This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft File: 8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft (raw, json) Hash identifier: iSVnQ9Kc+LZnWrDLCcnyX/vcLF1f/fdJNnJCOWnHI2k= Subject key identifier: 20:AD:3E:67:BF:57:80:6F:BF:42:53:FD:4E:2C:41:F2:C7:56:74:FB Authority key identifier: 86:50:DE:F1:B1:C8:9D:70:1C:2B:B9:9C:A9:07:9E:ED:BC:CC:04:6D Certificate issuer: /CN=8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D Certificate serial: 2FBCFF9171E26775AD053CECE9A81B4F5079134E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft Manifest number: 0164 Signing time: Sat 24 Jan 2026 22:11:10 +0000 Manifest this update: Sat 24 Jan 2026 22:06:10 +0000 Manifest next update: Tue 27 Jan 2026 23:09:10 +0000 Files and hashes: 1: 3137352e3131312e39382e302f32342d3234203d3e20313338313230.roa (hash: aia3nUPKEa96BWO7Pv3XlqoUwx8dHqiYGIZfz0yhZhg=) 2: 3137352e3131312e39392e302f32342d3234203d3e20313338313230.roa (hash: AghOU/pgzXbwtlWCSLhXHXuJqGUCoPtZzcPl6UwSVVA=) 3: 8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl (hash: b96RKY4sNkTgAvYOvAEy1o8/dTuLIN8FVvNuXzWuXgA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 23:09:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:bc:ff:91:71:e2:67:75:ad:05:3c:ec:e9:a8:1b:4f:50:79:13:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D Validity Not Before: Jan 24 22:06:10 2026 GMT Not After : Jan 27 23:09:10 2026 GMT Subject: CN=20AD3E67BF57806FBF4253FD4E2C41F2C75674FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2a:46:0f:cb:57:7b:b8:ff:8a:88:1c:c0:3b: 45:3f:8d:82:da:7b:1c:a6:b8:62:93:28:91:0b:d3: 8c:16:6f:19:a4:63:e5:99:66:02:79:fb:ca:33:ff: 06:38:19:36:ba:c3:be:f9:95:f6:92:77:dc:3f:70: ad:8f:64:54:14:93:db:dc:6a:f2:a2:bc:7d:65:2f: 64:02:67:06:1d:0f:e5:d4:64:c7:29:15:0a:a1:f5: e7:67:62:5e:81:f3:f4:90:8a:85:ef:33:c7:6b:94: 9d:98:1c:57:70:64:ac:8b:37:f9:6d:3b:aa:28:d0: 46:13:2c:10:31:f9:c0:44:55:fe:7e:24:71:69:fb: ec:40:80:fe:d3:e0:26:7f:23:13:21:6c:99:5e:44: f4:c8:f4:62:32:1e:ed:a2:7e:27:89:13:22:05:e3: c9:48:1a:07:7c:42:aa:46:69:e4:a2:d2:b2:1e:c8: f7:19:88:79:02:d1:22:36:2b:ae:58:da:54:71:43: b4:21:c9:53:ea:29:30:83:4a:e0:e5:12:1e:b7:0f: b6:13:96:2c:42:ab:e8:56:90:7e:13:c4:3a:7c:e0: 30:6a:34:8f:ff:d7:43:38:47:f8:b4:da:11:fa:c9: 5f:5e:ef:b8:40:c9:c4:d7:01:cc:00:67:4d:44:0e: 0e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:AD:3E:67:BF:57:80:6F:BF:42:53:FD:4E:2C:41:F2:C7:56:74:FB X509v3 Authority Key Identifier: keyid:86:50:DE:F1:B1:C8:9D:70:1C:2B:B9:9C:A9:07:9E:ED:BC:CC:04:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:93:0b:92:df:63:6a:65:ba:d1:24:95:e4:31:f1:52:08:ed: 1e:d1:65:29:fd:4e:61:b4:61:35:fa:30:2a:6c:cb:ba:34:de: 7a:0b:45:6b:5a:eb:ae:06:5a:54:e5:17:8a:4d:b2:c3:38:d7: d8:97:db:d3:53:19:fc:99:57:18:98:a7:e7:9c:9d:7d:35:24: 41:57:0f:e4:ad:93:0f:cc:6f:28:38:8d:e0:ca:59:10:df:15: 32:eb:5c:da:bf:f4:93:d8:2a:8d:59:86:bf:16:6b:81:d8:27: f2:4c:54:93:dd:13:75:69:a8:3c:8f:eb:3f:7b:44:42:ad:cc: 79:ee:2a:85:4f:5d:a4:91:55:2f:03:ee:4a:16:1a:c8:e3:1c: f7:d9:59:c7:e0:41:ad:e4:9c:6c:05:2d:eb:8c:7f:db:1f:2a: 9f:4d:46:79:5a:15:de:72:18:20:f6:c7:11:63:6a:c7:f6:4e: 71:15:c0:01:47:73:a4:7b:a3:7f:1b:20:30:83:49:15:f3:34: 9b:42:85:69:ad:bc:d7:02:36:9e:a7:84:c9:f7:72:ca:62:1b: 53:ac:90:68:e1:47:95:c2:ac:59:f1:10:18:a7:1e:18:7d:fb: b4:da:ff:60:0b:5e:be:4e:1d:cc:b3:94:5d:0b:70:20:e2:44: 57:af:57:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL7z/kXHiZ3WtBTzs6agbT1B5E04wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlFRURC Q0NDMDQ2RDAeFw0yNjAxMjQyMjA2MTBaFw0yNjAxMjcyMzA5MTBaMDMxMTAvBgNV BAMTKDIwQUQzRTY3QkY1NzgwNkZCRjQyNTNGRDRFMkM0MUYyQzc1Njc0RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcKkYPy1d7uP+KiBzAO0U/jYLa exymuGKTKJEL04wWbxmkY+WZZgJ5+8oz/wY4GTa6w775lfaSd9w/cK2PZFQUk9vc avKivH1lL2QCZwYdD+XUZMcpFQqh9ednYl6B8/SQioXvM8drlJ2YHFdwZKyLN/lt O6oo0EYTLBAx+cBEVf5+JHFp++xAgP7T4CZ/IxMhbJleRPTI9GIyHu2ifieJEyIF 48lIGgd8QqpGaeSi0rIeyPcZiHkC0SI2K65Y2lRxQ7QhyVPqKTCDSuDlEh63D7YT lixCq+hWkH4TxDp84DBqNI//10M4R/i02hH6yV9e77hAycTXAcwAZ01EDg7/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIK0+Z79XgG+/QlP9TixB8sdWdPswHwYDVR0j BBgwFoAUhlDe8bHInXAcK7mcqQee7bzMBG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YmE4Y2Y2NS1kNDY4LTQzMDktOWYzMC05YjlmMjZkOWNlMmQvMC84NjUwREVGMUIx Qzg5RDcwMUMyQkI5OUNBOTA3OUVFREJDQ0MwNDZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlFRURCQ0ND MDQ2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWJhOGNmNjUtZDQ2OC00MzA5LTlm MzAtOWI5ZjI2ZDljZTJkLzAvODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlF RURCQ0NDMDQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJWTC5LfY2plutEkleQx8VII7R7RZSn9TmG0 YTX6MCpsy7o03noLRWta664GWlTlF4pNssM419iX29NTGfyZVxiYp+ecnX01JEFX D+Stkw/Mbyg4jeDKWRDfFTLrXNq/9JPYKo1Zhr8Wa4HYJ/JMVJPdE3VpqDyP6z97 REKtzHnuKoVPXaSRVS8D7koWGsjjHPfZWcfgQa3knGwFLeuMf9sfKp9NRnlaFd5y GCD2xxFjasf2TnEVwAFHc6R7o38bIDCDSRXzNJtChWmtvNcCNp6nhMn3cspiG1Os kGjhR5XCrFnxEBinHhh9+7Ta/2ALXr5OHcyzlF0LcCDiRFevV8s= -----END CERTIFICATE-----Generated at Sun Jan 25 18:45:56 2026 by rpki-client