This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft File: 8E87AB0332210D864175F7A371230D7C6099AE30.mft (raw, json) Hash identifier: MDGSX6VQpskn8G0gZtg+0CGdu12iP77Eq7C3DkzBnJU= Subject key identifier: EA:80:73:D5:37:79:94:17:05:12:62:22:6F:23:77:B7:FA:84:4A:45 Authority key identifier: 8E:87:AB:03:32:21:0D:86:41:75:F7:A3:71:23:0D:7C:60:99:AE:30 Certificate issuer: /CN=8E87AB0332210D864175F7A371230D7C6099AE30 Certificate serial: 215293575C4971FBE59D8109A5DE1409C86FCC56 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft Manifest number: 0256 Signing time: Sat 24 Jan 2026 16:21:52 +0000 Manifest this update: Sat 24 Jan 2026 16:16:52 +0000 Manifest next update: Wed 28 Jan 2026 03:09:52 +0000 Files and hashes: 1: 8E87AB0332210D864175F7A371230D7C6099AE30.crl (hash: aZHpJfKDcxP0XaN7xQdD0YF25SzFD5zRCt44XszZ4tY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.crl rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 03:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:52:93:57:5c:49:71:fb:e5:9d:81:09:a5:de:14:09:c8:6f:cc:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E87AB0332210D864175F7A371230D7C6099AE30 Validity Not Before: Jan 24 16:16:52 2026 GMT Not After : Jan 28 03:09:52 2026 GMT Subject: CN=EA8073D537799417051262226F2377B7FA844A45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e6:fb:26:3a:f2:05:1b:ad:d3:e8:94:92:d3: 76:43:8f:ba:f1:cc:36:60:c8:8f:54:12:05:5f:55: 2e:61:e2:08:d9:b3:25:bd:93:25:61:e4:09:42:ea: a3:f1:59:87:1e:ae:55:f4:53:41:64:dc:e8:27:db: fc:69:72:be:fb:63:e7:a4:e8:99:c5:58:77:af:19: 83:8f:8a:ee:6a:27:df:2b:18:ac:de:ae:a0:68:90: 48:53:1e:de:e6:93:61:b0:1a:5b:4a:a0:84:16:9b: 0b:b5:76:84:e6:c8:90:e8:cc:c1:a8:ef:a4:c7:16: 9b:63:85:57:ba:a4:d8:c5:d8:a6:b2:cb:1f:2c:05: 8d:db:1b:cd:3f:d5:99:5d:c5:57:1d:15:89:a2:f6: da:42:42:be:dd:5f:f1:de:6d:00:31:cd:cd:20:46: 17:a1:90:9c:fd:93:90:e2:96:76:23:5f:9e:b6:6e: 05:9d:75:40:3b:f5:9e:eb:a8:a6:d7:d9:6f:5d:15: af:c9:6c:6c:cb:28:77:01:4a:53:37:38:d4:6e:97: 5c:fb:48:83:75:51:2e:d3:1a:f4:b2:df:64:a9:97: e7:8a:d5:34:14:ad:31:e8:8f:ae:7d:74:39:a6:bc: f3:90:ad:77:df:fa:7a:6d:8a:02:1d:e3:11:7d:47: d1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:80:73:D5:37:79:94:17:05:12:62:22:6F:23:77:B7:FA:84:4A:45 X509v3 Authority Key Identifier: keyid:8E:87:AB:03:32:21:0D:86:41:75:F7:A3:71:23:0D:7C:60:99:AE:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:7e:94:1e:38:6a:a0:ad:c2:69:a6:d8:bb:09:f8:42:9f:a9: af:db:c9:e5:27:06:6c:7e:f6:4a:03:40:3d:9a:37:b3:c7:f7: d6:7d:9e:4c:83:6f:31:ae:dc:ea:63:c4:72:64:79:87:b4:90: b8:eb:41:bc:83:9a:ca:b1:3e:74:05:29:64:88:41:fb:0d:4b: 5c:58:1f:b9:c9:8f:8a:06:76:8d:b6:a3:b8:63:c9:d7:51:85: de:20:ed:b9:d5:b8:3a:97:14:d9:bd:bc:a6:a9:f1:82:ee:da: bf:4b:27:79:4e:c2:5d:3b:92:31:95:a7:fc:c0:d6:47:0a:52: 29:db:cf:81:41:af:a3:ec:5a:7c:38:3f:47:0e:8d:8e:36:55: 47:ff:99:ef:f5:72:f4:ab:00:0a:05:22:d2:e2:3c:07:7e:23: 05:46:a5:1d:76:e9:83:e1:39:24:85:41:81:cc:16:f3:f5:3d: 1f:38:b4:46:b9:22:51:62:d4:12:d4:8d:3a:a7:79:58:b2:c2: e4:3b:dd:9e:4e:42:3c:c1:e3:50:d8:39:79:e2:3f:06:85:08: b8:e9:36:a1:2d:14:71:17:52:df:8e:9e:b2:c0:e9:c0:f2:c0: 9f:79:e0:2a:7d:20:18:82:38:18:30:34:4c:1b:84:06:d4:62: 53:65:e4:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIVKTV1xJcfvlnYEJpd4UCchvzFYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBEN0M2 MDk5QUUzMDAeFw0yNjAxMjQxNjE2NTJaFw0yNjAxMjgwMzA5NTJaMDMxMTAvBgNV BAMTKEVBODA3M0Q1Mzc3OTk0MTcwNTEyNjIyMjZGMjM3N0I3RkE4NDRBNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn5vsmOvIFG63T6JSS03ZDj7rx zDZgyI9UEgVfVS5h4gjZsyW9kyVh5AlC6qPxWYcerlX0U0Fk3Ogn2/xpcr77Y+ek 6JnFWHevGYOPiu5qJ98rGKzerqBokEhTHt7mk2GwGltKoIQWmwu1doTmyJDozMGo 76THFptjhVe6pNjF2Kayyx8sBY3bG80/1ZldxVcdFYmi9tpCQr7dX/HebQAxzc0g RhehkJz9k5DilnYjX562bgWddUA79Z7rqKbX2W9dFa/JbGzLKHcBSlM3ONRul1z7 SIN1US7TGvSy32Spl+eK1TQUrTHoj659dDmmvPOQrXff+nptigId4xF9R9HBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6oBz1Td5lBcFEmIibyN3t/qESkUwHwYDVR0j BBgwFoAUjoerAzIhDYZBdfejcSMNfGCZrjAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTA0ZTRjNy03YTJkLTRkNjYtOGZiNC0yMDU1NjU3ODdmMjQvMC84RTg3QUIwMzMy MjEwRDg2NDE3NUY3QTM3MTIzMEQ3QzYwOTlBRTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBEN0M2MDk5 QUUzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjUwNGU0YzctN2EyZC00ZDY2LThm YjQtMjA1NTY1Nzg3ZjI0LzAvOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBE N0M2MDk5QUUzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKB+lB44aqCtwmmm2LsJ+EKfqa/byeUnBmx+ 9koDQD2aN7PH99Z9nkyDbzGu3OpjxHJkeYe0kLjrQbyDmsqxPnQFKWSIQfsNS1xY H7nJj4oGdo22o7hjyddRhd4g7bnVuDqXFNm9vKap8YLu2r9LJ3lOwl07kjGVp/zA 1kcKUinbz4FBr6PsWnw4P0cOjY42VUf/me/1cvSrAAoFItLiPAd+IwVGpR126YPh OSSFQYHMFvP1PR84tEa5IlFi1BLUjTqneViywuQ73Z5OQjzB41DYOXniPwaFCLjp NqEtFHEXUt+OnrLA6cDywJ954Cp9IBiCOBgwNEwbhAbUYlNl5JQ= -----END CERTIFICATE-----Generated at Mon Jan 26 01:06:12 2026 by rpki-client