This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft File: 8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft (raw, json) Hash identifier: kCrwRVyEWK5Vri9cep2Y5kiocJdpBv9KWp6Dc3QDcQU= Subject key identifier: B1:F2:DC:8A:4F:41:35:98:03:4D:69:A7:23:10:23:B2:60:4D:9F:F8 Authority key identifier: 8C:6B:9F:E8:0E:F1:DA:40:B9:64:D4:42:9F:78:78:5A:DD:D2:9E:FB Certificate issuer: /CN=8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB Certificate serial: 42F53B96285B5E103286D1AD4868F7EA2B5FBA63 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft Manifest number: 021C Signing time: Sat 24 Jan 2026 13:01:30 +0000 Manifest this update: Sat 24 Jan 2026 12:56:30 +0000 Manifest next update: Tue 27 Jan 2026 16:21:30 +0000 Files and hashes: 1: 8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl (hash: L/OuemZL5XSNkei5cqo8uqbuFNi4pkDF2CBE13P6/ZQ=) 2: 3130332e31302e37302e302f32342d3234203d3e20313530323130.roa (hash: GkGrk3uoqwZ411t/pDhy3mlwE7XrelZ7UpYea4pdtg4=) 3: 3130332e31302e37312e302f32342d3234203d3e20313530323130.roa (hash: TWfIXIVXp0lanaqdmCjliuWn+ETz7xwRfOIaJAb7cvA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 16:21:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:f5:3b:96:28:5b:5e:10:32:86:d1:ad:48:68:f7:ea:2b:5f:ba:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB Validity Not Before: Jan 24 12:56:30 2026 GMT Not After : Jan 27 16:21:30 2026 GMT Subject: CN=B1F2DC8A4F413598034D69A7231023B2604D9FF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:64:2c:ff:c9:ac:a0:10:48:94:b5:4a:44:97: 3b:ac:32:7d:b4:f6:15:ef:91:9d:9c:a1:a0:97:77: 3d:48:42:62:0b:13:f7:0f:72:1a:a8:c3:60:df:ee: 47:ca:9d:cd:c0:36:47:b7:41:dc:37:48:eb:15:31: f2:50:19:f3:ee:d4:dc:79:f2:e9:06:77:12:7a:cb: b3:68:4b:0b:0c:e1:18:f3:16:7e:96:29:35:cb:24: 01:74:7e:d8:91:11:0f:94:c3:d6:46:e2:30:78:c6: c9:86:ee:ea:48:b9:e1:23:43:81:89:28:37:38:ea: f5:d0:b5:fb:38:3f:54:f3:89:38:88:d4:89:5c:56: 37:bb:69:aa:4f:9b:28:62:fc:9e:b1:a7:68:58:2b: d4:a2:57:52:86:c6:0a:9d:f9:1e:0a:1c:df:37:ac: 51:63:89:5f:e9:00:ca:5d:39:05:b3:93:08:35:39: 82:10:f5:32:17:96:5f:40:8b:36:1d:a4:36:70:70: e6:5c:57:ba:a3:45:39:d5:32:3a:e2:9e:4f:97:fc: f1:2b:24:39:fe:d2:c9:a1:ed:84:d2:13:68:01:ee: 5c:a3:4c:aa:71:08:ac:59:ae:c9:f3:72:56:5a:6d: 02:b9:c5:e0:cb:bc:9c:72:e2:c2:93:30:ff:b6:7c: c3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:F2:DC:8A:4F:41:35:98:03:4D:69:A7:23:10:23:B2:60:4D:9F:F8 X509v3 Authority Key Identifier: keyid:8C:6B:9F:E8:0E:F1:DA:40:B9:64:D4:42:9F:78:78:5A:DD:D2:9E:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:37:11:f1:cb:a3:b0:22:4a:fe:cd:f6:d2:c8:7b:88:0e:8d: 2e:d9:82:e6:fb:8b:67:84:04:47:3a:97:cb:ee:b7:87:27:26: 88:a7:15:5b:55:0e:4d:09:cc:05:12:b8:cf:9c:99:8b:48:74: 2e:7a:d5:70:eb:90:38:a0:f9:fc:ce:ee:7b:c3:35:0c:28:62: c2:aa:26:eb:07:3c:a0:31:2f:b9:a6:a1:c3:19:1b:89:1e:b6: 50:77:2d:e4:b7:07:06:38:02:8a:33:74:d1:05:01:d6:b7:69: 4e:e7:c7:8c:01:63:80:7a:eb:87:71:67:04:48:d8:cc:64:ff: 5c:50:ba:d8:15:68:8a:48:b6:14:27:c4:9c:dd:50:7b:1a:eb: 62:49:ef:77:e1:ca:23:db:5f:12:a3:df:e2:2b:ba:4c:6c:cb: c6:ea:c7:59:49:d2:3f:29:a9:c1:6a:87:b8:7b:bc:29:5a:0e: bf:39:15:85:fe:66:12:1e:b3:8d:e4:c0:ae:32:16:a3:20:85: c7:16:ff:03:ee:18:fe:14:fd:fb:f7:94:5a:ad:b6:e9:dc:46: 88:c3:b6:89:92:a7:2a:32:1d:02:20:77:76:d6:fe:86:fd:59: b3:39:c8:6a:55:40:34:18:21:d7:d9:81:a4:5c:c3:bc:0e:5c: de:f9:6d:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQvU7lihbXhAyhtGtSGj36itfumMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4NUFE REQyOUVGQjAeFw0yNjAxMjQxMjU2MzBaFw0yNjAxMjcxNjIxMzBaMDMxMTAvBgNV BAMTKEIxRjJEQzhBNEY0MTM1OTgwMzRENjlBNzIzMTAyM0IyNjA0RDlGRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrZCz/yaygEEiUtUpElzusMn20 9hXvkZ2coaCXdz1IQmILE/cPchqow2Df7kfKnc3ANke3Qdw3SOsVMfJQGfPu1Nx5 8ukGdxJ6y7NoSwsM4RjzFn6WKTXLJAF0ftiREQ+Uw9ZG4jB4xsmG7upIueEjQ4GJ KDc46vXQtfs4P1TziTiI1IlcVje7aapPmyhi/J6xp2hYK9SiV1KGxgqd+R4KHN83 rFFjiV/pAMpdOQWzkwg1OYIQ9TIXll9AizYdpDZwcOZcV7qjRTnVMjrink+X/PEr JDn+0smh7YTSE2gB7lyjTKpxCKxZrsnzclZabQK5xeDLvJxy4sKTMP+2fMNfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsfLcik9BNZgDTWmnIxAjsmBNn/gwHwYDVR0j BBgwFoAUjGuf6A7x2kC5ZNRCn3h4Wt3SnvswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWNiNzE4Ny03YTVmLTRlMjMtYmU5NC01OTNhMGMyODhjYjkvMC84QzZCOUZFODBF RjFEQTQwQjk2NEQ0NDI5Rjc4Nzg1QURERDI5RUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4NUFEREQy OUVGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFjYjcxODctN2E1Zi00ZTIzLWJl OTQtNTkzYTBjMjg4Y2I5LzAvOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4 NUFEREQyOUVGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMc3EfHLo7AiSv7N9tLIe4gOjS7Zgub7i2eE BEc6l8vut4cnJoinFVtVDk0JzAUSuM+cmYtIdC561XDrkDig+fzO7nvDNQwoYsKq JusHPKAxL7mmocMZG4ketlB3LeS3BwY4AoozdNEFAda3aU7nx4wBY4B664dxZwRI 2Mxk/1xQutgVaIpIthQnxJzdUHsa62JJ73fhyiPbXxKj3+Irukxsy8bqx1lJ0j8p qcFqh7h7vClaDr85FYX+ZhIes43kwK4yFqMghccW/wPuGP4U/fv3lFqttuncRojD tomSpyoyHQIgd3bW/ob9WbM5yGpVQDQYIdfZgaRcw7wOXN75bSw= -----END CERTIFICATE-----Generated at Mon Jan 26 05:37:33 2026 by rpki-client