This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft File: B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft (raw, json) Hash identifier: e9yjC8dXEW+Y/EqQO98CJHEVrOj0lVO0P+budXdm7DI= Subject key identifier: AA:C7:38:BB:4E:43:D8:33:72:34:58:BA:4B:1D:3D:DC:43:35:A6:F0 Authority key identifier: B8:D4:44:C5:B3:18:4A:4F:8C:8F:19:9A:43:22:42:C4:4E:19:EA:CB Certificate issuer: /CN=B8D444C5B3184A4F8C8F199A432242C44E19EACB Certificate serial: 60D96D18291BD40CB6988631502A508F21CA9594 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft Manifest number: FD Signing time: Sun 25 Jan 2026 20:02:04 +0000 Manifest this update: Sun 25 Jan 2026 19:57:04 +0000 Manifest next update: Thu 29 Jan 2026 07:51:04 +0000 Files and hashes: 1: 3136302e32352e33362e302f32342d3234203d3e20313532383332.roa (hash: 1SJ9LA44FkXb29+CiOLplkV9zxTaWTCw2H5Ki5oako8=) 2: B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl (hash: bLMpcOYBrIFt12qIRUtNr1oLgdJxabumWzGP7+zMeGQ=) 3: 3136302e32352e33362e302f32332d3234203d3e20313532383332.roa (hash: 9wCzZBokUdgA6nDZL9CPWVnRmT/IcfmN/N7BSRO44UA=) 4: 3136302e32352e33372e302f32342d3234203d3e20313532383332.roa (hash: 2EK7G4yp/ra7lqC0aFCR3YZxswSuxrQQ2ZJJKEPHMZg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Jan 2026 07:51:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:d9:6d:18:29:1b:d4:0c:b6:98:86:31:50:2a:50:8f:21:ca:95:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8D444C5B3184A4F8C8F199A432242C44E19EACB Validity Not Before: Jan 25 19:57:04 2026 GMT Not After : Jan 29 07:51:04 2026 GMT Subject: CN=AAC738BB4E43D833723458BA4B1D3DDC4335A6F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fa:7f:08:f3:46:cd:dd:62:3e:e8:8a:2f:4b: a6:24:42:f1:7b:04:53:31:ea:ff:e6:2f:24:71:8a: 3d:3e:dd:0d:84:56:b0:c9:89:b7:79:30:2b:13:a3: 01:2d:08:7c:30:05:55:15:77:ff:42:f3:6a:b4:1e: 0d:59:51:d3:cf:3d:28:80:29:44:d7:12:d8:9a:8b: 56:39:59:e4:23:e5:40:25:c1:2b:32:4d:ba:ac:28: 0d:0d:15:60:df:a5:02:14:52:48:60:49:ac:df:16: d5:ab:c1:0e:de:bf:07:aa:2d:97:d5:4e:7a:be:9c: 2c:6c:cf:3d:6b:ea:8a:3a:cd:11:44:3a:a6:ae:f8: 5e:7f:72:b9:f0:db:51:6a:0b:6a:6c:51:f1:72:77: a3:d7:42:2c:f6:2a:f1:ee:a7:4d:fe:72:da:1c:f0: 87:c0:9e:63:ba:40:db:55:0e:e4:38:e6:48:7f:0f: 32:88:69:2e:9d:08:e6:c6:b7:8d:04:f1:bf:fe:bd: 51:b9:54:f5:37:d5:67:aa:e3:6a:c8:2c:ef:4f:f9: 09:5b:31:be:c8:76:b2:9e:9f:01:2e:c4:9d:6f:bf: 9f:89:25:85:74:4e:72:2d:fd:e2:29:2b:9d:4b:fa: 1a:5a:92:ab:eb:72:e7:4a:e9:3d:82:6b:de:49:3a: f0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:C7:38:BB:4E:43:D8:33:72:34:58:BA:4B:1D:3D:DC:43:35:A6:F0 X509v3 Authority Key Identifier: keyid:B8:D4:44:C5:B3:18:4A:4F:8C:8F:19:9A:43:22:42:C4:4E:19:EA:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:2c:42:4a:08:cb:06:34:9c:1b:8c:4b:0c:40:e5:d1:45:fd: 28:e5:79:77:f5:4d:1b:d1:64:61:1d:13:4d:db:b5:d2:91:d9: d9:66:9f:72:60:a0:14:4b:95:8f:f6:06:4c:ad:7f:0c:91:bb: 07:c7:5b:ad:c5:ef:51:aa:e8:15:01:70:c3:19:4b:f4:85:47: 1f:11:75:a7:19:d9:e7:4c:78:bd:a2:1e:6a:b4:37:79:19:5c: 67:6e:ef:83:ad:e4:c5:16:10:07:ad:dd:e3:75:1d:14:ca:e1: 25:ff:0c:ed:50:fb:c2:0a:11:73:ab:96:ea:63:46:1b:84:b4: d6:09:80:41:99:0e:54:7c:8f:03:6f:65:0e:d8:f0:88:db:e9: 68:76:24:3e:a8:eb:e9:e9:0f:6c:65:1f:da:8b:ab:1b:e7:c2: 84:de:31:1a:ae:1e:d2:8c:c6:95:16:3a:32:50:eb:ff:01:3c: 87:24:b7:a8:52:bd:7f:7f:49:c7:cd:2f:6e:9c:d7:b9:a1:7e: 20:d1:48:1c:54:ef:fa:e5:19:0e:6f:11:24:63:29:ce:19:53: 97:10:47:26:5e:b6:9f:3c:c2:f6:59:3b:cf:c1:fb:11:4b:f9: bd:d6:98:33:3c:50:9e:ab:03:3a:ae:8c:52:4a:13:1b:48:90: 49:42:77:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYNltGCkb1Ay2mIYxUCpQjyHKlZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQyQzQ0 RTE5RUFDQjAeFw0yNjAxMjUxOTU3MDRaFw0yNjAxMjkwNzUxMDRaMDMxMTAvBgNV BAMTKEFBQzczOEJCNEU0M0Q4MzM3MjM0NThCQTRCMUQzRERDNDMzNUE2RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ+n8I80bN3WI+6IovS6YkQvF7 BFMx6v/mLyRxij0+3Q2EVrDJibd5MCsTowEtCHwwBVUVd/9C82q0Hg1ZUdPPPSiA KUTXEtiai1Y5WeQj5UAlwSsyTbqsKA0NFWDfpQIUUkhgSazfFtWrwQ7evweqLZfV Tnq+nCxszz1r6oo6zRFEOqau+F5/crnw21FqC2psUfFyd6PXQiz2KvHup03+ctoc 8IfAnmO6QNtVDuQ45kh/DzKIaS6dCObGt40E8b/+vVG5VPU31Weq42rILO9P+Qlb Mb7IdrKenwEuxJ1vv5+JJYV0TnIt/eIpK51L+hpakqvrcudK6T2Ca95JOvCVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqsc4u05D2DNyNFi6Sx093EM1pvAwHwYDVR0j BBgwFoAUuNRExbMYSk+MjxmaQyJCxE4Z6sswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjRiNTNkOC1iMmZmLTQ5NzMtYjFhYy02Zjg1ZmFlYWRiZTUvMC9COEQ0NDRDNUIz MTg0QTRGOEM4RjE5OUE0MzIyNDJDNDRFMTlFQUNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQyQzQ0RTE5 RUFDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Y0YjUzZDgtYjJmZi00OTczLWIx YWMtNmY4NWZhZWFkYmU1LzAvQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQy QzQ0RTE5RUFDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH4sQkoIywY0nBuMSwxA5dFF/SjleXf1TRvR ZGEdE03btdKR2dlmn3JgoBRLlY/2BkytfwyRuwfHW63F71Gq6BUBcMMZS/SFRx8R dacZ2edMeL2iHmq0N3kZXGdu74Ot5MUWEAet3eN1HRTK4SX/DO1Q+8IKEXOrlupj RhuEtNYJgEGZDlR8jwNvZQ7Y8Ijb6Wh2JD6o6+npD2xlH9qLqxvnwoTeMRquHtKM xpUWOjJQ6/8BPIckt6hSvX9/ScfNL26c17mhfiDRSBxU7/rlGQ5vESRjKc4ZU5cQ RyZetp88wvZZO8/B+xFL+b3WmDM8UJ6rAzqujFJKExtIkElCd+s= -----END CERTIFICATE-----Generated at Mon Jan 26 05:21:46 2026 by rpki-client