This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft File: 8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft (raw, json) Hash identifier: Gwb4M2j50/Ib950dGczF7UDPr1em3aXZeLFoI36zLOE= Subject key identifier: 97:8D:87:DD:56:5B:92:11:8F:C0:00:A5:B5:31:F9:84:D1:0A:CF:DE Authority key identifier: 8A:95:FA:F7:23:EC:12:9E:33:6E:75:AC:E1:CD:4F:30:94:FB:64:81 Certificate issuer: /CN=8A95FAF723EC129E336E75ACE1CD4F3094FB6481 Certificate serial: 08E1C5BF9F59917C4327291738A9E6EA16F172C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft Manifest number: 048E Signing time: Sat 24 Jan 2026 16:41:30 +0000 Manifest this update: Sat 24 Jan 2026 16:36:30 +0000 Manifest next update: Wed 28 Jan 2026 01:06:30 +0000 Files and hashes: 1: 323030313a6466303a663830303a3a2f34382d3438203d3e203538333937.roa (hash: 706QiyM3dAZxixrKBtydGO3JlPrNbGJU4Z6sEiZVN2w=) 2: 3130332e32332e32302e302f32322d3234203d3e203538333937.roa (hash: fxRWeEdUZsQcOgrNyDGJ7oXqFe+EeQD/MHcFmS1cl7s=) 3: 34332e3234352e3138302e302f32322d3234203d3e203538333937.roa (hash: THVSHOfDNgrFd49wZlYvuTuPkWSURiIGaUg0EUGrcPM=) 4: 8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl (hash: oCBloy0N2xN5AG7CjugHJM8ToCVypMA2F0TUYNmqFTM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 01:06:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:e1:c5:bf:9f:59:91:7c:43:27:29:17:38:a9:e6:ea:16:f1:72:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A95FAF723EC129E336E75ACE1CD4F3094FB6481 Validity Not Before: Jan 24 16:36:30 2026 GMT Not After : Jan 28 01:06:30 2026 GMT Subject: CN=978D87DD565B92118FC000A5B531F984D10ACFDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7e:81:5d:f8:d0:d5:70:2d:3d:cd:0b:28:fb: b5:8c:5f:03:fb:46:8d:4d:73:9e:b4:b6:74:59:97: 99:1d:3c:a5:9b:e5:67:3c:40:a3:e2:ff:8a:41:1d: bd:8b:51:6d:8a:dd:f1:a9:83:ea:2c:ee:71:92:80: f6:f9:d6:16:f0:62:3d:6a:54:86:df:2c:90:53:d2: 6f:32:a4:35:7c:ef:88:9b:3e:22:2a:1d:75:8c:14: 41:e3:1d:85:e5:46:78:de:6e:d1:5f:00:6d:50:06: ad:41:20:6c:23:11:bb:90:84:0a:3d:15:03:d0:1c: cc:f5:b1:f5:ba:a8:3b:9c:6e:eb:bb:39:2c:58:ad: 18:70:3c:11:8c:8f:e7:f3:e8:58:17:74:d6:6d:9a: 2a:db:d1:cf:57:a6:00:2c:36:49:2d:7b:8d:6b:39: 71:ae:fb:01:10:52:92:92:fe:fb:e8:fb:d5:0d:ca: 96:ac:4a:37:1f:be:c9:1a:2f:3c:a1:16:c6:71:08: e5:32:19:3e:58:5b:60:6b:7f:37:8b:3a:f5:a5:5f: b7:e7:26:63:21:1b:d2:e3:24:40:80:c9:a9:09:86: b0:38:45:91:bf:2a:cd:25:fd:a1:99:a4:44:7e:98: ee:f7:c7:51:f3:fb:44:fb:4e:e0:27:d6:c9:b2:c2: 6a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:8D:87:DD:56:5B:92:11:8F:C0:00:A5:B5:31:F9:84:D1:0A:CF:DE X509v3 Authority Key Identifier: keyid:8A:95:FA:F7:23:EC:12:9E:33:6E:75:AC:E1:CD:4F:30:94:FB:64:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:68:a9:11:8b:08:4c:f7:b0:b2:8a:a6:72:e8:6b:8b:bf:d5: b8:69:8e:70:81:86:6a:12:00:54:0a:82:0d:ea:74:c3:17:59: 3e:5c:93:8d:0b:dd:2f:a5:5f:81:63:0b:7b:a9:3f:15:46:75: 22:e9:5b:23:ab:1d:ac:cc:74:a4:c6:0a:b9:2d:7c:e8:91:0a: 6a:f5:b4:77:1f:74:35:76:01:bd:70:52:76:6c:2c:ef:54:69: 2a:0f:08:9f:31:d3:66:99:10:96:ea:50:ba:ca:7f:34:42:4e: 36:68:35:a3:3f:ed:de:65:1a:db:00:c9:59:77:c9:93:18:d9: 8b:53:a4:ef:9c:68:12:97:ea:e1:cc:0d:3c:e6:cf:45:5d:08: 70:c1:b0:ac:f3:c1:c1:04:4e:db:7f:f7:c4:64:fc:f4:50:ce: 46:3b:c0:3e:1a:bd:28:e9:59:1d:41:5a:c9:d7:92:a3:9c:b0: b0:c1:c3:fd:aa:7b:05:db:a7:bd:b1:d5:f6:07:0e:3a:7c:c9: b8:d9:38:7c:a7:e2:59:58:42:e9:26:5e:be:4a:9b:cd:99:c5: 6f:11:da:bb:2e:fe:64:aa:1b:a1:f1:7e:59:1b:eb:6a:e6:f8: 64:a1:a2:25:9f:a1:90:4a:50:41:4b:05:1f:11:92:e6:3a:d7: 44:87:fc:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCOHFv59ZkXxDJykXOKnm6hbxcsgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRGMzA5 NEZCNjQ4MTAeFw0yNjAxMjQxNjM2MzBaFw0yNjAxMjgwMTA2MzBaMDMxMTAvBgNV BAMTKDk3OEQ4N0RENTY1QjkyMTE4RkMwMDBBNUI1MzFGOTg0RDEwQUNGREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCufoFd+NDVcC09zQso+7WMXwP7 Ro1Nc560tnRZl5kdPKWb5Wc8QKPi/4pBHb2LUW2K3fGpg+os7nGSgPb51hbwYj1q VIbfLJBT0m8ypDV874ibPiIqHXWMFEHjHYXlRnjebtFfAG1QBq1BIGwjEbuQhAo9 FQPQHMz1sfW6qDucbuu7OSxYrRhwPBGMj+fz6FgXdNZtmirb0c9XpgAsNkkte41r OXGu+wEQUpKS/vvo+9UNypasSjcfvskaLzyhFsZxCOUyGT5YW2BrfzeLOvWlX7fn JmMhG9LjJECAyakJhrA4RZG/Ks0l/aGZpER+mO73x1Hz+0T7TuAn1smywmopAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl42H3VZbkhGPwACltTH5hNEKz94wHwYDVR0j BBgwFoAUipX69yPsEp4zbnWs4c1PMJT7ZIEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGI5ODcyMi0xY2I0LTQwZDQtYWM4Yi1jM2JjYTJiY2EyMTcvMC84QTk1RkFGNzIz RUMxMjlFMzM2RTc1QUNFMUNENEYzMDk0RkI2NDgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRGMzA5NEZC NjQ4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDhiOTg3MjItMWNiNC00MGQ0LWFj OGItYzNiY2EyYmNhMjE3LzAvOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRG MzA5NEZCNjQ4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHVoqRGLCEz3sLKKpnLoa4u/1bhpjnCBhmoS AFQKgg3qdMMXWT5ck40L3S+lX4FjC3upPxVGdSLpWyOrHazMdKTGCrktfOiRCmr1 tHcfdDV2Ab1wUnZsLO9UaSoPCJ8x02aZEJbqULrKfzRCTjZoNaM/7d5lGtsAyVl3 yZMY2YtTpO+caBKX6uHMDTzmz0VdCHDBsKzzwcEETtt/98Rk/PRQzkY7wD4avSjp WR1BWsnXkqOcsLDBw/2qewXbp72x1fYHDjp8ybjZOHyn4llYQukmXr5Km82ZxW8R 2rsu/mSqG6Hxflkb62rm+GShoiWfoZBKUEFLBR8RkuY610SH/GI= -----END CERTIFICATE-----Generated at Sun Jan 25 22:00:51 2026 by rpki-client