This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft File: 8BE281D2F4ED4091746FDA568A4296F1171589E8.mft (raw, json) Hash identifier: hoJSNmiyEPTahm0yInSostA/55PEpKqxQy7jgTOalNE= Subject key identifier: 9F:3D:FA:E2:50:2F:EA:24:DA:12:A5:5E:80:86:6C:77:19:D8:44:C3 Authority key identifier: 8B:E2:81:D2:F4:ED:40:91:74:6F:DA:56:8A:42:96:F1:17:15:89:E8 Certificate issuer: /CN=8BE281D2F4ED4091746FDA568A4296F1171589E8 Certificate serial: 33377737BE7D22EAF944CAEA0A33DB410AFC4785 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft Manifest number: 0546 Signing time: Sun 25 Jan 2026 11:00:41 +0000 Manifest this update: Sun 25 Jan 2026 10:55:41 +0000 Manifest next update: Wed 28 Jan 2026 13:58:41 +0000 Files and hashes: 1: 3130332e3133342e38372e302f32342d3234203d3e203538333639.roa (hash: JnMoHtL2uw/1X+XpxI+WJ5aRYCDoJDTU7TkrgplgZrw=) 2: 8BE281D2F4ED4091746FDA568A4296F1171589E8.crl (hash: tdzr45Y491K6Rzjm+5j15KfbHPf0edLl3w+wQxVZgAM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.crl rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 13:58:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:37:77:37:be:7d:22:ea:f9:44:ca:ea:0a:33:db:41:0a:fc:47:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE281D2F4ED4091746FDA568A4296F1171589E8 Validity Not Before: Jan 25 10:55:41 2026 GMT Not After : Jan 28 13:58:41 2026 GMT Subject: CN=9F3DFAE2502FEA24DA12A55E80866C7719D844C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a0:ea:55:5a:e7:5b:03:18:12:53:4c:42:eb: af:79:ff:27:4e:fb:21:26:88:b1:65:e7:8e:72:d2: 85:62:38:ac:ab:20:cc:0e:5f:3c:0d:15:dc:2d:29: 07:50:72:29:ee:f2:3f:e3:60:45:cf:a4:1c:1f:8d: e1:96:0e:73:fd:ae:5e:de:ff:ca:24:59:2a:8b:77: 93:64:4a:0b:07:d4:99:2e:4c:53:21:91:5c:75:69: 98:96:76:6f:17:19:5f:59:e6:57:71:ea:c9:4f:00: 79:0b:2d:bf:c3:e3:05:c2:4f:a8:c7:a9:19:a8:4e: b8:b4:c3:bb:a8:62:63:cc:16:af:1d:a7:f7:d7:a8: 99:f8:e8:2a:c8:04:db:11:c1:80:22:9a:0e:7c:3d: 8d:01:c3:90:1b:04:34:7a:b6:28:49:e4:67:a4:c4: 20:47:5d:8c:ce:1c:f2:d7:3a:8d:8c:13:c8:2e:8c: fa:68:b1:c7:28:d4:94:ce:e4:93:37:24:26:4c:fe: 8f:e3:78:6f:30:c8:69:42:d7:ba:48:a2:6f:e7:4f: 38:17:78:bc:5e:60:2f:df:89:3f:eb:cc:85:19:b6: 99:58:53:a9:39:d9:c9:c1:ab:45:1f:02:aa:da:50: 8b:e0:e3:6c:60:d9:2c:a2:bf:38:ec:14:04:0c:16: 45:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:3D:FA:E2:50:2F:EA:24:DA:12:A5:5E:80:86:6C:77:19:D8:44:C3 X509v3 Authority Key Identifier: keyid:8B:E2:81:D2:F4:ED:40:91:74:6F:DA:56:8A:42:96:F1:17:15:89:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:21:4b:e9:d1:6c:9b:0c:37:34:2a:c6:b7:11:eb:75:8e:b4: 34:80:07:73:b9:cc:ff:86:a7:11:55:be:2f:13:67:ea:00:be: 30:d7:45:17:7e:78:59:75:23:74:b3:22:fd:4f:6f:12:39:9b: db:bb:58:4b:0b:75:92:48:37:0e:b2:b6:0c:89:dc:92:35:be: bb:8e:8a:46:9b:91:31:3d:6c:e3:8c:67:7c:4d:44:23:8f:f0: 88:15:70:c3:c8:57:a8:54:44:15:17:2f:a3:ac:18:49:2f:e2: a1:7b:9b:61:2c:1c:29:df:2c:65:5d:fa:4f:ce:7d:5a:10:89: 19:10:a1:8c:86:e0:ea:c9:9b:56:2b:16:30:49:e7:5d:5c:83: 06:b8:8d:81:ed:c3:ee:04:09:f3:13:e5:b6:86:c6:8d:1c:94: 19:68:3d:16:92:5a:d6:d2:04:8d:12:9b:9f:60:47:62:97:20: 90:2e:8b:7d:a8:ac:96:91:aa:8e:33:e0:f4:a6:59:11:38:1a: 66:63:cc:a1:3c:1d:f4:11:36:e5:f4:da:ad:a9:5b:21:64:8f: 08:b1:c4:c3:31:07:f3:35:69:4a:ca:ca:2a:e6:dd:b3:b4:16: 1b:5f:73:d6:44:f5:98:1e:cd:02:d3:3b:c7:52:63:4c:86:5b: 3e:bc:5b:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMzd3N759Iur5RMrqCjPbQQr8R4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2RjEx NzE1ODlFODAeFw0yNjAxMjUxMDU1NDFaFw0yNjAxMjgxMzU4NDFaMDMxMTAvBgNV BAMTKDlGM0RGQUUyNTAyRkVBMjREQTEyQTU1RTgwODY2Qzc3MTlEODQ0QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJoOpVWudbAxgSU0xC6695/ydO +yEmiLFl545y0oViOKyrIMwOXzwNFdwtKQdQcinu8j/jYEXPpBwfjeGWDnP9rl7e /8okWSqLd5NkSgsH1JkuTFMhkVx1aZiWdm8XGV9Z5ldx6slPAHkLLb/D4wXCT6jH qRmoTri0w7uoYmPMFq8dp/fXqJn46CrIBNsRwYAimg58PY0Bw5AbBDR6tihJ5Gek xCBHXYzOHPLXOo2ME8gujPposcco1JTO5JM3JCZM/o/jeG8wyGlC17pIom/nTzgX eLxeYC/fiT/rzIUZtplYU6k52cnBq0UfAqraUIvg42xg2SyivzjsFAQMFkUxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnz364lAv6iTaEqVegIZsdxnYRMMwHwYDVR0j BBgwFoAUi+KB0vTtQJF0b9pWikKW8RcViegwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODJkYjlkMy1kNmViLTRkNmItOWEyNC1mZWViMjFhYThmNTMvMC84QkUyODFEMkY0 RUQ0MDkxNzQ2RkRBNTY4QTQyOTZGMTE3MTU4OUU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2RjExNzE1 ODlFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTgyZGI5ZDMtZDZlYi00ZDZiLTlh MjQtZmVlYjIxYWE4ZjUzLzAvOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2 RjExNzE1ODlFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKMhS+nRbJsMNzQqxrcR63WOtDSAB3O5zP+G pxFVvi8TZ+oAvjDXRRd+eFl1I3SzIv1PbxI5m9u7WEsLdZJINw6ytgyJ3JI1vruO ikabkTE9bOOMZ3xNRCOP8IgVcMPIV6hURBUXL6OsGEkv4qF7m2EsHCnfLGVd+k/O fVoQiRkQoYyG4OrJm1YrFjBJ511cgwa4jYHtw+4ECfMT5baGxo0clBloPRaSWtbS BI0Sm59gR2KXIJAui32orJaRqo4z4PSmWRE4GmZjzKE8HfQRNuX02q2pWyFkjwix xMMxB/M1aUrKyirm3bO0Fhtfc9ZE9ZgezQLTO8dSY0yGWz68W6A= -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:32 2026 by rpki-client