This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft File: 86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft (raw, json) Hash identifier: RsccLtBDrJ5rLSV1p69Zp4L9CuKRxlLdEVMP0SE7yZs= Subject key identifier: 64:39:C9:CA:B9:A8:70:4B:1A:EC:6B:0C:F0:88:DC:55:3F:54:C3:24 Authority key identifier: 86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58 Certificate issuer: /CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58 Certificate serial: 3E2A85A30E8A66C1CE154B50838671E8AAA96C1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft Manifest number: 01E4 Signing time: Fri 23 Jan 2026 20:40:51 +0000 Manifest this update: Fri 23 Jan 2026 20:35:51 +0000 Manifest next update: Tue 27 Jan 2026 07:25:51 +0000 Files and hashes: 1: 86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl (hash: q4Q/ZYaqjWDBkQm2ajoWejgjKzjUFP4/Bra0GwQsI90=) 2: 3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa (hash: p8Wpmus070CsJXDUA1KtLJSmqgm7fEGDDNW/LuX/AC4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 07:25:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:2a:85:a3:0e:8a:66:c1:ce:15:4b:50:83:86:71:e8:aa:a9:6c:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58 Validity Not Before: Jan 23 20:35:51 2026 GMT Not After : Jan 27 07:25:51 2026 GMT Subject: CN=6439C9CAB9A8704B1AEC6B0CF088DC553F54C324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:05:2a:3a:69:0b:4c:09:0f:84:2c:36:e6:d5: af:34:cf:1c:46:e0:c4:91:d4:78:90:55:e8:52:bb: 66:86:89:ca:a5:00:23:ec:1d:26:bc:fc:ca:60:bc: 33:9f:be:c6:96:12:9a:8f:8e:8b:ed:24:79:95:c1: 9d:cd:08:93:67:93:8a:18:3f:2b:0f:7f:75:9d:24: 81:3c:67:cc:35:25:5f:60:77:dc:ac:fc:d9:25:4e: c1:2e:ae:2f:e4:7d:fb:02:e6:3f:cc:bf:47:a0:f9: 69:8d:6c:28:a8:10:8b:73:09:c7:0e:98:95:9c:f0: 7b:00:3c:35:2c:82:dc:f2:2f:15:d2:e6:a7:2c:73: fc:b6:aa:0b:04:fb:17:2d:f7:14:4e:a7:46:6c:b0: 05:17:57:ed:c7:5d:84:f2:1a:5a:00:26:3f:0b:71: ec:49:a4:38:ff:f6:f2:34:e2:dc:98:25:31:56:92: 2c:b5:3a:20:76:bc:66:90:fe:23:9b:d4:b8:33:14: 98:4b:e5:b8:cf:b0:99:35:1f:cd:09:87:9d:89:e5: 6c:5d:d4:56:94:f4:99:94:f7:39:91:d0:53:d3:dc: bd:00:6c:af:15:0c:f7:d4:a8:ef:f0:d9:bd:f9:58: 77:9c:b6:42:dd:a7:fd:da:4f:04:98:84:b7:4e:d1: fd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:39:C9:CA:B9:A8:70:4B:1A:EC:6B:0C:F0:88:DC:55:3F:54:C3:24 X509v3 Authority Key Identifier: keyid:86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:42:18:6d:c9:bd:fc:ce:03:5c:0e:ac:fa:84:d0:dc:9e:7f: c5:aa:bf:df:19:fc:2d:2c:2a:36:cb:9e:83:cd:23:4c:76:df: c1:db:85:a4:ae:33:4d:08:49:bb:c1:aa:cc:40:86:58:03:5b: 87:47:f7:af:15:1f:0a:b2:f6:dd:e9:18:21:43:2d:2c:73:98: 90:f9:4c:d3:6c:a9:eb:6d:97:1d:57:de:2c:6c:40:78:bc:1d: 1d:7a:06:06:4e:a0:87:0a:e6:43:f8:35:17:46:35:47:3b:48: f6:7c:55:c3:f4:0c:d4:46:c7:12:fb:3b:98:60:02:84:c1:11: 76:6c:44:53:2e:b6:e8:bb:ef:ce:99:f5:d4:82:68:40:f0:11: e3:85:cd:10:b6:cc:a8:47:5f:09:53:1b:b0:4e:0f:b1:97:b5: 0f:f7:09:90:4d:aa:58:3f:70:71:e5:68:78:ba:62:cb:b0:69: 45:5e:ff:d6:b8:23:79:90:de:4c:64:f5:d0:20:15:7f:94:3d: 9d:0f:29:63:ca:f3:12:41:32:5c:6c:6b:77:08:5c:71:2d:d6: b7:99:23:89:4d:96:43:3a:37:33:2c:a3:d9:e0:08:a0:72:6b: 12:27:60:25:72:f1:3e:b3:94:ed:10:2a:a2:ae:88:bd:4c:12: 58:9b:2f:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPiqFow6KZsHOFUtQg4Zx6KqpbB4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1 NjEzOEY1ODAeFw0yNjAxMjMyMDM1NTFaFw0yNjAxMjcwNzI1NTFaMDMxMTAvBgNV BAMTKDY0MzlDOUNBQjlBODcwNEIxQUVDNkIwQ0YwODhEQzU1M0Y1NEMzMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqBSo6aQtMCQ+ELDbm1a80zxxG 4MSR1HiQVehSu2aGicqlACPsHSa8/MpgvDOfvsaWEpqPjovtJHmVwZ3NCJNnk4oY PysPf3WdJIE8Z8w1JV9gd9ys/NklTsEuri/kffsC5j/Mv0eg+WmNbCioEItzCccO mJWc8HsAPDUsgtzyLxXS5qcsc/y2qgsE+xct9xROp0ZssAUXV+3HXYTyGloAJj8L cexJpDj/9vI04tyYJTFWkiy1OiB2vGaQ/iOb1LgzFJhL5bjPsJk1H80Jh52J5Wxd 1FaU9JmU9zmR0FPT3L0AbK8VDPfUqO/w2b35WHectkLdp/3aTwSYhLdO0f05AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZDnJyrmocEsa7GsM8IjcVT9UwyQwHwYDVR0j BBgwFoAUhsL00GoRuGus/w/T26R7+lYTj1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWRjNzY1YS1mZjhkLTRiMWYtYTU5YS0yNWZmN2JkNGY1OGEvMC84NkMyRjREMDZB MTFCODZCQUNGRjBGRDNEQkE0N0JGQTU2MTM4RjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1NjEz OEY1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWFkYzc2NWEtZmY4ZC00YjFmLWE1 OWEtMjVmZjdiZDRmNThhLzAvODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdC RkE1NjEzOEY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJCGG3JvfzOA1wOrPqE0Nyef8Wqv98Z/C0s KjbLnoPNI0x238HbhaSuM00ISbvBqsxAhlgDW4dH968VHwqy9t3pGCFDLSxzmJD5 TNNsqettlx1X3ixsQHi8HR16BgZOoIcK5kP4NRdGNUc7SPZ8VcP0DNRGxxL7O5hg AoTBEXZsRFMutui7786Z9dSCaEDwEeOFzRC2zKhHXwlTG7BOD7GXtQ/3CZBNqlg/ cHHlaHi6YsuwaUVe/9a4I3mQ3kxk9dAgFX+UPZ0PKWPK8xJBMlxsa3cIXHEt1reZ I4lNlkM6NzMso9ngCKByaxInYCVy8T6zlO0QKqKuiL1MElibL5k= -----END CERTIFICATE-----Generated at Sun Jan 25 18:52:48 2026 by rpki-client