This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft File: BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft (raw, json) Hash identifier: jnYTe11IBxu/w/2IA1fbsGZYBSbONCBsOrG3k33VhsA= Subject key identifier: 46:2F:E7:40:F6:A5:11:1B:1D:93:B5:93:76:54:E7:C0:AA:87:B1:BE Authority key identifier: BD:0C:A7:BB:7E:E1:45:97:A1:71:F1:B1:E3:E3:12:7A:79:DF:FF:D0 Certificate issuer: /CN=BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0 Certificate serial: 394D13DA845455BA3522ED06C38825B71E0B91AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft Manifest number: 0219 Signing time: Sat 24 Jan 2026 00:40:58 +0000 Manifest this update: Sat 24 Jan 2026 00:35:58 +0000 Manifest next update: Tue 27 Jan 2026 02:35:58 +0000 Files and hashes: 1: 3130332e32302e38342e302f32342d3234203d3e20313530323337.roa (hash: Q4o71jeTV80A1Kcs2rXwd40dCqE8n3Drpr6hWhmrWZg=) 2: 3130332e32302e38352e302f32342d3234203d3e20313530323337.roa (hash: /Ll9XnZwq9kQ7KqFTm1tz2GQbHOFyxKz40lfWdvRTyg=) 3: BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.crl (hash: JP/IHxwRdiVmrvbtoQ3lm3lTTt5fAbI/D8OONtDZJfE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.crl rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 02:35:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:4d:13:da:84:54:55:ba:35:22:ed:06:c3:88:25:b7:1e:0b:91:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0 Validity Not Before: Jan 24 00:35:58 2026 GMT Not After : Jan 27 02:35:58 2026 GMT Subject: CN=462FE740F6A5111B1D93B5937654E7C0AA87B1BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:71:50:6d:d6:71:34:1a:9c:55:b7:92:91:42: 3e:a7:78:a8:63:ec:93:2c:40:99:47:18:b1:da:8e: af:29:32:d7:82:43:a5:80:01:58:a2:9c:e4:25:d6: 71:62:6c:c6:59:22:2f:2d:90:66:02:e6:ff:19:bd: 1c:6d:7e:de:18:e0:a6:d7:46:92:e6:3f:66:3b:d0: fd:e0:9d:4b:18:a9:4d:a9:45:12:3a:0a:3d:7f:3a: 2c:98:f6:98:68:5d:4d:09:8f:3a:98:5a:c4:b8:e7: 65:f5:d3:7f:0c:17:45:be:2e:8d:3e:36:2e:5c:51: cc:22:23:a8:71:cd:82:97:a2:68:b6:36:80:20:f3: 50:07:ab:f5:fe:0c:f8:bb:ae:c8:74:06:39:70:40: bf:37:fa:1d:b1:94:67:b2:4e:77:4f:e6:55:9b:ca: 3d:b0:bb:a1:73:7f:55:83:1f:c7:ae:3d:e9:19:fb: 1e:58:a8:d3:5d:7a:07:e3:1b:d9:82:5e:0d:ee:0c: 11:04:01:eb:19:21:59:c6:d9:41:e7:95:ae:85:92: 4b:a9:aa:f9:d3:b8:5e:95:1a:4d:fc:d1:eb:53:1b: ed:04:a8:1e:9f:70:0d:e5:1b:8a:7a:95:f1:94:14: 8a:a4:95:c1:c4:27:db:f5:a1:cd:35:12:9f:11:6f: d8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:2F:E7:40:F6:A5:11:1B:1D:93:B5:93:76:54:E7:C0:AA:87:B1:BE X509v3 Authority Key Identifier: keyid:BD:0C:A7:BB:7E:E1:45:97:A1:71:F1:B1:E3:E3:12:7A:79:DF:FF:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:93:05:c5:42:cc:3e:b4:27:ed:3c:45:b4:83:cb:ab:9d:31: 03:d7:f2:4d:87:8e:d3:48:82:03:de:cd:03:77:6d:5d:52:b2: 06:4a:75:36:01:67:70:b0:b5:78:f0:1e:e5:82:34:b5:1f:15: 44:e6:e1:8a:2d:55:a8:c5:1a:07:2d:a1:54:e0:95:9a:c8:e0: 59:96:e4:18:95:d6:18:dd:a7:c1:71:d1:ed:ce:18:f9:94:05: de:f6:fb:c4:40:49:af:77:df:41:b6:09:2a:8e:35:a0:51:8a: 55:9c:c5:5d:3d:4b:bb:1a:39:1e:fa:85:76:5c:95:1e:d0:9d: 51:25:95:43:8a:b9:b0:e4:ac:b4:cc:06:d8:b6:eb:ac:b4:de: f2:88:bb:f2:c8:05:34:64:5a:db:86:62:68:56:e7:94:1e:ff: e3:3e:96:63:50:7c:de:10:1d:1d:87:7b:d9:0c:15:81:3c:68: 26:45:b8:4f:1e:8e:da:d1:14:91:e1:74:9f:8c:59:47:63:eb: c8:e6:e8:19:7e:1a:ed:31:a6:ca:f1:37:bc:d2:7b:90:e8:d1: 77:37:be:19:29:7a:16:54:2b:b3:80:e3:39:de:37:f3:34:6c: 94:46:10:28:48:74:38:34:d5:d1:b1:a4:df:c1:db:c0:bb:77: a1:c7:04:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOU0T2oRUVbo1Iu0Gw4gltx4Lka8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQwQ0E3QkI3RUUxNDU5N0ExNzFGMUIxRTNFMzEyN0E3 OURGRkZEMDAeFw0yNjAxMjQwMDM1NThaFw0yNjAxMjcwMjM1NThaMDMxMTAvBgNV BAMTKDQ2MkZFNzQwRjZBNTExMUIxRDkzQjU5Mzc2NTRFN0MwQUE4N0IxQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6cVBt1nE0GpxVt5KRQj6neKhj 7JMsQJlHGLHajq8pMteCQ6WAAViinOQl1nFibMZZIi8tkGYC5v8ZvRxtft4Y4KbX RpLmP2Y70P3gnUsYqU2pRRI6Cj1/OiyY9phoXU0JjzqYWsS452X1038MF0W+Lo0+ Ni5cUcwiI6hxzYKXomi2NoAg81AHq/X+DPi7rsh0BjlwQL83+h2xlGeyTndP5lWb yj2wu6Fzf1WDH8euPekZ+x5YqNNdegfjG9mCXg3uDBEEAesZIVnG2UHnla6Fkkup qvnTuF6VGk380etTG+0EqB6fcA3lG4p6lfGUFIqklcHEJ9v1oc01Ep8Rb9gnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURi/nQPalERsdk7WTdlTnwKqHsb4wHwYDVR0j BBgwFoAUvQynu37hRZehcfGx4+MSennf/9AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZDdhNzFiYy1mOTEwLTRiOGMtOWNmZi0wODU3ZDVmMmQzN2YvMC9CRDBDQTdCQjdF RTE0NTk3QTE3MUYxQjFFM0UzMTI3QTc5REZGRkQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQwQ0E3QkI3RUUxNDU5N0ExNzFGMUIxRTNFMzEyN0E3OURG RkZEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Q3YTcxYmMtZjkxMC00YjhjLTlj ZmYtMDg1N2Q1ZjJkMzdmLzAvQkQwQ0E3QkI3RUUxNDU5N0ExNzFGMUIxRTNFMzEy N0E3OURGRkZEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIeTBcVCzD60J+08RbSDy6udMQPX8k2HjtNI ggPezQN3bV1SsgZKdTYBZ3CwtXjwHuWCNLUfFUTm4YotVajFGgctoVTglZrI4FmW 5BiV1hjdp8Fx0e3OGPmUBd72+8RASa9330G2CSqONaBRilWcxV09S7saOR76hXZc lR7QnVEllUOKubDkrLTMBti266y03vKIu/LIBTRkWtuGYmhW55Qe/+M+lmNQfN4Q HR2He9kMFYE8aCZFuE8ejtrRFJHhdJ+MWUdj68jm6Bl+Gu0xpsrxN7zSe5Do0Xc3 vhkpehZUK7OA4zneN/M0bJRGEChIdDg01dGxpN/B28C7d6HHBAw= -----END CERTIFICATE-----Generated at Sun Jan 25 19:00:51 2026 by rpki-client