This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft File: BB64FDB64281947C3567104C08735A011C6210F4.mft (raw, json) Hash identifier: gTQODs/1Gk+if3sblynxkks9ExZLf4WUVKw8u+GDJRQ= Subject key identifier: 3E:B5:9A:C7:E4:2D:E5:90:C7:47:8B:46:08:3F:88:C5:C8:DE:D4:EA Authority key identifier: BB:64:FD:B6:42:81:94:7C:35:67:10:4C:08:73:5A:01:1C:62:10:F4 Certificate issuer: /CN=BB64FDB64281947C3567104C08735A011C6210F4 Certificate serial: 7A33D124AFA12884E730E6539992F545C9D2B110 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft Manifest number: 03CA Signing time: Fri 23 Jan 2026 16:21:49 +0000 Manifest this update: Fri 23 Jan 2026 16:16:49 +0000 Manifest next update: Mon 26 Jan 2026 22:42:49 +0000 Files and hashes: 1: BB64FDB64281947C3567104C08735A011C6210F4.crl (hash: 7FWVXaGrAzXYJZsH6fMo9+Ytgr9/izoX7dR44E3oysc=) 2: 3130332e3136392e3139322e302f32332d3234203d3e20313432333438.roa (hash: WO1pfWHoqTdWNx4bevNPCtJdd2Sq+t2I2uTA3HBPJBM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.crl rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 22:42:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:33:d1:24:af:a1:28:84:e7:30:e6:53:99:92:f5:45:c9:d2:b1:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB64FDB64281947C3567104C08735A011C6210F4 Validity Not Before: Jan 23 16:16:49 2026 GMT Not After : Jan 26 22:42:49 2026 GMT Subject: CN=3EB59AC7E42DE590C7478B46083F88C5C8DED4EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cf:d9:df:01:fa:65:ad:bc:67:cc:68:53:c1: f1:2c:f2:66:b7:bb:a2:61:14:79:c4:19:d3:81:ac: fb:15:69:c3:99:e9:9f:92:a5:75:1b:f4:87:f2:37: 00:4d:9c:41:23:83:f7:32:5e:c1:c9:e0:a1:99:48: 10:ef:d5:e7:77:f0:46:ee:7d:4c:71:bb:1e:d3:89: c4:f3:a9:13:50:5a:18:61:6a:15:49:d8:8c:cd:3f: 88:23:99:85:e9:cb:77:79:b0:ed:1d:c6:9b:95:d3: 0f:a5:51:8c:4c:24:f0:56:fd:e2:4f:23:84:34:5a: 63:f7:89:ca:7c:cf:ff:db:81:b6:72:a0:f2:4a:57: 2f:ca:2c:ee:89:38:60:aa:20:71:9a:4a:24:b9:ab: c2:6d:c8:78:d8:8b:d4:e1:75:e2:93:ff:8a:e5:3e: d4:af:ca:7d:c2:b5:54:55:90:ff:d7:2e:15:2c:10: a8:94:50:c1:3c:6c:3a:82:50:58:26:99:e1:ef:ce: df:ca:f6:a9:f3:49:3a:75:ea:6e:98:5b:98:d7:1f: 2d:05:aa:de:5b:12:05:20:07:97:a5:3d:ff:0b:15: 3f:cc:fe:62:b7:a1:75:d5:81:82:77:ec:a9:c6:9b: f9:ec:fb:fc:f0:a0:ef:d8:95:81:1b:2d:d5:3b:14: d9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:B5:9A:C7:E4:2D:E5:90:C7:47:8B:46:08:3F:88:C5:C8:DE:D4:EA X509v3 Authority Key Identifier: keyid:BB:64:FD:B6:42:81:94:7C:35:67:10:4C:08:73:5A:01:1C:62:10:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:b3:c9:00:21:0c:79:dd:61:ad:5b:30:a5:5c:f1:1a:06:81: ef:aa:03:9b:fa:bc:8e:d7:5a:1c:31:93:78:34:59:eb:68:59: f0:8a:d0:06:d8:a5:81:0c:70:27:b5:c9:ac:27:14:09:0b:76: b1:ea:05:c3:4b:e3:31:ee:cc:69:94:9d:92:ed:eb:12:0a:6b: b2:30:fa:3f:42:8e:a2:5d:f2:8a:81:41:e3:4c:2d:84:f5:76: 52:38:f4:7e:15:fa:59:e8:60:2e:23:5c:4d:c3:5b:7d:69:08: 11:e2:da:81:4a:98:f6:d5:16:a0:a5:14:f9:6f:47:8c:dc:59: 95:f3:3c:75:8d:ea:43:02:7d:c1:e3:3c:f4:76:15:9f:b8:51: 27:f2:2a:c1:51:8a:d2:01:e4:97:bd:47:18:af:85:2c:73:6e: 2e:88:1a:c2:28:4d:1d:de:5a:36:39:61:ab:6d:18:5c:9c:52: a6:eb:a5:bb:d6:ae:e2:51:1a:95:09:30:c7:23:82:7b:b4:6e: f1:99:76:91:41:69:9d:c5:d4:03:32:45:57:c3:be:7b:e4:6c: c3:e0:09:b8:6f:5b:47:11:54:ba:97:a5:88:b3:cb:ec:6c:f2: 3d:14:bb:d5:43:27:6c:03:93:81:ba:6a:f7:66:00:a9:7c:8b: 26:fe:bc:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUejPRJK+hKITnMOZTmZL1RcnSsRAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVBMDEx QzYyMTBGNDAeFw0yNjAxMjMxNjE2NDlaFw0yNjAxMjYyMjQyNDlaMDMxMTAvBgNV BAMTKDNFQjU5QUM3RTQyREU1OTBDNzQ3OEI0NjA4M0Y4OEM1QzhERUQ0RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcz9nfAfplrbxnzGhTwfEs8ma3 u6JhFHnEGdOBrPsVacOZ6Z+SpXUb9IfyNwBNnEEjg/cyXsHJ4KGZSBDv1ed38Ebu fUxxux7TicTzqRNQWhhhahVJ2IzNP4gjmYXpy3d5sO0dxpuV0w+lUYxMJPBW/eJP I4Q0WmP3icp8z//bgbZyoPJKVy/KLO6JOGCqIHGaSiS5q8JtyHjYi9ThdeKT/4rl PtSvyn3CtVRVkP/XLhUsEKiUUME8bDqCUFgmmeHvzt/K9qnzSTp16m6YW5jXHy0F qt5bEgUgB5elPf8LFT/M/mK3oXXVgYJ37KnGm/ns+/zwoO/YlYEbLdU7FNlZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPrWax+Qt5ZDHR4tGCD+Ixcje1OowHwYDVR0j BBgwFoAUu2T9tkKBlHw1ZxBMCHNaARxiEPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGEwMmQzNy0zYjlkLTQ1M2EtOGM4MS0zMjhlNTQwMTQxZmQvMC9CQjY0RkRCNjQy ODE5NDdDMzU2NzEwNEMwODczNUEwMTFDNjIxMEY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVBMDExQzYy MTBGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRhMDJkMzctM2I5ZC00NTNhLThj ODEtMzI4ZTU0MDE0MWZkLzAvQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVB MDExQzYyMTBGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEazyQAhDHndYa1bMKVc8RoGge+qA5v6vI7X Whwxk3g0WetoWfCK0AbYpYEMcCe1yawnFAkLdrHqBcNL4zHuzGmUnZLt6xIKa7Iw +j9CjqJd8oqBQeNMLYT1dlI49H4V+lnoYC4jXE3DW31pCBHi2oFKmPbVFqClFPlv R4zcWZXzPHWN6kMCfcHjPPR2FZ+4USfyKsFRitIB5Je9RxivhSxzbi6IGsIoTR3e WjY5YattGFycUqbrpbvWruJRGpUJMMcjgnu0bvGZdpFBaZ3F1AMyRVfDvnvkbMPg CbhvW0cRVLqXpYizy+xs8j0Uu9VDJ2wDk4G6avdmAKl8iyb+vEU= -----END CERTIFICATE-----Generated at Sun Jan 25 21:52:30 2026 by rpki-client