This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft File: BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft (raw, json) Hash identifier: CxPsFhhVrcu69bl8qJ73FaJn2AvD8fUZEtRwd2SGmT8= Subject key identifier: 4B:C7:7A:9F:1D:92:D8:A2:EF:CF:62:81:F8:E9:DE:62:DE:B1:EA:06 Authority key identifier: BB:8E:14:FC:AD:3A:F2:EF:30:A8:F5:69:63:39:D6:F7:DF:5D:73:5B Certificate issuer: /CN=BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B Certificate serial: 1616766037BFEF03E839F52B28B6633BFC7B6F00 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft Manifest number: 0241 Signing time: Sat 24 Jan 2026 21:52:07 +0000 Manifest this update: Sat 24 Jan 2026 21:47:07 +0000 Manifest next update: Wed 28 Jan 2026 00:57:07 +0000 Files and hashes: 1: BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl (hash: 5gZEkTHJV6Ec35CkpmlRY6DO+vE1fXlr3B+i0iBXra0=) 2: 3130332e3133352e3135322e302f32322d3234203d3e203338333230.roa (hash: YAXBiP1Tn35BvKpuF6xhlnff/qb6fyDlzJRGhETAkV8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 00:57:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:16:76:60:37:bf:ef:03:e8:39:f5:2b:28:b6:63:3b:fc:7b:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B Validity Not Before: Jan 24 21:47:07 2026 GMT Not After : Jan 28 00:57:07 2026 GMT Subject: CN=4BC77A9F1D92D8A2EFCF6281F8E9DE62DEB1EA06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8b:3d:92:51:37:37:6a:d0:bb:a0:e6:78:71: 0f:14:3c:ba:49:8d:08:f6:4d:bc:f8:9c:c0:89:02: eb:a0:23:a2:21:72:67:f9:7b:97:70:6a:46:85:d1: b4:fc:30:8a:12:3a:27:b3:2e:61:b5:d3:ec:6a:c5: 97:7b:7b:ee:3b:2c:ea:30:c2:d6:3c:fc:a4:56:5d: 29:a3:e7:f2:77:ec:52:b0:b1:a6:9c:2d:10:6a:e1: 28:a0:bb:7b:74:68:da:e4:cc:a1:1f:04:15:cc:8b: 48:a8:9e:3b:c7:9c:ff:72:e0:6f:a9:d4:de:5c:15: c6:1b:2d:b9:5e:55:fb:76:82:82:cc:be:e7:f9:b0: 08:bf:24:46:bf:e4:99:ae:c4:3f:b5:36:ac:a5:72: b1:2d:17:be:23:38:bf:0a:80:92:c7:f4:da:00:e1: 24:31:5a:8b:39:69:a8:3c:8a:73:27:88:1f:3b:15: ce:94:ae:27:11:f2:c1:ff:84:ce:a5:a0:77:5f:09: d1:ae:7f:58:3c:71:c0:ae:24:8f:f9:93:f1:e7:b2: 02:39:bc:00:c5:24:6d:0a:13:24:a0:bd:21:cc:0b: 89:42:9d:72:b7:59:8b:ed:9a:12:2b:55:af:58:ee: 86:8e:28:5e:f2:8f:02:d3:dc:46:35:01:1f:1d:10: 04:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C7:7A:9F:1D:92:D8:A2:EF:CF:62:81:F8:E9:DE:62:DE:B1:EA:06 X509v3 Authority Key Identifier: keyid:BB:8E:14:FC:AD:3A:F2:EF:30:A8:F5:69:63:39:D6:F7:DF:5D:73:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:00:26:fc:fa:45:ed:72:e2:a6:36:c6:77:74:63:80:df:4f: d4:61:47:76:9d:ed:b5:c6:41:e1:fe:a8:9f:7c:f3:e3:85:84: c1:fa:7e:fe:f0:25:7f:f1:c7:8e:32:03:c2:75:84:b1:ce:32: 54:29:23:e1:2b:9f:f5:6a:e0:10:18:ea:74:e1:7a:e8:00:55: 6b:01:e3:db:5c:87:fa:57:c9:d6:0d:43:a2:08:e0:39:a7:4e: e9:d1:1d:21:f2:cf:29:ad:e9:be:63:a1:b3:c6:f7:9a:5e:48: d6:3f:d3:3c:db:77:24:51:2f:32:56:83:c9:7d:41:f0:1e:8d: 57:78:e9:1a:cf:81:23:dc:a4:c6:1a:37:b0:b4:27:3c:1a:3b: 9a:e8:4d:f8:01:b2:27:61:18:28:9c:aa:3e:f9:0e:6c:9e:55: 39:de:d5:a3:fd:90:3b:55:df:8f:66:50:a8:6f:87:fa:55:83: b4:26:92:d4:83:01:46:77:99:db:8a:be:ed:e0:8a:fc:79:a7: e3:4a:8a:66:67:78:91:5a:5d:66:42:4f:a1:f1:71:8a:9b:10: 1c:01:bc:51:d7:01:30:ea:d4:38:55:3b:62:e5:4b:77:94:44: bd:69:cd:61:fb:32:21:11:e2:29:37:10:ed:0c:27:b3:fa:ce: bc:35:78:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFhZ2YDe/7wPoOfUrKLZjO/x7bwAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2RjdE RjVENzM1QjAeFw0yNjAxMjQyMTQ3MDdaFw0yNjAxMjgwMDU3MDdaMDMxMTAvBgNV BAMTKDRCQzc3QTlGMUQ5MkQ4QTJFRkNGNjI4MUY4RTlERTYyREVCMUVBMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2iz2SUTc3atC7oOZ4cQ8UPLpJ jQj2Tbz4nMCJAuugI6Ihcmf5e5dwakaF0bT8MIoSOiezLmG10+xqxZd7e+47LOow wtY8/KRWXSmj5/J37FKwsaacLRBq4Sigu3t0aNrkzKEfBBXMi0ionjvHnP9y4G+p 1N5cFcYbLbleVft2goLMvuf5sAi/JEa/5JmuxD+1NqylcrEtF74jOL8KgJLH9NoA 4SQxWos5aag8inMniB87Fc6UricR8sH/hM6loHdfCdGuf1g8ccCuJI/5k/HnsgI5 vADFJG0KEySgvSHMC4lCnXK3WYvtmhIrVa9Y7oaOKF7yjwLT3EY1AR8dEATLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS8d6nx2S2KLvz2KB+OneYt6x6gYwHwYDVR0j BBgwFoAUu44U/K068u8wqPVpYznW999dc1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZGE0ZWY3MS1mMGUwLTQyNTItODE2MC01MDUzMjFmYTUwODkvMC9CQjhFMTRGQ0FE M0FGMkVGMzBBOEY1Njk2MzM5RDZGN0RGNUQ3MzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2RjdERjVE NzM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWRhNGVmNzEtZjBlMC00MjUyLTgx NjAtNTA1MzIxZmE1MDg5LzAvQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2 RjdERjVENzM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABoAJvz6Re1y4qY2xnd0Y4DfT9RhR3ad7bXG QeH+qJ988+OFhMH6fv7wJX/xx44yA8J1hLHOMlQpI+Ern/Vq4BAY6nTheugAVWsB 49tch/pXydYNQ6II4DmnTunRHSHyzymt6b5jobPG95peSNY/0zzbdyRRLzJWg8l9 QfAejVd46RrPgSPcpMYaN7C0JzwaO5roTfgBsidhGCicqj75DmyeVTne1aP9kDtV 349mUKhvh/pVg7QmktSDAUZ3mduKvu3givx5p+NKimZneJFaXWZCT6HxcYqbEBwB vFHXATDq1DhVO2LlS3eURL1pzWH7MiER4ik3EO0MJ7P6zrw1eCc= -----END CERTIFICATE-----Generated at Sun Jan 25 20:39:19 2026 by rpki-client