This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft File: 2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft (raw, json) Hash identifier: JcIzAok9zUIL79ebqUke6AmB0Uj7mNjvZ5e4k3ASau8= Subject key identifier: 90:69:17:06:F4:8C:43:AF:B4:B6:69:38:72:65:13:E7:4B:8F:0C:29 Authority key identifier: 2E:8B:AC:7E:81:91:1F:08:A1:89:CA:9F:DD:32:A6:43:C8:8E:05:B7 Certificate issuer: /CN=2E8BAC7E81911F08A189CA9FDD32A643C88E05B7 Certificate serial: 6DC0776837A201F9484E22E948A16BB7D3BBA78F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft Manifest number: 0169 Signing time: Sat 24 Jan 2026 14:50:53 +0000 Manifest this update: Sat 24 Jan 2026 14:45:53 +0000 Manifest next update: Tue 27 Jan 2026 16:55:53 +0000 Files and hashes: 1: 2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl (hash: M9QAwUKW4MisSxwvsjh94lY/2SVqIw1EKtZqtqUy+fg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 16:55:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:c0:77:68:37:a2:01:f9:48:4e:22:e9:48:a1:6b:b7:d3:bb:a7:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E8BAC7E81911F08A189CA9FDD32A643C88E05B7 Validity Not Before: Jan 24 14:45:53 2026 GMT Not After : Jan 27 16:55:53 2026 GMT Subject: CN=90691706F48C43AFB4B66938726513E74B8F0C29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ce:c4:f4:0b:a6:c7:1e:e1:e7:1c:64:61:76: d2:eb:93:83:86:b4:23:45:1f:d7:24:ec:6c:4e:47: eb:01:c5:ba:40:ec:b8:d0:e8:0c:d9:d4:42:d9:b7: 88:b2:75:52:f3:4f:ed:f8:ad:07:63:a5:e9:d2:8f: b1:3b:73:f5:e1:d6:46:a8:bd:27:4f:0e:ae:7b:ad: 67:ca:f6:e8:f7:eb:a0:0e:02:19:10:63:17:34:40: 1b:3b:ca:b2:91:79:21:48:24:60:49:57:d1:ba:7a: 10:22:86:05:c9:c5:34:c3:9a:89:60:5c:5f:fa:16: ae:ae:83:4e:1c:43:cd:d2:e2:c1:55:69:b6:34:2b: b8:3f:91:06:ce:58:3f:65:5e:28:5a:7f:03:be:be: 38:5b:85:27:ea:e0:31:80:56:53:20:d8:ea:82:c5: 25:35:a7:5f:90:16:79:a7:37:e5:b3:cd:38:aa:e9: 59:93:3b:de:08:01:da:3e:0d:b3:48:56:cd:6e:d2: 22:dc:de:43:ac:43:50:0a:54:0d:53:20:52:26:18: 23:b0:37:d9:04:24:59:ff:08:5e:90:89:3a:ef:b9: 41:05:9a:06:00:18:d9:44:56:26:89:70:68:ce:fb: 92:4d:90:92:22:ee:36:e0:c7:70:87:6f:b7:3e:74: ce:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:69:17:06:F4:8C:43:AF:B4:B6:69:38:72:65:13:E7:4B:8F:0C:29 X509v3 Authority Key Identifier: keyid:2E:8B:AC:7E:81:91:1F:08:A1:89:CA:9F:DD:32:A6:43:C8:8E:05:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:e6:82:fb:0b:78:06:71:0a:aa:64:df:b5:38:f5:a7:2d:d6: b9:10:3b:de:55:1d:70:e8:38:91:d9:86:6f:46:e2:eb:89:54: 98:bb:9e:0c:a3:9c:4b:ce:87:86:f3:3d:05:9a:60:26:79:3d: f8:c3:12:2a:e8:bb:44:25:07:4e:e4:63:3e:b1:d8:8c:fc:33: b1:46:47:48:5f:a9:17:da:05:db:6e:9d:f5:54:28:7d:6d:d4: 77:fc:e3:0e:be:38:d1:7b:d4:40:be:05:27:67:07:8c:40:66: 57:a1:65:1c:8b:13:5b:b2:84:2b:8e:7a:77:90:f0:4a:93:79: fe:28:7c:10:3a:b9:b8:30:da:6f:19:2e:cc:1e:b6:43:8b:94: b2:fc:2e:6c:ca:ef:d7:96:48:50:83:00:96:ec:c3:06:09:09: 83:b7:b3:71:61:5f:9e:36:90:5d:9d:b8:18:85:c4:aa:4f:b6: 9d:be:d0:97:60:1f:36:f5:b4:f6:f2:6b:28:ef:83:13:af:9e: c5:39:db:ce:33:00:20:23:52:e9:61:ed:45:a6:c6:56:13:ac: b0:67:01:c8:28:7d:d0:ac:1b:c3:95:56:c0:41:3b:77:da:76: 4c:e1:0e:ea:eb:51:5a:c0:10:80:4c:db:0c:25:01:34:62:4b: 14:62:b2:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbcB3aDeiAflITiLpSKFrt9O7p48wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU4QkFDN0U4MTkxMUYwOEExODlDQTlGREQzMkE2NDND ODhFMDVCNzAeFw0yNjAxMjQxNDQ1NTNaFw0yNjAxMjcxNjU1NTNaMDMxMTAvBgNV BAMTKDkwNjkxNzA2RjQ4QzQzQUZCNEI2NjkzODcyNjUxM0U3NEI4RjBDMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOzsT0C6bHHuHnHGRhdtLrk4OG tCNFH9ck7GxOR+sBxbpA7LjQ6AzZ1ELZt4iydVLzT+34rQdjpenSj7E7c/Xh1kao vSdPDq57rWfK9uj366AOAhkQYxc0QBs7yrKReSFIJGBJV9G6ehAihgXJxTTDmolg XF/6Fq6ug04cQ83S4sFVabY0K7g/kQbOWD9lXihafwO+vjhbhSfq4DGAVlMg2OqC xSU1p1+QFnmnN+WzzTiq6VmTO94IAdo+DbNIVs1u0iLc3kOsQ1AKVA1TIFImGCOw N9kEJFn/CF6QiTrvuUEFmgYAGNlEViaJcGjO+5JNkJIi7jbgx3CHb7c+dM4dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkGkXBvSMQ6+0tmk4cmUT50uPDCkwHwYDVR0j BBgwFoAULousfoGRHwihicqf3TKmQ8iOBbcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mjg2MjZlMC0yOWZlLTRlODYtODRkNi02ODQ3OGM1Y2Q5ZWQvMC8yRThCQUM3RTgx OTExRjA4QTE4OUNBOUZERDMyQTY0M0M4OEUwNUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkU4QkFDN0U4MTkxMUYwOEExODlDQTlGREQzMkE2NDNDODhF MDVCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI4NjI2ZTAtMjlmZS00ZTg2LTg0 ZDYtNjg0NzhjNWNkOWVkLzAvMkU4QkFDN0U4MTkxMUYwOEExODlDQTlGREQzMkE2 NDNDODhFMDVCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF/mgvsLeAZxCqpk37U49act1rkQO95VHXDo OJHZhm9G4uuJVJi7ngyjnEvOh4bzPQWaYCZ5PfjDEirou0QlB07kYz6x2Iz8M7FG R0hfqRfaBdtunfVUKH1t1Hf84w6+ONF71EC+BSdnB4xAZlehZRyLE1uyhCuOeneQ 8EqTef4ofBA6ubgw2m8ZLswetkOLlLL8LmzK79eWSFCDAJbswwYJCYO3s3FhX542 kF2duBiFxKpPtp2+0JdgHzb1tPbyayjvgxOvnsU5284zACAjUulh7UWmxlYTrLBn AcgofdCsG8OVVsBBO3fadkzhDurrUVrAEIBM2wwlATRiSxRissw= -----END CERTIFICATE-----Generated at Sun Jan 25 18:44:45 2026 by rpki-client