgwNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPRz8HYgvYyH4jf7NRS4X7hcac E0J5E28l6NHProwqi0aAmnLlCU95EUT1l7ZryXoLlSNelRff/dl1nNtX+lowWMIM QuS8Q85LhyqXEftdwAT6zzbiSUs0gs6eX9OVP4NnVTEOHAwi0iPfUgPYdUAJD32C uOok4p17Hd9FrQaVhCr20PaRxJs+mG/VurIWMCJP2zw82D7AnkvO4FadvHTJ/p9g gkids1WBwcmEal6id1H1DIlIo+R/SBL/eWZlQKO6tMcmACqGyUAXjtYWmtXIaBZJ 6ARElxF+mbzYICwA/tAzNcSFXTJOHhz15HsX7b/MXZRCT+wgDP/nTxTV1gIlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0Fkf0AFENglzBgMBLFV5iKgYgHkwHwYDVR0j BBgwFoAUixms4Kc5FJKxi+J6wB0qYChyv8AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDY1MjlkYi05MzMwLTRlOTctYWRmMS1iMGRkZjFhNmU1OTkvMC84QjE5QUNFMEE3 MzkxNDkyQjE4QkUyN0FDMDFEMkE2MDI4NzJCRkMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIxOUFDRTBBNzM5MTQ5MkIxOEJFMjdBQzAxRDJBNjAyODcy QkZDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2NTI5ZGItOTMzMC00ZTk3LWFk ZjEtYjBkZGYxYTZlNTk5LzAvOEIxOUFDRTBBNzM5MTQ5MkIxOEJFMjdBQzAxRDJB NjAyODcyQkZDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABwEuVEo/3eRQlVrkhGW41aWdI4TbckriWF2 yY6GIL0xqlinmjNvDB1Kb4kVZ9Y2IJqO/y7YXatpeltyzhCbxTVdUHnrfX4EgTJW scEAcyxLw9pQsaf2Be2F6Tw4S9xh63D5zNzSbQmqIfXBHQ59qqUFeCKQhD7kIJQo U2Ux81koE3ZmbnshfHKTNTRZwdmCisYYdsClOKsM5s0vzlHW4Itr1U2MSW1sgEqL XPe5xxurIs71QxfllasbnUbzid4pKDPsY+M8kIiddHEBcdS74lDMo+yDNKyjkbbv igCb3vK6sjgbCGVRTImak1KjkPFDoq7j7Lm9IXG6kQSe8lb01/0= -----END CERTIFICATE-----Generated at Sun Jan 25 18:53:08 2026 by rpki-client