This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft File: 8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft (raw, json) Hash identifier: OEC7EhzW4cjd6zpVeL/gGMqWHDBIEiW8DBMzefNZToU= Subject key identifier: 8A:0B:CF:0C:E4:93:31:C4:D6:D2:06:00:23:DE:C8:16:30:84:1A:18 Authority key identifier: 8B:E4:A7:01:F2:92:4B:4B:FB:8A:98:3A:1B:0B:D5:C8:86:3B:F3:FD Certificate issuer: /CN=8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD Certificate serial: 740FCC335E361F0CBF687668A16E421542D4AA8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft Manifest number: 0540 Signing time: Sat 24 Jan 2026 05:12:20 +0000 Manifest this update: Sat 24 Jan 2026 05:07:20 +0000 Manifest next update: Tue 27 Jan 2026 15:23:20 +0000 Files and hashes: 1: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: 9ysblGZ5nRnpD9uRTt/CttmsXFnbP66QhYFS5MHljXI=) 2: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: PfYYptDyBdUl4aWzZCjnvFHr6qQWRMjgNV762Lfvv/Q=) 3: 8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl (hash: nv1c7UievoinNgGiJMdRvRCQ7m7XGFABxBJm8C9iHwQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 15:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:0f:cc:33:5e:36:1f:0c:bf:68:76:68:a1:6e:42:15:42:d4:aa:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD Validity Not Before: Jan 24 05:07:20 2026 GMT Not After : Jan 27 15:23:20 2026 GMT Subject: CN=8A0BCF0CE49331C4D6D2060023DEC81630841A18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f8:c7:21:09:b7:24:c7:ed:ab:5d:1c:77:09: cd:3b:1f:01:0e:08:a1:da:21:af:05:d5:f2:0b:e8: 15:15:d3:fd:2e:ef:bd:57:75:44:c6:7e:97:b4:67: c4:5e:30:26:c1:33:12:ea:6a:b7:f6:d9:a9:06:ee: c5:c0:f3:5e:e6:c6:24:18:96:7a:37:04:69:62:39: 6f:31:c4:01:ad:e1:ff:68:28:a0:42:40:97:7d:f1: d7:2e:79:c8:bd:cb:b1:d6:dd:e6:79:1c:f6:68:6e: 1c:ce:ce:12:27:87:2b:dd:8a:6f:df:54:00:bf:95: 63:bb:c6:18:f5:b4:73:df:6d:05:d1:3c:30:13:61: f3:ae:94:14:f4:cf:11:fb:07:e9:9a:df:da:8d:d3: c4:0e:6c:22:09:65:cd:89:d0:eb:4c:7d:a8:4b:6c: 53:e8:4c:95:48:30:0a:fb:3b:5b:a9:56:87:c4:d5: 77:4c:7d:4b:cd:ab:4c:14:68:29:ed:ac:f9:4d:ec: 67:95:f7:77:2c:78:ea:29:64:9c:e0:61:f7:51:fd: a8:65:fb:a3:ea:c5:b9:78:0e:bf:80:9c:08:3a:bf: 0d:f7:ca:cb:d7:90:92:1e:5f:55:c8:3c:76:c1:20: c6:a0:de:23:e6:42:4b:fe:8e:f5:91:3f:ef:b3:43: 5e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:0B:CF:0C:E4:93:31:C4:D6:D2:06:00:23:DE:C8:16:30:84:1A:18 X509v3 Authority Key Identifier: keyid:8B:E4:A7:01:F2:92:4B:4B:FB:8A:98:3A:1B:0B:D5:C8:86:3B:F3:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:bc:6e:1f:ef:6a:ca:4d:1a:73:e3:48:08:dc:b3:34:f5:2d: 4c:58:37:7c:ba:ff:3f:36:48:68:20:a9:c3:56:08:84:4c:5c: 8c:28:d0:28:0c:62:a8:66:9e:c6:be:44:1b:7d:84:72:ad:be: 34:71:3d:6e:b7:a5:61:5d:ad:4f:54:6c:00:c4:43:a9:96:98: a3:04:76:0c:a7:0a:ae:f5:0e:c0:cf:39:99:f0:ab:73:72:47: 29:6a:37:72:12:2f:89:5b:48:60:ef:3c:da:11:2a:d4:fe:78: 9b:d5:92:a6:94:fe:4d:7a:d4:c9:88:dc:74:88:a8:06:b3:de: b1:e4:c2:07:ed:73:51:da:7d:92:30:5a:aa:05:41:e7:43:ed: ed:c3:38:1e:99:cf:76:c7:31:78:ba:d8:e2:6d:50:f5:4f:eb: 6c:fd:a1:39:c3:b5:c5:ef:ad:cd:34:b3:e4:57:2b:96:77:2b: b6:0e:b3:49:98:a9:73:e5:8b:90:95:99:34:af:0f:6f:01:18: 7c:65:c8:6e:03:0b:4c:f9:5d:c8:88:48:5c:80:b6:f2:58:db: c1:6b:96:82:c6:16:4d:27:5b:80:bd:aa:9d:da:23:dd:29:f0: b5:36:e6:91:a3:df:47:b6:4d:8b:be:6b:d8:50:58:0c:a4:0f: 1b:27:5f:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdA/MM142Hwy/aHZooW5CFULUqo4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1Qzg4 NjNCRjNGRDAeFw0yNjAxMjQwNTA3MjBaFw0yNjAxMjcxNTIzMjBaMDMxMTAvBgNV BAMTKDhBMEJDRjBDRTQ5MzMxQzRENkQyMDYwMDIzREVDODE2MzA4NDFBMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe+MchCbckx+2rXRx3Cc07HwEO CKHaIa8F1fIL6BUV0/0u771XdUTGfpe0Z8ReMCbBMxLqarf22akG7sXA817mxiQY lno3BGliOW8xxAGt4f9oKKBCQJd98dcueci9y7HW3eZ5HPZobhzOzhInhyvdim/f VAC/lWO7xhj1tHPfbQXRPDATYfOulBT0zxH7B+ma39qN08QObCIJZc2J0OtMfahL bFPoTJVIMAr7O1upVofE1XdMfUvNq0wUaCntrPlN7GeV93cseOopZJzgYfdR/ahl +6Pqxbl4Dr+AnAg6vw33ysvXkJIeX1XIPHbBIMag3iPmQkv+jvWRP++zQ17NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUigvPDOSTMcTW0gYAI97IFjCEGhgwHwYDVR0j BBgwFoAUi+SnAfKSS0v7ipg6GwvVyIY78/0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDYzNDdmNC1lYTI2LTRkNGMtYTU2OC0xZDg2MzM2MGU0MjEvMC84QkU0QTcwMUYy OTI0QjRCRkI4QTk4M0ExQjBCRDVDODg2M0JGM0ZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1Qzg4NjNC RjNGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA2MzQ3ZjQtZWEyNi00ZDRjLWE1 NjgtMWQ4NjMzNjBlNDIxLzAvOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1 Qzg4NjNCRjNGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIG8bh/vaspNGnPjSAjcszT1LUxYN3y6/z82 SGggqcNWCIRMXIwo0CgMYqhmnsa+RBt9hHKtvjRxPW63pWFdrU9UbADEQ6mWmKME dgynCq71DsDPOZnwq3NyRylqN3ISL4lbSGDvPNoRKtT+eJvVkqaU/k161MmI3HSI qAaz3rHkwgftc1HafZIwWqoFQedD7e3DOB6Zz3bHMXi62OJtUPVP62z9oTnDtcXv rc00s+RXK5Z3K7YOs0mYqXPli5CVmTSvD28BGHxlyG4DC0z5XciISFyAtvJY28Fr loLGFk0nW4C9qp3aI90p8LU25pGj30e2TYu+a9hQWAykDxsnX6s= -----END CERTIFICATE-----Generated at Sun Jan 25 18:37:02 2026 by rpki-client