This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft File: 8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft (raw, json) Hash identifier: nKaj7NbTB0b/7Lf47CKUM/C9NX/M3kq4Q4D9bsbvSPE= Subject key identifier: 11:4C:D7:76:D5:29:62:8B:90:34:B1:03:60:24:CD:61:84:00:8D:18 Authority key identifier: 8D:C2:ED:08:70:A0:05:15:26:06:E2:E6:BE:B6:B6:C7:8A:52:2A:F4 Certificate issuer: /CN=8DC2ED0870A005152606E2E6BEB6B6C78A522AF4 Certificate serial: 0648BABB01569FBB19320C724B1AE2DFEE10652E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft Manifest number: 030D Signing time: Sat 24 Jan 2026 17:30:59 +0000 Manifest this update: Sat 24 Jan 2026 17:25:59 +0000 Manifest next update: Wed 28 Jan 2026 04:43:59 +0000 Files and hashes: 1: 8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.crl (hash: GslXif627jny4tnMlpMYCjxXxCBLgsiWLtubmVmedro=) 2: 3130332e3137322e33302e302f32342d3234203d3e20313437303737.roa (hash: ino1QDYQDx2pfUj3BL+ZlKpPJfUhXo1WbnH0JMrs73I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.crl rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 04:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:48:ba:bb:01:56:9f:bb:19:32:0c:72:4b:1a:e2:df:ee:10:65:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DC2ED0870A005152606E2E6BEB6B6C78A522AF4 Validity Not Before: Jan 24 17:25:59 2026 GMT Not After : Jan 28 04:43:59 2026 GMT Subject: CN=114CD776D529628B9034B1036024CD6184008D18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:ce:a7:9a:25:e4:9d:15:a0:d2:46:4f:37:36: 6a:1c:73:1a:3a:3d:3b:df:c6:83:b0:0d:02:db:f6: 68:3d:d5:04:63:19:22:e8:4b:ed:f4:6c:72:e5:91: 95:bd:dd:60:e7:3c:5f:c5:47:bc:3d:65:dd:ad:6c: c4:e4:21:cc:c9:d1:8a:e6:5b:d0:e3:04:00:4f:21: 44:5b:f5:b7:dc:91:32:ea:80:d3:7e:70:e3:51:dc: a6:e6:0a:d9:f8:6e:86:1e:4d:0e:7a:f5:78:33:53: 77:b6:01:33:03:ba:a3:f7:f9:d4:67:98:8d:c5:02: 18:8b:57:8f:b1:ae:b3:5e:9c:4b:19:a2:15:35:8d: 61:86:b9:dd:e7:e8:84:84:25:2f:31:be:b2:20:e5: e8:8e:bc:c5:8f:47:d2:e8:00:39:a8:39:26:be:59: d4:14:72:4e:6c:e4:55:64:43:25:d4:3d:72:39:03: 4a:1c:2a:a0:c1:3e:47:2e:d6:8a:d9:70:cb:a1:4b: 8f:7d:4f:8c:ea:85:9e:c8:3c:86:1e:a8:a3:30:03: 70:33:e9:c1:e1:d2:7f:b7:97:ee:bb:0d:10:27:04: 0b:bf:31:43:32:9b:6d:9c:20:1d:97:14:b4:f9:53: 66:86:72:85:0d:7b:76:82:53:c8:7e:d8:5c:26:20: 80:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:4C:D7:76:D5:29:62:8B:90:34:B1:03:60:24:CD:61:84:00:8D:18 X509v3 Authority Key Identifier: keyid:8D:C2:ED:08:70:A0:05:15:26:06:E2:E6:BE:B6:B6:C7:8A:52:2A:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:a4:94:82:b5:cc:4c:19:a0:5b:76:d9:7c:07:80:60:25:e8: 20:41:b4:62:60:1c:10:d0:3e:58:f8:a3:15:88:a5:26:2f:19: 64:95:d8:f8:9a:f2:cd:c0:b6:b2:00:8b:35:09:91:96:46:34: 3f:5f:00:05:3a:fe:10:f0:27:56:77:fd:4e:a4:07:c5:9a:43: 6f:7a:97:82:4f:4e:cc:32:97:b2:4c:20:2e:d5:5d:6e:c9:b6: b4:6c:6b:96:4a:bf:cd:96:cb:d7:4f:62:b7:19:77:8a:f6:26: 60:9a:39:24:bb:c6:e7:ed:12:60:c3:f7:12:7c:ea:34:c7:6a: 8b:55:1f:5a:f1:96:b1:58:d6:da:db:dd:6a:f8:f2:4d:09:81: 10:e2:4b:56:fb:d0:14:dc:ea:47:c2:12:e9:9d:4d:04:0d:f5: 1f:6b:2a:e5:7a:ac:33:44:76:91:a3:4e:f8:b6:55:40:9e:6e: f3:d4:37:b1:7a:5b:75:29:55:95:0b:71:ca:2f:2e:be:1b:2b: 57:54:d8:7a:a3:4f:b0:9e:12:38:34:29:3a:81:a6:55:59:cf: 94:83:aa:20:c7:43:b1:bf:6a:8d:ca:d5:08:15:5d:6c:f2:5f: 42:ea:e3:5c:ea:37:cb:79:a8:ea:83:e4:fb:9a:22:f0:4b:aa: 2a:50:c5:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBki6uwFWn7sZMgxySxri3+4QZS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERDMkVEMDg3MEEwMDUxNTI2MDZFMkU2QkVCNkI2Qzc4 QTUyMkFGNDAeFw0yNjAxMjQxNzI1NTlaFw0yNjAxMjgwNDQzNTlaMDMxMTAvBgNV BAMTKDExNENENzc2RDUyOTYyOEI5MDM0QjEwMzYwMjRDRDYxODQwMDhEMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvzqeaJeSdFaDSRk83Nmoccxo6 PTvfxoOwDQLb9mg91QRjGSLoS+30bHLlkZW93WDnPF/FR7w9Zd2tbMTkIczJ0Yrm W9DjBABPIURb9bfckTLqgNN+cONR3KbmCtn4boYeTQ569XgzU3e2ATMDuqP3+dRn mI3FAhiLV4+xrrNenEsZohU1jWGGud3n6ISEJS8xvrIg5eiOvMWPR9LoADmoOSa+ WdQUck5s5FVkQyXUPXI5A0ocKqDBPkcu1orZcMuhS499T4zqhZ7IPIYeqKMwA3Az 6cHh0n+3l+67DRAnBAu/MUMym22cIB2XFLT5U2aGcoUNe3aCU8h+2FwmIIARAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEUzXdtUpYouQNLEDYCTNYYQAjRgwHwYDVR0j BBgwFoAUjcLtCHCgBRUmBuLmvra2x4pSKvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTE5YjgwZC00NjkzLTQwOTUtYTllMy00MTJlMTI4MjhmZjIvMC84REMyRUQwODcw QTAwNTE1MjYwNkUyRTZCRUI2QjZDNzhBNTIyQUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERDMkVEMDg3MEEwMDUxNTI2MDZFMkU2QkVCNkI2Qzc4QTUy MkFGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODkxOWI4MGQtNDY5My00MDk1LWE5 ZTMtNDEyZTEyODI4ZmYyLzAvOERDMkVEMDg3MEEwMDUxNTI2MDZFMkU2QkVCNkI2 Qzc4QTUyMkFGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJCklIK1zEwZoFt22XwHgGAl6CBBtGJgHBDQ Plj4oxWIpSYvGWSV2Pia8s3AtrIAizUJkZZGND9fAAU6/hDwJ1Z3/U6kB8WaQ296 l4JPTswyl7JMIC7VXW7JtrRsa5ZKv82Wy9dPYrcZd4r2JmCaOSS7xuftEmDD9xJ8 6jTHaotVH1rxlrFY1trb3Wr48k0JgRDiS1b70BTc6kfCEumdTQQN9R9rKuV6rDNE dpGjTvi2VUCebvPUN7F6W3UpVZULccovLr4bK1dU2HqjT7CeEjg0KTqBplVZz5SD qiDHQ7G/ao3K1QgVXWzyX0Lq41zqN8t5qOqD5PuaIvBLqipQxTA= -----END CERTIFICATE-----Generated at Sun Jan 25 18:55:12 2026 by rpki-client