This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft File: BE82B469998A9E829F882655C99A5A05535A1AD4.mft (raw, json) Hash identifier: N6f/FYaNdW1dHFYPOJ9SWgBGdTsl5Xg67enlHt9WijM= Subject key identifier: D8:60:15:8E:78:D8:51:0B:DF:BF:3F:1F:21:68:31:1B:6F:58:A8:14 Authority key identifier: BE:82:B4:69:99:8A:9E:82:9F:88:26:55:C9:9A:5A:05:53:5A:1A:D4 Certificate issuer: /CN=BE82B469998A9E829F882655C99A5A05535A1AD4 Certificate serial: 4AAB94B2E1B9ED348701185BE08EF960FB21E908 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE82B469998A9E829F882655C99A5A05535A1AD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft Manifest number: 04D7 Signing time: Fri 23 Jan 2026 17:41:12 +0000 Manifest this update: Fri 23 Jan 2026 17:36:12 +0000 Manifest next update: Tue 27 Jan 2026 03:42:12 +0000 Files and hashes: 1: 3130332e3135382e32302e302f32332d3234203d3e203236353631.roa (hash: g+ewJ+/FWnlKat+gPQr1tVTj8PjlEaEamMvWQs+8H98=) 2: 3130332e3135382e32302e302f32342d3234203d3e203438343635.roa (hash: 2W1FqoGYBbRpSENvlyzwmtu3q2K4HpvO3Z6Fc5DZvEU=) 3: 3130332e3135382e32312e302f32342d3234203d3e203438343635.roa (hash: Y2HrxpbOCYLMY6XBSkrTiPuTnGk3sto9vtxHqBDKXLo=) 4: BE82B469998A9E829F882655C99A5A05535A1AD4.crl (hash: MsnBZxptiiqqRhK0ToKK5Y6+lUVg63+qOcqa0heOMag=) 5: 3130332e3135382e32302e302f32332d3234203d3e20313431353833.roa (hash: 5crcrbB/LN7ILCPXkvbBRWMtAP/t3GajDPBToG3xT7s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.crl rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE82B469998A9E829F882655C99A5A05535A1AD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 03:42:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:ab:94:b2:e1:b9:ed:34:87:01:18:5b:e0:8e:f9:60:fb:21:e9:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE82B469998A9E829F882655C99A5A05535A1AD4 Validity Not Before: Jan 23 17:36:12 2026 GMT Not After : Jan 27 03:42:12 2026 GMT Subject: CN=D860158E78D8510BDFBF3F1F2168311B6F58A814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c9:20:03:08:aa:9f:2b:76:70:c3:27:e8:26: 91:7b:c0:56:2d:6d:d7:d7:e0:ee:89:52:1c:8a:ec: 86:f0:bb:4b:1d:31:64:a8:c9:af:c7:96:3a:7e:94: 2f:27:99:36:48:b2:f6:eb:74:b5:89:b2:87:82:d5: d9:ac:df:59:bf:19:a6:d7:31:56:0e:03:84:b8:e7: 17:e5:cb:08:18:56:49:20:48:22:f7:de:dc:a6:bd: 92:b1:00:b5:41:38:fa:96:39:dc:fd:3b:7c:01:78: 78:a5:88:6c:cc:09:42:d7:e3:7e:bb:35:0e:03:65: 64:14:72:f8:24:56:0f:b7:7f:47:9b:d0:a5:8d:1b: 2e:25:fe:58:09:b8:f1:a7:4d:c3:be:60:d5:57:08: 38:61:10:8c:2f:e7:47:55:45:c0:09:74:04:04:6d: 1e:2f:3a:29:a8:67:55:3d:a0:2f:34:ff:fa:b2:80: 94:48:4d:a4:c6:e6:72:ab:94:4c:c1:a8:94:58:88: 92:db:1a:e2:15:cd:bd:80:27:28:3a:2e:e5:39:cd: e0:61:7e:35:0b:00:86:41:fc:a1:88:14:cf:3b:cf: 31:2c:e5:1f:3e:59:aa:8a:0a:ed:d5:f1:b5:1b:a0: bb:71:00:26:51:69:36:1c:bb:43:98:bb:52:a7:0a: 80:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:60:15:8E:78:D8:51:0B:DF:BF:3F:1F:21:68:31:1B:6F:58:A8:14 X509v3 Authority Key Identifier: keyid:BE:82:B4:69:99:8A:9E:82:9F:88:26:55:C9:9A:5A:05:53:5A:1A:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE82B469998A9E829F882655C99A5A05535A1AD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:32:56:f3:a6:64:34:fd:15:42:e6:49:a0:04:64:9d:4b:0b: fd:8e:74:57:12:4d:e2:a6:1b:bb:f7:a2:ca:66:83:4e:fa:0e: 2e:2f:ed:e3:f8:54:1c:13:ce:38:35:a1:1d:69:71:ad:eb:9b: a3:e9:41:ba:d8:b9:b8:6f:24:a4:2d:9d:02:3a:de:e5:c6:99: 4c:d5:bb:25:1a:5c:52:d8:24:45:98:e8:7e:74:ef:d4:12:98: 98:a2:24:11:39:1e:87:12:a5:07:f4:e4:29:c8:72:67:4b:a6: dc:0d:a5:9e:99:56:7a:65:ec:c6:52:86:74:8b:d7:da:0d:a3: 91:5e:3a:41:4e:44:b1:d5:1d:12:b6:4e:e9:b5:4e:65:86:b0: be:84:e9:8f:a7:89:2e:0a:15:e5:88:88:0f:4b:15:d9:c6:08: d8:d8:f6:87:e6:70:e6:1a:64:f1:c4:03:a2:e8:6e:10:5f:3e: e4:56:af:4d:fd:a3:41:2d:8b:9a:fe:e9:9f:4d:60:dc:22:d8: e2:a7:d6:24:4a:e2:04:5a:eb:f9:58:0b:d6:e2:f9:84:f6:d8: a8:af:77:ef:70:8f:73:9d:36:4c:51:15:84:0d:05:17:f0:9b: 1f:ee:fb:07:96:59:4f:d2:30:d3:63:9b:e8:53:af:cb:ae:7b: 6f:65:18:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSquUsuG57TSHARhb4I75YPsh6QgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU4MkI0Njk5OThBOUU4MjlGODgyNjU1Qzk5QTVBMDU1 MzVBMUFENDAeFw0yNjAxMjMxNzM2MTJaFw0yNjAxMjcwMzQyMTJaMDMxMTAvBgNV BAMTKEQ4NjAxNThFNzhEODUxMEJERkJGM0YxRjIxNjgzMTFCNkY1OEE4MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjySADCKqfK3ZwwyfoJpF7wFYt bdfX4O6JUhyK7Ibwu0sdMWSoya/Hljp+lC8nmTZIsvbrdLWJsoeC1dms31m/GabX MVYOA4S45xflywgYVkkgSCL33tymvZKxALVBOPqWOdz9O3wBeHiliGzMCULX4367 NQ4DZWQUcvgkVg+3f0eb0KWNGy4l/lgJuPGnTcO+YNVXCDhhEIwv50dVRcAJdAQE bR4vOimoZ1U9oC80//qygJRITaTG5nKrlEzBqJRYiJLbGuIVzb2AJyg6LuU5zeBh fjULAIZB/KGIFM87zzEs5R8+WaqKCu3V8bUboLtxACZRaTYcu0OYu1KnCoBPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2GAVjnjYUQvfvz8fIWgxG29YqBQwHwYDVR0j BBgwFoAUvoK0aZmKnoKfiCZVyZpaBVNaGtQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDgxYWMwMS1mMzAyLTQ2ZWQtOWUxYi02NTkzNDU2ZjJkNTkvMC9CRTgyQjQ2OTk5 OEE5RTgyOUY4ODI2NTVDOTlBNUEwNTUzNUExQUQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkU4MkI0Njk5OThBOUU4MjlGODgyNjU1Qzk5QTVBMDU1MzVB MUFENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQ4MWFjMDEtZjMwMi00NmVkLTll MWItNjU5MzQ1NmYyZDU5LzAvQkU4MkI0Njk5OThBOUU4MjlGODgyNjU1Qzk5QTVB MDU1MzVBMUFENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKMyVvOmZDT9FULmSaAEZJ1LC/2OdFcSTeKm G7v3ospmg076Di4v7eP4VBwTzjg1oR1pca3rm6PpQbrYubhvJKQtnQI63uXGmUzV uyUaXFLYJEWY6H5079QSmJiiJBE5HocSpQf05CnIcmdLptwNpZ6ZVnpl7MZShnSL 19oNo5FeOkFORLHVHRK2Tum1TmWGsL6E6Y+niS4KFeWIiA9LFdnGCNjY9ofmcOYa ZPHEA6LobhBfPuRWr039o0Eti5r+6Z9NYNwi2OKn1iRK4gRa6/lYC9bi+YT22Kiv d+9wj3OdNkxRFYQNBRfwmx/u+weWWU/SMNNjm+hTr8uue29lGEA= -----END CERTIFICATE-----Generated at Sun Jan 25 19:00:30 2026 by rpki-client