This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft File: 8874CE775F191B6E0B34A789A359EB9FB93B737E.mft (raw, json) Hash identifier: KiC7gvIMKvFPWzFgnPoQKjj334JmeomN6tyLje8ZdFM= Subject key identifier: E0:AA:C6:8E:2C:5C:A4:66:07:81:24:1B:1E:75:2A:02:C9:9E:41:10 Authority key identifier: 88:74:CE:77:5F:19:1B:6E:0B:34:A7:89:A3:59:EB:9F:B9:3B:73:7E Certificate issuer: /CN=8874CE775F191B6E0B34A789A359EB9FB93B737E Certificate serial: 4B6598114D3097F9FC4C80DD50BD9CFCA23ADDE2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft Manifest number: 029D Signing time: Sun 25 Jan 2026 04:20:47 +0000 Manifest this update: Sun 25 Jan 2026 04:15:47 +0000 Manifest next update: Wed 28 Jan 2026 15:49:47 +0000 Files and hashes: 1: 8874CE775F191B6E0B34A789A359EB9FB93B737E.crl (hash: r31sOoqPmhxje5aLZsrhyJJgWhUNItrHhB5YPOtI6hQ=) 2: 3130332e3137322e32352e302f32342d3234203d3e20313432333837.roa (hash: aI45yKhAru9VHfZlQWe/rwkciB33mSYkuVbNTgyinfk=) 3: 3130332e3137322e32342e302f32342d3234203d3e20313432333837.roa (hash: nL/HZGA0E7GxsNtQZwq3/bQqUnFo5wNCWdHlAXFVa2g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.crl rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:65:98:11:4d:30:97:f9:fc:4c:80:dd:50:bd:9c:fc:a2:3a:dd:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8874CE775F191B6E0B34A789A359EB9FB93B737E Validity Not Before: Jan 25 04:15:47 2026 GMT Not After : Jan 28 15:49:47 2026 GMT Subject: CN=E0AAC68E2C5CA4660781241B1E752A02C99E4110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:18:f1:05:31:07:2e:4b:af:fc:6c:73:ae:05: a4:33:46:de:9d:fc:c7:56:f1:22:42:a0:6a:de:9b: 7c:79:98:4c:10:2f:48:b3:0e:58:c4:29:64:94:a0: 40:26:7d:8c:98:cc:91:4f:0a:b0:d9:e1:da:0e:1a: bd:b6:41:25:d7:c1:3c:d7:cc:e8:b9:1f:4c:8a:c7: 37:a0:18:78:26:df:c7:2f:48:dd:12:64:5f:d5:6b: 8b:36:8e:62:ef:71:d6:7e:74:8e:94:62:3c:8d:b1: 56:2e:d5:e6:e3:07:2f:66:68:a9:53:82:ad:b6:b3: ea:c4:51:71:1d:7d:eb:a3:00:94:b9:cd:fe:3a:00: 5a:bd:a5:53:aa:b5:cc:31:e5:b8:71:1d:9f:34:1b: 63:d0:b1:89:cb:f5:4f:b5:6f:89:48:5f:53:92:a9: 98:46:eb:f6:09:cc:9a:11:26:79:36:9e:16:ca:10: 2e:85:c5:50:a8:07:61:87:bc:7b:98:fb:4f:39:d0: 2c:7a:b9:9b:72:a2:72:a7:06:f5:e8:34:2b:4b:25: 65:50:92:90:c9:38:3b:75:d4:6a:cc:33:9f:22:c5: 78:a0:e2:7d:92:19:38:61:d3:8c:cb:fc:ed:16:94: 24:29:6c:ec:32:84:af:b5:ea:c1:50:69:0b:09:ca: 47:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:AA:C6:8E:2C:5C:A4:66:07:81:24:1B:1E:75:2A:02:C9:9E:41:10 X509v3 Authority Key Identifier: keyid:88:74:CE:77:5F:19:1B:6E:0B:34:A7:89:A3:59:EB:9F:B9:3B:73:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:29:62:00:89:1b:24:a8:ed:ae:b7:22:ea:da:2f:e3:60:75: 9a:7a:e5:a3:85:3b:dd:df:20:59:c2:8c:30:ef:d2:73:f0:21: 89:07:b5:4c:a8:1b:29:e3:26:11:fa:69:78:3e:c7:0c:c2:72: 5c:62:84:96:66:9a:87:a8:6f:e6:88:88:ec:6a:96:75:65:2f: d7:ab:9f:70:da:c9:c8:06:06:32:60:c4:c2:60:a6:f8:79:04: bb:49:e4:74:91:b0:7d:78:d4:f4:00:f9:ed:0c:7d:7e:9b:85: b5:f4:d1:5c:05:03:af:9a:47:ea:1c:8f:54:e0:1e:5e:2b:aa: 90:e5:5e:ee:44:8d:84:26:c6:ed:3f:a2:1b:f1:e0:61:41:b8: 96:02:0f:41:63:8d:c4:94:28:1a:f9:e0:64:9d:b4:8c:57:7d: fd:89:df:03:52:62:d3:75:26:70:7b:61:ed:89:60:fd:9a:8d: d7:d6:81:47:42:42:19:71:03:94:29:7c:04:e8:46:c9:3b:7a: 6b:5a:d3:14:b3:a2:90:19:2d:64:4e:76:1c:45:0a:f2:f2:46: fe:0d:74:a0:71:78:e4:57:a4:21:e4:81:5b:e1:8d:ad:cb:33: d8:8b:70:ac:31:18:00:08:bd:30:49:6c:79:17:52:df:63:df: db:f4:9b:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS2WYEU0wl/n8TIDdUL2c/KI63eIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg3NENFNzc1RjE5MUI2RTBCMzRBNzg5QTM1OUVCOUZC OTNCNzM3RTAeFw0yNjAxMjUwNDE1NDdaFw0yNjAxMjgxNTQ5NDdaMDMxMTAvBgNV BAMTKEUwQUFDNjhFMkM1Q0E0NjYwNzgxMjQxQjFFNzUyQTAyQzk5RTQxMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2GPEFMQcuS6/8bHOuBaQzRt6d /MdW8SJCoGrem3x5mEwQL0izDljEKWSUoEAmfYyYzJFPCrDZ4doOGr22QSXXwTzX zOi5H0yKxzegGHgm38cvSN0SZF/Va4s2jmLvcdZ+dI6UYjyNsVYu1ebjBy9maKlT gq22s+rEUXEdfeujAJS5zf46AFq9pVOqtcwx5bhxHZ80G2PQsYnL9U+1b4lIX1OS qZhG6/YJzJoRJnk2nhbKEC6FxVCoB2GHvHuY+0850Cx6uZtyonKnBvXoNCtLJWVQ kpDJODt11GrMM58ixXig4n2SGThh04zL/O0WlCQpbOwyhK+16sFQaQsJykfrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4KrGjixcpGYHgSQbHnUqAsmeQRAwHwYDVR0j BBgwFoAUiHTOd18ZG24LNKeJo1nrn7k7c34wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjBiYTFlNy1kMTQyLTQ3Y2QtOGQ4Zi0yYTM3MmI5MjIyMjMvMC84ODc0Q0U3NzVG MTkxQjZFMEIzNEE3ODlBMzU5RUI5RkI5M0I3MzdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODg3NENFNzc1RjE5MUI2RTBCMzRBNzg5QTM1OUVCOUZCOTNC NzM3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2YwYmExZTctZDE0Mi00N2NkLThk OGYtMmEzNzJiOTIyMjIzLzAvODg3NENFNzc1RjE5MUI2RTBCMzRBNzg5QTM1OUVC OUZCOTNCNzM3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGwpYgCJGySo7a63IuraL+NgdZp65aOFO93f IFnCjDDv0nPwIYkHtUyoGynjJhH6aXg+xwzCclxihJZmmoeob+aIiOxqlnVlL9er n3DaycgGBjJgxMJgpvh5BLtJ5HSRsH141PQA+e0MfX6bhbX00VwFA6+aR+ocj1Tg Hl4rqpDlXu5EjYQmxu0/ohvx4GFBuJYCD0FjjcSUKBr54GSdtIxXff2J3wNSYtN1 JnB7Ye2JYP2ajdfWgUdCQhlxA5QpfAToRsk7emta0xSzopAZLWROdhxFCvLyRv4N dKBxeORXpCHkgVvhja3LM9iLcKwxGAAIvTBJbHkXUt9j39v0m3o= -----END CERTIFICATE-----Generated at Sun Jan 25 20:21:48 2026 by rpki-client