This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft File: 8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft (raw, json) Hash identifier: gNhMcdiB9hBAVdNgXI9hlAZ177kfLzXu2UPu4zmw900= Subject key identifier: 39:AF:49:45:70:3E:E8:1E:89:42:10:5F:94:7D:69:2C:DE:1D:C0:41 Authority key identifier: 8D:1D:84:B8:A5:62:24:B4:E2:90:FB:DA:5C:79:0C:D1:F0:3F:11:A7 Certificate issuer: /CN=8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7 Certificate serial: 7AC35D626E351E34DFC0A7F850CFDB45C7693F22 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft Manifest number: 0243 Signing time: Sun 25 Jan 2026 23:11:52 +0000 Manifest this update: Sun 25 Jan 2026 23:06:52 +0000 Manifest next update: Thu 29 Jan 2026 04:10:52 +0000 Files and hashes: 1: 8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.crl (hash: Umrz9TSHfqDIfKdVRSFiik4M1+8gv3thGuKrh1NlUnI=) 2: 3130332e3136302e3133382e302f32332d3234203d3e203338333230.roa (hash: 1fOWEp4TrzIX6lJGhVie2BUvo2f5cu7g23YUAHBTka8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.crl rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:c3:5d:62:6e:35:1e:34:df:c0:a7:f8:50:cf:db:45:c7:69:3f:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7 Validity Not Before: Jan 25 23:06:52 2026 GMT Not After : Jan 29 04:10:52 2026 GMT Subject: CN=39AF4945703EE81E8942105F947D692CDE1DC041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ae:20:cb:7e:cc:37:92:ae:76:4c:75:cd:a8: 08:4f:82:b6:79:fd:62:0e:69:01:91:ca:2a:66:18: a2:ca:01:73:3d:11:7d:2b:84:8e:07:ff:8a:bb:8b: 1c:9d:1c:6b:84:f2:b0:d2:60:5a:cd:31:c2:6a:56: a6:b5:84:ca:08:ba:23:ad:2e:6a:16:55:16:9a:d6: 96:55:c9:00:ae:ca:e1:72:4b:13:5a:c2:30:02:a1: 6f:1c:fa:a1:99:46:d0:b6:c1:18:aa:26:7d:73:d2: 82:40:c2:ee:ad:6a:de:97:8a:ba:6e:4b:f7:f8:bd: ff:c2:5d:f4:15:b9:ac:c5:0c:91:42:d5:b4:39:cb: 78:53:85:07:6e:6a:e4:81:18:00:d5:bd:bc:5d:7e: 2b:f8:fb:6e:28:16:bf:31:79:59:4f:3b:c4:36:d1: eb:fb:6e:47:3b:3a:69:59:58:17:f4:31:06:a7:7b: ff:9f:d7:ff:38:50:46:50:05:53:d7:db:b0:71:d9: 38:a4:09:81:e5:cc:35:93:92:b9:9b:90:7d:91:12: f0:48:e0:56:6d:18:65:cb:43:3f:a2:cd:0e:87:64: e4:5d:d9:62:f7:a3:fa:ed:4d:35:6e:f0:ea:91:44: 88:f7:6f:74:7e:51:ab:1e:58:81:14:46:21:35:eb: 49:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:AF:49:45:70:3E:E8:1E:89:42:10:5F:94:7D:69:2C:DE:1D:C0:41 X509v3 Authority Key Identifier: keyid:8D:1D:84:B8:A5:62:24:B4:E2:90:FB:DA:5C:79:0C:D1:F0:3F:11:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:44:37:b1:c5:5d:e2:86:47:25:ee:76:6b:f2:58:28:1e:e8: 8e:5a:41:5b:5c:06:29:ef:f1:33:52:ce:df:41:88:e1:2e:6d: cf:35:41:52:81:c9:1b:d5:bb:ff:d3:4d:54:4f:a7:7d:35:4c: d9:99:eb:99:b5:78:15:6e:65:04:5b:17:e4:3e:9a:3a:97:90: db:3d:0f:fa:9a:01:03:3d:3d:55:f6:75:f5:de:b8:32:39:0f: 46:e5:20:d7:f4:0f:fa:02:3d:4f:13:5f:df:c2:01:f3:69:f7: 31:d1:41:57:a4:fb:0e:84:9f:34:e0:e4:d8:f6:dc:33:57:58: 79:11:1f:bd:4e:d0:9a:34:ca:51:f6:72:65:d7:3b:fe:6d:70: a3:16:a4:81:74:d2:5d:02:09:ed:01:01:e4:f7:4e:2e:f5:56: 10:dd:dc:ae:72:d5:89:9a:6c:93:06:8e:df:e4:cd:95:f2:73: bf:38:44:5c:3c:0f:ac:e4:7f:7a:18:b4:9b:41:84:a5:c3:63: fe:47:1e:75:09:e5:ea:34:a4:30:b1:38:f4:c0:b0:2c:c4:5c: 2d:00:46:a7:40:35:9f:b2:78:05:4f:05:1d:d4:be:d3:d8:46: b9:ff:53:11:b5:f3:2f:47:73:78:ac:06:b8:00:f5:1e:32:98: 2a:45:1a:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUesNdYm41HjTfwKf4UM/bRcdpPyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQxRDg0QjhBNTYyMjRCNEUyOTBGQkRBNUM3OTBDRDFG MDNGMTFBNzAeFw0yNjAxMjUyMzA2NTJaFw0yNjAxMjkwNDEwNTJaMDMxMTAvBgNV BAMTKDM5QUY0OTQ1NzAzRUU4MUU4OTQyMTA1Rjk0N0Q2OTJDREUxREMwNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5riDLfsw3kq52THXNqAhPgrZ5 /WIOaQGRyipmGKLKAXM9EX0rhI4H/4q7ixydHGuE8rDSYFrNMcJqVqa1hMoIuiOt LmoWVRaa1pZVyQCuyuFySxNawjACoW8c+qGZRtC2wRiqJn1z0oJAwu6tat6Xirpu S/f4vf/CXfQVuazFDJFC1bQ5y3hThQduauSBGADVvbxdfiv4+24oFr8xeVlPO8Q2 0ev7bkc7OmlZWBf0MQane/+f1/84UEZQBVPX27Bx2TikCYHlzDWTkrmbkH2REvBI 4FZtGGXLQz+izQ6HZORd2WL3o/rtTTVu8OqRRIj3b3R+UaseWIEURiE160nXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOa9JRXA+6B6JQhBflH1pLN4dwEEwHwYDVR0j BBgwFoAUjR2EuKViJLTikPvaXHkM0fA/EacwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZmRiMThlZi02NTlmLTRiMWUtYTJlMC1iNThhZjZiMTI3MWYvMC84RDFEODRCOEE1 NjIyNEI0RTI5MEZCREE1Qzc5MENEMUYwM0YxMUE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQxRDg0QjhBNTYyMjRCNEUyOTBGQkRBNUM3OTBDRDFGMDNG MTFBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmZkYjE4ZWYtNjU5Zi00YjFlLWEy ZTAtYjU4YWY2YjEyNzFmLzAvOEQxRDg0QjhBNTYyMjRCNEUyOTBGQkRBNUM3OTBD RDFGMDNGMTFBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB1EN7HFXeKGRyXudmvyWCge6I5aQVtcBinv 8TNSzt9BiOEubc81QVKByRvVu//TTVRPp301TNmZ65m1eBVuZQRbF+Q+mjqXkNs9 D/qaAQM9PVX2dfXeuDI5D0blINf0D/oCPU8TX9/CAfNp9zHRQVek+w6EnzTg5Nj2 3DNXWHkRH71O0Jo0ylH2cmXXO/5tcKMWpIF00l0CCe0BAeT3Ti71VhDd3K5y1Yma bJMGjt/kzZXyc784RFw8D6zkf3oYtJtBhKXDY/5HHnUJ5eo0pDCxOPTAsCzEXC0A RqdANZ+yeAVPBR3UvtPYRrn/UxG18y9Hc3isBrgA9R4ymCpFGns= -----END CERTIFICATE-----Generated at Mon Jan 26 01:12:46 2026 by rpki-client