This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft File: B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft (raw, json) Hash identifier: n20iY/NoMBcsBJbYRXnJeE0z2CJ6GBGv1s/jIN3UhL4= Subject key identifier: F0:1C:6C:8D:CA:A6:C8:CE:E6:1C:0F:AA:7C:C0:12:AB:DF:09:39:DB Authority key identifier: B5:AB:E8:6E:BB:2A:02:C5:83:92:74:9A:92:FE:A6:8F:BA:FC:5C:46 Certificate issuer: /CN=B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46 Certificate serial: 3DE1F7AA45D9A791C91AF924EDFFAFD680E9BC68 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft Manifest number: 0134 Signing time: Sun 25 Jan 2026 13:20:02 +0000 Manifest this update: Sun 25 Jan 2026 13:15:02 +0000 Manifest next update: Thu 29 Jan 2026 00:42:02 +0000 Files and hashes: 1: B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.crl (hash: VrjA7pkmtIETdg5zAFfKZqR44v0tBKwGNDSvd6HVr8Y=) 2: 3135372e32302e33362e302f32332d3233203d3e20313430343730.roa (hash: P+lInV3ols6ftIxSpMHmtBDcdqTmvL+gkgGsnZZSjLQ=) 3: 3135372e32302e33372e302f32342d3234203d3e20313430343730.roa (hash: cFu5nteBBzan5faf9I4u2CSs1idRr42+5NP3IOF4DXY=) 4: 3135372e32302e33362e302f32342d3234203d3e20313430343730.roa (hash: WZyPn+mq0I+eE3vcXNaLpwRID4wqkE6/jQ3zY3AffcI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.crl rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 21:04:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:e1:f7:aa:45:d9:a7:91:c9:1a:f9:24:ed:ff:af:d6:80:e9:bc:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46 Validity Not Before: Jan 25 13:15:02 2026 GMT Not After : Jan 29 00:42:02 2026 GMT Subject: CN=F01C6C8DCAA6C8CEE61C0FAA7CC012ABDF0939DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:df:9c:c1:22:64:44:14:81:18:9b:52:8c:04: bd:5a:72:d0:c1:91:75:d5:0a:72:ed:58:d0:a6:b6: d0:b5:a1:10:0c:3b:6f:b3:5a:b1:b7:cb:b5:71:81: 8b:44:d7:8f:79:c8:bc:ad:c2:54:15:d8:42:f8:a1: f9:26:2d:19:c9:d4:dd:5b:81:3c:02:08:17:4f:81: 17:0d:d8:4d:7b:e3:71:62:10:72:4d:90:a2:30:57: 12:35:31:58:e3:b1:69:cb:31:ff:e0:a9:a0:a9:1a: d6:39:3e:4d:bf:25:98:ad:9d:38:60:7e:11:d8:7f: 3c:fb:6a:ed:28:eb:6c:a8:cb:79:06:4d:f6:33:b3: db:73:ad:25:b1:06:aa:99:8b:37:55:59:8a:87:25: 34:2d:38:17:6b:79:df:4f:3f:6a:d7:83:c6:60:2d: c4:15:33:b1:03:31:ce:5b:0d:cc:b5:84:b0:19:bd: a6:d9:5e:e3:34:26:95:6a:c9:77:9f:55:65:88:50: ea:91:9f:86:f0:7a:21:4e:7a:fa:2b:36:8f:76:7a: 1f:45:69:2c:d7:8d:24:57:a6:cf:e7:d4:f4:d0:a0: c1:7d:44:4a:31:1b:ab:bf:f9:6d:15:9a:47:bd:4e: e2:4a:61:4c:28:23:0b:e9:8a:fc:b3:36:97:d8:6c: 1c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:1C:6C:8D:CA:A6:C8:CE:E6:1C:0F:AA:7C:C0:12:AB:DF:09:39:DB X509v3 Authority Key Identifier: keyid:B5:AB:E8:6E:BB:2A:02:C5:83:92:74:9A:92:FE:A6:8F:BA:FC:5C:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:b7:84:42:b1:62:90:59:ea:42:59:21:f5:bb:89:b4:66:ac: b1:be:fe:0b:da:42:be:43:24:8d:9e:e6:bd:2c:04:8f:1d:15: 08:6b:61:af:7d:8e:ba:84:f3:e0:42:55:ba:d6:17:d5:5d:07: 55:7c:11:a1:1f:e3:95:b7:24:81:a9:2a:76:5a:a5:4a:71:45: c7:62:e7:36:77:c0:36:45:bc:6a:11:6f:43:47:1b:07:25:47: a3:04:c4:d1:88:66:31:76:5a:d6:62:70:67:8b:2d:be:db:0a: f9:fb:b5:d4:db:fc:b3:7b:61:fd:d6:0a:db:10:af:73:ae:c0: 1a:59:01:c0:13:ed:3c:ac:fe:6e:64:43:7b:86:d8:46:f9:3f: 28:f6:e8:a5:c7:91:28:10:ac:51:b5:54:38:4b:22:db:0f:c4: 75:62:cb:77:f1:62:c7:be:29:fb:05:5d:86:37:2a:b9:6f:6f: bf:cf:30:63:1d:95:96:cc:8e:9d:02:59:5a:fe:19:e9:2d:80: f1:0b:61:c5:a3:34:c5:5d:99:70:54:da:07:2b:19:97:97:1e: 03:0f:0e:95:3f:ce:5a:1d:3c:86:05:c4:a9:05:25:d7:75:43: 80:f7:d7:80:a9:da:69:41:5e:7e:ac:99:e5:8f:ff:8f:c3:06: ad:ac:27:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPeH3qkXZp5HJGvkk7f+v1oDpvGgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVBQkU4NkVCQjJBMDJDNTgzOTI3NDlBOTJGRUE2OEZC QUZDNUM0NjAeFw0yNjAxMjUxMzE1MDJaFw0yNjAxMjkwMDQyMDJaMDMxMTAvBgNV BAMTKEYwMUM2QzhEQ0FBNkM4Q0VFNjFDMEZBQTdDQzAxMkFCREYwOTM5REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC035zBImREFIEYm1KMBL1actDB kXXVCnLtWNCmttC1oRAMO2+zWrG3y7VxgYtE1495yLytwlQV2EL4ofkmLRnJ1N1b gTwCCBdPgRcN2E1743FiEHJNkKIwVxI1MVjjsWnLMf/gqaCpGtY5Pk2/JZitnThg fhHYfzz7au0o62yoy3kGTfYzs9tzrSWxBqqZizdVWYqHJTQtOBdred9PP2rXg8Zg LcQVM7EDMc5bDcy1hLAZvabZXuM0JpVqyXefVWWIUOqRn4bweiFOevorNo92eh9F aSzXjSRXps/n1PTQoMF9REoxG6u/+W0Vmke9TuJKYUwoIwvpivyzNpfYbByvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8BxsjcqmyM7mHA+qfMASq98JOdswHwYDVR0j BBgwFoAUtavobrsqAsWDknSakv6mj7r8XEYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MGJkN2Q2Yy1lYTVhLTRjNDUtOTU1OC03MTc5OTRhYjY4MGUvMC9CNUFCRTg2RUJC MkEwMkM1ODM5Mjc0OUE5MkZFQTY4RkJBRkM1QzQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjVBQkU4NkVCQjJBMDJDNTgzOTI3NDlBOTJGRUE2OEZCQUZD NUM0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjBiZDdkNmMtZWE1YS00YzQ1LTk1 NTgtNzE3OTk0YWI2ODBlLzAvQjVBQkU4NkVCQjJBMDJDNTgzOTI3NDlBOTJGRUE2 OEZCQUZDNUM0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJy3hEKxYpBZ6kJZIfW7ibRmrLG+/gvaQr5D JI2e5r0sBI8dFQhrYa99jrqE8+BCVbrWF9VdB1V8EaEf45W3JIGpKnZapUpxRcdi 5zZ3wDZFvGoRb0NHGwclR6MExNGIZjF2WtZicGeLLb7bCvn7tdTb/LN7Yf3WCtsQ r3OuwBpZAcAT7Tys/m5kQ3uG2Eb5Pyj26KXHkSgQrFG1VDhLItsPxHViy3fxYse+ KfsFXYY3Krlvb7/PMGMdlZbMjp0CWVr+GektgPELYcWjNMVdmXBU2gcrGZeXHgMP DpU/zlodPIYFxKkFJdd1Q4D314Cp2mlBXn6smeWP/4/DBq2sJ1Q= -----END CERTIFICATE-----Generated at Mon Jan 26 04:02:04 2026 by rpki-client