This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft File: 8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft (raw, json) Hash identifier: 4JVm2vNkDI0dbsKoypA2e2YBWeWhUjsBRI9C2sLEH8M= Subject key identifier: 58:D2:4E:1D:DF:FD:B7:55:86:82:0F:07:E1:36:0A:EF:8C:5D:79:DE Authority key identifier: 82:08:31:7A:24:AB:4C:D8:28:CD:88:55:F8:1F:3E:F2:B5:3C:C6:81 Certificate issuer: /CN=8208317A24AB4CD828CD8855F81F3EF2B53CC681 Certificate serial: 320645A26E843ED508C06FE2CDD62A2179E6A3B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8208317A24AB4CD828CD8855F81F3EF2B53CC681.cer Subject info access: rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft Manifest number: 01BD Signing time: Sun 25 Jan 2026 13:12:15 +0000 Manifest this update: Sun 25 Jan 2026 13:07:15 +0000 Manifest next update: Thu 29 Jan 2026 00:45:15 +0000 Files and hashes: 1: 8208317A24AB4CD828CD8855F81F3EF2B53CC681.crl (hash: RJm0wMX8W9K1Smnlv2UPHXPiOAUK/9HtX3w2RraMeN8=) 2: 323030313a6466343a663930303a3a2f34382d3438203d3e20313337333531.roa (hash: b4NjxQmSbJ+wk760b/yGVrpvatI7XP4yXIQB6LdeYtw=) 3: 3130332e3131342e3134342e302f32342d3234203d3e20313337333531.roa (hash: ty2A/+XUIZKKt+5K+zVnVNMiG2s1JjDQEBRNkGaNrQE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.crl rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8208317A24AB4CD828CD8855F81F3EF2B53CC681.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:06:45:a2:6e:84:3e:d5:08:c0:6f:e2:cd:d6:2a:21:79:e6:a3:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8208317A24AB4CD828CD8855F81F3EF2B53CC681 Validity Not Before: Jan 25 13:07:15 2026 GMT Not After : Jan 29 00:45:15 2026 GMT Subject: CN=58D24E1DDFFDB75586820F07E1360AEF8C5D79DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:96:34:e1:0d:44:2f:d6:af:ab:77:9b:1a:b7: 7c:36:9c:55:cd:ce:4f:00:9f:b0:ef:db:7b:a6:51: 25:72:41:95:16:fc:03:08:95:99:ef:4d:e0:25:8a: ec:47:7f:57:c8:21:20:10:e7:6b:2f:51:7c:0b:0b: 39:41:16:f9:fd:d7:de:29:70:12:7d:d9:8e:66:db: e1:e2:2b:48:5f:3a:d4:51:80:85:d2:5f:b9:ff:6f: 38:cd:1f:33:e8:71:43:38:d0:95:b2:ed:e9:18:41: ee:12:b9:7f:7f:d4:01:f2:2d:de:04:15:39:85:81: 2c:9d:71:36:9c:58:c9:ee:e9:37:4e:10:f7:7f:fa: e7:c7:9d:3c:70:6b:9d:a8:83:1c:2a:ee:4a:47:6e: a8:8a:ea:54:4d:55:8f:5d:41:50:a9:d0:18:24:f7: 16:d9:79:8c:4f:bb:b7:b0:04:f9:28:a2:a4:f2:5e: 32:86:68:96:0c:76:90:28:f3:ab:a3:b9:1d:02:27: e1:6b:c9:32:9f:a6:05:52:60:5d:c0:d8:84:bc:2f: 96:e0:36:87:4f:31:1f:9e:3a:b7:54:c8:19:28:f4: be:ac:23:4b:4e:be:d8:ad:62:01:eb:d2:0f:4f:33: 59:0c:e8:80:cd:74:29:fa:2c:06:03:87:2f:ae:aa: b6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D2:4E:1D:DF:FD:B7:55:86:82:0F:07:E1:36:0A:EF:8C:5D:79:DE X509v3 Authority Key Identifier: keyid:82:08:31:7A:24:AB:4C:D8:28:CD:88:55:F8:1F:3E:F2:B5:3C:C6:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8208317A24AB4CD828CD8855F81F3EF2B53CC681.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:e1:58:ae:10:e5:07:1c:25:71:8b:be:d5:6a:2a:29:a5:06: ac:cc:ca:d8:5b:aa:c0:09:c4:22:77:7c:90:61:51:67:41:4d: 6f:97:24:80:f6:9d:7c:7b:2b:a9:7a:8e:e2:e8:e6:5c:aa:e9: 4b:9d:95:43:92:55:ca:c2:97:c5:a7:ca:24:44:fc:29:01:d3: 59:0a:c3:f9:3d:ba:47:10:2b:0b:58:57:97:36:c0:69:03:d2: 88:df:44:9c:41:eb:db:e8:0b:7b:75:23:7c:98:36:74:ef:66: 75:d2:d6:e8:15:3a:5b:be:60:00:41:9f:30:c9:cb:e2:66:bc: 02:f6:e8:dc:88:b5:f9:39:e0:0a:45:1d:10:53:1a:68:08:b8: 40:cf:48:57:c2:23:90:ea:80:d0:5c:35:e3:3e:4a:37:ac:28: 5a:05:40:e8:4c:4d:e7:3c:60:81:c1:e3:d7:90:de:c2:e2:21: b2:d7:12:8e:ba:2b:32:f9:dc:80:a4:d2:b6:de:95:24:d3:76: 9d:18:fc:50:24:e5:2a:45:70:d2:e1:ed:a5:4e:9e:34:f0:3c: 3e:68:80:8b:6e:33:fe:39:87:cf:26:9c:75:7c:20:0b:13:7f: f7:c0:96:b8:48:f7:37:cf:f9:b7:74:ff:7b:ec:2c:b4:f3:8f: 07:c5:17:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMgZFom6EPtUIwG/izdYqIXnmo7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIwODMxN0EyNEFCNENEODI4Q0Q4ODU1RjgxRjNFRjJC NTNDQzY4MTAeFw0yNjAxMjUxMzA3MTVaFw0yNjAxMjkwMDQ1MTVaMDMxMTAvBgNV BAMTKDU4RDI0RTFEREZGREI3NTU4NjgyMEYwN0UxMzYwQUVGOEM1RDc5REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyljThDUQv1q+rd5sat3w2nFXN zk8An7Dv23umUSVyQZUW/AMIlZnvTeAliuxHf1fIISAQ52svUXwLCzlBFvn9194p cBJ92Y5m2+HiK0hfOtRRgIXSX7n/bzjNHzPocUM40JWy7ekYQe4SuX9/1AHyLd4E FTmFgSydcTacWMnu6TdOEPd/+ufHnTxwa52ogxwq7kpHbqiK6lRNVY9dQVCp0Bgk 9xbZeYxPu7ewBPkooqTyXjKGaJYMdpAo86ujuR0CJ+FryTKfpgVSYF3A2IS8L5bg NodPMR+eOrdUyBko9L6sI0tOvtitYgHr0g9PM1kM6IDNdCn6LAYDhy+uqrYXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWNJOHd/9t1WGgg8H4TYK74xded4wHwYDVR0j BBgwFoAUgggxeiSrTNgozYhV+B8+8rU8xoEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ODc4OGE4Yi01NDFiLTRjYmYtYmFiOS04ZGMzNzdiYzEyODQvMC84MjA4MzE3QTI0 QUI0Q0Q4MjhDRDg4NTVGODFGM0VGMkI1M0NDNjgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODIwODMxN0EyNEFCNENEODI4Q0Q4ODU1RjgxRjNFRjJCNTND QzY4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODg3ODhhOGItNTQxYi00Y2JmLWJh YjktOGRjMzc3YmMxMjg0LzAvODIwODMxN0EyNEFCNENEODI4Q0Q4ODU1RjgxRjNF RjJCNTNDQzY4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKLhWK4Q5QccJXGLvtVqKimlBqzMythbqsAJ xCJ3fJBhUWdBTW+XJID2nXx7K6l6juLo5lyq6UudlUOSVcrCl8WnyiRE/CkB01kK w/k9ukcQKwtYV5c2wGkD0ojfRJxB69voC3t1I3yYNnTvZnXS1ugVOlu+YABBnzDJ y+JmvAL26NyItfk54ApFHRBTGmgIuEDPSFfCI5DqgNBcNeM+SjesKFoFQOhMTec8 YIHB49eQ3sLiIbLXEo66KzL53ICk0rbelSTTdp0Y/FAk5SpFcNLh7aVOnjTwPD5o gItuM/45h88mnHV8IAsTf/fAlrhI9zfP+bd0/3vsLLTzjwfFF3A= -----END CERTIFICATE-----Generated at Sun Jan 25 22:00:47 2026 by rpki-client