This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft File: BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft (raw, json) Hash identifier: ywfZFlzLKmacZVVmL5Aj2iEUdqI45IQ6tYC7DVK6O5I= Subject key identifier: 16:B0:D9:59:8A:E3:9E:C4:20:99:9D:F2:41:42:04:22:3D:3B:4E:66 Authority key identifier: BD:9D:1F:A2:78:2F:66:A5:D2:24:7C:CF:76:F9:87:33:94:4D:DB:1E Certificate issuer: /CN=BD9D1FA2782F66A5D2247CCF76F98733944DDB1E Certificate serial: 6A3EB55DDBCC14CBAA3101BDC71847E913FC6964 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft Manifest number: 0393 Signing time: Sun 25 Jan 2026 13:01:48 +0000 Manifest this update: Sun 25 Jan 2026 12:56:48 +0000 Manifest next update: Wed 28 Jan 2026 13:10:48 +0000 Files and hashes: 1: 3130332e3136362e34342e302f32332d3233203d3e20313431393335.roa (hash: W++QyUnZGXcmnX3ztvQWtHhQHoQNTCnCPKCpApkxJ6c=) 2: 3130332e3136362e34352e302f32342d3234203d3e20313431393335.roa (hash: fj/lt2lCYjvk1PSbkoRTgwJqQIbOPA+L+ew0qDsvTdY=) 3: BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.crl (hash: P7mCwjJc1sRPZO+VOFKkZ9f9+Y8XVEBQgUIymHJ1WtA=) 4: 3130332e3136362e34342e302f32342d3234203d3e20313431393335.roa (hash: tqvVTypyRWoQ+BQk8RvmARihIc7baY47ONVcGpdS5No=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.crl rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 13:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:3e:b5:5d:db:cc:14:cb:aa:31:01:bd:c7:18:47:e9:13:fc:69:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD9D1FA2782F66A5D2247CCF76F98733944DDB1E Validity Not Before: Jan 25 12:56:48 2026 GMT Not After : Jan 28 13:10:48 2026 GMT Subject: CN=16B0D9598AE39EC420999DF2414204223D3B4E66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:77:9d:cd:79:aa:17:10:e4:06:be:9b:32:02: 35:07:c1:28:cb:de:34:3b:06:c0:f8:ac:15:9e:f4: 71:6c:aa:fe:65:12:84:6e:16:39:d1:83:c1:45:a9: f9:37:14:01:20:c6:44:df:55:0a:1c:9c:b3:50:72: 78:e7:46:d3:ba:33:31:2b:3e:fe:a2:25:8f:e6:a9: e4:1d:75:21:30:2b:ce:22:64:02:13:4a:9b:fc:55: 96:f8:4f:9c:c1:df:85:24:12:41:6a:bf:15:15:37: f2:25:3e:89:89:b3:6a:69:6b:79:4c:cc:42:da:d9: fa:4f:e5:e9:ba:24:cf:a3:82:df:85:ff:70:de:6f: c1:33:60:58:60:91:a4:8a:83:fc:68:3e:11:7a:16: 08:c0:c6:df:fe:41:0a:22:a3:aa:ae:0f:de:8c:a5: 8a:68:47:ab:15:2e:64:c6:5b:a7:55:4a:23:66:53: 79:1b:cf:64:7a:fa:b3:35:21:36:3c:2e:3b:e3:75: 76:34:3f:39:a2:60:01:68:fd:5f:7e:67:a3:7a:cf: f7:32:e7:5b:17:b0:d8:5d:21:e1:27:dd:ee:b2:83: 64:a1:c2:8c:cb:e5:c0:1a:3f:93:9a:2c:18:5a:f2: 70:61:fe:8c:b7:79:89:b3:8f:ae:dc:b7:65:9a:4a: 97:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:B0:D9:59:8A:E3:9E:C4:20:99:9D:F2:41:42:04:22:3D:3B:4E:66 X509v3 Authority Key Identifier: keyid:BD:9D:1F:A2:78:2F:66:A5:D2:24:7C:CF:76:F9:87:33:94:4D:DB:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:45:81:22:44:ad:26:9a:ab:f7:e1:9f:fa:f0:1f:60:22:fe: eb:40:8d:50:28:5a:7e:45:18:45:b2:f9:cc:43:89:ab:ee:ff: e0:3c:e6:30:48:a4:dc:e3:d4:73:96:9b:e7:e0:0a:cb:79:3f: c3:30:27:2d:9c:77:cc:71:a2:9a:2e:3d:d6:cf:65:f6:0c:6f: af:0f:bd:fe:d7:25:99:fb:bf:81:97:d8:8b:6b:61:74:d5:46: 43:d0:ac:a1:3f:98:18:b4:81:81:d0:06:8d:3f:cd:a6:45:bb: c3:cc:a5:94:70:55:21:04:e2:f2:1d:76:b3:ad:4d:23:0f:7c: 82:8e:9f:a3:ca:a8:18:bc:50:1b:14:50:5d:ea:fb:be:35:fa: 6c:1c:5a:eb:b4:78:1a:2c:7d:14:3c:e2:6a:67:ff:50:fb:f5: e1:0a:e4:93:74:3f:dd:e3:02:8d:dd:b6:bb:d7:cd:b1:de:1e: 50:32:ae:a9:a0:78:ef:66:bd:0e:eb:ea:90:32:20:9d:36:bb: 16:70:75:87:59:c3:31:9e:2b:b2:06:11:ef:8e:40:d4:fa:49: f4:48:9e:8d:c9:40:80:cb:6a:f0:73:9d:99:a8:3d:c5:4a:8c: 6c:a5:1c:61:ff:bb:cc:58:44:c1:8e:6a:29:2a:16:53:5e:48: 56:50:9f:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaj61XdvMFMuqMQG9xxhH6RP8aWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ5RDFGQTI3ODJGNjZBNUQyMjQ3Q0NGNzZGOTg3MzM5 NDREREIxRTAeFw0yNjAxMjUxMjU2NDhaFw0yNjAxMjgxMzEwNDhaMDMxMTAvBgNV BAMTKDE2QjBEOTU5OEFFMzlFQzQyMDk5OURGMjQxNDIwNDIyM0QzQjRFNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsd53NeaoXEOQGvpsyAjUHwSjL 3jQ7BsD4rBWe9HFsqv5lEoRuFjnRg8FFqfk3FAEgxkTfVQocnLNQcnjnRtO6MzEr Pv6iJY/mqeQddSEwK84iZAITSpv8VZb4T5zB34UkEkFqvxUVN/IlPomJs2ppa3lM zELa2fpP5em6JM+jgt+F/3Deb8EzYFhgkaSKg/xoPhF6FgjAxt/+QQoio6quD96M pYpoR6sVLmTGW6dVSiNmU3kbz2R6+rM1ITY8LjvjdXY0PzmiYAFo/V9+Z6N6z/cy 51sXsNhdIeEn3e6yg2ShwozL5cAaP5OaLBha8nBh/oy3eYmzj67ct2WaSpclAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFrDZWYrjnsQgmZ3yQUIEIj07TmYwHwYDVR0j BBgwFoAUvZ0fongvZqXSJHzPdvmHM5RN2x4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDlkYzVlYi0zMjYwLTQyOGEtYTZjMC1kYzBmNjM2YjMzMDcvMC9CRDlEMUZBMjc4 MkY2NkE1RDIyNDdDQ0Y3NkY5ODczMzk0NEREQjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ5RDFGQTI3ODJGNjZBNUQyMjQ3Q0NGNzZGOTg3MzM5NDRE REIxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQ5ZGM1ZWItMzI2MC00MjhhLWE2 YzAtZGMwZjYzNmIzMzA3LzAvQkQ5RDFGQTI3ODJGNjZBNUQyMjQ3Q0NGNzZGOTg3 MzM5NDREREIxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGZFgSJErSaaq/fhn/rwH2Ai/utAjVAoWn5F GEWy+cxDiavu/+A85jBIpNzj1HOWm+fgCst5P8MwJy2cd8xxopouPdbPZfYMb68P vf7XJZn7v4GX2ItrYXTVRkPQrKE/mBi0gYHQBo0/zaZFu8PMpZRwVSEE4vIddrOt TSMPfIKOn6PKqBi8UBsUUF3q+741+mwcWuu0eBosfRQ84mpn/1D79eEK5JN0P93j Ao3dtrvXzbHeHlAyrqmgeO9mvQ7r6pAyIJ02uxZwdYdZwzGeK7IGEe+OQNT6SfRI no3JQIDLavBznZmoPcVKjGylHGH/u8xYRMGOaikqFlNeSFZQn6U= -----END CERTIFICATE-----Generated at Sun Jan 25 22:05:21 2026 by rpki-client