This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft File: B2650BD2D997B6C198A4B362B7395AC364683312.mft (raw, json) Hash identifier: 2Ytf6xrBjoRXQJzt7UBUdFMJ++Zzr3xWQar5vYotbBI= Subject key identifier: 46:E4:C9:CC:ED:BE:56:E5:69:78:F0:42:85:9B:F9:D9:47:C7:1F:94 Authority key identifier: B2:65:0B:D2:D9:97:B6:C1:98:A4:B3:62:B7:39:5A:C3:64:68:33:12 Certificate issuer: /CN=B2650BD2D997B6C198A4B362B7395AC364683312 Certificate serial: 08776D91E2E872F03A4550ED7A7E375178FDC86D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft Manifest number: 021C Signing time: Sat 24 Jan 2026 19:31:00 +0000 Manifest this update: Sat 24 Jan 2026 19:26:00 +0000 Manifest next update: Wed 28 Jan 2026 01:48:00 +0000 Files and hashes: 1: 3130332e31372e33332e302f32342d3234203d3e20313530323238.roa (hash: Din5W7YK7LMJbRJUi9wsZasS4GJU6jj09R0J09VzjXg=) 2: B2650BD2D997B6C198A4B362B7395AC364683312.crl (hash: B+tByw4BSHAeQ0m713x4j6+dEk60T78l5rgfzM1qXC8=) 3: 3130332e31372e33322e302f32342d3234203d3e20313530323238.roa (hash: IFrFNgL9nGnkBy6pVhjob4v5DLOWZyxcdQ+rkKOm7OM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.crl rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 01:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:77:6d:91:e2:e8:72:f0:3a:45:50:ed:7a:7e:37:51:78:fd:c8:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2650BD2D997B6C198A4B362B7395AC364683312 Validity Not Before: Jan 24 19:26:00 2026 GMT Not After : Jan 28 01:48:00 2026 GMT Subject: CN=46E4C9CCEDBE56E56978F042859BF9D947C71F94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2d:db:f3:09:6a:e5:5f:b9:66:d7:65:0a:2d: 59:f2:52:b7:d8:36:52:be:fd:83:32:5c:87:9a:e6: f8:0c:f0:02:58:d8:19:c1:42:dd:fe:fc:2f:45:e5: 76:9c:51:45:00:1c:05:fa:26:1b:ed:a4:e5:c3:f5: d6:16:24:f6:f5:2d:9e:f8:26:54:34:ac:9d:e7:ab: 13:fb:23:bf:1f:fe:a9:3b:95:e4:e0:20:20:7e:85: bc:ce:f4:c9:9d:85:23:36:a1:13:66:9d:15:68:eb: 7f:2e:b0:0c:d0:ff:39:10:53:68:d6:6a:f4:5f:f2: d5:06:3b:59:a0:f6:e3:2b:c6:ea:41:68:13:e4:ba: 86:2f:f4:33:7a:ed:6c:9d:5c:5b:cd:ed:22:6c:b7: 8e:6b:3f:a0:8a:ef:10:ab:27:f4:2f:38:14:82:ce: ef:c9:de:2d:f1:ac:82:ea:d0:25:04:9d:26:dc:fd: ab:6e:f7:06:b9:1c:2d:a9:fb:79:56:e3:3e:fa:00: b3:61:5d:44:73:ac:04:dc:15:6b:2f:c9:c3:cf:2e: e4:d9:c3:b9:33:a3:0c:ce:f7:3b:3d:28:79:a7:f0: c3:15:81:86:35:1f:45:61:30:f6:bf:3d:6d:bf:f2: ce:b8:c8:d0:e9:13:36:05:35:55:88:1a:89:1f:16: a1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E4:C9:CC:ED:BE:56:E5:69:78:F0:42:85:9B:F9:D9:47:C7:1F:94 X509v3 Authority Key Identifier: keyid:B2:65:0B:D2:D9:97:B6:C1:98:A4:B3:62:B7:39:5A:C3:64:68:33:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:2e:89:82:fa:e1:94:07:35:1b:34:7b:61:9f:f2:45:60:34: 85:fc:82:01:a1:d1:d4:ea:15:b8:ee:c5:78:6d:9a:f0:33:14: 7d:05:b4:32:9c:c1:34:c5:5a:2e:39:d6:54:e5:30:29:6f:46: 49:58:29:b8:d0:f9:e4:42:42:c5:ec:d4:10:da:ed:c0:7d:c9: 06:83:18:07:47:d3:92:b9:07:93:ae:5f:22:2f:90:63:3f:0d: 58:9f:fa:17:09:fa:64:63:19:e0:dd:c1:4b:31:c4:48:44:68: c6:df:fe:e7:15:7a:8b:7c:bf:72:80:28:22:d0:2f:c9:bf:75: 71:80:54:66:1f:80:66:03:1d:bd:f0:b8:3e:ca:e1:7f:f8:e1: 5d:e8:4c:90:8c:86:9e:91:bf:f4:5f:39:77:9a:69:99:17:87: 7a:ca:96:0f:20:69:7f:51:e2:50:c6:f3:f5:d5:21:b3:00:9f: 64:c5:d0:4c:59:cc:70:b8:1f:04:11:34:7f:d1:48:a0:fe:82: ab:03:f1:1d:d9:2f:ed:0f:36:35:2c:15:a7:2a:ec:38:9c:5e: 84:b3:0f:87:ec:d0:0c:9c:86:d0:72:73:bb:d1:d5:68:7e:ca: 24:ef:a4:ee:a2:25:6f:65:9c:50:be:08:66:e2:45:df:4a:77: 75:b0:ad:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCHdtkeLocvA6RVDten43UXj9yG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjI2NTBCRDJEOTk3QjZDMTk4QTRCMzYyQjczOTVBQzM2 NDY4MzMxMjAeFw0yNjAxMjQxOTI2MDBaFw0yNjAxMjgwMTQ4MDBaMDMxMTAvBgNV BAMTKDQ2RTRDOUNDRURCRTU2RTU2OTc4RjA0Mjg1OUJGOUQ5NDdDNzFGOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4LdvzCWrlX7lm12UKLVnyUrfY NlK+/YMyXIea5vgM8AJY2BnBQt3+/C9F5XacUUUAHAX6JhvtpOXD9dYWJPb1LZ74 JlQ0rJ3nqxP7I78f/qk7leTgICB+hbzO9MmdhSM2oRNmnRVo638usAzQ/zkQU2jW avRf8tUGO1mg9uMrxupBaBPkuoYv9DN67WydXFvN7SJst45rP6CK7xCrJ/QvOBSC zu/J3i3xrILq0CUEnSbc/atu9wa5HC2p+3lW4z76ALNhXURzrATcFWsvycPPLuTZ w7kzowzO9zs9KHmn8MMVgYY1H0VhMPa/PW2/8s64yNDpEzYFNVWIGokfFqHrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURuTJzO2+VuVpePBChZv52UfHH5QwHwYDVR0j BBgwFoAUsmUL0tmXtsGYpLNitzlaw2RoMxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjkwNTc2Ni00NDBlLTRiY2ItYWU3Mi0zZTc4ODMxY2U5ZGMvMC9CMjY1MEJEMkQ5 OTdCNkMxOThBNEIzNjJCNzM5NUFDMzY0NjgzMzEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjI2NTBCRDJEOTk3QjZDMTk4QTRCMzYyQjczOTVBQzM2NDY4 MzMxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2I5MDU3NjYtNDQwZS00YmNiLWFl NzItM2U3ODgzMWNlOWRjLzAvQjI2NTBCRDJEOTk3QjZDMTk4QTRCMzYyQjczOTVB QzM2NDY4MzMxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA8uiYL64ZQHNRs0e2Gf8kVgNIX8ggGh0dTq FbjuxXhtmvAzFH0FtDKcwTTFWi451lTlMClvRklYKbjQ+eRCQsXs1BDa7cB9yQaD GAdH05K5B5OuXyIvkGM/DVif+hcJ+mRjGeDdwUsxxEhEaMbf/ucVeot8v3KAKCLQ L8m/dXGAVGYfgGYDHb3wuD7K4X/44V3oTJCMhp6Rv/RfOXeaaZkXh3rKlg8gaX9R 4lDG8/XVIbMAn2TF0ExZzHC4HwQRNH/RSKD+gqsD8R3ZL+0PNjUsFacq7DicXoSz D4fs0AychtByc7vR1Wh+yiTvpO6iJW9lnFC+CGbiRd9Kd3WwrcE= -----END CERTIFICATE-----Generated at Mon Jan 26 04:25:15 2026 by rpki-client