This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.mft File: BF00BBF622014234CC4A26C23F64AC5C143802B6.mft (raw, json) Hash identifier: JU5inzKvKofq8AezOzBVcwzQkrFKaaxKF7f+/+71Wxo= Subject key identifier: 74:46:E4:9D:F7:FF:9A:26:DD:B4:A4:7A:8F:14:DA:3B:23:C2:64:CA Authority key identifier: BF:00:BB:F6:22:01:42:34:CC:4A:26:C2:3F:64:AC:5C:14:38:02:B6 Certificate issuer: /CN=BF00BBF622014234CC4A26C23F64AC5C143802B6 Certificate serial: 41131836A9287886A4E5D15CE07AD17C8F58248A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF00BBF622014234CC4A26C23F64AC5C143802B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.mft Manifest number: 0249 Signing time: Sat 24 Jan 2026 02:21:44 +0000 Manifest this update: Sat 24 Jan 2026 02:16:44 +0000 Manifest next update: Tue 27 Jan 2026 13:54:44 +0000 Files and hashes: 1: 3130332e3136392e382e302f32332d3234203d3e20313432333436.roa (hash: /hhYO5wRSFrwibEJunDDF1qr8Z/wP92fyPsYfBATpiA=) 2: BF00BBF622014234CC4A26C23F64AC5C143802B6.crl (hash: sfOdcDZezJAx7L31ZUSifyaiH5mhkFCJP1GDzCIh+Zo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.crl rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF00BBF622014234CC4A26C23F64AC5C143802B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 13:54:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:13:18:36:a9:28:78:86:a4:e5:d1:5c:e0:7a:d1:7c:8f:58:24:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF00BBF622014234CC4A26C23F64AC5C143802B6 Validity Not Before: Jan 24 02:16:44 2026 GMT Not After : Jan 27 13:54:44 2026 GMT Subject: CN=7446E49DF7FF9A26DDB4A47A8F14DA3B23C264CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:25:a7:45:f9:e5:18:d1:00:24:d2:7b:58:24: 6d:33:f9:7b:56:c8:fb:6e:15:7c:b8:ce:25:7f:62: 29:ff:81:fb:07:cf:89:51:66:28:5a:13:69:89:b4: 74:1e:72:89:93:32:4c:77:39:29:8a:1e:3b:b2:5e: 6a:7b:a9:12:b3:99:28:ff:eb:f5:50:75:87:a1:d2: 04:2a:f2:48:80:1e:79:ce:e7:ac:f4:7f:68:2f:54: d0:f1:54:73:e9:4d:cd:d0:77:5b:1d:c8:21:25:0d: ad:b9:b4:e1:f9:43:b0:dc:c4:36:58:d2:ae:f8:9b: 63:b5:a2:e5:8f:85:b4:8e:5e:3e:ca:60:8a:94:a7: 87:87:dd:75:e2:29:66:b6:b6:eb:c6:6a:de:32:ad: ac:ca:65:7e:e3:7c:61:fb:b0:91:21:5c:20:47:78: f5:50:71:de:5c:42:0a:2e:26:82:7c:75:3a:df:1b: ef:23:e3:0b:27:32:e8:4e:64:2b:76:a5:93:95:58: 79:d9:d3:e4:f9:f8:38:96:b6:af:62:ae:7e:a4:76: fb:d1:cf:29:57:01:b6:58:a8:b2:23:48:44:65:a2: d1:8c:1d:86:d6:09:c2:73:3f:e2:27:b6:0d:d4:36: 32:bd:44:a7:f9:32:c6:7b:f7:16:97:2b:e2:c1:e8: 4b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:46:E4:9D:F7:FF:9A:26:DD:B4:A4:7A:8F:14:DA:3B:23:C2:64:CA X509v3 Authority Key Identifier: keyid:BF:00:BB:F6:22:01:42:34:CC:4A:26:C2:3F:64:AC:5C:14:38:02:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF00BBF622014234CC4A26C23F64AC5C143802B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:6c:ad:ff:a2:62:db:0e:f8:60:30:77:c7:8a:7a:11:91:10: d3:9f:1a:1c:e3:1e:ed:ee:5c:f9:68:83:8c:ec:40:42:3f:cb: 5e:83:00:0c:81:1d:4a:c2:b7:9e:fd:15:85:aa:f4:53:a4:7f: 71:2e:23:3b:ed:67:f5:55:14:dc:02:9c:47:18:a8:c5:78:ea: 5b:a0:1b:d6:d9:4d:28:74:a1:9f:e2:b0:ca:15:ef:b5:51:c4: a2:3e:6c:d8:95:7f:74:79:83:d4:67:5e:5c:3b:29:ba:b9:24: 1e:9f:bc:54:11:e5:6e:a5:2e:39:16:ec:ae:c2:eb:a0:c5:a6: 30:e9:b4:9f:1c:b3:93:e5:48:76:ed:7b:75:e8:27:a2:a1:8a: af:2c:1f:fc:00:4f:6f:8d:6c:46:df:6d:fe:7e:71:a9:52:95: a9:8e:a6:84:d6:5f:95:b0:c6:c3:a3:ac:e2:41:75:c7:11:a5: d1:e6:2c:01:90:1b:4e:40:c6:92:1b:1b:82:7f:ff:ee:e0:d3: 2a:b4:52:06:ac:2b:50:6e:97:6f:38:f7:6e:a9:63:3e:5d:4e: 91:b4:2f:18:d5:9e:94:6e:e3:bf:59:97:ee:d5:2b:51:9c:77: c3:29:14:56:a5:1c:96:99:cf:a8:2a:de:f0:f8:5d:8b:18:3d: 91:0c:50:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQRMYNqkoeIak5dFc4HrRfI9YJIowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYwMEJCRjYyMjAxNDIzNENDNEEyNkMyM0Y2NEFDNUMx NDM4MDJCNjAeFw0yNjAxMjQwMjE2NDRaFw0yNjAxMjcxMzU0NDRaMDMxMTAvBgNV BAMTKDc0NDZFNDlERjdGRjlBMjZEREI0QTQ3QThGMTREQTNCMjNDMjY0Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4JadF+eUY0QAk0ntYJG0z+XtW yPtuFXy4ziV/Yin/gfsHz4lRZihaE2mJtHQecomTMkx3OSmKHjuyXmp7qRKzmSj/ 6/VQdYeh0gQq8kiAHnnO56z0f2gvVNDxVHPpTc3Qd1sdyCElDa25tOH5Q7DcxDZY 0q74m2O1ouWPhbSOXj7KYIqUp4eH3XXiKWa2tuvGat4yrazKZX7jfGH7sJEhXCBH ePVQcd5cQgouJoJ8dTrfG+8j4wsnMuhOZCt2pZOVWHnZ0+T5+DiWtq9irn6kdvvR zylXAbZYqLIjSERlotGMHYbWCcJzP+Intg3UNjK9RKf5MsZ79xaXK+LB6EtPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdEbknff/mibdtKR6jxTaOyPCZMowHwYDVR0j BBgwFoAUvwC79iIBQjTMSibCP2SsXBQ4ArYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NmNiYjZhZS0xMzhlLTRkMmItOTNmMS1lNmIyM2U2ZmU4ZmIvMC9CRjAwQkJGNjIy MDE0MjM0Q0M0QTI2QzIzRjY0QUM1QzE0MzgwMkI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkYwMEJCRjYyMjAxNDIzNENDNEEyNkMyM0Y2NEFDNUMxNDM4 MDJCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDZjYmI2YWUtMTM4ZS00ZDJiLTkz ZjEtZTZiMjNlNmZlOGZiLzAvQkYwMEJCRjYyMjAxNDIzNENDNEEyNkMyM0Y2NEFD NUMxNDM4MDJCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKRsrf+iYtsO+GAwd8eKehGRENOfGhzjHu3u XPlog4zsQEI/y16DAAyBHUrCt579FYWq9FOkf3EuIzvtZ/VVFNwCnEcYqMV46lug G9bZTSh0oZ/isMoV77VRxKI+bNiVf3R5g9RnXlw7Kbq5JB6fvFQR5W6lLjkW7K7C 66DFpjDptJ8cs5PlSHbte3XoJ6Khiq8sH/wAT2+NbEbfbf5+calSlamOpoTWX5Ww xsOjrOJBdccRpdHmLAGQG05AxpIbG4J//+7g0yq0UgasK1Bul284926pYz5dTpG0 LxjVnpRu479Zl+7VK1Gcd8MpFFalHJaZz6gq3vD4XYsYPZEMUF0= -----END CERTIFICATE-----Generated at Sun Jan 25 23:09:06 2026 by rpki-client