This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft File: 00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft (raw, json) Hash identifier: Tr2ipVKBSPVUDtcZN9M7i5ZDIhHHDJJ8pGUMkJ3CVlU= Subject key identifier: 6C:91:1F:A4:68:F1:88:7F:B9:D6:33:7A:59:BA:5F:40:C4:BF:F5:CA Authority key identifier: 00:B4:EC:FC:CA:E9:0A:94:63:FD:71:82:2A:3C:EE:4C:8C:14:5A:D4 Certificate issuer: /CN=00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4 Certificate serial: 60762BE1F1DD0BF5E02C64F2375DD03A3BEF7797 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft Manifest number: FA Signing time: Sat 24 Jan 2026 08:51:41 +0000 Manifest this update: Sat 24 Jan 2026 08:46:41 +0000 Manifest next update: Tue 27 Jan 2026 10:16:41 +0000 Files and hashes: 1: 3130332e3136392e33322e302f32332d3234203d3e20313432333333.roa (hash: K+l/g4p9y6cTiWHXp9qbhWcap/gI8HD7/DZcp0av7uY=) 2: 00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.crl (hash: AQsjTwRQM8thDFA07tfWLBepNk0V3tO2gHhmv4Jj7No=) 3: 323030313a6466323a663334303a3a2f34382d3438203d3e20313432333333.roa (hash: TsqNIUGKVArIBEGfFPOQj0RJMusrdrLAysbKak+tetA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.crl rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 10:16:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:76:2b:e1:f1:dd:0b:f5:e0:2c:64:f2:37:5d:d0:3a:3b:ef:77:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4 Validity Not Before: Jan 24 08:46:41 2026 GMT Not After : Jan 27 10:16:41 2026 GMT Subject: CN=6C911FA468F1887FB9D6337A59BA5F40C4BFF5CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:65:4d:95:28:22:eb:8a:ca:30:76:d7:45:ec: 10:2e:da:74:99:53:df:6c:24:b1:2e:86:80:26:66: 49:0b:0e:ef:93:53:58:54:cf:1a:21:69:65:8c:17: 2a:a7:cc:00:d0:0f:32:6f:1e:4b:bd:8f:97:2d:df: e1:ee:04:4f:27:5d:c4:c0:32:97:a6:75:8b:04:5c: a9:0b:30:3b:67:c9:3e:0a:b5:23:c0:1b:42:7c:15: ab:eb:d3:7b:4f:62:ad:36:ab:8e:54:89:80:30:3b: 9e:4b:23:e4:1b:6f:7b:5d:dd:21:a5:c2:89:df:eb: 5d:7e:ac:49:67:4c:d3:e6:5a:62:08:54:c3:2e:70: 78:61:e0:c1:bc:6d:15:00:87:70:49:ca:69:b4:5c: 88:27:51:6e:8f:2a:79:9d:5f:ea:4a:68:67:f7:1f: 52:45:c4:86:61:18:1f:03:06:9b:33:65:16:f6:6f: f6:71:2b:8f:7e:7b:39:78:6e:c9:32:55:a9:7c:e0: 85:f8:eb:6b:05:97:90:a5:14:a7:1d:c1:40:2f:fe: 43:64:d7:35:89:f6:26:c0:cc:b4:5a:c7:99:1b:02: 63:71:3f:e0:35:e4:79:e2:38:73:0f:6a:a4:69:59: f5:a0:8a:9a:bc:0f:62:78:d7:ff:ee:f0:3e:37:de: c9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:91:1F:A4:68:F1:88:7F:B9:D6:33:7A:59:BA:5F:40:C4:BF:F5:CA X509v3 Authority Key Identifier: keyid:00:B4:EC:FC:CA:E9:0A:94:63:FD:71:82:2A:3C:EE:4C:8C:14:5A:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:27:e3:03:69:70:46:76:46:c6:e5:0f:a7:73:58:52:a2:8c: 31:88:af:30:f5:94:e0:40:d3:85:8b:83:0f:a1:04:65:71:a5: 79:d5:3a:74:8a:30:f9:c1:9e:6f:2a:95:ee:3c:7a:a7:51:26: e3:81:f7:55:9e:4f:75:17:39:5f:e8:4c:f7:ce:7b:57:f7:72: ea:05:81:04:3b:0a:33:3f:ec:2e:a1:06:22:c5:a5:3c:e0:6f: 43:f6:5a:c2:e7:64:00:15:97:87:fb:05:1c:16:b9:f3:e2:58: 1a:8e:72:57:78:8a:3e:41:20:68:01:6e:fa:84:33:4f:4d:8e: d0:8a:cf:0a:5e:24:68:9d:42:a5:3a:ad:41:2b:04:d0:a8:e9: bd:22:6f:a8:28:fe:4a:09:41:8e:7c:9b:33:a7:f0:eb:28:71: 2a:4c:f7:87:8c:ba:e2:28:da:e2:2d:af:d6:c6:9f:02:38:57: c8:ad:4d:86:14:fe:06:97:d8:f7:c5:26:6a:5b:fd:b7:ad:e5: 85:89:4a:f3:7d:49:45:0a:99:dd:67:1e:a6:1d:83:31:ae:36: 95:f8:a3:cf:68:bd:2b:06:f0:e6:c0:6e:ad:43:f1:2a:41:dd: 17:a8:c7:37:e2:d9:ef:4a:54:ef:04:32:ac:26:55:6e:0c:e8: 8c:b9:c8:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYHYr4fHdC/XgLGTyN13QOjvvd5cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBCNEVDRkNDQUU5MEE5NDYzRkQ3MTgyMkEzQ0VFNEM4 QzE0NUFENDAeFw0yNjAxMjQwODQ2NDFaFw0yNjAxMjcxMDE2NDFaMDMxMTAvBgNV BAMTKDZDOTExRkE0NjhGMTg4N0ZCOUQ2MzM3QTU5QkE1RjQwQzRCRkY1Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEZU2VKCLrisowdtdF7BAu2nSZ U99sJLEuhoAmZkkLDu+TU1hUzxohaWWMFyqnzADQDzJvHku9j5ct3+HuBE8nXcTA MpemdYsEXKkLMDtnyT4KtSPAG0J8Favr03tPYq02q45UiYAwO55LI+Qbb3td3SGl wonf611+rElnTNPmWmIIVMMucHhh4MG8bRUAh3BJymm0XIgnUW6PKnmdX+pKaGf3 H1JFxIZhGB8DBpszZRb2b/ZxK49+ezl4bskyVal84IX462sFl5ClFKcdwUAv/kNk 1zWJ9ibAzLRax5kbAmNxP+A15HniOHMPaqRpWfWgipq8D2J41//u8D433smpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbJEfpGjxiH+51jN6WbpfQMS/9cowHwYDVR0j BBgwFoAUALTs/MrpCpRj/XGCKjzuTIwUWtQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzBjMWJhYi0xM2Y0LTRjZTYtODVmNy1jMzg4NzM3ZjZkMTkvMC8wMEI0RUNGQ0NB RTkwQTk0NjNGRDcxODIyQTNDRUU0QzhDMTQ1QUQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBCNEVDRkNDQUU5MEE5NDYzRkQ3MTgyMkEzQ0VFNEM4QzE0 NUFENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcwYzFiYWItMTNmNC00Y2U2LTg1 ZjctYzM4ODczN2Y2ZDE5LzAvMDBCNEVDRkNDQUU5MEE5NDYzRkQ3MTgyMkEzQ0VF NEM4QzE0NUFENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALsn4wNpcEZ2RsblD6dzWFKijDGIrzD1lOBA 04WLgw+hBGVxpXnVOnSKMPnBnm8qle48eqdRJuOB91WeT3UXOV/oTPfOe1f3cuoF gQQ7CjM/7C6hBiLFpTzgb0P2WsLnZAAVl4f7BRwWufPiWBqOcld4ij5BIGgBbvqE M09NjtCKzwpeJGidQqU6rUErBNCo6b0ib6go/koJQY58mzOn8OsocSpM94eMuuIo 2uItr9bGnwI4V8itTYYU/gaX2PfFJmpb/bet5YWJSvN9SUUKmd1nHqYdgzGuNpX4 o89ovSsG8ObAbq1D8SpB3Reoxzfi2e9KVO8EMqwmVW4M6Iy5yPw= -----END CERTIFICATE-----Generated at Mon Jan 26 01:19:41 2026 by rpki-client