This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft File: BF3B675AEBEE64D00B323056545D1F630F1C489E.mft (raw, json) Hash identifier: rRjzFS+Oin1O3yAOWJiGTJOdLNA3ggsQqiWS5+yeZTM= Subject key identifier: 29:EF:9A:49:76:55:F1:DB:1A:BE:F3:C3:15:91:89:2E:BE:55:6E:6E Authority key identifier: BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E Certificate issuer: /CN=BF3B675AEBEE64D00B323056545D1F630F1C489E Certificate serial: 54CA35A350ADAC719345B4BFAF1F0B7769C90D7F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft Manifest number: 0545 Signing time: Sun 25 Jan 2026 10:00:53 +0000 Manifest this update: Sun 25 Jan 2026 09:55:53 +0000 Manifest next update: Wed 28 Jan 2026 10:52:53 +0000 Files and hashes: 1: BF3B675AEBEE64D00B323056545D1F630F1C489E.crl (hash: qALk8hXjryYKe0NvKGeGwW8Zwxynvix+Vr2YOXkdyNk=) 2: 3131362e3231332e34382e302f32302d3234203d3e2039373835.roa (hash: ILkXkfNJzfGzwTYNzRYQw2a7890NKmPmydyWQw+HB7E=) 3: 323430333a373230303a3a2f33322d3438203d3e2039373835.roa (hash: CtyzufwtsM1OsMWgnYCmXW6JoR/5zQKHjokkqsxGYYM=) 4: 3230322e36392e39362e302f32302d3234203d3e2039373835.roa (hash: 9zTx3s0a2rHUUwPutdrNSjBytv6Kk1GTM8S/civ+mWo=) 5: 3232302e3135372e39362e302f32302d3234203d3e2039373835.roa (hash: HNZfntXqIdjS6Oc1nk9EDrt/Ny6J1wp1N0wmznQcons=) 6: 3230322e36392e39362e302f32302d3234203d3e20313331363931.roa (hash: levW4fK5Av9j8+txVVV15SprxZ5Vl8IniN5F3a6MoCA=) 7: 3230322e3135312e382e302f32322d3234203d3e2039373835.roa (hash: J6bQJ2rdsim2ttJlJ/Bk72O/5PQxeXoEvre44CKnHWo=) 8: 3131362e3231332e34382e302f32302d3234203d3e20313331363931.roa (hash: GYZuxR+Zqxd6pxL2lTHKcyVNBpecVMAB2ZosCkKojM0=) 9: 3232332e3136342e302e302f31362d3234203d3e2039373835.roa (hash: GqlYotz76qpsvx0YbP1++o+soFVawkjmgw8JjYGM37s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 10:52:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:ca:35:a3:50:ad:ac:71:93:45:b4:bf:af:1f:0b:77:69:c9:0d:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF3B675AEBEE64D00B323056545D1F630F1C489E Validity Not Before: Jan 25 09:55:53 2026 GMT Not After : Jan 28 10:52:53 2026 GMT Subject: CN=29EF9A497655F1DB1ABEF3C31591892EBE556E6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:88:85:e6:53:b3:25:4c:bd:6b:09:d5:6a:53: 56:a3:24:15:bd:b0:20:6e:da:35:0a:d4:61:ad:9d: c5:8f:63:5c:e4:00:d3:1e:2d:01:33:1f:28:10:14: d6:b3:8e:9e:eb:9a:e8:82:3f:76:6e:f5:bc:73:2b: c1:b5:ac:f9:6b:46:fa:bd:24:7a:8d:f9:2e:8b:f2: b3:3d:3c:f4:11:55:f8:16:e6:c6:23:fc:ec:02:33: 47:f1:ac:5e:37:16:7b:ec:6c:47:cb:28:10:19:36: 94:7e:c8:f2:1b:cd:5f:f7:ed:85:af:2e:25:2b:dd: ca:38:11:ea:f2:b8:06:e9:ad:21:e8:e6:db:e9:be: 46:c0:2a:07:f2:cc:9c:b5:8a:2d:6c:80:18:3b:7f: 47:6d:bb:16:4a:56:4a:30:20:2a:74:c9:d6:f2:4f: b0:15:0f:50:d3:2a:60:70:5e:b6:20:a2:a6:bd:d0: b3:30:61:f5:45:09:ac:9a:fa:89:fb:0c:8b:8f:c6: 21:4b:71:4f:97:50:04:b1:60:d3:6e:d2:e2:d6:43: 33:69:9f:71:a9:04:af:e8:62:df:4e:77:ea:12:64: 14:44:e1:4a:10:eb:65:02:67:8f:c1:2b:74:fb:b4: c2:52:c6:ec:6c:46:30:4f:cd:4f:28:a9:e1:26:36: 55:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:EF:9A:49:76:55:F1:DB:1A:BE:F3:C3:15:91:89:2E:BE:55:6E:6E X509v3 Authority Key Identifier: keyid:BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:a0:e2:7a:c7:e1:bd:89:22:71:aa:c3:24:75:5a:0c:65:e6: b3:ab:a2:74:65:95:2c:6a:3a:7c:63:c6:1f:f1:a7:2f:bb:bf: 22:8f:a5:2c:91:8b:91:eb:0d:a2:12:07:97:7b:61:56:bf:ac: 5f:2b:93:c8:f2:89:69:b7:a9:3d:53:13:e4:83:86:2d:eb:2e: d5:6c:5e:c8:a7:6a:d5:07:8e:b0:dc:72:56:e8:17:85:2c:63: a2:d6:eb:7f:ae:ac:1e:89:91:2d:ab:c2:93:16:da:cf:4c:a7: 64:1c:a3:8f:5e:6d:6d:9c:0e:19:38:79:4c:49:d9:3e:c8:39: ce:68:71:58:61:6f:4b:e4:78:06:30:36:ea:95:df:f5:a7:ba: 7f:c7:5a:26:6e:2d:80:cd:37:ff:a3:98:08:7f:bd:91:0a:ec: 35:59:2c:2d:02:cf:d7:7c:da:e6:4f:00:69:b1:96:b0:71:d6: 0d:ec:07:be:b6:a9:44:86:d3:c0:87:c2:7b:e9:c3:a9:d3:01: 00:0a:3c:ed:bc:5c:9b:73:5f:85:21:f3:e0:c8:66:a5:0b:e8: b0:16:52:6d:bd:2a:a4:94:d3:36:11:cd:20:50:74:7b:d1:5c: 93:b1:ff:27:06:7e:55:66:a7:ec:c8:c0:5f:cf:10:57:2b:eb: 12:e3:69:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVMo1o1CtrHGTRbS/rx8Ld2nJDX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFGNjMw RjFDNDg5RTAeFw0yNjAxMjUwOTU1NTNaFw0yNjAxMjgxMDUyNTNaMDMxMTAvBgNV BAMTKDI5RUY5QTQ5NzY1NUYxREIxQUJFRjNDMzE1OTE4OTJFQkU1NTZFNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuiIXmU7MlTL1rCdVqU1ajJBW9 sCBu2jUK1GGtncWPY1zkANMeLQEzHygQFNazjp7rmuiCP3Zu9bxzK8G1rPlrRvq9 JHqN+S6L8rM9PPQRVfgW5sYj/OwCM0fxrF43FnvsbEfLKBAZNpR+yPIbzV/37YWv LiUr3co4EeryuAbprSHo5tvpvkbAKgfyzJy1ii1sgBg7f0dtuxZKVkowICp0ydby T7AVD1DTKmBwXrYgoqa90LMwYfVFCaya+on7DIuPxiFLcU+XUASxYNNu0uLWQzNp n3GpBK/oYt9Od+oSZBRE4UoQ62UCZ4/BK3T7tMJSxuxsRjBPzU8oqeEmNlX1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKe+aSXZV8dsavvPDFZGJLr5Vbm4wHwYDVR0j BBgwFoAUvztnWuvuZNALMjBWVF0fYw8cSJ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTBjOTAwOS1hZDUzLTRmYTYtYTE4My0zNGIzNDU3YmVhMDMvMC9CRjNCNjc1QUVC RUU2NEQwMEIzMjMwNTY1NDVEMUY2MzBGMUM0ODlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFGNjMwRjFD NDg5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjkwYzkwMDktYWQ1My00ZmE2LWEx ODMtMzRiMzQ1N2JlYTAzLzAvQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFG NjMwRjFDNDg5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGKg4nrH4b2JInGqwyR1Wgxl5rOronRllSxq Onxjxh/xpy+7vyKPpSyRi5HrDaISB5d7YVa/rF8rk8jyiWm3qT1TE+SDhi3rLtVs XsinatUHjrDcclboF4UsY6LW63+urB6JkS2rwpMW2s9Mp2Qco49ebW2cDhk4eUxJ 2T7IOc5ocVhhb0vkeAYwNuqV3/Wnun/HWiZuLYDNN/+jmAh/vZEK7DVZLC0Cz9d8 2uZPAGmxlrBx1g3sB762qUSG08CHwnvpw6nTAQAKPO28XJtzX4Uh8+DIZqUL6LAW Um29KqSU0zYRzSBQdHvRXJOx/ycGflVmp+zIwF/PEFcr6xLjaSU= -----END CERTIFICATE-----Generated at Sun Jan 25 23:56:53 2026 by rpki-client