This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft File: 8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft (raw, json) Hash identifier: rUBmVynApCCNr3DTWmDWOKuKwjxtS7gosbJ19H/xuAE= Subject key identifier: 10:B2:22:10:B6:B0:09:0B:A4:81:98:0D:A0:16:34:33:C8:CC:F0:8F Authority key identifier: 8D:ED:AB:AD:21:AD:1A:6B:EF:27:E9:1F:CE:E3:04:65:56:3D:FE:72 Certificate issuer: /CN=8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72 Certificate serial: 64F8695058A6F11C53C63AA8E54FDD918CC8CA3B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer Subject info access: rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft Manifest number: 0541 Signing time: Fri 23 Jan 2026 17:02:13 +0000 Manifest this update: Fri 23 Jan 2026 16:57:13 +0000 Manifest next update: Tue 27 Jan 2026 00:11:13 +0000 Files and hashes: 1: 8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.crl (hash: vZOqzZV/kL1bfngIeBtqF1lNiK9xmEJdjSHvKKelQx0=) 2: 3132312e3130312e3132382e302f32312d3234203d3e20313331373036.roa (hash: LxNIC9GUMk4NDV//CAiwhidJ9aXKaAFBBW+ysgKoUy0=) 3: 3130332e3234372e31322e302f32322d3234203d3e20313331373036.roa (hash: mWjb/DW+b3X3xyLO8KMUDwzQ73HydHkJibyBar99dKU=) 4: 323430323a653330303a3a2f33322d3438203d3e20313331373036.roa (hash: EV88jOIELhWBAVSmJqvptwA4m5UyL3dS/vav1cA94d8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.crl rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 00:11:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:f8:69:50:58:a6:f1:1c:53:c6:3a:a8:e5:4f:dd:91:8c:c8:ca:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72 Validity Not Before: Jan 23 16:57:13 2026 GMT Not After : Jan 27 00:11:13 2026 GMT Subject: CN=10B22210B6B0090BA481980DA0163433C8CCF08F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e9:96:00:0d:6b:63:59:00:67:dd:ef:53:55: 6f:04:f6:92:24:6f:ec:20:be:72:a1:10:8e:7f:dc: 29:66:05:a7:13:4a:64:7c:c7:c9:70:ef:22:c6:28: 9c:76:d1:77:84:b3:84:bf:ee:e2:43:e3:65:3d:92: c7:52:43:60:00:9b:06:e6:e1:46:91:5e:c0:fa:9c: 85:7b:e0:4e:27:50:36:9b:bf:3a:1f:d2:fa:d0:7e: 9f:58:e9:42:55:30:e3:25:6c:1d:16:b5:78:e6:b4: 7b:e9:5a:28:8e:4c:11:8c:cf:70:78:b4:20:68:26: 73:e1:9f:f6:fc:91:fc:9a:9a:de:1d:db:69:01:2a: b3:db:c0:42:24:23:f2:c4:7f:3d:b0:0f:af:79:01: c4:78:43:d2:dc:f1:b9:3a:00:06:b6:4d:0e:28:08: 31:0a:1c:71:1c:a4:ca:61:0e:8c:ac:9b:bf:37:60: bf:f4:fa:37:0e:eb:0b:35:be:3f:2b:ec:1b:02:98: f7:83:5c:f1:ec:c4:cf:83:69:98:32:31:54:61:87: 96:85:45:84:6c:8f:d3:6c:ef:03:f9:0a:ef:ae:a9: 1a:a8:b7:94:46:51:81:cd:2a:a9:92:b6:83:39:77: 3e:2e:d4:e6:9b:74:0d:71:a0:5b:2a:7c:8e:cf:a4: 18:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:B2:22:10:B6:B0:09:0B:A4:81:98:0D:A0:16:34:33:C8:CC:F0:8F X509v3 Authority Key Identifier: keyid:8D:ED:AB:AD:21:AD:1A:6B:EF:27:E9:1F:CE:E3:04:65:56:3D:FE:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:48:cb:33:1e:c1:24:40:ff:a8:36:4f:51:c5:1b:2b:37:65: 7f:f9:75:ac:30:11:a9:30:b5:5d:72:3e:5e:fa:1a:df:0c:d1: b5:10:e4:43:e7:b8:74:e9:0d:a5:9a:11:b8:d2:e1:52:4b:b3: 73:f8:d6:f2:78:ca:26:05:56:a4:29:7c:32:70:76:72:05:69: 15:9d:e5:61:c5:6c:bf:bf:eb:6c:e9:6f:15:7a:3d:be:c1:43: b0:f0:26:d2:35:41:f7:1a:99:65:25:28:e3:0b:82:e4:84:7d: 7b:b5:2a:bc:82:d1:e5:26:e5:a6:f1:e4:74:e7:f2:8a:01:cd: 7d:92:78:05:d3:eb:a9:a3:28:35:56:9e:16:70:e9:11:0a:85: 75:7d:0f:7a:54:d3:21:32:5d:4f:fe:8e:45:f5:59:c2:76:3e: 28:3c:87:1f:84:1e:eb:d8:ee:8b:6e:86:70:b4:b3:61:90:17: 4e:03:09:a9:80:d2:e0:f1:8b:de:a6:bd:b9:d3:f6:bd:8e:cc: 05:86:6d:80:f7:c6:68:1f:d8:50:4b:ce:70:ca:9a:be:e2:8d: a0:b6:4a:96:5a:c2:42:6d:e3:78:e8:bc:22:24:c8:5a:e8:77: 30:c9:f0:10:8a:3f:d4:97:ca:ea:2d:92:95:1d:78:31:1e:7d: ed:24:3e:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZPhpUFim8RxTxjqo5U/dkYzIyjswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERFREFCQUQyMUFEMUE2QkVGMjdFOTFGQ0VFMzA0NjU1 NjNERkU3MjAeFw0yNjAxMjMxNjU3MTNaFw0yNjAxMjcwMDExMTNaMDMxMTAvBgNV BAMTKDEwQjIyMjEwQjZCMDA5MEJBNDgxOTgwREEwMTYzNDMzQzhDQ0YwOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO6ZYADWtjWQBn3e9TVW8E9pIk b+wgvnKhEI5/3ClmBacTSmR8x8lw7yLGKJx20XeEs4S/7uJD42U9ksdSQ2AAmwbm 4UaRXsD6nIV74E4nUDabvzof0vrQfp9Y6UJVMOMlbB0WtXjmtHvpWiiOTBGMz3B4 tCBoJnPhn/b8kfyamt4d22kBKrPbwEIkI/LEfz2wD695AcR4Q9Lc8bk6AAa2TQ4o CDEKHHEcpMphDoysm783YL/0+jcO6ws1vj8r7BsCmPeDXPHsxM+DaZgyMVRhh5aF RYRsj9Ns7wP5Cu+uqRqot5RGUYHNKqmStoM5dz4u1OabdA1xoFsqfI7PpBh5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUELIiELawCQukgZgNoBY0M8jM8I8wHwYDVR0j BBgwFoAUje2rrSGtGmvvJ+kfzuMEZVY9/nIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjdhNmYzNC0xYjZlLTRlOTItYjJkMi0wYjkzMDFhNjY2YTUvMC84REVEQUJBRDIx QUQxQTZCRUYyN0U5MUZDRUUzMDQ2NTU2M0RGRTcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERFREFCQUQyMUFEMUE2QkVGMjdFOTFGQ0VFMzA0NjU1NjNE RkU3Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTI3YTZmMzQtMWI2ZS00ZTkyLWIy ZDItMGI5MzAxYTY2NmE1LzAvOERFREFCQUQyMUFEMUE2QkVGMjdFOTFGQ0VFMzA0 NjU1NjNERkU3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKtIyzMewSRA/6g2T1HFGys3ZX/5dawwEakw tV1yPl76Gt8M0bUQ5EPnuHTpDaWaEbjS4VJLs3P41vJ4yiYFVqQpfDJwdnIFaRWd 5WHFbL+/62zpbxV6Pb7BQ7DwJtI1QfcamWUlKOMLguSEfXu1KryC0eUm5abx5HTn 8ooBzX2SeAXT66mjKDVWnhZw6REKhXV9D3pU0yEyXU/+jkX1WcJ2Pig8hx+EHuvY 7otuhnC0s2GQF04DCamA0uDxi96mvbnT9r2OzAWGbYD3xmgf2FBLznDKmr7ijaC2 SpZawkJt43jovCIkyFrodzDJ8BCKP9SXyuotkpUdeDEefe0kPkI= -----END CERTIFICATE-----Generated at Sun Jan 25 22:00:58 2026 by rpki-client