This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft File: C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft (raw, json) Hash identifier: ZHJvGocCvY5lh1nArzj24RFEVmY1V8DG8+d87Q+pajo= Subject key identifier: 07:BC:53:DC:94:53:00:54:4B:30:43:26:6E:91:32:76:20:4F:B3:87 Authority key identifier: C8:B7:60:5A:76:DB:DD:11:CC:D3:1F:65:7A:0D:E4:54:C9:79:D9:39 Certificate issuer: /CN=C8B7605A76DBDD11CCD31F657A0DE454C979D939 Certificate serial: 79649F7798ABA8134C856B5DC58692CC0E07BA43 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft Manifest number: 04D8 Signing time: Sun 25 Jan 2026 13:51:41 +0000 Manifest this update: Sun 25 Jan 2026 13:46:41 +0000 Manifest next update: Wed 28 Jan 2026 17:12:41 +0000 Files and hashes: 1: C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl (hash: daeuenGc2/7sZ3FLI9RrxVFcgTjiobMaOHkbJzk2z64=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:64:9f:77:98:ab:a8:13:4c:85:6b:5d:c5:86:92:cc:0e:07:ba:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8B7605A76DBDD11CCD31F657A0DE454C979D939 Validity Not Before: Jan 25 13:46:41 2026 GMT Not After : Jan 28 17:12:41 2026 GMT Subject: CN=07BC53DC945300544B3043266E913276204FB387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8a:2e:11:cd:92:84:76:ad:56:10:44:bb:51: 7b:cb:7f:5a:9b:c8:22:cd:39:cc:26:3c:1e:36:66: 8b:a6:21:27:a4:18:d5:5e:27:10:aa:43:0d:a9:a6: 51:1a:84:2b:91:cf:6b:ee:10:ff:ba:55:39:19:20: 04:ad:46:51:0c:63:2e:c9:22:b7:11:9c:12:3d:47: 11:02:3a:fe:ae:fc:3c:7e:ca:57:85:52:9e:86:89: 76:31:59:cd:7c:88:f2:2e:ff:b9:cd:e9:47:ad:6c: d5:26:13:5f:c8:de:ae:91:ed:47:ef:c2:b6:cd:18: 7e:79:fe:21:42:cb:ec:a7:36:fb:6e:4d:de:4b:84: 95:62:ea:ca:cb:be:df:90:d1:4d:39:54:02:9a:74: 84:a3:02:c3:c6:48:f0:b2:cd:ee:16:c0:ed:06:34: 76:c7:5a:1d:84:a5:88:dd:d8:b1:2c:99:9a:ec:c8: 9f:42:bf:7d:9d:6e:4a:15:36:ca:bf:c2:a1:f1:34: d8:2a:79:e6:20:a7:fe:42:24:55:e8:5d:26:31:d0: 38:23:ae:a7:08:b0:d5:37:2c:be:06:0e:db:51:e7: 28:8f:2f:c4:b6:ab:d0:f9:d8:17:57:75:02:3f:3c: 81:1f:07:d4:1f:4d:9d:42:b9:d7:9e:92:fb:a5:ef: 15:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:BC:53:DC:94:53:00:54:4B:30:43:26:6E:91:32:76:20:4F:B3:87 X509v3 Authority Key Identifier: keyid:C8:B7:60:5A:76:DB:DD:11:CC:D3:1F:65:7A:0D:E4:54:C9:79:D9:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:3c:d3:74:fb:ce:84:c7:3a:e3:40:14:da:b7:7c:0d:9f:24: c9:b8:9a:fa:67:88:46:91:7e:63:a8:ba:cd:42:aa:c5:b7:f2: ee:f5:c1:3c:0c:49:c7:c2:a3:dd:c7:56:85:f6:81:c4:9b:45: 99:c4:2e:da:97:4f:4b:05:ea:09:4b:a5:19:89:c6:12:0f:8b: ed:92:03:15:e3:02:c5:24:b4:7f:21:a0:8a:c0:09:7c:28:44: 32:ee:ad:4a:d3:41:fb:db:b9:9d:bf:3f:a0:18:44:7f:76:e4: 56:9b:85:bb:4d:e2:f9:35:9b:d2:67:99:89:be:d7:c2:39:fe: 20:fa:b8:b1:2b:05:7b:99:15:68:d6:d2:f8:c6:62:51:d4:67: b6:8a:27:22:3e:80:16:22:1b:b3:bf:1d:4a:1a:df:4c:b6:dc: d6:df:db:30:ca:73:fe:a8:e3:0e:46:b9:96:ae:3e:24:24:f6: 4e:e1:4d:83:cc:6f:47:d4:89:02:cc:2c:c4:5f:fe:5f:95:0f: 5b:bb:de:8e:20:7d:12:47:8e:dd:85:e9:fb:f5:14:9e:f6:19: c6:11:18:95:be:dd:61:74:0b:c0:f0:f2:a3:e1:6a:83:29:e6: f9:6d:73:65:b2:68:cd:6a:d0:a9:39:f1:7c:2e:4b:c1:82:ed: 1d:d5:3b:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeWSfd5irqBNMhWtdxYaSzA4HukMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0NTRD OTc5RDkzOTAeFw0yNjAxMjUxMzQ2NDFaFw0yNjAxMjgxNzEyNDFaMDMxMTAvBgNV BAMTKDA3QkM1M0RDOTQ1MzAwNTQ0QjMwNDMyNjZFOTEzMjc2MjA0RkIzODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ii4RzZKEdq1WEES7UXvLf1qb yCLNOcwmPB42ZoumISekGNVeJxCqQw2pplEahCuRz2vuEP+6VTkZIAStRlEMYy7J IrcRnBI9RxECOv6u/Dx+yleFUp6GiXYxWc18iPIu/7nN6UetbNUmE1/I3q6R7Ufv wrbNGH55/iFCy+ynNvtuTd5LhJVi6srLvt+Q0U05VAKadISjAsPGSPCyze4WwO0G NHbHWh2EpYjd2LEsmZrsyJ9Cv32dbkoVNsq/wqHxNNgqeeYgp/5CJFXoXSYx0Dgj rqcIsNU3LL4GDttR5yiPL8S2q9D52BdXdQI/PIEfB9QfTZ1Cudeekvul7xWbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB7xT3JRTAFRLMEMmbpEydiBPs4cwHwYDVR0j BBgwFoAUyLdgWnbb3RHM0x9leg3kVMl52TkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODM0OWNkNC1jMDc5LTQxZmYtYWE5ZS0zNmYzZDQ0ODI2NDUvMC9DOEI3NjA1QTc2 REJERDExQ0NEMzFGNjU3QTBERTQ1NEM5NzlEOTM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0NTRDOTc5 RDkzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDgzNDljZDQtYzA3OS00MWZmLWFh OWUtMzZmM2Q0NDgyNjQ1LzAvQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0 NTRDOTc5RDkzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKY803T7zoTHOuNAFNq3fA2fJMm4mvpniEaR fmOous1CqsW38u71wTwMScfCo93HVoX2gcSbRZnELtqXT0sF6glLpRmJxhIPi+2S AxXjAsUktH8hoIrACXwoRDLurUrTQfvbuZ2/P6AYRH925FabhbtN4vk1m9JnmYm+ 18I5/iD6uLErBXuZFWjW0vjGYlHUZ7aKJyI+gBYiG7O/HUoa30y23Nbf2zDKc/6o 4w5GuZauPiQk9k7hTYPMb0fUiQLMLMRf/l+VD1u73o4gfRJHjt2F6fv1FJ72GcYR GJW+3WF0C8Dw8qPhaoMp5vltc2WyaM1q0Kk58XwuS8GC7R3VOyg= -----END CERTIFICATE-----Generated at Sun Jan 25 18:54:06 2026 by rpki-client