This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft File: 8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft (raw, json) Hash identifier: bCHiWUUVpNoODfhmiYDlDGGtvRodBo8maiBjEC/ucfM= Subject key identifier: 3A:AC:52:7D:2F:20:B0:9C:83:7A:66:38:09:C0:ED:57:B3:F8:8A:80 Authority key identifier: 8B:23:7B:2B:C0:58:1B:55:6D:D5:B4:B0:84:7F:9C:83:40:8B:A9:3D Certificate issuer: /CN=8B237B2BC0581B556DD5B4B0847F9C83408BA93D Certificate serial: 327B90EBD56356A747B84868E7AE14AFEC5F16B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft Manifest number: 023E Signing time: Sat 24 Jan 2026 21:30:00 +0000 Manifest this update: Sat 24 Jan 2026 21:25:00 +0000 Manifest next update: Tue 27 Jan 2026 21:56:00 +0000 Files and hashes: 1: 8B237B2BC0581B556DD5B4B0847F9C83408BA93D.crl (hash: Ac3k0wCiIgjQgDjxJ/pZZa3IWEozVnr4whcyKaanf5Q=) 2: 3130332e3139302e3131352e302f32342d3234203d3e203435333035.roa (hash: dEnaKQdLZdizpCqpcJnXth7f6FKcdGy1/gEWNghJ+nU=) 3: 3130332e3139302e3131342e302f32332d3233203d3e203435333035.roa (hash: ULVDgV6Ym293ne4NjwFyx9fV7GwDIsvmtft/evHC1jQ=) 4: 3130332e3139302e3131342e302f32342d3234203d3e203435333035.roa (hash: KgdQImSFXI48JOCLFSTKKPItTv1rC7N1MfwzWNtz7zI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.crl rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 21:56:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:7b:90:eb:d5:63:56:a7:47:b8:48:68:e7:ae:14:af:ec:5f:16:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B237B2BC0581B556DD5B4B0847F9C83408BA93D Validity Not Before: Jan 24 21:25:00 2026 GMT Not After : Jan 27 21:56:00 2026 GMT Subject: CN=3AAC527D2F20B09C837A663809C0ED57B3F88A80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e6:97:9c:08:39:08:93:16:e4:ce:ca:96:ee: 56:0e:88:9b:e9:e3:01:f1:8a:07:c0:75:30:3c:26: 36:c1:13:0c:11:fe:52:bf:8d:cd:88:24:56:52:aa: 04:ea:e4:ab:a5:63:05:d5:1e:9c:ba:88:2f:b5:54: 69:3a:fa:51:08:73:f2:c0:cb:0e:4b:bc:8d:aa:90: 00:e7:5c:23:9d:8c:1a:5e:75:63:82:2d:ca:4b:3c: a6:0f:d1:e1:3b:fc:e7:65:4a:e2:e7:5a:5a:63:39: 84:cd:60:bc:7f:cd:d5:f1:5b:4c:f3:ed:fd:96:da: fb:14:05:e1:96:15:5b:a4:30:87:2d:95:da:d1:4f: e4:87:c5:83:cb:e3:01:d2:c3:f8:66:0a:d6:38:47: cc:98:d7:b5:e3:e7:9e:29:e3:b1:0d:49:94:7d:b8: 8c:bd:8e:53:9f:a4:98:0f:ff:89:09:84:fb:bd:05: fd:b3:02:2e:b5:dc:b4:7e:61:2b:a2:e4:e8:11:30: 00:9e:a7:ee:21:14:8a:a3:8a:1e:c4:0d:4e:c8:7d: ef:6c:0b:52:9d:a8:23:b2:6d:55:6b:ab:80:23:10: a5:ba:e3:d3:57:72:cd:d0:dc:1c:4a:9e:eb:16:9e: fc:f0:a6:c2:c3:51:97:b0:5d:03:12:47:5b:21:a9: 35:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:AC:52:7D:2F:20:B0:9C:83:7A:66:38:09:C0:ED:57:B3:F8:8A:80 X509v3 Authority Key Identifier: keyid:8B:23:7B:2B:C0:58:1B:55:6D:D5:B4:B0:84:7F:9C:83:40:8B:A9:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:0c:89:53:65:a1:81:a3:60:42:fc:54:a6:2c:bf:b2:ce:3e: 39:5c:ae:f9:25:b8:9a:5d:f7:39:e4:bb:92:e5:50:e5:dc:52: 64:7e:0b:27:b3:c6:f8:0f:c3:d9:40:73:8f:a7:77:c0:69:1c: 25:b4:da:00:60:85:59:99:2a:ac:d5:fe:98:36:e9:2e:f1:13: 23:54:3d:a0:11:02:fb:97:cc:00:41:5c:d1:82:b7:87:21:cd: e5:90:df:5a:04:40:64:63:ef:6b:99:d1:4f:66:3b:72:08:88: 55:f0:fe:86:91:95:13:76:68:d5:92:c8:db:10:9a:c1:f7:0a: 7b:24:5e:68:de:5b:ab:0f:30:b7:b0:5a:42:0d:88:57:c1:43: d1:c5:19:ad:54:ca:6a:3b:01:6b:55:10:8e:69:2d:9d:bb:5a: a8:de:b7:8f:fe:cb:4c:c7:a9:60:d4:06:36:d3:9d:b1:b7:10: dd:da:d1:71:ea:34:85:2b:17:72:df:50:15:b4:ca:c7:50:15: ed:ce:4d:1b:8e:79:15:31:4f:41:ca:35:6c:49:63:9f:32:aa: 24:17:88:4e:29:00:40:90:75:39:94:62:81:a7:53:df:75:43: 13:71:8f:0f:f8:61:6b:19:a4:1a:1f:52:4f:c3:57:8b:fb:a3: 4d:55:8d:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMnuQ69VjVqdHuEho564Ur+xfFrgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIyMzdCMkJDMDU4MUI1NTZERDVCNEIwODQ3RjlDODM0 MDhCQTkzRDAeFw0yNjAxMjQyMTI1MDBaFw0yNjAxMjcyMTU2MDBaMDMxMTAvBgNV BAMTKDNBQUM1MjdEMkYyMEIwOUM4MzdBNjYzODA5QzBFRDU3QjNGODhBODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA5pecCDkIkxbkzsqW7lYOiJvp 4wHxigfAdTA8JjbBEwwR/lK/jc2IJFZSqgTq5KulYwXVHpy6iC+1VGk6+lEIc/LA yw5LvI2qkADnXCOdjBpedWOCLcpLPKYP0eE7/OdlSuLnWlpjOYTNYLx/zdXxW0zz 7f2W2vsUBeGWFVukMIctldrRT+SHxYPL4wHSw/hmCtY4R8yY17Xj554p47ENSZR9 uIy9jlOfpJgP/4kJhPu9Bf2zAi613LR+YSui5OgRMACep+4hFIqjih7EDU7Ife9s C1KdqCOybVVrq4AjEKW649NXcs3Q3BxKnusWnvzwpsLDUZewXQMSR1shqTUDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOqxSfS8gsJyDemY4CcDtV7P4ioAwHwYDVR0j BBgwFoAUiyN7K8BYG1Vt1bSwhH+cg0CLqT0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MmIwYmRkNS02ZTMwLTRhMTAtYjk5My03N2Q0ODI1MWYzYTEvMC84QjIzN0IyQkMw NTgxQjU1NkRENUI0QjA4NDdGOUM4MzQwOEJBOTNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIyMzdCMkJDMDU4MUI1NTZERDVCNEIwODQ3RjlDODM0MDhC QTkzRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzJiMGJkZDUtNmUzMC00YTEwLWI5 OTMtNzdkNDgyNTFmM2ExLzAvOEIyMzdCMkJDMDU4MUI1NTZERDVCNEIwODQ3RjlD ODM0MDhCQTkzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIYMiVNloYGjYEL8VKYsv7LOPjlcrvkluJpd 9znku5LlUOXcUmR+CyezxvgPw9lAc4+nd8BpHCW02gBghVmZKqzV/pg26S7xEyNU PaARAvuXzABBXNGCt4chzeWQ31oEQGRj72uZ0U9mO3IIiFXw/oaRlRN2aNWSyNsQ msH3CnskXmjeW6sPMLewWkINiFfBQ9HFGa1Uymo7AWtVEI5pLZ27Wqjet4/+y0zH qWDUBjbTnbG3EN3a0XHqNIUrF3LfUBW0ysdQFe3OTRuOeRUxT0HKNWxJY58yqiQX iE4pAECQdTmUYoGnU991QxNxjw/4YWsZpBofUk/DV4v7o01VjXs= -----END CERTIFICATE-----Generated at Sun Jan 25 18:58:43 2026 by rpki-client