This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft File: B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft (raw, json) Hash identifier: 4qBvwgeV1t6b4r/jpPDYP9mqtjytLUR3FfLMLUXM/+E= Subject key identifier: E9:44:6C:71:B1:F2:6D:18:FF:DD:E9:AC:CC:E2:FF:90:F1:11:06:F2 Authority key identifier: B2:FA:6D:D6:2C:0D:60:EA:AD:64:F6:B4:71:D2:2D:29:44:32:B7:B8 Certificate issuer: /CN=B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8 Certificate serial: 7C4BDE264F386000BC2D914516C42F0F58999AF4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft Manifest number: 0546 Signing time: Sat 24 Jan 2026 22:30:44 +0000 Manifest this update: Sat 24 Jan 2026 22:25:44 +0000 Manifest next update: Wed 28 Jan 2026 06:20:44 +0000 Files and hashes: 1: B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.crl (hash: CpVsd5xVDk6qqQh0a1KempjTADLk1oyUyRgTMWX6JEw=) 2: 3130332e3130362e3137322e302f32332d3234203d3e20313336383838.roa (hash: DZlWR7tuLnpwDkeYEthZYN05oc1IXglcFF75rJ6G2+c=) 3: 3130332e3130362e3137342e302f32342d3234203d3e20313336383838.roa (hash: gCxomhlXPqJzdF7SJ3iSXnHHdDE1CzdM3fX39z9NSbw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.crl rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 06:20:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:4b:de:26:4f:38:60:00:bc:2d:91:45:16:c4:2f:0f:58:99:9a:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8 Validity Not Before: Jan 24 22:25:44 2026 GMT Not After : Jan 28 06:20:44 2026 GMT Subject: CN=E9446C71B1F26D18FFDDE9ACCCE2FF90F11106F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:4d:0c:b2:d1:4c:b3:4e:d2:03:aa:1c:c9:79: 0c:1b:cf:fb:e9:68:2a:ee:fe:25:47:46:d3:f9:8c: c3:4f:23:5e:0b:f5:8e:2a:bd:1d:c0:73:00:b1:8e: db:3e:3c:b4:ea:eb:3f:d5:9f:9c:3f:d9:8f:50:55: 8b:71:98:44:bb:83:ab:65:27:38:59:77:45:e3:33: bd:d5:e9:dd:f7:0f:bd:b3:a9:93:48:6a:1c:a9:e5: 51:87:60:ae:b4:3f:c8:01:36:60:32:a2:8a:f2:e9: 59:bc:0b:0e:7a:5e:a9:a4:a9:0a:4e:75:5a:36:39: d0:bf:b2:c0:62:4b:4f:e9:a1:9a:0d:a4:c0:d1:97: 55:e4:e1:3d:7e:70:95:c2:3f:05:bb:a5:72:44:74: ec:8b:b1:8c:89:65:16:02:a6:0a:b7:c4:91:5c:84: 8f:c3:87:c8:d9:5d:b3:72:3f:ac:8c:77:eb:c3:23: 6b:6a:40:2f:dd:ec:a3:44:69:4e:e7:24:28:42:4a: b5:ca:c2:76:c7:ec:61:b4:ea:7e:9d:9c:11:54:23: 95:7e:f7:64:40:96:00:bc:84:e4:cb:b4:01:08:f5: 87:ef:9f:80:ca:15:ad:04:b5:ff:7f:9e:6d:f7:1d: a3:e9:b8:16:62:11:e5:5f:95:6e:52:3a:5c:99:80: 35:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:44:6C:71:B1:F2:6D:18:FF:DD:E9:AC:CC:E2:FF:90:F1:11:06:F2 X509v3 Authority Key Identifier: keyid:B2:FA:6D:D6:2C:0D:60:EA:AD:64:F6:B4:71:D2:2D:29:44:32:B7:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:0c:56:c4:88:f0:81:f6:0f:e1:d6:1e:7d:8d:dd:91:ba:70: df:3f:67:95:f7:89:dd:95:eb:ce:a1:8f:73:bf:b2:d8:64:2d: 8b:79:9d:a5:9b:5f:cf:c5:8e:53:5c:1f:c3:7a:f1:5d:c3:9a: ce:4c:db:a0:cd:db:b7:63:1f:a1:0f:f7:71:91:12:39:56:fb: 6f:9d:42:a8:59:5f:73:ab:24:e7:32:bd:34:24:dd:bc:74:1b: 55:18:cb:63:52:5e:0f:4d:48:49:6a:88:0f:f0:bd:79:2a:e3: 10:be:15:93:5d:99:65:67:52:11:2c:c1:49:85:f8:80:39:55: db:55:e6:e3:05:73:65:80:11:97:98:0d:12:2a:d5:26:fe:9a: 47:47:90:1f:3d:1f:96:fe:9e:27:8f:d5:6c:13:3c:06:b4:ac: ab:bb:57:27:96:e3:7f:82:ad:74:6e:a4:c3:e1:dd:7d:07:b3: 5b:62:20:bc:2d:d1:8d:01:d4:a7:9d:05:cb:d3:0e:27:a9:d8: de:7a:44:0d:78:97:e2:1f:9b:39:e9:94:79:55:6d:e0:89:27: d4:f8:1a:f1:79:bd:3e:39:56:4a:e2:3c:65:36:19:3e:c2:65: ee:f3:e4:b9:b0:19:63:ed:0b:06:05:7e:b7:4b:08:c6:24:3f: a0:51:df:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfEveJk84YAC8LZFFFsQvD1iZmvQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJGQTZERDYyQzBENjBFQUFENjRGNkI0NzFEMjJEMjk0 NDMyQjdCODAeFw0yNjAxMjQyMjI1NDRaFw0yNjAxMjgwNjIwNDRaMDMxMTAvBgNV BAMTKEU5NDQ2QzcxQjFGMjZEMThGRkRERTlBQ0NDRTJGRjkwRjExMTA2RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0TQyy0UyzTtIDqhzJeQwbz/vp aCru/iVHRtP5jMNPI14L9Y4qvR3AcwCxjts+PLTq6z/Vn5w/2Y9QVYtxmES7g6tl JzhZd0XjM73V6d33D72zqZNIahyp5VGHYK60P8gBNmAyoory6Vm8Cw56XqmkqQpO dVo2OdC/ssBiS0/poZoNpMDRl1Xk4T1+cJXCPwW7pXJEdOyLsYyJZRYCpgq3xJFc hI/Dh8jZXbNyP6yMd+vDI2tqQC/d7KNEaU7nJChCSrXKwnbH7GG06n6dnBFUI5V+ 92RAlgC8hOTLtAEI9Yfvn4DKFa0Etf9/nm33HaPpuBZiEeVflW5SOlyZgDW/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6URscbHybRj/3emszOL/kPERBvIwHwYDVR0j BBgwFoAUsvpt1iwNYOqtZPa0cdItKUQyt7gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmJkN2NmNi1mNTVhLTRiNzgtYTU4OC1kOTI2MWYxNWY3NjMvMC9CMkZBNkRENjJD MEQ2MEVBQUQ2NEY2QjQ3MUQyMkQyOTQ0MzJCN0I4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJGQTZERDYyQzBENjBFQUFENjRGNkI0NzFEMjJEMjk0NDMy QjdCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZiZDdjZjYtZjU1YS00Yjc4LWE1 ODgtZDkyNjFmMTVmNzYzLzAvQjJGQTZERDYyQzBENjBFQUFENjRGNkI0NzFEMjJE Mjk0NDMyQjdCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMwMVsSI8IH2D+HWHn2N3ZG6cN8/Z5X3id2V 686hj3O/sthkLYt5naWbX8/FjlNcH8N68V3Dms5M26DN27djH6EP93GREjlW+2+d QqhZX3OrJOcyvTQk3bx0G1UYy2NSXg9NSElqiA/wvXkq4xC+FZNdmWVnUhEswUmF +IA5VdtV5uMFc2WAEZeYDRIq1Sb+mkdHkB89H5b+nieP1WwTPAa0rKu7VyeW43+C rXRupMPh3X0Hs1tiILwt0Y0B1KedBcvTDiep2N56RA14l+IfmznplHlVbeCJJ9T4 GvF5vT45VkriPGU2GT7CZe7z5LmwGWPtCwYFfrdLCMYkP6BR39k= -----END CERTIFICATE-----Generated at Sun Jan 25 20:39:23 2026 by rpki-client