This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft File: 1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft (raw, json) Hash identifier: ME59mgz44s4bY+q4zxTI9l17oGPZasQlfJs8zr640D8= Subject key identifier: 1B:EF:20:00:DC:F9:31:1C:1F:23:07:DE:3D:8F:50:DD:4C:8E:60:0C Authority key identifier: 1B:F7:12:19:66:47:07:A7:B7:76:CD:99:B9:A6:D2:CC:60:CE:0B:AB Certificate issuer: /CN=1BF71219664707A7B776CD99B9A6D2CC60CE0BAB Certificate serial: 68A6FA3478E9B1D45CE1D3094DA1B0AB539E56D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft Manifest number: 02EF Signing time: Fri 23 Jan 2026 22:12:29 +0000 Manifest this update: Fri 23 Jan 2026 22:07:29 +0000 Manifest next update: Tue 27 Jan 2026 09:09:29 +0000 Files and hashes: 1: 3130332e3137372e3130302e302f32332d3234203d3e20313331313131.roa (hash: 3wek+JTR4Gr3DKmUDawbdf/x7TASEspEnmo4iHcCsdk=) 2: 1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl (hash: W3aLvSp2qLrVCZvz7wtIov0LIMaKti+ucGHdyV3ij/8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 09:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:a6:fa:34:78:e9:b1:d4:5c:e1:d3:09:4d:a1:b0:ab:53:9e:56:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BF71219664707A7B776CD99B9A6D2CC60CE0BAB Validity Not Before: Jan 23 22:07:29 2026 GMT Not After : Jan 27 09:09:29 2026 GMT Subject: CN=1BEF2000DCF9311C1F2307DE3D8F50DD4C8E600C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:97:d5:e6:a9:5f:74:bf:70:d4:5f:ec:0f:f6: 53:54:bb:1c:65:63:3d:62:16:04:02:46:f2:19:3d: e7:a5:20:03:56:43:84:ed:5d:8c:c8:a7:08:7f:f0: d3:18:6e:b2:f6:e6:f4:4c:ca:7a:54:65:ea:a6:d8: 7f:66:56:7c:b3:51:15:58:a9:c4:3e:99:8d:c8:af: 56:63:9c:b4:34:6f:b2:e9:12:84:2b:0c:12:13:8e: b1:39:29:76:83:3b:e3:b3:e5:66:0f:24:75:78:08: 92:76:75:0a:b9:63:46:ac:bb:a2:16:f6:82:fa:a1: 35:9b:6d:00:6a:fe:4a:c9:e6:09:35:3f:6c:9f:a0: d1:1f:21:c8:f1:ce:21:a2:4e:61:fd:05:42:fd:f2: e3:c0:d1:5c:c0:0f:8f:87:7e:78:1f:be:05:03:8a: 12:c7:c8:59:e9:30:00:4a:33:11:11:28:6f:03:44: 75:d3:f2:51:7d:40:be:01:91:8f:1c:09:62:45:29: 8b:89:9c:4f:2e:1e:35:6f:79:cb:21:11:b9:bc:34: 82:3a:24:6b:d7:0f:30:6f:b3:a2:30:49:0a:7a:91: 3c:5e:92:cf:1e:ee:83:cc:44:9e:97:6f:c9:4c:b8: 61:5f:3a:f7:2b:8b:f5:a3:86:aa:33:55:fd:46:df: 6c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:EF:20:00:DC:F9:31:1C:1F:23:07:DE:3D:8F:50:DD:4C:8E:60:0C X509v3 Authority Key Identifier: keyid:1B:F7:12:19:66:47:07:A7:B7:76:CD:99:B9:A6:D2:CC:60:CE:0B:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:5c:62:94:f3:41:14:3d:96:70:5a:b5:78:86:8e:44:7f:7d: cc:56:7a:a1:40:c6:1b:6b:5e:1a:36:a4:90:c9:26:83:91:aa: 59:3f:a7:de:df:a6:68:e7:43:e0:d8:23:09:63:91:0e:a8:31: 74:eb:b7:e0:9a:e5:af:30:f8:bd:75:b0:6c:a0:f6:e5:24:01: 74:fb:a2:7c:63:90:82:c0:a5:96:59:c0:e8:84:38:a2:5f:7a: 00:c6:73:e4:3f:c3:2d:86:00:6a:ee:b0:24:1e:7c:89:42:1c: f8:f4:a3:6c:ea:70:ab:e4:a7:1d:21:f3:38:37:a2:cd:9d:2a: 76:f8:f3:a1:24:14:93:76:1d:e6:80:3b:cb:e8:b6:3a:21:1e: 5c:75:4c:56:9e:14:92:a7:9e:66:cc:98:4d:8b:dc:24:e9:49: d6:19:3e:94:2c:7c:0e:86:2d:9f:3e:c9:3c:96:ac:8d:d2:9a: 84:04:28:fd:aa:9e:29:92:b5:e2:e1:ec:8e:22:61:64:55:2d: 82:d5:c0:ba:6d:41:cf:c9:72:dc:e9:65:49:7b:0c:5f:a6:67: bb:81:13:59:8e:2c:2e:5c:4f:6c:0a:c7:6c:15:da:ed:a1:a5: 44:59:4c:06:07:e3:72:ac:07:3e:04:3a:fe:e3:11:60:7f:90: e8:e1:64:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaKb6NHjpsdRc4dMJTaGwq1OeVtEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJGNzEyMTk2NjQ3MDdBN0I3NzZDRDk5QjlBNkQyQ0M2 MENFMEJBQjAeFw0yNjAxMjMyMjA3MjlaFw0yNjAxMjcwOTA5MjlaMDMxMTAvBgNV BAMTKDFCRUYyMDAwRENGOTMxMUMxRjIzMDdERTNEOEY1MERENEM4RTYwMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJl9XmqV90v3DUX+wP9lNUuxxl Yz1iFgQCRvIZPeelIANWQ4TtXYzIpwh/8NMYbrL25vRMynpUZeqm2H9mVnyzURVY qcQ+mY3Ir1ZjnLQ0b7LpEoQrDBITjrE5KXaDO+Oz5WYPJHV4CJJ2dQq5Y0asu6IW 9oL6oTWbbQBq/krJ5gk1P2yfoNEfIcjxziGiTmH9BUL98uPA0VzAD4+HfngfvgUD ihLHyFnpMABKMxERKG8DRHXT8lF9QL4BkY8cCWJFKYuJnE8uHjVvecshEbm8NII6 JGvXDzBvs6IwSQp6kTxeks8e7oPMRJ6Xb8lMuGFfOvcri/WjhqozVf1G32wxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG+8gANz5MRwfIwfePY9Q3UyOYAwwHwYDVR0j BBgwFoAUG/cSGWZHB6e3ds2ZuabSzGDOC6swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ODk4NWY1OS0wZWU2LTQyMDgtOWE5MC0yOWMxMDg2MDBjZmMvMC8xQkY3MTIxOTY2 NDcwN0E3Qjc3NkNEOTlCOUE2RDJDQzYwQ0UwQkFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJGNzEyMTk2NjQ3MDdBN0I3NzZDRDk5QjlBNkQyQ0M2MENF MEJBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDg5ODVmNTktMGVlNi00MjA4LTlh OTAtMjljMTA4NjAwY2ZjLzAvMUJGNzEyMTk2NjQ3MDdBN0I3NzZDRDk5QjlBNkQy Q0M2MENFMEJBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF1cYpTzQRQ9lnBatXiGjkR/fcxWeqFAxhtr Xho2pJDJJoORqlk/p97fpmjnQ+DYIwljkQ6oMXTrt+Ca5a8w+L11sGyg9uUkAXT7 onxjkILApZZZwOiEOKJfegDGc+Q/wy2GAGrusCQefIlCHPj0o2zqcKvkpx0h8zg3 os2dKnb486EkFJN2HeaAO8votjohHlx1TFaeFJKnnmbMmE2L3CTpSdYZPpQsfA6G LZ8+yTyWrI3SmoQEKP2qnimSteLh7I4iYWRVLYLVwLptQc/JctzpZUl7DF+mZ7uB E1mOLC5cT2wKx2wV2u2hpURZTAYH43KsBz4EOv7jEWB/kOjhZB8= -----END CERTIFICATE-----Generated at Sun Jan 25 18:58:52 2026 by rpki-client