This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft File: A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft (raw, json) Hash identifier: 76FvMQvXyOMHPcmg/jZ5bSYyC+ThzuVHcJBhM3p2Nc4= Subject key identifier: 27:03:09:19:64:D1:08:EB:C5:13:3B:5C:F3:3F:6E:00:D6:BA:E5:BB Authority key identifier: A8:CD:D5:76:A9:B5:E4:48:A8:69:BE:A4:D5:16:BA:FC:5A:87:95:03 Certificate issuer: /CN=A8CDD576A9B5E448A869BEA4D516BAFC5A879503 Certificate serial: 79A5E8E5B70324681C3E7E78C223C62BB19A6736 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft Manifest number: 0105 Signing time: Sat 24 Jan 2026 19:32:35 +0000 Manifest this update: Sat 24 Jan 2026 19:27:35 +0000 Manifest next update: Wed 28 Jan 2026 03:56:35 +0000 Files and hashes: 1: 3136302e31392e3134352e302f32342d3234203d3e203435333035.roa (hash: b0d54b5VfP0y4Y/gj0JeZ9te1p1dA7COr+bHtkAFBE4=) 2: 3136302e31392e3134342e302f32342d3234203d3e20313532373838.roa (hash: zcdVZSiLzuXwzNXJqyWuf4sDbiVxTodHTiD95Tvz7k8=) 3: A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl (hash: jXMnNepRREY9eZk15/ZI//UFE3Dnx+EfXU73NJlFV9s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 03:56:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:a5:e8:e5:b7:03:24:68:1c:3e:7e:78:c2:23:c6:2b:b1:9a:67:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8CDD576A9B5E448A869BEA4D516BAFC5A879503 Validity Not Before: Jan 24 19:27:35 2026 GMT Not After : Jan 28 03:56:35 2026 GMT Subject: CN=2703091964D108EBC5133B5CF33F6E00D6BAE5BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:21:fc:85:1f:20:f4:d3:61:f8:f6:25:a0:7f: 5c:d7:ec:36:ed:6b:8f:da:0a:c5:91:09:32:4d:12: 57:11:03:c9:6b:10:31:e1:83:9a:cc:0e:3d:40:68: 69:f6:dd:c1:22:f7:f0:c2:f8:97:39:a8:82:2d:41: c5:dc:1f:38:7c:f3:44:a8:f3:06:99:bd:13:83:33: 22:02:73:21:76:85:0b:33:2b:a1:59:18:e3:91:fe: ca:09:6c:6b:2c:68:56:35:bb:1d:4f:33:c6:e3:42: 13:f9:57:41:f4:8c:e5:49:c9:00:39:11:dd:91:80: 4a:5a:3e:fa:03:94:cf:5a:ad:a6:2c:2d:8d:1e:bf: da:6b:39:75:36:c8:4c:e5:da:1f:e2:5f:f6:3c:01: 48:53:23:a7:31:fa:e6:2a:f6:29:cc:08:1f:9d:b1: 51:dd:4e:fc:1a:db:b9:d9:1f:2a:43:c5:f4:5b:64: 13:d8:41:5e:d6:a1:ff:38:f8:9a:b1:08:14:78:e8: 0f:68:c3:5a:b7:8a:d1:af:6e:8a:49:5e:1d:67:f2: 55:52:41:97:d4:74:33:d9:5a:89:ab:eb:ba:1c:31: e6:92:27:8a:ae:10:32:c9:53:75:81:a0:53:5f:ca: f8:c0:d8:e4:ed:34:dc:c1:3a:15:4c:6e:32:a6:5d: dd:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:03:09:19:64:D1:08:EB:C5:13:3B:5C:F3:3F:6E:00:D6:BA:E5:BB X509v3 Authority Key Identifier: keyid:A8:CD:D5:76:A9:B5:E4:48:A8:69:BE:A4:D5:16:BA:FC:5A:87:95:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:52:ae:7c:2f:95:cc:42:3e:a2:d8:54:02:56:0e:ff:3e:3f: 34:b0:30:22:1f:fe:40:1e:9c:94:0a:e1:ca:f4:9e:72:61:f7: 67:52:93:f0:2a:bf:aa:72:3a:66:ac:ad:63:aa:ff:13:b2:47: 68:5c:d2:11:20:af:f0:1e:98:77:ea:8e:51:03:e3:33:f3:8c: a8:0d:8f:c3:85:d4:51:a2:54:d9:b9:1f:52:9a:68:e8:a9:2e: 1b:63:1a:0c:24:d0:cf:2a:c4:0d:f6:fd:86:54:e6:af:bc:39: 40:3f:44:86:c4:99:d4:c2:33:da:ca:2d:05:e9:c6:5d:5e:a5: 18:0e:8c:e5:90:a3:0e:ca:e2:7d:f7:d9:4d:e3:25:cc:6f:d7: 47:0b:63:93:2b:c6:68:bf:56:68:25:19:39:ce:ff:f2:81:fe: 66:88:1c:ef:4c:2a:3a:4c:a2:7f:93:88:5e:3b:86:05:ec:ba: f1:01:42:a2:d2:18:ab:4b:77:85:1b:4e:71:64:8f:7e:16:5d: 58:b7:2b:79:c1:97:80:1d:a4:1f:3c:b7:3c:76:b7:df:1e:63: a0:a1:b0:8e:59:2a:d5:ba:63:1f:e8:c7:0a:c6:27:74:20:5e: b0:6a:2a:09:09:35:8a:f4:4f:2e:74:c7:fe:89:aa:e5:d5:d6: 2a:03:02:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeaXo5bcDJGgcPn54wiPGK7GaZzYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJBRkM1 QTg3OTUwMzAeFw0yNjAxMjQxOTI3MzVaFw0yNjAxMjgwMzU2MzVaMDMxMTAvBgNV BAMTKDI3MDMwOTE5NjREMTA4RUJDNTEzM0I1Q0YzM0Y2RTAwRDZCQUU1QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdIfyFHyD002H49iWgf1zX7Dbt a4/aCsWRCTJNElcRA8lrEDHhg5rMDj1AaGn23cEi9/DC+Jc5qIItQcXcHzh880So 8waZvRODMyICcyF2hQszK6FZGOOR/soJbGssaFY1ux1PM8bjQhP5V0H0jOVJyQA5 Ed2RgEpaPvoDlM9araYsLY0ev9prOXU2yEzl2h/iX/Y8AUhTI6cx+uYq9inMCB+d sVHdTvwa27nZHypDxfRbZBPYQV7Wof84+JqxCBR46A9ow1q3itGvbopJXh1n8lVS QZfUdDPZWomr67ocMeaSJ4quEDLJU3WBoFNfyvjA2OTtNNzBOhVMbjKmXd2tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJwMJGWTRCOvFEztc8z9uANa65bswHwYDVR0j BBgwFoAUqM3Vdqm15Eioab6k1Ra6/FqHlQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MmU1ZmY4MS1iMDgyLTQzMzQtYWQyOS01NWRjOGQxZTUzYjkvMC9BOENERDU3NkE5 QjVFNDQ4QTg2OUJFQTRENTE2QkFGQzVBODc5NTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJBRkM1QTg3 OTUwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTJlNWZmODEtYjA4Mi00MzM0LWFk MjktNTVkYzhkMWU1M2I5LzAvQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJB RkM1QTg3OTUwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACZSrnwvlcxCPqLYVAJWDv8+PzSwMCIf/kAe nJQK4cr0nnJh92dSk/Aqv6pyOmasrWOq/xOyR2hc0hEgr/AemHfqjlED4zPzjKgN j8OF1FGiVNm5H1KaaOipLhtjGgwk0M8qxA32/YZU5q+8OUA/RIbEmdTCM9rKLQXp xl1epRgOjOWQow7K4n332U3jJcxv10cLY5Mrxmi/VmglGTnO//KB/maIHO9MKjpM on+TiF47hgXsuvEBQqLSGKtLd4UbTnFkj34WXVi3K3nBl4AdpB88tzx2t98eY6Ch sI5ZKtW6Yx/oxwrGJ3QgXrBqKgkJNYr0Ty50x/6JquXV1ioDArQ= -----END CERTIFICATE-----Generated at Mon Jan 26 07:12:14 2026 by rpki-client