This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft File: 8F52E72816B856335390C4F4AFBAF207C21522F6.mft (raw, json) Hash identifier: Jpe7ne7TIuU2C8ck1M+II5MRfiyFf1bPdpqkcr+19hg= Subject key identifier: 23:6C:9D:1F:40:EC:B5:BA:B1:6E:9C:15:DE:BE:52:51:AB:08:0D:8E Authority key identifier: 8F:52:E7:28:16:B8:56:33:53:90:C4:F4:AF:BA:F2:07:C2:15:22:F6 Certificate issuer: /CN=8F52E72816B856335390C4F4AFBAF207C21522F6 Certificate serial: 7BA510DABF1B5F60D1768E895E8FD631985C84F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft Manifest number: 0243 Signing time: Sat 24 Jan 2026 09:42:22 +0000 Manifest this update: Sat 24 Jan 2026 09:37:22 +0000 Manifest next update: Tue 27 Jan 2026 17:05:22 +0000 Files and hashes: 1: 8F52E72816B856335390C4F4AFBAF207C21522F6.crl (hash: WBkVcE12M6dlI232u6qNtaK9cUZHudeph31KCaYT6+w=) 2: 3130332e3135382e3132362e302f32332d3234203d3e203338333230.roa (hash: sAEVe363BvIs2dOx1hxbCSZZoE73/9sHIDXoFlichKA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.crl rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 17:05:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:a5:10:da:bf:1b:5f:60:d1:76:8e:89:5e:8f:d6:31:98:5c:84:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F52E72816B856335390C4F4AFBAF207C21522F6 Validity Not Before: Jan 24 09:37:22 2026 GMT Not After : Jan 27 17:05:22 2026 GMT Subject: CN=236C9D1F40ECB5BAB16E9C15DEBE5251AB080D8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4a:41:d9:1c:4d:34:6c:8f:39:66:8f:b0:2f: d6:89:31:ab:61:7d:53:e5:b9:ff:bd:d1:78:f9:a3: 91:f7:75:4a:66:04:fc:e6:94:90:c7:c3:56:67:d8: 8b:fc:00:e4:69:80:66:a2:49:46:14:11:8e:69:82: f2:f4:96:e4:07:5d:47:0b:9c:d9:ac:2f:47:52:b2: d5:0b:9a:78:db:8f:82:62:4c:50:64:57:64:e2:b5: 55:b7:0e:6c:53:92:06:c1:d0:cb:a7:ac:48:e4:62: 67:bb:5f:4c:c4:74:7e:a7:27:43:d5:41:ae:50:08: 10:bf:2f:30:19:ab:07:09:cf:32:68:7a:fd:f8:85: 24:bd:07:c7:88:5c:a5:4a:11:ea:09:c9:69:55:f6: e4:1b:3a:6b:0e:c0:47:aa:e5:e8:ba:89:8d:98:bd: 47:e6:6d:7d:f7:50:5b:a5:eb:9c:10:a3:52:92:e0: 93:8d:be:28:78:9e:b2:3d:81:a1:0f:a8:2b:a2:9f: 41:91:56:f5:75:54:96:38:df:c9:fe:94:83:76:ea: 01:13:18:d8:a8:58:8d:95:bd:77:99:70:c9:aa:06: 3f:43:0c:c8:f8:4d:59:d7:f2:29:36:ad:db:61:f7: 3e:08:ba:fe:a0:e3:f8:a0:98:07:f7:53:0d:01:1e: 8a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:6C:9D:1F:40:EC:B5:BA:B1:6E:9C:15:DE:BE:52:51:AB:08:0D:8E X509v3 Authority Key Identifier: keyid:8F:52:E7:28:16:B8:56:33:53:90:C4:F4:AF:BA:F2:07:C2:15:22:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:c7:b5:84:b0:22:2a:3c:35:c6:57:6a:30:1a:21:6b:c4:ec: 90:35:b1:6c:2b:5b:5d:ef:3e:9e:22:4c:7f:e3:38:d5:79:dc: 76:3a:81:14:91:4b:98:2e:11:e7:71:89:cc:55:fb:76:07:70: a1:99:13:96:d8:27:42:16:75:b6:24:89:a4:21:8c:25:c6:a1: 75:19:0a:c8:e2:24:12:46:49:b3:85:04:18:78:87:ed:03:b0: 60:f5:0a:d7:ac:37:31:c5:cd:95:d8:74:02:ba:e5:e8:83:1f: fd:46:49:8d:f7:60:43:75:b8:80:19:28:24:4c:06:69:ec:a5: 76:33:32:2d:cd:7a:4b:0a:47:52:bd:c3:21:dd:c6:d4:1c:e9: 59:78:ee:56:ac:16:8f:c8:48:fe:a4:bc:d8:c1:69:72:64:fc: 2a:74:ad:1c:92:4e:5f:39:4c:63:46:ed:93:11:05:11:49:1c: 34:2b:9b:fd:db:f1:3d:3b:53:2d:26:1f:e6:8f:d0:6e:bc:6f: 30:53:b7:94:1a:e7:eb:89:a5:e5:2e:b9:a0:6b:eb:59:fc:ce: e9:93:b0:f6:13:f2:11:c0:e9:5d:2d:1f:d0:18:f1:3e:8a:59: dd:15:b1:9a:cf:bb:1b:a1:6b:9b:ed:62:9b:f1:5e:64:5e:47: 61:21:58:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe6UQ2r8bX2DRdo6JXo/WMZhchPEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYyMDdD MjE1MjJGNjAeFw0yNjAxMjQwOTM3MjJaFw0yNjAxMjcxNzA1MjJaMDMxMTAvBgNV BAMTKDIzNkM5RDFGNDBFQ0I1QkFCMTZFOUMxNURFQkU1MjUxQUIwODBEOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDASkHZHE00bI85Zo+wL9aJMath fVPluf+90Xj5o5H3dUpmBPzmlJDHw1Zn2Iv8AORpgGaiSUYUEY5pgvL0luQHXUcL nNmsL0dSstULmnjbj4JiTFBkV2TitVW3DmxTkgbB0MunrEjkYme7X0zEdH6nJ0PV Qa5QCBC/LzAZqwcJzzJoev34hSS9B8eIXKVKEeoJyWlV9uQbOmsOwEeq5ei6iY2Y vUfmbX33UFul65wQo1KS4JONvih4nrI9gaEPqCuin0GRVvV1VJY438n+lIN26gET GNioWI2VvXeZcMmqBj9DDMj4TVnX8ik2rdth9z4Iuv6g4/igmAf3Uw0BHoqtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI2ydH0DstbqxbpwV3r5SUasIDY4wHwYDVR0j BBgwFoAUj1LnKBa4VjNTkMT0r7ryB8IVIvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NDRkZmI1YS02ZTI0LTRhNGQtODk2OS1lYjNjYmUzNGU0N2UvMC84RjUyRTcyODE2 Qjg1NjMzNTM5MEM0RjRBRkJBRjIwN0MyMTUyMkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYyMDdDMjE1 MjJGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDQ0ZGZiNWEtNmUyNC00YTRkLTg5 NjktZWIzY2JlMzRlNDdlLzAvOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYy MDdDMjE1MjJGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAErHtYSwIio8NcZXajAaIWvE7JA1sWwrW13v Pp4iTH/jONV53HY6gRSRS5guEedxicxV+3YHcKGZE5bYJ0IWdbYkiaQhjCXGoXUZ CsjiJBJGSbOFBBh4h+0DsGD1CtesNzHFzZXYdAK65eiDH/1GSY33YEN1uIAZKCRM BmnspXYzMi3NeksKR1K9wyHdxtQc6Vl47lasFo/ISP6kvNjBaXJk/Cp0rRySTl85 TGNG7ZMRBRFJHDQrm/3b8T07Uy0mH+aP0G68bzBTt5Qa5+uJpeUuuaBr61n8zumT sPYT8hHA6V0tH9AY8T6KWd0VsZrPuxuha5vtYpvxXmReR2EhWEU= -----END CERTIFICATE-----Generated at Sun Jan 25 18:52:41 2026 by rpki-client