This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft File: 8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft (raw, json) Hash identifier: KTN9xjjHvPr7FCCzb19+9W9sTEwr8Ei14R0s3CJL9Fs= Subject key identifier: B0:0F:2B:FE:7B:62:6D:D3:10:D3:63:8B:26:5E:AF:33:37:52:20:8B Authority key identifier: 86:03:B0:F7:26:A0:5A:B3:56:D1:0D:B1:70:BD:8E:27:96:3A:FE:1A Certificate issuer: /CN=8603B0F726A05AB356D10DB170BD8E27963AFE1A Certificate serial: 5BFAF161692BD617D7E863E309FB79E4F1301BD5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft Manifest number: 0431 Signing time: Sat 24 Jan 2026 10:52:07 +0000 Manifest this update: Sat 24 Jan 2026 10:47:07 +0000 Manifest next update: Tue 27 Jan 2026 14:51:07 +0000 Files and hashes: 1: 3130332e3134382e31392e302f32342d3234203d3e20313339393738.roa (hash: bezCvX8XgFSa6OMSK27HUjxxwyFifSYbogKsMqbTNHQ=) 2: 8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl (hash: fQW66qpYKsaA8ALS1BLQSqMFkFvfIGJLdJVF/BxCD9k=) 3: 3130332e3134382e31382e302f32332d3233203d3e20313339393738.roa (hash: 4K0py4cnYyh8vI10iLQo1yG8FCXY4pSX4oMXyg6m2pw=) 4: 323430353a633763303a3a2f33322d3332203d3e20313339393738.roa (hash: piwF7+ON2R793sJiaX+4aFfo5D7cOZdp7goWhivyjxE=) 5: 3130332e3134382e31382e302f32342d3234203d3e20313339393738.roa (hash: U5t1gz5Lu8bYdTDoG7TIErUjYPNGo4xQEu5agXugT3k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 14:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:fa:f1:61:69:2b:d6:17:d7:e8:63:e3:09:fb:79:e4:f1:30:1b:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8603B0F726A05AB356D10DB170BD8E27963AFE1A Validity Not Before: Jan 24 10:47:07 2026 GMT Not After : Jan 27 14:51:07 2026 GMT Subject: CN=B00F2BFE7B626DD310D3638B265EAF333752208B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:74:2c:b7:e9:23:b8:7e:79:74:34:17:dc:98: d8:58:b1:b2:94:71:ef:db:13:df:f7:20:4d:a4:9a: af:1c:a3:3e:4f:5b:d7:ce:ce:11:38:12:03:60:0c: c0:e4:4b:ce:d7:8b:d8:27:91:18:4a:b9:33:95:06: 31:9a:07:26:1e:ea:37:01:3f:bb:a5:83:d2:d9:cd: bb:23:40:9f:a3:28:77:8f:50:2f:fc:4f:33:f1:8a: f9:da:6e:cc:ef:5d:06:e9:0c:62:f0:1a:4e:98:99: 4e:a3:9f:f8:24:26:61:20:a9:ab:44:26:df:7c:c7: 71:9a:14:fb:72:2a:1b:1f:33:f8:4f:c3:3e:1c:21: 7c:36:bb:8b:66:49:05:c2:06:3e:c5:35:08:ec:a3: 19:54:5f:78:ee:b6:1f:96:d0:ec:4e:5a:21:71:0b: 8e:d1:56:dc:47:92:57:46:dd:56:1a:da:02:c5:83: 19:84:49:03:ee:a4:0e:9b:c6:c8:37:41:48:1f:0a: 3e:18:9b:7f:61:5d:56:68:7f:e2:92:6f:00:e3:e7: 2a:b6:fa:3c:2c:6e:16:3a:1e:00:fb:a0:0e:c8:b2: 14:19:15:06:81:26:92:df:e3:df:a7:23:62:cf:e3: f5:cf:e5:76:a1:00:9d:e2:29:7f:ab:c9:05:3d:f1: 53:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:0F:2B:FE:7B:62:6D:D3:10:D3:63:8B:26:5E:AF:33:37:52:20:8B X509v3 Authority Key Identifier: keyid:86:03:B0:F7:26:A0:5A:B3:56:D1:0D:B1:70:BD:8E:27:96:3A:FE:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:b1:cd:93:d8:ac:6c:6d:39:15:ae:7a:e0:90:86:57:e9:43: c3:d9:97:52:01:5a:64:2b:00:17:1f:f1:63:fa:dd:3f:1b:2e: 80:75:fe:19:f6:c5:2a:04:9f:47:2c:dd:7f:fc:bc:dc:54:29: 42:58:80:a8:dd:f2:4b:f7:25:5d:62:fa:36:79:18:ba:0b:59: a8:c6:4f:4b:ae:46:73:9f:fb:14:fa:f3:ba:40:94:0e:0b:c9: d4:f1:3e:fe:77:11:6d:54:fd:95:68:23:eb:f5:50:8b:6d:1e: f7:92:c1:f0:af:19:ed:81:8d:b1:69:24:0b:59:b1:23:b1:20: 0d:6c:a6:f5:14:fd:db:72:7a:1e:06:81:78:e6:6a:03:ad:ed: 23:17:ba:cb:8a:be:76:d5:51:2f:44:bf:1c:8a:68:35:46:75: e8:65:3c:bc:29:86:0b:9f:61:5b:be:58:f9:cb:7c:9e:d2:e0: 77:cc:f9:86:99:71:fd:4b:0a:4f:0e:30:49:ee:78:f3:77:ef: 57:31:83:bb:94:75:0f:79:22:7e:c4:d6:86:a6:67:55:c4:cc: 8c:41:9e:de:e3:e8:f8:80:15:c9:eb:e3:c2:77:c3:a0:9e:b7: dd:2e:13:5c:27:8e:9f:c1:bc:c3:8f:24:78:50:06:95:f8:e9: 0f:c6:d0:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW/rxYWkr1hfX6GPjCft55PEwG9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhFMjc5 NjNBRkUxQTAeFw0yNjAxMjQxMDQ3MDdaFw0yNjAxMjcxNDUxMDdaMDMxMTAvBgNV BAMTKEIwMEYyQkZFN0I2MjZERDMxMEQzNjM4QjI2NUVBRjMzMzc1MjIwOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcdCy36SO4fnl0NBfcmNhYsbKU ce/bE9/3IE2kmq8coz5PW9fOzhE4EgNgDMDkS87Xi9gnkRhKuTOVBjGaByYe6jcB P7ulg9LZzbsjQJ+jKHePUC/8TzPxivnabszvXQbpDGLwGk6YmU6jn/gkJmEgqatE Jt98x3GaFPtyKhsfM/hPwz4cIXw2u4tmSQXCBj7FNQjsoxlUX3juth+W0OxOWiFx C47RVtxHkldG3VYa2gLFgxmESQPupA6bxsg3QUgfCj4Ym39hXVZof+KSbwDj5yq2 +jwsbhY6HgD7oA7IshQZFQaBJpLf49+nI2LP4/XP5XahAJ3iKX+ryQU98VMTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsA8r/ntibdMQ02OLJl6vMzdSIIswHwYDVR0j BBgwFoAUhgOw9yagWrNW0Q2xcL2OJ5Y6/howDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i N2I4N2Y2ZC0yOWE3LTRiNGMtODFjNy01YjRjYmRiMmNiNmEvMC84NjAzQjBGNzI2 QTA1QUIzNTZEMTBEQjE3MEJEOEUyNzk2M0FGRTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhFMjc5NjNB RkUxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjdiODdmNmQtMjlhNy00YjRjLTgx YzctNWI0Y2JkYjJjYjZhLzAvODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhF Mjc5NjNBRkUxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABmxzZPYrGxtORWueuCQhlfpQ8PZl1IBWmQr ABcf8WP63T8bLoB1/hn2xSoEn0cs3X/8vNxUKUJYgKjd8kv3JV1i+jZ5GLoLWajG T0uuRnOf+xT687pAlA4LydTxPv53EW1U/ZVoI+v1UIttHveSwfCvGe2BjbFpJAtZ sSOxIA1spvUU/dtyeh4GgXjmagOt7SMXusuKvnbVUS9EvxyKaDVGdehlPLwphguf YVu+WPnLfJ7S4HfM+YaZcf1LCk8OMEnuePN371cxg7uUdQ95In7E1oamZ1XEzIxB nt7j6PiAFcnr48J3w6Cet90uE1wnjp/BvMOPJHhQBpX46Q/G0Fc= -----END CERTIFICATE-----Generated at Sun Jan 25 20:33:27 2026 by rpki-client