This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft File: 8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft (raw, json) Hash identifier: q3K0VR9NjI5zSLfv+wxvTJ8JxD0sm4PA5/vVswpkmVg= Subject key identifier: 50:61:AF:F0:F3:47:A8:2D:B8:5D:E2:2D:53:9C:19:66:8B:5C:01:CA Authority key identifier: 8A:0F:76:59:BE:6C:91:67:02:99:4F:1B:65:3C:A6:33:5C:F4:8F:9F Certificate issuer: /CN=8A0F7659BE6C916702994F1B653CA6335CF48F9F Certificate serial: 1D627730ABAAEBE15202ADBED37CBA8853C0DB17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A0F7659BE6C916702994F1B653CA6335CF48F9F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft Manifest number: 0430 Signing time: Sun 25 Jan 2026 11:32:15 +0000 Manifest this update: Sun 25 Jan 2026 11:27:15 +0000 Manifest next update: Wed 28 Jan 2026 22:01:15 +0000 Files and hashes: 1: 323430343a3530303a3a2f33322d3438203d3e203234323031.roa (hash: ZncYvkH3fAKDn8QBBs6vlpl5n6FCs5nY6O2LpIihUog=) 2: 3230322e38372e3234382e302f32312d3234203d3e203234323031.roa (hash: YIGWj76AnaLSHaaCNOVsCHFGKespwS6XW2pML5MbQts=) 3: 8A0F7659BE6C916702994F1B653CA6335CF48F9F.crl (hash: 5v0EVApyjT6BH920uejZ963V8oCx7cHrI0JeZ5Xb548=) 4: 3130332e3232382e3234302e302f32322d3234203d3e203435373030.roa (hash: q34ctZRabkzgVMwhpjzkGD0HvYBu2zTW+lnhs8q/u94=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.crl rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A0F7659BE6C916702994F1B653CA6335CF48F9F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:62:77:30:ab:aa:eb:e1:52:02:ad:be:d3:7c:ba:88:53:c0:db:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A0F7659BE6C916702994F1B653CA6335CF48F9F Validity Not Before: Jan 25 11:27:15 2026 GMT Not After : Jan 28 22:01:15 2026 GMT Subject: CN=5061AFF0F347A82DB85DE22D539C19668B5C01CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:38:c2:79:87:c8:7a:02:fc:23:9b:24:ca:c4: 46:d0:da:fb:d9:e1:60:d7:a9:52:f1:dd:60:b2:cf: f4:8b:36:fb:ad:2f:4c:51:3c:76:fc:4c:1a:c9:a2: de:51:48:b8:c1:c9:66:d5:9e:6b:40:26:82:71:68: 24:91:15:9d:b0:bc:51:3a:2c:81:86:30:03:7a:66: d3:0c:e5:31:67:af:0a:e9:d4:1b:bc:ad:04:ae:48: 46:23:69:cd:5e:bd:c0:e7:b0:f4:5d:8d:de:b5:98: de:fb:28:9d:bd:82:bf:a6:03:ba:a4:6b:13:9c:d4: f7:c0:00:f5:ce:aa:e0:14:ee:ad:db:e9:3d:00:63: a3:f3:df:3b:7e:d1:3e:66:18:23:62:66:55:4e:5f: 18:bc:64:86:17:52:d6:e2:28:3d:2f:01:f5:55:26: a6:2f:18:2e:0f:c1:4b:b4:1f:84:85:1e:23:58:3d: 35:72:ac:a2:cd:94:93:c1:40:97:77:93:18:8a:d3: 1f:1a:c0:7f:c2:76:16:18:d8:a7:29:87:60:0e:2f: b2:8b:f9:44:24:63:1d:51:72:ca:88:7c:33:d5:00: 32:39:77:16:86:74:bc:a4:4c:b0:94:a7:98:52:5a: 80:37:d4:18:21:b2:7d:61:a9:eb:3a:d0:4b:1a:19: 15:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:61:AF:F0:F3:47:A8:2D:B8:5D:E2:2D:53:9C:19:66:8B:5C:01:CA X509v3 Authority Key Identifier: keyid:8A:0F:76:59:BE:6C:91:67:02:99:4F:1B:65:3C:A6:33:5C:F4:8F:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A0F7659BE6C916702994F1B653CA6335CF48F9F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:62:37:ba:37:41:5e:8e:1a:c6:b0:01:28:93:35:3e:75:d1: 46:01:3b:30:eb:15:5b:f7:ed:5f:e2:e3:1d:43:6f:8b:1b:cd: e8:8e:c3:13:8d:36:05:45:79:4d:03:9c:db:28:96:61:53:e6: fa:d5:f3:58:e4:14:41:87:11:89:48:e5:af:ed:d3:96:bf:58: 0d:55:fc:16:13:8d:e4:1b:ef:d1:63:04:2c:02:da:7a:c6:ad: 65:4d:c8:43:73:69:86:73:ab:b7:02:d3:f8:85:6b:ec:03:1f: ee:84:1b:2e:4c:07:da:16:66:eb:1b:17:80:98:ba:dd:12:75: 47:6a:2c:26:0e:d9:08:d3:fe:85:16:f3:97:fb:1a:10:4c:0e: 10:c5:12:13:aa:3e:9e:72:6b:31:4e:54:34:de:18:68:64:c9: a4:b5:ff:da:1c:f3:5f:4b:de:86:16:aa:68:88:27:05:b0:0a: 0c:2b:36:7b:b8:f1:72:05:16:aa:d0:e4:e5:35:9c:3c:ac:db: 29:44:c6:ca:2b:1b:d6:5c:39:f8:00:39:1b:95:cb:76:60:9d: 6f:60:65:44:27:39:b8:52:9b:5d:00:7b:7e:26:45:8c:78:81: be:98:fb:61:a7:40:c7:1e:ad:5c:28:e6:20:01:65:a8:bc:50: 1a:08:de:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHWJ3MKuq6+FSAq2+03y6iFPA2xcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEEwRjc2NTlCRTZDOTE2NzAyOTk0RjFCNjUzQ0E2MzM1 Q0Y0OEY5RjAeFw0yNjAxMjUxMTI3MTVaFw0yNjAxMjgyMjAxMTVaMDMxMTAvBgNV BAMTKDUwNjFBRkYwRjM0N0E4MkRCODVERTIyRDUzOUMxOTY2OEI1QzAxQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyOMJ5h8h6AvwjmyTKxEbQ2vvZ 4WDXqVLx3WCyz/SLNvutL0xRPHb8TBrJot5RSLjByWbVnmtAJoJxaCSRFZ2wvFE6 LIGGMAN6ZtMM5TFnrwrp1Bu8rQSuSEYjac1evcDnsPRdjd61mN77KJ29gr+mA7qk axOc1PfAAPXOquAU7q3b6T0AY6Pz3zt+0T5mGCNiZlVOXxi8ZIYXUtbiKD0vAfVV JqYvGC4PwUu0H4SFHiNYPTVyrKLNlJPBQJd3kxiK0x8awH/CdhYY2Kcph2AOL7KL +UQkYx1RcsqIfDPVADI5dxaGdLykTLCUp5hSWoA31Bghsn1hqes60EsaGRUjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUGGv8PNHqC24XeItU5wZZotcAcowHwYDVR0j BBgwFoAUig92Wb5skWcCmU8bZTymM1z0j58wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGE5MjljNi0xZTI1LTQ5NGEtYjBmOS01NWZjNGZjOTRmYmMvMC84QTBGNzY1OUJF NkM5MTY3MDI5OTRGMUI2NTNDQTYzMzVDRjQ4RjlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEEwRjc2NTlCRTZDOTE2NzAyOTk0RjFCNjUzQ0E2MzM1Q0Y0 OEY5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBhOTI5YzYtMWUyNS00OTRhLWIw ZjktNTVmYzRmYzk0ZmJjLzAvOEEwRjc2NTlCRTZDOTE2NzAyOTk0RjFCNjUzQ0E2 MzM1Q0Y0OEY5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALRiN7o3QV6OGsawASiTNT510UYBOzDrFVv3 7V/i4x1Db4sbzeiOwxONNgVFeU0DnNsolmFT5vrV81jkFEGHEYlI5a/t05a/WA1V /BYTjeQb79FjBCwC2nrGrWVNyENzaYZzq7cC0/iFa+wDH+6EGy5MB9oWZusbF4CY ut0SdUdqLCYO2QjT/oUW85f7GhBMDhDFEhOqPp5yazFOVDTeGGhkyaS1/9oc819L 3oYWqmiIJwWwCgwrNnu48XIFFqrQ5OU1nDys2ylExsorG9ZcOfgAORuVy3ZgnW9g ZUQnObhSm10Ae34mRYx4gb6Y+2GnQMcerVwo5iABZai8UBoI3og= -----END CERTIFICATE-----Generated at Mon Jan 26 05:39:02 2026 by rpki-client