This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft File: 8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft (raw, json) Hash identifier: +7R7iVYrJOpEgRKvvgaG89anwt7sxPcZRqX2K3oZK8Q= Subject key identifier: 16:CD:37:32:1E:75:42:32:07:76:6A:EC:3F:7E:BF:10:97:1B:D4:AF Authority key identifier: 8A:E8:A9:B5:1B:DA:92:3F:C8:95:6A:CB:08:6F:56:E7:76:D4:09:C8 Certificate issuer: /CN=8AE8A9B51BDA923FC8956ACB086F56E776D409C8 Certificate serial: 0B1514CD9FA3CB35939C01342BA3102AC070F328 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft Manifest number: 0130 Signing time: Sat 24 Jan 2026 19:11:40 +0000 Manifest this update: Sat 24 Jan 2026 19:06:40 +0000 Manifest next update: Wed 28 Jan 2026 02:39:40 +0000 Files and hashes: 1: 3130332e3231302e37302e302f32332d3234203d3e20313530393936.roa (hash: auTxlOGyUx1cy5HvSX5DnWx3cFTubm306blClFP2M7g=) 2: 8AE8A9B51BDA923FC8956ACB086F56E776D409C8.crl (hash: ZQa7OPDYW3fVwXNmgBfuLR0IpqmC46aBPy0ZSFupMag=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.crl rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 02:39:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:15:14:cd:9f:a3:cb:35:93:9c:01:34:2b:a3:10:2a:c0:70:f3:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE8A9B51BDA923FC8956ACB086F56E776D409C8 Validity Not Before: Jan 24 19:06:40 2026 GMT Not After : Jan 28 02:39:40 2026 GMT Subject: CN=16CD37321E75423207766AEC3F7EBF10971BD4AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f8:dc:2e:a3:64:02:66:02:5a:70:d4:6a:03: ec:fb:71:6b:76:14:90:41:eb:1e:4c:3c:73:d2:d7: 2c:3c:d1:27:54:df:e6:c1:94:6e:d9:35:b9:d2:a6: 7c:d6:66:c9:b5:d0:9a:c9:ea:00:b1:e2:b0:39:b4: 97:7e:e9:08:96:d9:e6:f8:bc:e7:30:27:04:81:82: 86:15:97:c9:c0:4e:58:8d:ea:44:30:d3:2d:26:11: 23:34:5e:59:83:6d:cd:e2:54:40:c5:04:e1:35:b2: b3:c4:78:d1:5e:6a:cf:ba:d1:7a:4c:7e:ff:e1:c7: c3:5f:c3:78:66:fc:8f:00:11:b3:c8:a4:6d:d0:69: 7b:4c:f2:68:e4:fa:4f:a2:f8:4f:9b:a8:6f:6a:5e: d9:03:5c:6d:e8:1e:68:fb:72:90:cb:71:15:9f:6d: c8:a6:ee:76:b8:ab:5e:d3:ad:6a:be:65:1a:98:f2: 2e:58:de:87:f3:bb:ec:9f:35:3d:e6:8a:68:2f:ba: 1d:44:54:17:60:47:7c:40:f6:c0:f6:e7:68:59:ef: 8f:12:78:40:5a:bb:16:3b:05:d4:2e:44:5d:a6:84: 1f:2d:5a:60:80:ce:85:bb:a1:13:e4:b6:19:7d:e8: 1a:e9:8d:23:dc:d5:7a:10:e4:46:29:d7:f3:f1:ec: d4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:CD:37:32:1E:75:42:32:07:76:6A:EC:3F:7E:BF:10:97:1B:D4:AF X509v3 Authority Key Identifier: keyid:8A:E8:A9:B5:1B:DA:92:3F:C8:95:6A:CB:08:6F:56:E7:76:D4:09:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:e5:60:73:b8:44:a1:b6:c3:2f:98:eb:2a:8f:d3:5b:f9:5e: 27:d9:7f:66:bd:43:94:eb:e2:ee:eb:34:da:8a:63:94:2b:ec: 2e:e8:ff:fa:56:33:e0:54:40:9d:94:08:c8:c4:52:77:c8:1b: 80:bd:4d:81:52:c3:79:cc:0f:a6:dd:06:dc:9a:7f:1e:56:9d: 50:f2:92:5c:bc:6e:91:86:c6:09:85:c6:81:bd:cd:d6:d0:4c: 87:a4:71:62:b2:f6:16:0d:57:1c:b8:9a:b4:14:2d:5e:1b:5d: 1c:f9:c3:14:29:83:d4:15:11:33:9f:73:79:08:b8:ab:0d:3b: 64:86:69:ca:a0:d0:51:a2:41:ae:a7:7b:70:6c:ce:1a:45:9a: 54:52:b7:88:cb:e4:3f:98:c5:82:1e:fd:bf:df:a2:b6:b2:70: 11:e1:4b:8d:9c:8a:7c:fd:3b:7f:38:62:a8:5d:d1:6a:8f:36: 3c:84:30:53:c8:5d:bd:9f:d0:e2:b6:fb:32:b6:c6:f2:86:47: 0c:1c:c2:b0:3c:7a:d3:9f:21:d7:83:12:a3:64:1a:a7:f8:db: 02:5c:87:91:6b:2d:2f:7d:b8:0e:b4:5c:dd:c3:0d:5e:f6:21: 1c:aa:98:86:4f:23:85:7c:6c:98:92:13:3b:f8:63:59:01:d5: 35:82:d2:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCxUUzZ+jyzWTnAE0K6MQKsBw8ygwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFFOEE5QjUxQkRBOTIzRkM4OTU2QUNCMDg2RjU2RTc3 NkQ0MDlDODAeFw0yNjAxMjQxOTA2NDBaFw0yNjAxMjgwMjM5NDBaMDMxMTAvBgNV BAMTKDE2Q0QzNzMyMUU3NTQyMzIwNzc2NkFFQzNGN0VCRjEwOTcxQkQ0QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv+Nwuo2QCZgJacNRqA+z7cWt2 FJBB6x5MPHPS1yw80SdU3+bBlG7ZNbnSpnzWZsm10JrJ6gCx4rA5tJd+6QiW2eb4 vOcwJwSBgoYVl8nATliN6kQw0y0mESM0XlmDbc3iVEDFBOE1srPEeNFeas+60XpM fv/hx8Nfw3hm/I8AEbPIpG3QaXtM8mjk+k+i+E+bqG9qXtkDXG3oHmj7cpDLcRWf bcim7na4q17TrWq+ZRqY8i5Y3ofzu+yfNT3mimgvuh1EVBdgR3xA9sD252hZ748S eEBauxY7BdQuRF2mhB8tWmCAzoW7oRPkthl96BrpjSPc1XoQ5EYp1/Px7NQdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFs03Mh51QjIHdmrsP36/EJcb1K8wHwYDVR0j BBgwFoAUiuiptRvakj/IlWrLCG9W53bUCcgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzZmMDcwMC05MTE2LTRhMDUtOGY2Yi1kOGVkYWZkYjcyZWMvMC84QUU4QTlCNTFC REE5MjNGQzg5NTZBQ0IwODZGNTZFNzc2RDQwOUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFFOEE5QjUxQkRBOTIzRkM4OTU2QUNCMDg2RjU2RTc3NkQ0 MDlDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM2ZjA3MDAtOTExNi00YTA1LThm NmItZDhlZGFmZGI3MmVjLzAvOEFFOEE5QjUxQkRBOTIzRkM4OTU2QUNCMDg2RjU2 RTc3NkQ0MDlDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAjlYHO4RKG2wy+Y6yqP01v5XifZf2a9Q5Tr 4u7rNNqKY5Qr7C7o//pWM+BUQJ2UCMjEUnfIG4C9TYFSw3nMD6bdBtyafx5WnVDy kly8bpGGxgmFxoG9zdbQTIekcWKy9hYNVxy4mrQULV4bXRz5wxQpg9QVETOfc3kI uKsNO2SGacqg0FGiQa6ne3BszhpFmlRSt4jL5D+YxYIe/b/foraycBHhS42cinz9 O384Yqhd0WqPNjyEMFPIXb2f0OK2+zK2xvKGRwwcwrA8etOfIdeDEqNkGqf42wJc h5FrLS99uA60XN3DDV72IRyqmIZPI4V8bJiSEzv4Y1kB1TWC0ik= -----END CERTIFICATE-----Generated at Sun Jan 25 18:37:15 2026 by rpki-client