This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft File: BF97329188204CAD55AEC0D48286FAC81B806C71.mft (raw, json) Hash identifier: 4WqFyam5si2nhrxdgU8jesRUyL8wihFE0lt2/JOM0uw= Subject key identifier: 02:84:7F:68:8D:87:31:C9:2C:9E:93:7A:55:E1:C5:D2:D5:A1:C3:AE Authority key identifier: BF:97:32:91:88:20:4C:AD:55:AE:C0:D4:82:86:FA:C8:1B:80:6C:71 Certificate issuer: /CN=BF97329188204CAD55AEC0D48286FAC81B806C71 Certificate serial: 6B1FFE44852B92BAAD36DEA7582826C76963BFDE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF97329188204CAD55AEC0D48286FAC81B806C71.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft Manifest number: 96 Signing time: Sun 25 Jan 2026 12:11:59 +0000 Manifest this update: Sun 25 Jan 2026 12:06:59 +0000 Manifest next update: Wed 28 Jan 2026 17:19:59 +0000 Files and hashes: 1: BF97329188204CAD55AEC0D48286FAC81B806C71.crl (hash: 61kB6n3WQj/txxy/2VazwCCoU1r9L7OaHNk1JZkL/2g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.crl rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF97329188204CAD55AEC0D48286FAC81B806C71.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:1f:fe:44:85:2b:92:ba:ad:36:de:a7:58:28:26:c7:69:63:bf:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF97329188204CAD55AEC0D48286FAC81B806C71 Validity Not Before: Jan 25 12:06:59 2026 GMT Not After : Jan 28 17:19:59 2026 GMT Subject: CN=02847F688D8731C92C9E937A55E1C5D2D5A1C3AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:05:f7:2f:1b:32:3c:16:c6:de:9c:62:5d:a7: 69:d7:7b:71:62:ad:e6:e4:98:88:c3:e5:d9:5d:71: 5a:0b:2c:8e:62:95:cc:1b:b2:2a:df:5f:3b:f6:f0: 39:f4:41:89:59:cc:d3:a5:b6:08:f5:60:10:0a:17: 37:f0:26:84:75:99:d6:bd:8f:66:6d:1a:f4:cb:a5: a5:c8:c1:a4:07:e8:15:0c:6a:64:8b:f1:24:c2:ed: 9d:cc:cd:df:a1:f4:d9:09:f2:86:8c:2c:97:1e:43: 14:77:ed:a1:7b:be:6e:85:ce:7e:16:01:fb:43:99: 48:42:d2:3b:7b:67:d6:5c:82:67:4e:ef:4e:7d:2b: 38:62:c2:c8:ec:05:6e:89:0f:74:19:32:51:95:01: 6d:79:0c:c2:10:6a:1a:ff:66:4c:6a:07:d0:5f:8d: 8b:bc:9c:ce:05:e9:4a:0b:29:a1:99:a9:53:9f:22: fc:a4:0a:49:73:db:1a:90:0a:1d:cb:c3:2e:5f:9b: 72:64:b2:5d:f6:a9:00:ce:1e:d0:27:c9:cc:45:48: 09:b7:49:5f:64:0e:8f:82:be:87:d4:cd:b1:06:15: f2:8e:e5:9b:90:b2:8f:48:60:44:45:8b:f8:4d:40: a2:68:cf:cb:62:62:c5:c0:3f:f7:54:f9:a9:fe:0b: 36:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:84:7F:68:8D:87:31:C9:2C:9E:93:7A:55:E1:C5:D2:D5:A1:C3:AE X509v3 Authority Key Identifier: keyid:BF:97:32:91:88:20:4C:AD:55:AE:C0:D4:82:86:FA:C8:1B:80:6C:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF97329188204CAD55AEC0D48286FAC81B806C71.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:c2:c7:0c:47:d1:49:78:f6:63:6e:f2:c6:0f:41:b9:31:b0: 85:54:61:b3:b9:2c:a3:6b:b9:49:59:33:6c:bb:77:99:c1:28: a6:81:ae:67:2a:72:3a:25:ff:b4:46:79:3a:32:8f:cf:1e:25: 12:5a:99:06:a0:eb:34:0a:d9:47:44:02:3f:e0:be:d6:48:3c: f8:a0:22:0a:39:aa:5e:39:de:01:f8:ff:29:92:69:34:f4:42: 5b:1e:84:59:3c:01:83:24:bb:ea:49:0c:62:ca:6b:b7:34:c0: 34:58:b2:d2:88:c8:e1:f9:eb:a5:4c:95:49:2d:8c:48:cc:a1: b2:37:0d:ee:6c:6d:3e:b9:6a:1c:33:93:7c:b7:85:01:e0:fb: 30:2f:b4:e2:13:50:20:23:60:8f:eb:87:b9:d2:cb:65:97:5f: 55:b5:1c:6d:9e:89:ae:aa:60:26:bc:3d:b4:2a:be:5a:a3:be: b3:33:1f:74:77:71:7a:a5:bd:54:67:8d:3c:b7:77:4c:f5:b5: 14:63:7c:e0:66:b8:91:34:11:a1:f7:d1:56:54:38:ab:7d:f4: 6b:a7:f3:45:b1:3a:2a:4f:ab:96:6c:67:e6:f2:82:1b:d2:69: 4c:bc:21:3c:53:16:e5:7f:0f:25:55:af:50:57:99:01:59:b9: d3:27:2d:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUax/+RIUrkrqtNt6nWCgmx2ljv94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY5NzMyOTE4ODIwNENBRDU1QUVDMEQ0ODI4NkZBQzgx QjgwNkM3MTAeFw0yNjAxMjUxMjA2NTlaFw0yNjAxMjgxNzE5NTlaMDMxMTAvBgNV BAMTKDAyODQ3RjY4OEQ4NzMxQzkyQzlFOTM3QTU1RTFDNUQyRDVBMUMzQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6BfcvGzI8FsbenGJdp2nXe3Fi rebkmIjD5dldcVoLLI5ilcwbsirfXzv28Dn0QYlZzNOltgj1YBAKFzfwJoR1mda9 j2ZtGvTLpaXIwaQH6BUMamSL8STC7Z3Mzd+h9NkJ8oaMLJceQxR37aF7vm6Fzn4W AftDmUhC0jt7Z9ZcgmdO7059KzhiwsjsBW6JD3QZMlGVAW15DMIQahr/ZkxqB9Bf jYu8nM4F6UoLKaGZqVOfIvykCklz2xqQCh3Lwy5fm3Jksl32qQDOHtAnycxFSAm3 SV9kDo+CvofUzbEGFfKO5ZuQso9IYERFi/hNQKJoz8tiYsXAP/dU+an+CzaTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAoR/aI2HMcksnpN6VeHF0tWhw64wHwYDVR0j BBgwFoAUv5cykYggTK1VrsDUgob6yBuAbHEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MjljY2ViNi1hNGU3LTRlODItODhiZS1iYjk2OTdiZDFkMDEvMC9CRjk3MzI5MTg4 MjA0Q0FENTVBRUMwRDQ4Mjg2RkFDODFCODA2QzcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkY5NzMyOTE4ODIwNENBRDU1QUVDMEQ0ODI4NkZBQzgxQjgw NkM3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzI5Y2NlYjYtYTRlNy00ZTgyLTg4 YmUtYmI5Njk3YmQxZDAxLzAvQkY5NzMyOTE4ODIwNENBRDU1QUVDMEQ0ODI4NkZB QzgxQjgwNkM3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHbCxwxH0Ul49mNu8sYPQbkxsIVUYbO5LKNr uUlZM2y7d5nBKKaBrmcqcjol/7RGeToyj88eJRJamQag6zQK2UdEAj/gvtZIPPig Igo5ql453gH4/ymSaTT0QlsehFk8AYMku+pJDGLKa7c0wDRYstKIyOH566VMlUkt jEjMobI3De5sbT65ahwzk3y3hQHg+zAvtOITUCAjYI/rh7nSy2WXX1W1HG2eia6q YCa8PbQqvlqjvrMzH3R3cXqlvVRnjTy3d0z1tRRjfOBmuJE0EaH30VZUOKt99Gun 80WxOipPq5ZsZ+byghvSaUy8ITxTFuV/DyVVr1BXmQFZudMnLVs= -----END CERTIFICATE-----Generated at Sun Jan 25 18:52:52 2026 by rpki-client