This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft File: BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft (raw, json) Hash identifier: 0I0OKOa0QQPk8+RXx4UuB5f801IgF6q/ARRpAFVw/Z8= Subject key identifier: 29:66:9C:8C:DB:12:51:35:15:2C:2E:19:17:EF:87:E0:9A:5C:73:6C Authority key identifier: BC:BE:AD:46:72:B1:9E:91:24:8E:58:DD:91:C4:EC:D8:94:A7:A3:A8 Certificate issuer: /CN=BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8 Certificate serial: 38992152E37125D8115D7B86FC05FC0D9F5EB6B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft Manifest number: 0102 Signing time: Sat 24 Jan 2026 11:21:07 +0000 Manifest this update: Sat 24 Jan 2026 11:16:07 +0000 Manifest next update: Tue 27 Jan 2026 21:50:07 +0000 Files and hashes: 1: 3130332e3134322e39302e302f32332d3234203d3e20313339333734.roa (hash: BCR4399uDrDPTCg+MIbL26PuI+e2Uq0NkSYBiX921Hw=) 2: BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl (hash: OeuahsFwZ8h2Z16fO72JF3OyfgdWo3gvLxo3f5EnIVc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 21:50:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:99:21:52:e3:71:25:d8:11:5d:7b:86:fc:05:fc:0d:9f:5e:b6:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8 Validity Not Before: Jan 24 11:16:07 2026 GMT Not After : Jan 27 21:50:07 2026 GMT Subject: CN=29669C8CDB125135152C2E1917EF87E09A5C736C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ef:7e:e1:f4:a7:32:1a:df:2e:e8:64:7a:d6: b7:f9:c3:a0:bb:e6:06:20:a6:f6:10:43:08:89:b9: 42:d8:f6:ae:07:dd:62:ea:db:a6:0d:78:7c:0d:53: 05:d3:23:b3:21:58:81:0a:1f:d2:ad:e9:27:79:12: 3d:6c:34:e7:a4:7c:69:b6:ce:17:2b:cb:f4:5e:f2: ad:18:7a:6f:26:49:52:bb:da:b8:f7:52:a4:56:2a: 98:db:f9:d0:1a:d2:c1:dd:88:6e:15:5c:d2:b8:fe: 21:da:4d:48:02:01:da:0b:ec:b6:37:12:a2:aa:ad: d2:f8:2d:4b:54:26:de:34:c4:99:71:97:42:7e:bf: df:db:26:76:e9:2e:4f:aa:92:dd:a8:66:10:b2:aa: 08:a5:a4:01:49:a6:90:3e:48:60:19:14:61:79:2d: c7:79:c3:db:93:5f:05:23:d4:3c:c2:64:6e:98:93: 59:12:7f:4f:f2:d3:c1:ca:06:f0:02:b2:f3:f4:9c: 64:9f:76:bf:44:47:60:4a:54:71:4d:16:e4:be:60: 44:4d:f0:5c:08:32:f5:c1:7f:f1:ab:36:a8:f8:72: 75:05:32:0f:1e:b6:81:28:75:db:2b:aa:78:31:c4: 74:5c:96:34:46:67:b3:b9:46:a0:f4:dc:99:35:c8: 2a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:66:9C:8C:DB:12:51:35:15:2C:2E:19:17:EF:87:E0:9A:5C:73:6C X509v3 Authority Key Identifier: keyid:BC:BE:AD:46:72:B1:9E:91:24:8E:58:DD:91:C4:EC:D8:94:A7:A3:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption de:2e:40:cf:42:51:a2:d4:53:4d:1c:d5:64:93:d0:ca:08:b8: d1:00:20:26:e7:8d:84:af:14:75:aa:a7:46:08:5d:ad:38:33: 02:b0:32:eb:c3:9c:9d:fe:49:ad:8f:1c:a3:ca:2f:f0:27:ce: d2:34:31:55:2a:bf:de:9c:28:36:b7:be:ed:b9:25:2c:be:da: f7:59:13:db:e1:2b:29:ee:90:b9:52:e0:c4:f1:98:7b:f2:e2: cc:fd:8f:b8:7d:83:76:93:62:50:7d:b7:2b:c5:fb:a5:28:10: e9:83:74:24:ad:4e:34:7a:ac:64:74:df:69:e6:c1:4e:49:95: 3b:ff:91:d3:0a:c7:d9:df:b9:8d:7f:57:c0:ad:75:03:a0:da: c8:7b:5b:fd:d5:cf:da:32:23:3a:f3:d9:e1:b1:a6:a6:6f:ae: 72:0d:8d:aa:bf:cf:b0:a2:1c:7e:04:89:91:59:ad:6e:0e:69: 24:80:c2:87:ec:64:66:70:ea:d9:2e:b0:7e:15:8a:28:ee:77: a8:0a:19:51:cb:f3:22:21:89:61:13:33:50:72:5c:ac:cf:87: b1:36:4f:6c:74:59:a3:12:8a:07:9a:7c:39:c3:ce:b9:6e:a5: 5e:b4:bd:fa:90:7f:27:26:13:00:2e:af:49:0a:57:13:e2:08: 7d:cd:bf:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOJkhUuNxJdgRXXuG/AX8DZ9etrUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVDRDg5 NEE3QTNBODAeFw0yNjAxMjQxMTE2MDdaFw0yNjAxMjcyMTUwMDdaMDMxMTAvBgNV BAMTKDI5NjY5QzhDREIxMjUxMzUxNTJDMkUxOTE3RUY4N0UwOUE1QzczNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ737h9KcyGt8u6GR61rf5w6C7 5gYgpvYQQwiJuULY9q4H3WLq26YNeHwNUwXTI7MhWIEKH9Kt6Sd5Ej1sNOekfGm2 zhcry/Re8q0Yem8mSVK72rj3UqRWKpjb+dAa0sHdiG4VXNK4/iHaTUgCAdoL7LY3 EqKqrdL4LUtUJt40xJlxl0J+v9/bJnbpLk+qkt2oZhCyqgilpAFJppA+SGAZFGF5 Lcd5w9uTXwUj1DzCZG6Yk1kSf0/y08HKBvACsvP0nGSfdr9ER2BKVHFNFuS+YERN 8FwIMvXBf/GrNqj4cnUFMg8etoEoddsrqngxxHRcljRGZ7O5RqD03Jk1yCrpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKWacjNsSUTUVLC4ZF++H4Jpcc2wwHwYDVR0j BBgwFoAUvL6tRnKxnpEkjljdkcTs2JSno6gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTkyMTkxNy0xM2FmLTQ0MDMtOTdhYi05YWRhZjUxMDRjMTIvMC9CQ0JFQUQ0Njcy QjE5RTkxMjQ4RTU4REQ5MUM0RUNEODk0QTdBM0E4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVDRDg5NEE3 QTNBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU5MjE5MTctMTNhZi00NDAzLTk3 YWItOWFkYWY1MTA0YzEyLzAvQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVD RDg5NEE3QTNBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN4uQM9CUaLUU00c1WST0MoIuNEAICbnjYSv FHWqp0YIXa04MwKwMuvDnJ3+Sa2PHKPKL/AnztI0MVUqv96cKDa3vu25JSy+2vdZ E9vhKynukLlS4MTxmHvy4sz9j7h9g3aTYlB9tyvF+6UoEOmDdCStTjR6rGR032nm wU5JlTv/kdMKx9nfuY1/V8CtdQOg2sh7W/3Vz9oyIzrz2eGxpqZvrnINjaq/z7Ci HH4EiZFZrW4OaSSAwofsZGZw6tkusH4Viijud6gKGVHL8yIhiWETM1ByXKzPh7E2 T2x0WaMSigeafDnDzrlupV60vfqQfycmEwAur0kKVxPiCH3Nv0Q= -----END CERTIFICATE-----Generated at Sun Jan 25 18:38:18 2026 by rpki-client