This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft File: BB64FDB64281947C3567104C08735A011C6210F4.mft (raw, json) Hash identifier: z00nHQZ7390CuWaGCx+tRKm87/QFRK4uO9JA3gb/1Lk= Subject key identifier: 74:47:C5:E7:10:59:CC:4F:E3:44:8E:5B:55:9E:C7:0E:88:3F:00:58 Authority key identifier: BB:64:FD:B6:42:81:94:7C:35:67:10:4C:08:73:5A:01:1C:62:10:F4 Certificate issuer: /CN=BB64FDB64281947C3567104C08735A011C6210F4 Certificate serial: 2D4ADA7BC573D8BA666F830924ECCB920C50253F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft Manifest number: 03CB Signing time: Sun 25 Jan 2026 22:51:49 +0000 Manifest this update: Sun 25 Jan 2026 22:46:49 +0000 Manifest next update: Thu 29 Jan 2026 00:09:49 +0000 Files and hashes: 1: BB64FDB64281947C3567104C08735A011C6210F4.crl (hash: 0XfJ7itwqcxAAMNjJWnjKuCSrZTo1OYpTPeLLxqxQNA=) 2: 3130332e3136392e3139322e302f32332d3234203d3e20313432333438.roa (hash: WO1pfWHoqTdWNx4bevNPCtJdd2Sq+t2I2uTA3HBPJBM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.crl rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:4a:da:7b:c5:73:d8:ba:66:6f:83:09:24:ec:cb:92:0c:50:25:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB64FDB64281947C3567104C08735A011C6210F4 Validity Not Before: Jan 25 22:46:49 2026 GMT Not After : Jan 29 00:09:49 2026 GMT Subject: CN=7447C5E71059CC4FE3448E5B559EC70E883F0058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:17:70:49:02:0c:22:da:84:79:d2:fc:ce:13: 59:a4:a1:3d:b9:e4:08:88:ae:f3:4a:ac:7b:96:7c: f3:bb:40:d9:7f:2b:c6:8f:b7:ce:1d:da:48:09:5f: 39:ce:75:06:ec:2f:70:76:1c:cd:cd:8f:67:f1:f0: d8:f6:07:32:82:cb:d3:08:41:c8:9d:bb:18:07:fa: 3e:f3:7f:c6:2e:43:eb:79:e9:44:bb:25:36:fb:42: 97:dd:e1:bc:32:8d:b7:2c:31:fe:fa:e2:46:aa:40: 07:05:c0:5d:83:32:84:01:43:7e:25:4a:64:4e:97: dd:f5:48:bb:ca:fb:56:39:06:6c:4e:f3:16:8d:eb: 68:ca:0b:5e:ff:5c:bc:54:15:cd:df:09:d8:46:ed: 23:f7:4e:cc:f6:55:a0:98:8f:02:de:a1:3f:f3:24: da:f8:2c:20:c7:77:c6:f4:b1:8d:bf:4e:fc:3a:32: 5e:b9:7a:a5:4c:85:33:f3:aa:14:91:98:b0:9c:7a: d2:db:0f:d2:0e:ca:c1:bb:69:10:eb:5d:5d:e5:13: d6:b3:06:a2:f1:02:7d:9b:a2:85:87:e2:e9:41:47: 89:66:fd:0f:2d:93:f4:e4:d0:c1:a2:7d:e3:54:2e: cc:6a:ff:8c:32:eb:f5:4f:81:9d:b0:e4:64:a3:1b: 57:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:47:C5:E7:10:59:CC:4F:E3:44:8E:5B:55:9E:C7:0E:88:3F:00:58 X509v3 Authority Key Identifier: keyid:BB:64:FD:B6:42:81:94:7C:35:67:10:4C:08:73:5A:01:1C:62:10:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:76:70:66:e2:49:b3:82:4a:66:44:e4:be:b3:34:20:18:02: c9:10:52:d3:f8:d3:9d:fd:98:02:d2:f0:f3:18:1c:f9:2d:9f: 9b:8a:31:8f:0e:e6:f9:3d:4d:99:33:d4:67:e2:c5:ec:2b:d7: b4:fd:6e:a1:16:b1:f3:a5:9d:60:11:86:e8:6f:a9:90:e1:93: 5e:e5:dc:52:76:62:19:c8:36:53:fd:84:66:61:45:57:6e:10: d3:15:af:ff:97:02:a6:c6:bc:1f:ea:ff:44:30:41:af:91:fa: ec:30:b7:13:b0:e5:bc:9d:ea:85:b2:1c:33:68:a9:93:1b:d9: cf:db:b2:40:e9:0e:cc:30:c7:32:a6:60:e2:cf:bc:6e:fb:35: a4:bb:6d:68:8e:64:9e:4f:d6:c7:f0:85:f4:08:03:85:97:78: fc:d5:7d:08:0e:ee:7f:27:46:55:2a:89:e7:0b:71:b5:70:2a: 86:d5:28:54:9e:bc:09:56:60:4c:0e:e4:6f:4b:2c:f5:37:dd: b5:60:af:7e:68:fc:26:42:79:49:98:a6:70:21:bb:cc:bb:b7: 00:d9:b8:6e:00:e2:e5:9d:a4:f7:8c:00:0b:bf:8f:2b:f2:50: 26:3c:48:e9:39:cc:03:79:b4:30:b4:c7:23:0a:88:80:e7:2d: c4:d1:4b:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULUrae8Vz2Lpmb4MJJOzLkgxQJT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVBMDEx QzYyMTBGNDAeFw0yNjAxMjUyMjQ2NDlaFw0yNjAxMjkwMDA5NDlaMDMxMTAvBgNV BAMTKDc0NDdDNUU3MTA1OUNDNEZFMzQ0OEU1QjU1OUVDNzBFODgzRjAwNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBF3BJAgwi2oR50vzOE1mkoT25 5AiIrvNKrHuWfPO7QNl/K8aPt84d2kgJXznOdQbsL3B2HM3Nj2fx8Nj2BzKCy9MI QciduxgH+j7zf8YuQ+t56US7JTb7Qpfd4bwyjbcsMf764kaqQAcFwF2DMoQBQ34l SmROl931SLvK+1Y5BmxO8xaN62jKC17/XLxUFc3fCdhG7SP3Tsz2VaCYjwLeoT/z JNr4LCDHd8b0sY2/Tvw6Ml65eqVMhTPzqhSRmLCcetLbD9IOysG7aRDrXV3lE9az BqLxAn2booWH4ulBR4lm/Q8tk/Tk0MGifeNULsxq/4wy6/VPgZ2w5GSjG1cBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdEfF5xBZzE/jRI5bVZ7HDog/AFgwHwYDVR0j BBgwFoAUu2T9tkKBlHw1ZxBMCHNaARxiEPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGEwMmQzNy0zYjlkLTQ1M2EtOGM4MS0zMjhlNTQwMTQxZmQvMC9CQjY0RkRCNjQy ODE5NDdDMzU2NzEwNEMwODczNUEwMTFDNjIxMEY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVBMDExQzYy MTBGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRhMDJkMzctM2I5ZC00NTNhLThj ODEtMzI4ZTU0MDE0MWZkLzAvQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVB MDExQzYyMTBGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEV2cGbiSbOCSmZE5L6zNCAYAskQUtP40539 mALS8PMYHPktn5uKMY8O5vk9TZkz1Gfixewr17T9bqEWsfOlnWARhuhvqZDhk17l 3FJ2YhnINlP9hGZhRVduENMVr/+XAqbGvB/q/0QwQa+R+uwwtxOw5byd6oWyHDNo qZMb2c/bskDpDswwxzKmYOLPvG77NaS7bWiOZJ5P1sfwhfQIA4WXePzVfQgO7n8n RlUqiecLcbVwKobVKFSevAlWYEwO5G9LLPU33bVgr35o/CZCeUmYpnAhu8y7twDZ uG4A4uWdpPeMAAu/jyvyUCY8SOk5zAN5tDC0xyMKiIDnLcTRS6Q= -----END CERTIFICATE-----Generated at Mon Jan 26 02:42:23 2026 by rpki-client