This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft File: BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft (raw, json) Hash identifier: Mwmj/NMVAwwhADtZKjVV3kBMS8JvX1wZN+FDg3JM9dI= Subject key identifier: 63:4D:F6:0D:8C:CD:D4:D1:1B:E7:9F:FC:D8:4D:19:D1:3E:EA:DB:92 Authority key identifier: BF:38:DD:D5:DA:2A:BF:08:EB:1D:D8:D8:7B:56:6F:36:EE:73:F3:07 Certificate issuer: /CN=BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307 Certificate serial: 3500368C99494744ACA969E8C443179ADDE9208D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft Manifest number: 0249 Signing time: Sun 25 Jan 2026 18:21:31 +0000 Manifest this update: Sun 25 Jan 2026 18:16:31 +0000 Manifest next update: Wed 28 Jan 2026 18:53:31 +0000 Files and hashes: 1: BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl (hash: Om7WciyzCUkLuE5KlIE1e2aGe2RRNlm91k9JYjd4rjs=) 2: 3130332e3138392e36322e302f32342d3234203d3e20313439373436.roa (hash: 48e011jsIhGivkdBp8Labkdz5aYvN7kU5niI+PWaloc=) 3: 3130332e3138392e36332e302f32342d3234203d3e20313439373436.roa (hash: KkYyNZh9ZDbNoVpyOM3q+Wq6B9uj3EG/cdRvxrx75Ic=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:00:36:8c:99:49:47:44:ac:a9:69:e8:c4:43:17:9a:dd:e9:20:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307 Validity Not Before: Jan 25 18:16:31 2026 GMT Not After : Jan 28 18:53:31 2026 GMT Subject: CN=634DF60D8CCDD4D11BE79FFCD84D19D13EEADB92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e3:a7:fd:91:18:f8:d2:06:56:77:3e:e8:f6: 96:75:9c:98:2a:97:32:d5:75:42:1e:a1:12:26:ed: 9a:c3:a8:4f:75:32:37:95:43:e9:37:1c:13:46:cf: 8f:5b:64:4f:47:b6:8f:77:a0:a4:cd:56:cf:09:92: 1a:c2:e9:58:21:63:27:0c:3b:67:64:73:73:98:70: 68:77:de:8a:06:0b:cd:fb:16:48:d9:aa:f6:83:a5: dc:4e:a9:8f:2d:d2:b3:b1:50:a0:06:31:14:23:05: b1:fe:23:61:40:cb:15:02:75:43:75:cc:0a:ea:3d: 8b:a3:e1:5f:97:14:90:ce:01:15:14:1e:93:98:1e: c4:ff:1b:98:14:05:5c:0c:bc:ca:63:f7:e2:7b:71: cb:92:cb:dd:9c:45:c0:a0:da:9c:a8:c1:cb:ce:22: fe:21:19:5a:55:d9:7d:0e:be:74:5a:e2:5c:69:00: 47:73:95:f7:fe:ad:07:2f:39:ee:c2:e5:d4:e7:50: 0f:cb:32:e1:8b:a7:1b:33:66:0e:63:c4:87:67:d8: db:d5:6c:27:20:16:13:c0:f1:13:13:1c:9d:dc:7a: c1:d4:2c:30:dd:ee:6b:1d:ac:a9:2e:00:a0:47:d0: db:ba:fa:cb:e6:87:fa:37:ba:f0:15:95:3c:9c:0e: f5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:4D:F6:0D:8C:CD:D4:D1:1B:E7:9F:FC:D8:4D:19:D1:3E:EA:DB:92 X509v3 Authority Key Identifier: keyid:BF:38:DD:D5:DA:2A:BF:08:EB:1D:D8:D8:7B:56:6F:36:EE:73:F3:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:9b:9b:f6:e0:f3:43:0f:42:6a:d5:95:5c:9d:47:e5:c7:d7: a6:c4:6f:dd:9c:44:2b:97:ad:45:86:0a:7f:25:c6:3b:07:08: fb:fc:07:f4:80:49:e7:80:50:1f:1f:a6:fb:7d:d2:37:32:8b: 17:db:0d:21:2b:3b:e6:a4:2b:80:9a:c2:c8:84:79:bf:fb:c8: bc:fc:fa:77:f7:13:a0:82:29:f2:0f:a3:ee:a5:be:8a:1f:c7: fd:1c:e8:9a:f8:86:49:2e:b4:d3:b1:8a:a9:68:40:ff:1f:c5: 8e:10:5e:10:35:f8:77:b3:d6:df:9b:cd:a2:45:17:f8:18:80: 4c:29:f1:34:49:24:dd:13:2e:f2:81:8d:fb:fe:94:b0:bd:8c: 8a:79:be:ce:45:0a:52:9e:74:e9:dc:b7:17:48:f3:d5:c2:7a: 67:b3:9e:dd:06:94:da:7f:f6:6f:0a:0e:70:0a:5b:d2:a7:6d: 5c:84:53:a8:16:5f:cc:57:8c:d4:68:c4:af:76:10:1d:75:5c: 74:22:6b:6c:17:8d:d6:7a:62:cc:13:28:81:fc:be:a2:75:cb: b6:53:f7:df:4d:e8:32:43:fe:b2:82:8e:97:d2:b3:2f:30:e3: 34:e9:e5:bc:6e:6f:8b:b0:0c:50:41:2c:8b:dd:af:6a:26:3d: fa:34:06:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNQA2jJlJR0SsqWnoxEMXmt3pII0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZGMzZF RTczRjMwNzAeFw0yNjAxMjUxODE2MzFaFw0yNjAxMjgxODUzMzFaMDMxMTAvBgNV BAMTKDYzNERGNjBEOENDREQ0RDExQkU3OUZGQ0Q4NEQxOUQxM0VFQURCOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx46f9kRj40gZWdz7o9pZ1nJgq lzLVdUIeoRIm7ZrDqE91MjeVQ+k3HBNGz49bZE9Hto93oKTNVs8JkhrC6VghYycM O2dkc3OYcGh33ooGC837FkjZqvaDpdxOqY8t0rOxUKAGMRQjBbH+I2FAyxUCdUN1 zArqPYuj4V+XFJDOARUUHpOYHsT/G5gUBVwMvMpj9+J7ccuSy92cRcCg2pyowcvO Iv4hGVpV2X0OvnRa4lxpAEdzlff+rQcvOe7C5dTnUA/LMuGLpxszZg5jxIdn2NvV bCcgFhPA8RMTHJ3cesHULDDd7msdrKkuAKBH0Nu6+svmh/o3uvAVlTycDvU7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY032DYzN1NEb55/82E0Z0T7q25IwHwYDVR0j BBgwFoAUvzjd1doqvwjrHdjYe1ZvNu5z8wcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjM0ZWYxZC03MzRkLTRjNzEtOGJhNy1kMzFlMTY4YjYzMmMvMC9CRjM4RERENURB MkFCRjA4RUIxREQ4RDg3QjU2NkYzNkVFNzNGMzA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZGMzZFRTcz RjMwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIzNGVmMWQtNzM0ZC00YzcxLThi YTctZDMxZTE2OGI2MzJjLzAvQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZG MzZFRTczRjMwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIWbm/bg80MPQmrVlVydR+XH16bEb92cRCuX rUWGCn8lxjsHCPv8B/SASeeAUB8fpvt90jcyixfbDSErO+akK4CawsiEeb/7yLz8 +nf3E6CCKfIPo+6lvoofx/0c6Jr4hkkutNOxiqloQP8fxY4QXhA1+Hez1t+bzaJF F/gYgEwp8TRJJN0TLvKBjfv+lLC9jIp5vs5FClKedOnctxdI89XCemeznt0GlNp/ 9m8KDnAKW9KnbVyEU6gWX8xXjNRoxK92EB11XHQia2wXjdZ6YswTKIH8vqJ1y7ZT 999N6DJD/rKCjpfSsy8w4zTp5bxub4uwDFBBLIvdr2omPfo0Bgk= -----END CERTIFICATE-----Generated at Sun Jan 25 21:44:46 2026 by rpki-client