This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft File: B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft (raw, json) Hash identifier: JWBpOi8awjf3ifYRdPoV0/P94QLTcQvoj6I1Ogpgyf0= Subject key identifier: 90:8C:9A:90:EA:E3:39:C5:32:CC:2C:99:92:F4:FC:C5:BF:CD:EA:65 Authority key identifier: B5:CE:42:E3:87:51:41:D1:0E:D7:AD:1D:D1:8D:ED:DC:C4:E1:07:1E Certificate issuer: /CN=B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E Certificate serial: 714BA74A17F6959C9F5D8CD5D108A60BD61F8967 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft Manifest number: 0544 Signing time: Sat 24 Jan 2026 17:22:13 +0000 Manifest this update: Sat 24 Jan 2026 17:17:13 +0000 Manifest next update: Wed 28 Jan 2026 05:04:13 +0000 Files and hashes: 1: 3130332e38372e3230312e302f32342d3234203d3e203538333639.roa (hash: /bsoYwdDybVaxRYLdodfmTp8ZF3K0bEZOdDFvTt3y8c=) 2: B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.crl (hash: P9L9UN+hvzktX7fu9zJUkUiWcjrazMkS059jFY24o+4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.crl rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 05:04:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:4b:a7:4a:17:f6:95:9c:9f:5d:8c:d5:d1:08:a6:0b:d6:1f:89:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E Validity Not Before: Jan 24 17:17:13 2026 GMT Not After : Jan 28 05:04:13 2026 GMT Subject: CN=908C9A90EAE339C532CC2C9992F4FCC5BFCDEA65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:10:01:20:3f:14:60:3c:d8:5c:bc:aa:a5:fb: b7:69:23:9d:a8:40:3f:89:9d:57:c4:21:e0:cb:87: 99:0e:ba:36:d4:89:09:c9:ef:55:03:5a:9a:92:1e: 24:6a:4a:5e:ca:c8:40:63:2e:8a:4d:2d:e7:52:a7: 57:ed:a0:59:d3:4f:4f:6b:b7:d0:cf:d9:ad:28:25: 4c:c6:46:81:aa:b9:1c:30:22:9e:5e:b4:c2:cc:1b: 85:ec:5c:35:5a:d5:29:3b:0d:82:d4:d7:dd:c4:f8: 20:a8:f5:f5:03:54:a6:8a:f1:a4:ca:a1:5e:c5:7c: d4:24:16:7a:9a:3b:bd:a5:da:ad:6a:d7:47:d3:80: d0:01:13:ba:be:44:c0:d2:fd:c2:16:22:94:3d:8f: 15:e9:55:70:e7:09:7d:b8:2c:7d:52:19:25:ff:fa: 64:b8:2d:17:28:39:8d:cb:f8:55:28:a5:75:c7:4b: 85:1c:ff:f6:d6:cd:87:04:c5:38:a5:c7:a2:26:ac: 1d:3b:6c:9b:83:ad:b8:99:46:a9:10:71:50:3e:e8: 93:3c:bf:01:33:be:0e:9a:53:1a:a1:c7:df:05:66: 0a:5b:b4:ce:46:6a:5f:96:f4:6a:96:bf:a1:4f:be: 06:d4:0e:60:c6:81:3b:1c:10:ca:d6:56:4e:31:79: 27:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:8C:9A:90:EA:E3:39:C5:32:CC:2C:99:92:F4:FC:C5:BF:CD:EA:65 X509v3 Authority Key Identifier: keyid:B5:CE:42:E3:87:51:41:D1:0E:D7:AD:1D:D1:8D:ED:DC:C4:E1:07:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:f8:45:b9:20:05:e4:c1:b2:ff:d4:86:18:9f:e6:5d:0d:9f: 08:b5:13:39:d3:31:27:89:31:bb:2c:0b:31:5c:0d:fa:d2:8b: 77:80:3d:63:56:51:3d:20:13:86:15:1c:23:be:8c:2f:46:70: ce:ef:47:16:64:c0:8c:d5:f3:ac:fe:8e:d2:88:00:3b:0a:c4: 96:d7:18:25:8c:45:a4:12:72:80:c3:32:97:4d:57:24:47:82: 15:25:b0:af:81:4d:e0:f7:18:9f:b3:66:cc:9c:68:1f:f8:bf: 79:a2:b3:48:a3:7a:2a:90:48:fd:98:29:f4:18:60:7c:13:68: f8:2f:7c:d2:09:6a:b3:3c:dd:49:3c:8d:2d:5b:5e:87:79:90: 76:69:75:da:8f:32:83:82:67:2c:26:11:18:ee:3d:c5:cb:27: c9:56:16:80:fb:76:8f:21:05:ca:2e:7c:cd:e3:be:26:83:57: 11:63:52:b5:69:52:76:a1:5d:55:77:a5:e3:50:77:5b:1b:98: 14:ab:98:dd:8a:4c:b8:5f:6f:28:1a:2e:30:4d:25:7c:d8:bd: 02:01:e1:44:1f:5c:99:d8:eb:f4:bd:42:dd:8c:68:ab:2c:07: 50:42:0d:b7:71:2c:2a:c1:9a:46:96:81:a6:c5:8d:a9:e4:22: 91:ee:30:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcUunShf2lZyfXYzV0QimC9YfiWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVDRTQyRTM4NzUxNDFEMTBFRDdBRDFERDE4REVEREND NEUxMDcxRTAeFw0yNjAxMjQxNzE3MTNaFw0yNjAxMjgwNTA0MTNaMDMxMTAvBgNV BAMTKDkwOEM5QTkwRUFFMzM5QzUzMkNDMkM5OTkyRjRGQ0M1QkZDREVBNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeEAEgPxRgPNhcvKql+7dpI52o QD+JnVfEIeDLh5kOujbUiQnJ71UDWpqSHiRqSl7KyEBjLopNLedSp1ftoFnTT09r t9DP2a0oJUzGRoGquRwwIp5etMLMG4XsXDVa1Sk7DYLU193E+CCo9fUDVKaK8aTK oV7FfNQkFnqaO72l2q1q10fTgNABE7q+RMDS/cIWIpQ9jxXpVXDnCX24LH1SGSX/ +mS4LRcoOY3L+FUopXXHS4Uc//bWzYcExTilx6ImrB07bJuDrbiZRqkQcVA+6JM8 vwEzvg6aUxqhx98FZgpbtM5Gal+W9GqWv6FPvgbUDmDGgTscEMrWVk4xeSdVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkIyakOrjOcUyzCyZkvT8xb/N6mUwHwYDVR0j BBgwFoAUtc5C44dRQdEO160d0Y3t3MThBx4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NGFjYzBkOC1iMGM0LTQ3MzctOWY0NC0yOWZmMzI0MWM3OWIvMC9CNUNFNDJFMzg3 NTE0MUQxMEVEN0FEMUREMThERUREQ0M0RTEwNzFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjVDRTQyRTM4NzUxNDFEMTBFRDdBRDFERDE4REVERENDNEUx MDcxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzRhY2MwZDgtYjBjNC00NzM3LTlm NDQtMjlmZjMyNDFjNzliLzAvQjVDRTQyRTM4NzUxNDFEMTBFRDdBRDFERDE4REVE RENDNEUxMDcxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAH4RbkgBeTBsv/Uhhif5l0Nnwi1EznTMSeJ MbssCzFcDfrSi3eAPWNWUT0gE4YVHCO+jC9GcM7vRxZkwIzV86z+jtKIADsKxJbX GCWMRaQScoDDMpdNVyRHghUlsK+BTeD3GJ+zZsycaB/4v3mis0ijeiqQSP2YKfQY YHwTaPgvfNIJarM83Uk8jS1bXod5kHZpddqPMoOCZywmERjuPcXLJ8lWFoD7do8h BcoufM3jviaDVxFjUrVpUnahXVV3peNQd1sbmBSrmN2KTLhfbygaLjBNJXzYvQIB 4UQfXJnY6/S9Qt2MaKssB1BCDbdxLCrBmkaWgabFjankIpHuMCI= -----END CERTIFICATE-----Generated at Mon Jan 26 02:17:10 2026 by rpki-client