This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/82FB9CE597D61EC382BA2D63909426959C43F18F.mft File: 82FB9CE597D61EC382BA2D63909426959C43F18F.mft (raw, json) Hash identifier: nXRjiExhGoiIET/iE5geqYUHOxkzea7Uyo+l5NrMsck= Subject key identifier: 8B:27:E0:1B:EE:69:B1:A1:AD:4B:34:60:41:F3:EA:15:94:39:05:9F Authority key identifier: 82:FB:9C:E5:97:D6:1E:C3:82:BA:2D:63:90:94:26:95:9C:43:F1:8F Certificate issuer: /CN=82FB9CE597D61EC382BA2D63909426959C43F18F Certificate serial: 33AF508351B0D25F4CDAF97EDB10F4F939C260AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82FB9CE597D61EC382BA2D63909426959C43F18F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/82FB9CE597D61EC382BA2D63909426959C43F18F.mft Manifest number: 016C Signing time: Fri 23 Jan 2026 17:22:31 +0000 Manifest this update: Fri 23 Jan 2026 17:17:31 +0000 Manifest next update: Tue 27 Jan 2026 01:49:31 +0000 Files and hashes: 1: 3130332e372e3130352e302f32342d3234203d3e20313531353933.roa (hash: +Rw2T75m1ati4oVfQCR6RiMANt/qU5P03srE51mQwtg=) 2: 82FB9CE597D61EC382BA2D63909426959C43F18F.crl (hash: 7S3cqPsxBcFGSqg3lGpLz9DNTXE8S4KoviiJZUrLAHw=) 3: 3130332e372e3130342e302f32342d3234203d3e20313531353933.roa (hash: 3uNfdf5OyBJLpmZT75dt2srrC7nbkL5sTgGA5ZUxCD8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/82FB9CE597D61EC382BA2D63909426959C43F18F.crl rsync://repo-rpki.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/82FB9CE597D61EC382BA2D63909426959C43F18F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82FB9CE597D61EC382BA2D63909426959C43F18F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 01:49:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:af:50:83:51:b0:d2:5f:4c:da:f9:7e:db:10:f4:f9:39:c2:60:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82FB9CE597D61EC382BA2D63909426959C43F18F Validity Not Before: Jan 23 17:17:31 2026 GMT Not After : Jan 27 01:49:31 2026 GMT Subject: CN=8B27E01BEE69B1A1AD4B346041F3EA159439059F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fd:6b:59:01:2b:e4:17:f5:2a:15:99:5f:fe: d6:33:d8:cb:7f:55:e0:ce:d2:0f:56:d0:3e:50:1f: 70:46:b4:83:43:a4:12:61:a4:ce:f1:0c:ca:56:c7: 8d:e3:5c:bb:4a:31:f8:c4:bf:90:a7:c7:0c:fa:b5: 25:e9:97:7f:de:40:ce:f5:bb:83:52:b9:f8:ef:ab: aa:bf:5b:d4:85:d7:5f:61:b2:ae:83:d8:99:35:2f: 71:a0:05:7d:a6:a8:1d:0a:f2:1d:29:92:74:90:3a: 6a:f1:a9:ff:47:0e:87:01:75:5d:84:bd:de:73:22: ed:5b:4c:e8:d9:43:49:74:31:67:28:4e:b2:ef:74: 69:46:4e:ab:3a:c1:68:0d:43:ed:47:13:89:b0:f9: e5:a9:78:df:1b:a5:6e:23:60:60:1a:14:d5:7b:b8: 42:b8:e3:2e:e0:e0:55:54:32:34:c4:06:72:23:12: 99:03:e0:83:d7:ea:94:ee:19:4f:fa:57:af:7b:a9: cf:fa:f9:43:0a:d0:a4:6c:51:62:bd:58:1e:fa:ee: 9b:f7:f5:e5:34:1c:4b:c0:dd:77:c3:8b:78:75:f6: 47:3b:8c:90:1d:a0:34:31:b0:d5:08:b9:57:92:cc: 69:67:1d:ce:c5:44:48:7a:db:bd:8d:46:1d:74:0c: b1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:27:E0:1B:EE:69:B1:A1:AD:4B:34:60:41:F3:EA:15:94:39:05:9F X509v3 Authority Key Identifier: keyid:82:FB:9C:E5:97:D6:1E:C3:82:BA:2D:63:90:94:26:95:9C:43:F1:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/82FB9CE597D61EC382BA2D63909426959C43F18F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82FB9CE597D61EC382BA2D63909426959C43F18F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/82FB9CE597D61EC382BA2D63909426959C43F18F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:7c:68:28:b0:65:60:e9:3d:76:fd:3d:65:f4:6a:06:78:e3: 6b:89:a0:b1:7e:ef:c6:74:56:bd:f8:37:c3:cb:c1:f2:78:bc: b5:92:0a:f0:7a:99:90:68:a1:85:85:62:c2:6d:be:96:3e:3b: 17:bc:21:b8:b4:4c:b4:f1:87:0b:0d:32:7f:b9:97:5a:3a:e2: 0e:56:30:6e:60:79:eb:70:7c:ec:4b:53:b9:16:5c:32:5c:76: e0:fd:31:99:8b:ae:be:6f:05:72:14:56:79:02:88:ab:1a:d5: e2:10:d6:cf:87:46:4e:7a:cb:58:b7:16:e3:cb:67:84:ea:1a: e4:71:43:43:3c:94:e8:be:fb:8b:40:a3:92:74:0a:7f:b4:7a: 1d:00:47:3e:96:79:dd:c4:1c:52:27:0a:7b:d6:91:1e:5f:98: 38:10:a3:50:e2:c0:52:e3:30:1c:b0:00:0b:4a:2c:55:25:cf: b4:1a:86:e9:81:5b:cd:2a:ec:79:63:19:86:29:28:58:02:20: 88:e3:fd:dc:c1:7c:cb:3a:89:47:55:45:b6:44:7e:b5:76:d5: ac:c3:50:7a:9f:10:33:46:db:0f:76:be:af:1b:df:ce:51:ec: 76:04:72:79:19:a5:a4:e3:5f:7a:54:37:5c:94:4c:1b:8b:54: f1:c2:84:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM69Qg1Gw0l9M2vl+2xD0+TnCYKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODJGQjlDRTU5N0Q2MUVDMzgyQkEyRDYzOTA5NDI2OTU5 QzQzRjE4RjAeFw0yNjAxMjMxNzE3MzFaFw0yNjAxMjcwMTQ5MzFaMDMxMTAvBgNV BAMTKDhCMjdFMDFCRUU2OUIxQTFBRDRCMzQ2MDQxRjNFQTE1OTQzOTA1OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt/WtZASvkF/UqFZlf/tYz2Mt/ VeDO0g9W0D5QH3BGtINDpBJhpM7xDMpWx43jXLtKMfjEv5Cnxwz6tSXpl3/eQM71 u4NSufjvq6q/W9SF119hsq6D2Jk1L3GgBX2mqB0K8h0pknSQOmrxqf9HDocBdV2E vd5zIu1bTOjZQ0l0MWcoTrLvdGlGTqs6wWgNQ+1HE4mw+eWpeN8bpW4jYGAaFNV7 uEK44y7g4FVUMjTEBnIjEpkD4IPX6pTuGU/6V697qc/6+UMK0KRsUWK9WB767pv3 9eU0HEvA3XfDi3h19kc7jJAdoDQxsNUIuVeSzGlnHc7FREh6272NRh10DLGjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiyfgG+5psaGtSzRgQfPqFZQ5BZ8wHwYDVR0j BBgwFoAUgvuc5ZfWHsOCui1jkJQmlZxD8Y8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzZjNzgyNS04YjNkLTQ2NmMtYmEwYy05OTU1M2MxZDczZWEvMC84MkZCOUNFNTk3 RDYxRUMzODJCQTJENjM5MDk0MjY5NTlDNDNGMThGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODJGQjlDRTU5N0Q2MUVDMzgyQkEyRDYzOTA5NDI2OTU5QzQz RjE4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc2Yzc4MjUtOGIzZC00NjZjLWJh MGMtOTk1NTNjMWQ3M2VhLzAvODJGQjlDRTU5N0Q2MUVDMzgyQkEyRDYzOTA5NDI2 OTU5QzQzRjE4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADN8aCiwZWDpPXb9PWX0agZ442uJoLF+78Z0 Vr34N8PLwfJ4vLWSCvB6mZBooYWFYsJtvpY+Oxe8Ibi0TLTxhwsNMn+5l1o64g5W MG5geetwfOxLU7kWXDJcduD9MZmLrr5vBXIUVnkCiKsa1eIQ1s+HRk56y1i3FuPL Z4TqGuRxQ0M8lOi++4tAo5J0Cn+0eh0ARz6Wed3EHFInCnvWkR5fmDgQo1DiwFLj MBywAAtKLFUlz7QahumBW80q7HljGYYpKFgCIIjj/dzBfMs6iUdVRbZEfrV21azD UHqfEDNG2w92vq8b385R7HYEcnkZpaTjX3pUN1yUTBuLVPHChJ0= -----END CERTIFICATE-----Generated at Sun Jan 25 20:36:59 2026 by rpki-client