This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft File: 8790EFE9518BF8664B34E1227585F3516FDC5367.mft (raw, json) Hash identifier: FlWjmQbMaYm1dtDD3d59rt7ZXNs6tSisToZLadR7/mk= Subject key identifier: 19:35:3E:AD:68:2E:E8:8C:16:1C:12:90:C8:CC:EA:A5:77:DC:79:5B Authority key identifier: 87:90:EF:E9:51:8B:F8:66:4B:34:E1:22:75:85:F3:51:6F:DC:53:67 Certificate issuer: /CN=8790EFE9518BF8664B34E1227585F3516FDC5367 Certificate serial: 0939C01ECCC036B2F343309519B757EF0776B0DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8790EFE9518BF8664B34E1227585F3516FDC5367.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft Manifest number: 0241 Signing time: Fri 23 Jan 2026 20:41:38 +0000 Manifest this update: Fri 23 Jan 2026 20:36:38 +0000 Manifest next update: Tue 27 Jan 2026 04:08:38 +0000 Files and hashes: 1: 8790EFE9518BF8664B34E1227585F3516FDC5367.crl (hash: 7YyJh8xLpmZN/EPRf1mhwwQkDgKAti6F1W+Ipwdz2No=) 2: 3130332e3136362e39302e302f32332d3234203d3e20313431393431.roa (hash: u/DfRKi6okqGd/2PRwDyTkJXR+LfAGJBXiMbBVUigkU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.crl rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8790EFE9518BF8664B34E1227585F3516FDC5367.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 04:08:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:39:c0:1e:cc:c0:36:b2:f3:43:30:95:19:b7:57:ef:07:76:b0:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8790EFE9518BF8664B34E1227585F3516FDC5367 Validity Not Before: Jan 23 20:36:38 2026 GMT Not After : Jan 27 04:08:38 2026 GMT Subject: CN=19353EAD682EE88C161C1290C8CCEAA577DC795B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:81:71:c4:4d:e0:b7:d0:23:35:53:24:3d:94: fc:e3:a9:f2:c3:52:92:1d:f8:d4:fb:a1:63:86:4d: a5:83:8c:d7:25:3a:78:bc:69:8f:35:14:c7:66:43: d2:67:54:92:cb:40:b0:8e:dc:3c:cb:c3:cb:28:b5: d2:c1:68:48:af:d8:ba:cc:df:21:c0:d4:e9:94:fe: 58:27:5d:28:96:a8:0d:66:30:73:05:2f:b0:e4:d2: 7e:2c:a1:2e:57:28:8a:c8:b2:45:1f:99:f2:11:77: c8:8e:00:c9:e8:8b:cb:12:0e:ec:a9:a0:89:5b:a9: 76:6e:e4:d5:db:b3:5a:b5:05:4e:53:87:2b:65:6d: ec:13:c7:67:96:c7:b9:1b:78:3f:50:d7:ee:9a:ef: 5f:f0:05:1f:78:02:94:c3:4f:9a:e7:e2:0c:1d:d5: ab:fd:b2:9a:1f:0d:46:5b:4d:da:fe:83:20:97:84: ff:bc:49:b5:8c:02:f7:88:9f:b7:d4:0d:ce:58:3b: fa:6b:33:7d:31:7e:a6:ed:46:eb:bc:f3:d6:59:5a: 97:e4:62:42:2f:08:3c:ef:9e:c6:61:48:e5:b3:c8: bb:f0:80:8e:03:63:61:51:18:e5:eb:8d:13:8f:b8: 26:57:1e:ef:bf:63:9f:4e:0d:d3:4d:30:d7:e3:b3: 60:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:35:3E:AD:68:2E:E8:8C:16:1C:12:90:C8:CC:EA:A5:77:DC:79:5B X509v3 Authority Key Identifier: keyid:87:90:EF:E9:51:8B:F8:66:4B:34:E1:22:75:85:F3:51:6F:DC:53:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8790EFE9518BF8664B34E1227585F3516FDC5367.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:ee:6e:60:06:5b:d4:b6:c8:9c:73:1c:a0:57:33:81:d3:43: 46:c8:72:71:65:5e:de:d0:1b:4a:e7:a8:36:65:dd:3e:b0:e9: 4e:0b:5f:85:b4:16:5a:10:71:e9:69:0d:26:4c:3e:c6:cb:29: a2:9d:15:12:ed:a6:b0:95:f1:a1:68:a1:f2:9d:df:5c:85:a2: f2:dd:42:a3:03:a9:6c:28:7f:18:86:69:71:10:6e:67:0d:aa: 8b:17:4f:d2:86:34:8e:f5:8b:57:72:f1:a3:6d:b2:94:e9:23: db:a2:cc:cf:05:18:20:79:ea:fe:fe:f9:0e:9e:a8:fc:d2:db: 8c:bf:c1:d0:47:28:99:eb:43:b0:d4:0a:f1:73:20:fb:df:f7: 48:d3:88:84:22:7c:83:7d:13:bb:ea:c2:04:c4:ce:43:4a:e2: 6c:fb:e6:2f:34:13:fb:b9:36:d5:8d:78:33:4a:47:e8:13:b2: 43:19:d4:fa:b5:2d:3c:88:61:db:51:d4:ab:44:ce:f1:c1:9b: fe:32:a0:5d:b3:64:68:07:ea:4b:f6:50:1e:92:50:0e:2a:f1: 14:61:26:15:db:26:6b:9a:5e:dd:2f:a7:d1:80:78:65:d2:8f: 00:ef:6b:97:ff:ad:8c:e0:13:63:a3:67:e2:f0:7a:ed:f8:2d: dc:d2:ad:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCTnAHszANrLzQzCVGbdX7wd2sNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc5MEVGRTk1MThCRjg2NjRCMzRFMTIyNzU4NUYzNTE2 RkRDNTM2NzAeFw0yNjAxMjMyMDM2MzhaFw0yNjAxMjcwNDA4MzhaMDMxMTAvBgNV BAMTKDE5MzUzRUFENjgyRUU4OEMxNjFDMTI5MEM4Q0NFQUE1NzdEQzc5NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUgXHETeC30CM1UyQ9lPzjqfLD UpId+NT7oWOGTaWDjNclOni8aY81FMdmQ9JnVJLLQLCO3DzLw8sotdLBaEiv2LrM 3yHA1OmU/lgnXSiWqA1mMHMFL7Dk0n4soS5XKIrIskUfmfIRd8iOAMnoi8sSDuyp oIlbqXZu5NXbs1q1BU5ThytlbewTx2eWx7kbeD9Q1+6a71/wBR94ApTDT5rn4gwd 1av9spofDUZbTdr+gyCXhP+8SbWMAveIn7fUDc5YO/prM30xfqbtRuu889ZZWpfk YkIvCDzvnsZhSOWzyLvwgI4DY2FRGOXrjROPuCZXHu+/Y59ODdNNMNfjs2BHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGTU+rWgu6IwWHBKQyMzqpXfceVswHwYDVR0j BBgwFoAUh5Dv6VGL+GZLNOEidYXzUW/cU2cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZThjYmRjOC1kMTk1LTRjN2QtYjNlOC0wYThmYmFlOGMyODQvMC84NzkwRUZFOTUx OEJGODY2NEIzNEUxMjI3NTg1RjM1MTZGREM1MzY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODc5MEVGRTk1MThCRjg2NjRCMzRFMTIyNzU4NUYzNTE2RkRD NTM2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U4Y2JkYzgtZDE5NS00YzdkLWIz ZTgtMGE4ZmJhZThjMjg0LzAvODc5MEVGRTk1MThCRjg2NjRCMzRFMTIyNzU4NUYz NTE2RkRDNTM2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFXubmAGW9S2yJxzHKBXM4HTQ0bIcnFlXt7Q G0rnqDZl3T6w6U4LX4W0FloQcelpDSZMPsbLKaKdFRLtprCV8aFoofKd31yFovLd QqMDqWwofxiGaXEQbmcNqosXT9KGNI71i1dy8aNtspTpI9uizM8FGCB56v7++Q6e qPzS24y/wdBHKJnrQ7DUCvFzIPvf90jTiIQifIN9E7vqwgTEzkNK4mz75i80E/u5 NtWNeDNKR+gTskMZ1Pq1LTyIYdtR1KtEzvHBm/4yoF2zZGgH6kv2UB6SUA4q8RRh JhXbJmuaXt0vp9GAeGXSjwDva5f/rYzgE2OjZ+Lweu34LdzSrSU= -----END CERTIFICATE-----Generated at Sun Jan 25 20:33:15 2026 by rpki-client