This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft File: BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft (raw, json) Hash identifier: FYZ0GBMMC6bY6YyhrDbGUhpa7suRyqAe9HJCaNC8YtY= Subject key identifier: D3:E9:B4:D9:C6:94:CC:71:0C:CC:97:85:F3:3D:ED:E1:4F:7B:1A:96 Authority key identifier: BE:E3:6A:B8:35:1A:FE:80:F1:B0:CE:8F:12:AA:40:08:98:29:BB:6F Certificate issuer: /CN=BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F Certificate serial: 5DC182140ED56B7862CF3325FD02F0B5E5462D2B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft Manifest number: 01F9 Signing time: Fri 23 Jan 2026 20:21:45 +0000 Manifest this update: Fri 23 Jan 2026 20:16:45 +0000 Manifest next update: Tue 27 Jan 2026 07:29:45 +0000 Files and hashes: 1: 3130332e34332e32372e302f32342d3234203d3e20313530323832.roa (hash: lAY4AFx6j4ENTtX/5Sic1TWQTEW1WElYGoOsg0fzrX4=) 2: 3130332e34332e32362e302f32342d3234203d3e20313530323832.roa (hash: u7eiIUnffNPdeqqP/VglXdzrnbj56dfexEAIJFCuTP0=) 3: BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl (hash: 6pI6pYPG0MJ+4XF5xcdPGRwxoAMkoDGfjOcu17zCUrw=) 4: 3130332e34332e32362e302f32332d3233203d3e20313530323832.roa (hash: C/jOD70S/lq/f2o4lqBzdMrlb5+QMVzSY4OdcjUHnHk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 07:29:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:c1:82:14:0e:d5:6b:78:62:cf:33:25:fd:02:f0:b5:e5:46:2d:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F Validity Not Before: Jan 23 20:16:45 2026 GMT Not After : Jan 27 07:29:45 2026 GMT Subject: CN=D3E9B4D9C694CC710CCC9785F33DEDE14F7B1A96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:19:0e:e1:ef:31:62:7e:d8:c1:c1:60:4a:d1: 06:d3:ea:f8:ba:48:64:1a:a5:b0:26:51:e2:15:1a: fd:3a:9a:d7:74:68:6c:e6:15:cb:7e:1a:ba:04:c1: 58:27:55:98:b8:d0:9d:a4:7f:c4:15:c3:51:de:e9: 70:a3:e6:83:1d:a8:49:83:90:4e:55:9e:13:b6:f9: 80:bd:68:98:95:f0:e8:01:de:04:43:b4:50:7e:fd: c1:0d:60:7c:2b:fa:98:95:ef:f5:30:fa:5e:c9:a0: 80:91:09:a1:86:70:f3:c8:54:0b:ba:06:19:9f:a1: 3c:b0:eb:46:e5:56:6a:47:d0:61:d4:56:0d:e0:10: 66:5e:16:0a:fc:c4:99:51:5b:ae:21:57:4f:46:13: 2b:35:4b:b7:f5:b1:2c:82:52:6d:85:57:95:81:9c: bb:b8:84:77:12:ad:09:f2:fb:d3:1b:6f:0c:f8:a1: 90:ff:f9:d1:be:6f:f2:2d:f8:27:14:8c:f4:d6:83: e3:f4:05:7b:21:7d:77:54:2b:ac:3f:db:bf:fc:06: e1:4f:c8:f2:59:b3:d8:be:d4:91:ac:2c:02:73:1a: e0:92:1f:0c:97:da:3e:b8:a0:f6:24:6d:c2:5c:8a: c5:95:50:65:20:09:45:2b:77:14:c4:8f:f8:37:0d: f0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E9:B4:D9:C6:94:CC:71:0C:CC:97:85:F3:3D:ED:E1:4F:7B:1A:96 X509v3 Authority Key Identifier: keyid:BE:E3:6A:B8:35:1A:FE:80:F1:B0:CE:8F:12:AA:40:08:98:29:BB:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:f0:06:05:31:2c:3a:5a:4b:dc:dc:81:97:b8:f3:0d:7f:ed: 05:fa:9c:a9:26:c1:47:a3:e4:c5:65:98:71:90:b5:17:84:dd: be:7a:62:08:c8:58:81:d4:93:3e:48:d4:96:0a:82:9a:28:83: b6:ec:db:b9:ba:63:59:62:11:67:b2:b3:db:b2:23:2c:05:b3: 1f:68:6e:65:46:d5:dd:95:96:39:3c:d0:96:30:7e:8a:ad:0e: 44:42:69:dd:4b:53:fa:d6:51:ee:03:a0:2a:ef:2c:b1:28:b7: eb:4d:80:f0:3a:c8:21:4c:f4:b7:5a:96:ac:99:eb:ed:62:eb: 4b:32:2b:d6:b2:25:c6:98:03:20:62:ed:2d:f7:a8:1e:45:4b: 00:da:99:0f:87:fe:ed:75:d7:50:99:7c:59:93:7d:09:b1:7e: a9:74:13:44:73:74:3b:54:02:7a:cd:ba:29:b7:15:9a:d6:ab: e4:be:99:d7:a7:2b:92:d9:ea:2b:b8:70:df:4e:1f:21:d9:b0: f3:c8:0d:d1:a1:8c:fe:f5:13:3b:47:43:27:7f:e3:c1:54:63: 71:ba:ba:ee:d8:d6:82:d0:4c:25:09:db:91:4d:1a:e7:dc:17: 12:f7:42:14:a6:ac:2f:bc:bf:bd:d6:e9:8b:f1:e7:8b:98:ea: 02:1c:b9:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXcGCFA7Va3hizzMl/QLwteVGLSswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVFMzZBQjgzNTFBRkU4MEYxQjBDRThGMTJBQTQwMDg5 ODI5QkI2RjAeFw0yNjAxMjMyMDE2NDVaFw0yNjAxMjcwNzI5NDVaMDMxMTAvBgNV BAMTKEQzRTlCNEQ5QzY5NENDNzEwQ0NDOTc4NUYzM0RFREUxNEY3QjFBOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPGQ7h7zFiftjBwWBK0QbT6vi6 SGQapbAmUeIVGv06mtd0aGzmFct+GroEwVgnVZi40J2kf8QVw1He6XCj5oMdqEmD kE5VnhO2+YC9aJiV8OgB3gRDtFB+/cENYHwr+piV7/Uw+l7JoICRCaGGcPPIVAu6 BhmfoTyw60blVmpH0GHUVg3gEGZeFgr8xJlRW64hV09GEys1S7f1sSyCUm2FV5WB nLu4hHcSrQny+9Mbbwz4oZD/+dG+b/It+CcUjPTWg+P0BXshfXdUK6w/27/8BuFP yPJZs9i+1JGsLAJzGuCSHwyX2j64oPYkbcJcisWVUGUgCUUrdxTEj/g3DfCRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0+m02caUzHEMzJeF8z3t4U97GpYwHwYDVR0j BBgwFoAUvuNquDUa/oDxsM6PEqpACJgpu28wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTI0YjRiNS03ODEzLTQ2Y2QtOWRiNC1hM2NkNTg1ZTBlZDQvMC9CRUUzNkFCODM1 MUFGRTgwRjFCMENFOEYxMkFBNDAwODk4MjlCQjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkVFMzZBQjgzNTFBRkU4MEYxQjBDRThGMTJBQTQwMDg5ODI5 QkI2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyNGI0YjUtNzgxMy00NmNkLTlk YjQtYTNjZDU4NWUwZWQ0LzAvQkVFMzZBQjgzNTFBRkU4MEYxQjBDRThGMTJBQTQw MDg5ODI5QkI2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGPwBgUxLDpaS9zcgZe48w1/7QX6nKkmwUej 5MVlmHGQtReE3b56YgjIWIHUkz5I1JYKgpoog7bs27m6Y1liEWeys9uyIywFsx9o bmVG1d2Vljk80JYwfoqtDkRCad1LU/rWUe4DoCrvLLEot+tNgPA6yCFM9LdalqyZ 6+1i60syK9ayJcaYAyBi7S33qB5FSwDamQ+H/u1111CZfFmTfQmxfql0E0RzdDtU AnrNuim3FZrWq+S+mdenK5LZ6iu4cN9OHyHZsPPIDdGhjP71EztHQyd/48FUY3G6 uu7Y1oLQTCUJ25FNGufcFxL3QhSmrC+8v73W6Yvx54uY6gIcufQ= -----END CERTIFICATE-----Generated at Sun Jan 25 20:32:51 2026 by rpki-client