This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft File: B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft (raw, json) Hash identifier: +AU0CEv/Al70FNumLAOkd2StqKjXXl0fKMPfz0zFB1g= Subject key identifier: 70:AF:AE:B8:A1:A5:6D:8C:01:63:78:7A:F3:D2:7B:6F:0E:8D:FB:E0 Authority key identifier: B8:C9:E3:76:A2:07:23:64:11:20:36:DA:7A:7B:BB:4C:AE:4A:C3:7C Certificate issuer: /CN=B8C9E376A2072364112036DA7A7BBB4CAE4AC37C Certificate serial: 56AE1E527315A10D3E4A97D1A3C4E144B16FF4EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft Manifest number: 0168 Signing time: Sat 24 Jan 2026 11:00:05 +0000 Manifest this update: Sat 24 Jan 2026 10:55:05 +0000 Manifest next update: Tue 27 Jan 2026 19:50:05 +0000 Files and hashes: 1: B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl (hash: OY7PCNikngqUrqssJJw2EOuD4utH8vWGjKiTE7VDvQ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 19:50:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:ae:1e:52:73:15:a1:0d:3e:4a:97:d1:a3:c4:e1:44:b1:6f:f4:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8C9E376A2072364112036DA7A7BBB4CAE4AC37C Validity Not Before: Jan 24 10:55:05 2026 GMT Not After : Jan 27 19:50:05 2026 GMT Subject: CN=70AFAEB8A1A56D8C0163787AF3D27B6F0E8DFBE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3c:dd:79:9b:63:17:0b:4f:ce:ef:cd:80:c0: f1:00:5b:db:f8:80:45:fa:76:47:e0:24:bf:23:62: c2:ed:a0:09:b1:74:1a:4f:06:8b:b8:1c:67:8c:60: ce:c1:49:08:37:fe:e3:48:33:a8:86:61:1f:a9:42: e9:c1:85:15:73:7e:c5:a9:9a:11:70:87:46:64:b2: 92:eb:7e:f2:df:80:67:4a:13:4a:63:e9:77:f8:2a: 9b:25:4c:69:7b:9a:db:8b:d1:ff:51:eb:51:72:4a: ed:50:9f:6c:91:e6:48:99:d0:44:0d:52:ea:1c:d8: 7a:04:4c:42:ee:2f:80:0f:95:1a:24:11:93:04:fd: 58:67:11:1a:d3:4e:27:6a:2d:eb:47:5e:1b:ff:a6: 9c:2b:e9:6a:23:c3:d3:5d:7c:3c:9a:f0:90:8d:a0: 97:5e:30:bf:f6:3b:74:80:ef:86:21:6a:3d:a4:df: 64:9a:a7:4a:76:53:ab:2b:cb:ee:f6:44:2c:fa:8c: 62:c4:de:87:ab:6c:0b:fe:c1:4a:8e:cb:ff:f6:87: db:ba:f8:54:91:61:e6:98:0e:4c:06:e1:12:73:c5: 39:3e:a2:54:ec:55:7b:0c:b6:71:84:d7:9c:25:bf: c3:e8:70:cf:ed:b9:18:97:4f:8c:91:93:64:0e:ec: 18:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:AF:AE:B8:A1:A5:6D:8C:01:63:78:7A:F3:D2:7B:6F:0E:8D:FB:E0 X509v3 Authority Key Identifier: keyid:B8:C9:E3:76:A2:07:23:64:11:20:36:DA:7A:7B:BB:4C:AE:4A:C3:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:4f:96:4b:a2:fc:48:83:a7:7a:db:b5:c9:16:e9:62:58:1b: c6:1c:1d:a7:5d:66:92:17:74:65:d1:f8:01:c4:37:c9:ef:ec: 6d:c2:fb:5b:ec:b1:63:5a:4c:d8:7f:1c:7b:e3:80:13:aa:1a: aa:95:30:cf:72:35:1d:21:70:77:5b:ac:3b:2d:db:20:a7:ce: 73:b3:64:2e:58:68:c8:1b:49:ad:ff:32:f6:e4:46:e0:36:34: e3:85:01:58:61:8f:af:30:20:4f:d7:7f:6c:6a:5d:38:70:50: 2d:cb:da:29:78:a4:6d:e8:b8:87:22:4a:b4:83:47:a8:a5:d3: 70:db:8d:41:fc:bf:13:5e:47:74:35:f7:f1:1d:54:45:4a:07: 88:c7:49:90:1d:da:26:a6:99:12:64:3a:83:22:16:5e:f8:44: 19:6c:99:cf:24:e2:41:97:f8:38:dc:3d:a2:4a:64:be:f8:37: ba:3f:27:cd:9b:f2:39:4d:57:9a:8b:f0:70:ad:2d:80:a5:22: a8:68:a1:89:2d:27:19:7c:45:72:1f:81:21:ee:b8:6b:33:d6: 24:0d:03:89:de:fe:e5:88:ef:c6:f5:0b:33:29:22:a4:1d:81: a4:e4:bc:01:e6:e7:a1:2a:fa:18:8e:da:d7:51:8a:5a:a5:7c: aa:7c:c4:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVq4eUnMVoQ0+SpfRo8ThRLFv9OowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhDOUUzNzZBMjA3MjM2NDExMjAzNkRBN0E3QkJCNENB RTRBQzM3QzAeFw0yNjAxMjQxMDU1MDVaFw0yNjAxMjcxOTUwMDVaMDMxMTAvBgNV BAMTKDcwQUZBRUI4QTFBNTZEOEMwMTYzNzg3QUYzRDI3QjZGMEU4REZCRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIPN15m2MXC0/O782AwPEAW9v4 gEX6dkfgJL8jYsLtoAmxdBpPBou4HGeMYM7BSQg3/uNIM6iGYR+pQunBhRVzfsWp mhFwh0ZkspLrfvLfgGdKE0pj6Xf4KpslTGl7mtuL0f9R61FySu1Qn2yR5kiZ0EQN Uuoc2HoETELuL4APlRokEZME/VhnERrTTidqLetHXhv/ppwr6Wojw9NdfDya8JCN oJdeML/2O3SA74Yhaj2k32Sap0p2U6sry+72RCz6jGLE3oerbAv+wUqOy//2h9u6 +FSRYeaYDkwG4RJzxTk+olTsVXsMtnGE15wlv8PocM/tuRiXT4yRk2QO7BgNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcK+uuKGlbYwBY3h689J7bw6N++AwHwYDVR0j BBgwFoAUuMnjdqIHI2QRIDbaenu7TK5Kw3wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzYzZTcxYS05Yzg1LTQxNzYtOGZhNC1iN2EyOWFmYjk3N2QvMC9COEM5RTM3NkEy MDcyMzY0MTEyMDM2REE3QTdCQkI0Q0FFNEFDMzdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhDOUUzNzZBMjA3MjM2NDExMjAzNkRBN0E3QkJCNENBRTRB QzM3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc2M2U3MWEtOWM4NS00MTc2LThm YTQtYjdhMjlhZmI5NzdkLzAvQjhDOUUzNzZBMjA3MjM2NDExMjAzNkRBN0E3QkJC NENBRTRBQzM3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIdPlkui/EiDp3rbtckW6WJYG8YcHaddZpIX dGXR+AHEN8nv7G3C+1vssWNaTNh/HHvjgBOqGqqVMM9yNR0hcHdbrDst2yCnznOz ZC5YaMgbSa3/MvbkRuA2NOOFAVhhj68wIE/Xf2xqXThwUC3L2il4pG3ouIciSrSD R6il03DbjUH8vxNeR3Q19/EdVEVKB4jHSZAd2iammRJkOoMiFl74RBlsmc8k4kGX +DjcPaJKZL74N7o/J82b8jlNV5qL8HCtLYClIqhooYktJxl8RXIfgSHuuGsz1iQN A4ne/uWI78b1CzMpIqQdgaTkvAHm56Eq+hiO2tdRilqlfKp8xDE= -----END CERTIFICATE-----Generated at Mon Jan 26 04:02:02 2026 by rpki-client