This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.mft File: B247FB55BE5739FCE4EBBD20B84542267C15D192.mft (raw, json) Hash identifier: sjK5RAv+XwVNAA011reif7v9euqrhfV6rvJjRue91Bs= Subject key identifier: 85:89:AE:65:C2:23:10:6B:2A:8F:D6:12:D1:8E:BF:71:63:32:54:30 Authority key identifier: B2:47:FB:55:BE:57:39:FC:E4:EB:BD:20:B8:45:42:26:7C:15:D1:92 Certificate issuer: /CN=B247FB55BE5739FCE4EBBD20B84542267C15D192 Certificate serial: 107B4ACAB3C925E96F83C7F9E96D186E9B5F48CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B247FB55BE5739FCE4EBBD20B84542267C15D192.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.mft Manifest number: 02C7 Signing time: Sat 24 Jan 2026 20:11:28 +0000 Manifest this update: Sat 24 Jan 2026 20:06:28 +0000 Manifest next update: Wed 28 Jan 2026 02:49:28 +0000 Files and hashes: 1: 3130332e3137362e39382e302f32342d3234203d3e20313439333434.roa (hash: EI6CAFKMozCEfiPKGQcvscTjTfj7/nkyBcwcx/XBDg8=) 2: 3130332e3137362e39382e302f32332d3234203d3e20313439333434.roa (hash: 9BKuqPMpOCYVLDkVIwaFy+U4SgMn8wYu59t+XyUcQfg=) 3: 3130332e3137362e39392e302f32342d3234203d3e20313439333434.roa (hash: 1SXRbeE4Zo2BpgZYkA81FPjpBzqJO4ahWylO9ct7G/4=) 4: B247FB55BE5739FCE4EBBD20B84542267C15D192.crl (hash: MuHnTu43RHvo6JsHk+qcap0Prpa/7iS70KUXM1w5k50=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.crl rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B247FB55BE5739FCE4EBBD20B84542267C15D192.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 02:49:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:7b:4a:ca:b3:c9:25:e9:6f:83:c7:f9:e9:6d:18:6e:9b:5f:48:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B247FB55BE5739FCE4EBBD20B84542267C15D192 Validity Not Before: Jan 24 20:06:28 2026 GMT Not After : Jan 28 02:49:28 2026 GMT Subject: CN=8589AE65C223106B2A8FD612D18EBF7163325430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f8:8b:ec:e1:a2:a9:f6:a9:dc:86:b1:84:df: b1:c2:af:e1:e6:29:6d:f1:f5:ed:8a:8c:27:88:25: 59:13:cc:9b:8c:a0:65:f0:2d:80:e7:b8:01:8d:29: 5d:ba:54:50:dc:54:2c:32:9d:9f:45:7a:96:a4:a4: 2d:f1:ae:a4:2e:bf:5b:45:d9:f3:ba:6f:9b:a3:77: b8:9d:08:a0:f0:1d:bb:54:f5:cb:3c:96:9c:a5:7e: 35:6e:17:f0:60:56:f9:1b:7e:de:b0:26:22:02:b6: ba:5c:a6:eb:40:46:6a:4a:76:b8:01:e3:7b:ff:ab: 4c:fa:08:b8:60:14:be:4c:6f:8d:cb:ea:ce:32:a1: 3f:e8:50:95:5d:04:6f:ba:f3:6d:bb:66:d2:11:e7: f1:33:4f:ce:ac:e4:6f:a9:5f:d6:4d:83:3c:f8:6d: 4d:74:46:73:75:3a:58:55:ed:88:fe:04:c9:51:38: 05:43:71:63:38:de:5c:df:9e:a3:d0:6a:2a:49:63: dd:9e:5b:4c:49:26:7e:44:c2:79:99:2b:b5:de:14: 4c:c8:4b:3c:df:58:66:1c:04:ac:f6:ba:df:30:ea: 38:df:85:ac:ee:e0:f1:85:0a:aa:da:4d:81:01:28: 9e:a0:01:d2:d2:b7:6f:d3:4d:f5:7d:61:ff:11:46: 80:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:89:AE:65:C2:23:10:6B:2A:8F:D6:12:D1:8E:BF:71:63:32:54:30 X509v3 Authority Key Identifier: keyid:B2:47:FB:55:BE:57:39:FC:E4:EB:BD:20:B8:45:42:26:7C:15:D1:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B247FB55BE5739FCE4EBBD20B84542267C15D192.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:f6:7c:24:37:83:ac:7a:2d:66:c0:b4:6a:13:99:ec:e5:69: 69:5c:32:1d:83:0f:1a:c4:f7:71:b7:55:e8:9d:d4:3a:ba:e9: f6:85:96:35:d4:89:8c:3b:af:a7:63:b3:b0:b7:7f:9d:99:e0: e9:b8:fa:4f:b0:f8:de:39:92:87:6b:e6:a7:f0:f7:43:5b:32: ed:c3:be:fc:9e:be:3c:10:0b:66:6b:74:de:e3:1c:11:74:bf: ca:32:65:98:98:aa:e8:c9:bf:e3:e0:9f:47:43:5c:03:01:39: ad:74:fd:99:f8:b4:79:75:b5:c5:7a:a1:4c:2b:4a:1e:05:d6: 01:ea:f7:58:63:93:b3:24:ae:f9:6b:6a:91:8c:77:b4:06:eb: 95:06:53:b9:6c:58:89:51:38:1f:b8:d6:8e:85:8e:60:72:de: 14:c1:58:f4:c8:c6:f0:b7:97:f1:3e:16:9a:d1:d1:bd:68:d1: 36:b0:9e:1f:41:fe:db:34:04:cd:47:37:40:41:f3:aa:6e:fd: cc:97:74:6c:d3:23:89:aa:60:6e:80:b6:37:51:55:c9:d4:12: a7:e1:95:34:fc:86:23:b1:af:78:ff:32:68:4f:be:04:34:38: 24:18:c9:75:3b:12:9b:7f:e5:03:13:7d:de:4d:0e:e1:1f:33: 23:28:98:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEHtKyrPJJelvg8f56W0YbptfSMwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjI0N0ZCNTVCRTU3MzlGQ0U0RUJCRDIwQjg0NTQyMjY3 QzE1RDE5MjAeFw0yNjAxMjQyMDA2MjhaFw0yNjAxMjgwMjQ5MjhaMDMxMTAvBgNV BAMTKDg1ODlBRTY1QzIyMzEwNkIyQThGRDYxMkQxOEVCRjcxNjMzMjU0MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK+Ivs4aKp9qnchrGE37HCr+Hm KW3x9e2KjCeIJVkTzJuMoGXwLYDnuAGNKV26VFDcVCwynZ9FepakpC3xrqQuv1tF 2fO6b5ujd7idCKDwHbtU9cs8lpylfjVuF/BgVvkbft6wJiICtrpcputARmpKdrgB 43v/q0z6CLhgFL5Mb43L6s4yoT/oUJVdBG+68227ZtIR5/EzT86s5G+pX9ZNgzz4 bU10RnN1OlhV7Yj+BMlROAVDcWM43lzfnqPQaipJY92eW0xJJn5EwnmZK7XeFEzI SzzfWGYcBKz2ut8w6jjfhazu4PGFCqraTYEBKJ6gAdLSt2/TTfV9Yf8RRoCBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhYmuZcIjEGsqj9YS0Y6/cWMyVDAwHwYDVR0j BBgwFoAUskf7Vb5XOfzk670guEVCJnwV0ZIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NzIxNjQyNS02YWEzLTQ0MjktYjE3NS04NjkwMWJiMGNiMWYvMC9CMjQ3RkI1NUJF NTczOUZDRTRFQkJEMjBCODQ1NDIyNjdDMTVEMTkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjI0N0ZCNTVCRTU3MzlGQ0U0RUJCRDIwQjg0NTQyMjY3QzE1 RDE5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTcyMTY0MjUtNmFhMy00NDI5LWIx NzUtODY5MDFiYjBjYjFmLzAvQjI0N0ZCNTVCRTU3MzlGQ0U0RUJCRDIwQjg0NTQy MjY3QzE1RDE5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEb2fCQ3g6x6LWbAtGoTmezlaWlcMh2DDxrE 93G3Veid1Dq66faFljXUiYw7r6djs7C3f52Z4Om4+k+w+N45kodr5qfw90NbMu3D vvyevjwQC2ZrdN7jHBF0v8oyZZiYqujJv+Pgn0dDXAMBOa10/Zn4tHl1tcV6oUwr Sh4F1gHq91hjk7MkrvlrapGMd7QG65UGU7lsWIlROB+41o6FjmBy3hTBWPTIxvC3 l/E+FprR0b1o0Tawnh9B/ts0BM1HN0BB86pu/cyXdGzTI4mqYG6AtjdRVcnUEqfh lTT8hiOxr3j/MmhPvgQ0OCQYyXU7Ept/5QMTfd5NDuEfMyMomAs= -----END CERTIFICATE-----Generated at Sun Jan 25 23:40:25 2026 by rpki-client