This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft File: BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft (raw, json) Hash identifier: l5nCpnD8oJu8OzKH5YlwyfFb6bQ0WH8vWIIqUnV+UaI= Subject key identifier: 28:DE:73:EF:DF:25:24:01:0F:F2:6A:A7:19:8D:06:D8:DE:A2:96:B6 Authority key identifier: BC:18:FD:A2:49:B3:BD:56:02:06:48:E8:3F:0B:24:DD:BF:1E:66:E5 Certificate issuer: /CN=BC18FDA249B3BD56020648E83F0B24DDBF1E66E5 Certificate serial: 668ABECAB20A1F9914F7A9CAAF45FE14BAB525EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft Manifest number: 04AC Signing time: Sun 25 Jan 2026 08:42:09 +0000 Manifest this update: Sun 25 Jan 2026 08:37:09 +0000 Manifest next update: Wed 28 Jan 2026 17:22:09 +0000 Files and hashes: 1: 3130332e3136302e3136342e302f32342d3234203d3e203538343935.roa (hash: 16HQZb88y83aHIsJXjQBx7+/lMzUX78B/OozTUnK7s4=) 2: BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl (hash: QWAzArnnNqSZnZ/5FuO5dBf4uRHiGCNbF9Zn4oe/88U=) 3: 3130332e3136302e3136352e302f32342d3234203d3e203538343935.roa (hash: tvbrgpnRc/Q6RgyaqccXwIS95wHSwvk+hPXU5wbUrgY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:8a:be:ca:b2:0a:1f:99:14:f7:a9:ca:af:45:fe:14:ba:b5:25:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC18FDA249B3BD56020648E83F0B24DDBF1E66E5 Validity Not Before: Jan 25 08:37:09 2026 GMT Not After : Jan 28 17:22:09 2026 GMT Subject: CN=28DE73EFDF2524010FF26AA7198D06D8DEA296B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fa:4f:c2:f0:8a:96:78:c3:3a:c8:07:7e:5c: aa:62:a9:b5:cb:a9:37:5e:30:ea:fd:0a:10:df:a4: b3:4a:a1:ee:6f:46:0b:9f:ed:80:31:ef:24:eb:49: 40:27:b9:9c:81:5b:3e:0e:15:9f:cc:dc:77:7f:1b: f9:95:fd:f1:95:5d:bb:8b:91:f7:49:81:37:61:57: 3d:4a:4b:0c:94:e3:0b:e4:99:f1:a6:98:47:20:59: 64:ff:43:f4:48:3f:94:56:0d:b5:77:00:19:b2:cb: f0:61:a2:7a:23:03:7f:c3:43:1b:b8:a1:79:3a:97: 70:5d:56:b7:60:a5:4d:e6:3d:5a:90:36:73:55:da: a4:76:dd:b2:d4:0a:8a:10:f4:15:ee:42:9a:d1:86: 76:40:43:20:a5:59:5b:55:aa:96:76:4a:9e:ec:cf: 3b:fe:d8:59:32:1a:60:4e:64:06:5c:20:1b:db:2f: 6c:e0:cf:3a:03:e5:ac:62:5f:df:7e:7d:5c:8f:50: dc:15:a1:c2:71:e4:74:9e:3a:0e:06:79:29:f8:f6: 06:14:04:37:7e:05:c4:30:c2:b2:9e:86:a8:91:c2: 02:6d:f1:b1:af:5e:bb:70:9e:9e:70:03:de:f7:c9: 38:2d:83:d8:a9:53:b4:9a:62:6b:01:0d:9e:44:46: 61:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:DE:73:EF:DF:25:24:01:0F:F2:6A:A7:19:8D:06:D8:DE:A2:96:B6 X509v3 Authority Key Identifier: keyid:BC:18:FD:A2:49:B3:BD:56:02:06:48:E8:3F:0B:24:DD:BF:1E:66:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:44:e9:d2:1e:1d:4d:1a:8a:d1:a3:e2:15:c2:96:d0:62:9b: c7:d5:cb:58:91:21:d4:32:05:cd:15:4d:77:cd:cf:df:36:28: 90:d4:c5:a1:79:15:d5:51:34:80:d3:20:44:83:e6:79:44:06: e2:51:19:f3:2d:f7:23:41:98:71:b8:91:4d:7f:f5:22:9d:e2: 5d:e7:4a:a4:79:70:17:79:5d:eb:f4:db:9e:84:34:b5:21:1d: d3:da:a8:f4:48:42:71:22:7a:78:ed:e2:1e:97:0f:ab:3e:da: 00:fb:f3:d4:65:ff:84:25:8a:a5:ad:d5:a9:53:58:8b:31:3e: ea:7e:42:e9:24:5a:13:50:1b:5d:5f:9c:89:e2:45:5f:3d:0d: d4:84:c8:8e:85:6f:d2:cc:a5:37:84:9f:39:25:ef:38:46:0e: be:b7:e6:f4:01:48:26:5b:fe:06:09:e5:73:d9:69:86:25:d7: 39:52:00:2d:9d:c3:95:0f:cc:ff:1a:a8:7f:ea:99:6f:47:de: 46:de:ae:74:b7:00:bf:f8:36:96:c4:bb:01:51:c1:c7:74:a7: 0b:fa:ed:b3:93:e7:2f:35:18:0b:6c:37:b8:61:e3:5b:07:27: 7f:80:61:3a:2c:3a:0f:de:68:8c:a1:10:08:19:49:95:af:d6: 3d:ac:8e:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZoq+yrIKH5kU96nKr0X+FLq1JeowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0RERC RjFFNjZFNTAeFw0yNjAxMjUwODM3MDlaFw0yNjAxMjgxNzIyMDlaMDMxMTAvBgNV BAMTKDI4REU3M0VGREYyNTI0MDEwRkYyNkFBNzE5OEQwNkQ4REVBMjk2QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG+k/C8IqWeMM6yAd+XKpiqbXL qTdeMOr9ChDfpLNKoe5vRguf7YAx7yTrSUAnuZyBWz4OFZ/M3Hd/G/mV/fGVXbuL kfdJgTdhVz1KSwyU4wvkmfGmmEcgWWT/Q/RIP5RWDbV3ABmyy/BhonojA3/DQxu4 oXk6l3BdVrdgpU3mPVqQNnNV2qR23bLUCooQ9BXuQprRhnZAQyClWVtVqpZ2Sp7s zzv+2FkyGmBOZAZcIBvbL2zgzzoD5axiX99+fVyPUNwVocJx5HSeOg4GeSn49gYU BDd+BcQwwrKehqiRwgJt8bGvXrtwnp5wA973yTgtg9ipU7SaYmsBDZ5ERmEjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKN5z798lJAEP8mqnGY0G2N6ilrYwHwYDVR0j BBgwFoAUvBj9okmzvVYCBkjoPwsk3b8eZuUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjQ3YTZhMi0xYWQwLTQ2YzctOWNhZC01OGJiZDcxZmI1YTQvMC9CQzE4RkRBMjQ5 QjNCRDU2MDIwNjQ4RTgzRjBCMjREREJGMUU2NkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0RERCRjFF NjZFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY0N2E2YTItMWFkMC00NmM3LTlj YWQtNThiYmQ3MWZiNWE0LzAvQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0 RERCRjFFNjZFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKFE6dIeHU0aitGj4hXCltBim8fVy1iRIdQy Bc0VTXfNz982KJDUxaF5FdVRNIDTIESD5nlEBuJRGfMt9yNBmHG4kU1/9SKd4l3n SqR5cBd5Xev0256ENLUhHdPaqPRIQnEienjt4h6XD6s+2gD789Rl/4QliqWt1alT WIsxPup+QukkWhNQG11fnIniRV89DdSEyI6Fb9LMpTeEnzkl7zhGDr635vQBSCZb /gYJ5XPZaYYl1zlSAC2dw5UPzP8aqH/qmW9H3kbernS3AL/4NpbEuwFRwcd0pwv6 7bOT5y81GAtsN7hh41sHJ3+AYTosOg/eaIyhEAgZSZWv1j2sjlI= -----END CERTIFICATE-----Generated at Sun Jan 25 18:48:46 2026 by rpki-client