This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft File: B21EB18A21CA5136A04F43EC18E1AA867B348052.mft (raw, json) Hash identifier: GE4e3Z9xAWKRsI3d8kBvm3qyg7mpvinG0TgKcIa3M0Q= Subject key identifier: 27:4B:A7:52:53:9B:30:97:E1:87:A9:78:A0:D2:58:C0:D4:B3:99:95 Authority key identifier: B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52 Certificate issuer: /CN=B21EB18A21CA5136A04F43EC18E1AA867B348052 Certificate serial: 1806D36C473EA2A6F6A5B8E7191F3BFCA4C9800C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft Manifest number: 022D Signing time: Sat 24 Jan 2026 12:00:43 +0000 Manifest this update: Sat 24 Jan 2026 11:55:43 +0000 Manifest next update: Tue 27 Jan 2026 17:14:43 +0000 Files and hashes: 1: 3130332e3138362e3230302e302f32332d3233203d3e20313439373231.roa (hash: twPNobyYSNQMFZDe1As8vUaoEUycbvyjmJMFp77KHQc=) 2: 3130332e3138362e3230312e302f32342d3234203d3e20313439373231.roa (hash: G1ZAtVFl8VG/gYfc4EYdl05ZPWzNHnTYzxrgL9LheQs=) 3: 3130332e3138362e3230302e302f32342d3234203d3e203438343635.roa (hash: VPa5e+44+Id69OMYBSbsr2l/joZIe5MZEOOTHqNevEk=) 4: 3130332e3138362e3230302e302f32342d3234203d3e20313439373231.roa (hash: MVBRsOIN1IZt0jLk1q+iLxrhtC7Paa/XY5pFKcxb+gg=) 5: B21EB18A21CA5136A04F43EC18E1AA867B348052.crl (hash: UBJi1gKGMslBaXscAP8Cp5YngRzNk5Z8UYAk4gn2v/s=) 6: 3130332e3138362e3230312e302f32342d3234203d3e203438343635.roa (hash: V3FWYoEkQa8gWV4+QDqxx7HCAEDVwrNjJj0qdVF+PUc=) 7: 3130332e3138362e3230302e302f32332d3234203d3e203333363137.roa (hash: bFy9ipmHq994gZqzOrC2MrxUHNGx4j8GQXF6t3SnIIQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 17:14:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:06:d3:6c:47:3e:a2:a6:f6:a5:b8:e7:19:1f:3b:fc:a4:c9:80:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B21EB18A21CA5136A04F43EC18E1AA867B348052 Validity Not Before: Jan 24 11:55:43 2026 GMT Not After : Jan 27 17:14:43 2026 GMT Subject: CN=274BA752539B3097E187A978A0D258C0D4B39995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:51:39:bf:39:11:62:bc:bb:72:c3:f4:40:c7: 1d:09:19:2b:8e:0c:01:6b:51:57:d0:e4:e6:a8:ae: 40:37:5d:40:1c:2f:2d:15:50:af:fc:05:b3:8d:49: 41:97:62:50:ff:7d:2c:40:83:94:dd:f6:c4:0d:11: 3e:26:7b:fa:ec:3b:6e:4d:c1:b3:e3:4e:b8:c4:6f: 8c:eb:1f:a8:5e:be:2c:91:61:3e:4d:b9:ea:67:34: 38:4b:06:04:d1:73:4e:15:97:5a:0d:70:61:30:62: 2f:5e:60:14:a0:57:ff:fb:93:89:e1:e4:b7:4d:c5: f5:cd:0d:ee:ac:83:dd:76:30:0c:96:19:c7:70:0b: de:99:86:6f:8c:6e:cc:97:66:c5:94:88:19:b7:c1: d8:5e:e4:0b:c9:75:a9:84:6d:f9:d8:5a:7d:91:29: 65:a6:39:58:21:39:a2:88:86:fe:f9:06:63:df:6a: 6a:3d:67:36:84:ea:d3:9f:8a:ea:fa:05:ed:37:1e: 8b:80:c1:4a:62:1b:04:46:33:09:ca:7a:7b:01:c0: e9:40:09:6b:3f:fa:9b:7e:fe:f9:6e:aa:7e:0c:1d: 36:5b:2f:78:2f:a8:74:04:72:de:d7:10:43:7c:e5: 1b:8f:e3:ae:be:44:71:4f:90:19:85:3a:90:dc:91: fb:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:4B:A7:52:53:9B:30:97:E1:87:A9:78:A0:D2:58:C0:D4:B3:99:95 X509v3 Authority Key Identifier: keyid:B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:7b:7b:da:4d:a9:de:88:97:81:41:ec:15:c2:4b:98:44:eb: 38:ae:04:c6:e1:e2:2e:55:d5:5d:80:75:d3:22:bd:fc:cf:e0: 6f:b5:3f:7b:ef:e2:31:43:66:3c:53:77:fe:ac:8d:0c:43:9b: 9d:2f:fd:78:fb:7c:13:6c:6a:4e:df:64:dd:c2:7d:39:e7:11: 6b:cc:a8:7e:a5:3e:c3:0b:e0:73:56:17:60:14:90:1a:23:71: 19:98:ee:28:26:d7:cc:51:2f:05:92:c2:13:f0:99:03:89:19: 91:0a:48:6a:93:a2:f2:5a:1d:a1:b2:68:7b:5d:2e:0a:72:45: ee:4c:18:e7:a4:9e:30:5f:f4:c6:c6:2c:ec:cc:b3:0a:b1:d0: 63:02:cb:ab:7e:1f:b0:26:1e:66:01:87:c5:a8:a7:db:38:05: 81:48:af:c0:68:bf:89:8f:e1:87:2b:39:49:6b:96:37:8b:cb: 48:f7:4f:13:ce:30:b9:75:6d:26:27:20:5f:ad:31:b5:5f:d5: 47:2b:3c:72:fd:ba:ce:00:7a:01:a4:fe:dd:98:dd:f3:0e:6e: b1:a1:15:50:bc:8f:4b:ea:69:e7:48:e6:67:fb:01:3e:69:60: 50:49:5e:cd:77:b6:32:e5:5d:13:a4:d6:63:e6:9c:d9:67:a5: c1:f3:bf:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGAbTbEc+oqb2pbjnGR87/KTJgAwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFBODY3 QjM0ODA1MjAeFw0yNjAxMjQxMTU1NDNaFw0yNjAxMjcxNzE0NDNaMDMxMTAvBgNV BAMTKDI3NEJBNzUyNTM5QjMwOTdFMTg3QTk3OEEwRDI1OEMwRDRCMzk5OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOUTm/ORFivLtyw/RAxx0JGSuO DAFrUVfQ5OaorkA3XUAcLy0VUK/8BbONSUGXYlD/fSxAg5Td9sQNET4me/rsO25N wbPjTrjEb4zrH6heviyRYT5NuepnNDhLBgTRc04Vl1oNcGEwYi9eYBSgV//7k4nh 5LdNxfXNDe6sg912MAyWGcdwC96Zhm+MbsyXZsWUiBm3wdhe5AvJdamEbfnYWn2R KWWmOVghOaKIhv75BmPfamo9ZzaE6tOfiur6Be03HouAwUpiGwRGMwnKensBwOlA CWs/+pt+/vluqn4MHTZbL3gvqHQEct7XEEN85RuP466+RHFPkBmFOpDckftPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ0unUlObMJfhh6l4oNJYwNSzmZUwHwYDVR0j BBgwFoAUsh6xiiHKUTagT0PsGOGqhns0gFIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTU3N2MzYy02NmNkLTQwYTQtYWZjNS02YzZmOGI2NjRhNTEvMC9CMjFFQjE4QTIx Q0E1MTM2QTA0RjQzRUMxOEUxQUE4NjdCMzQ4MDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFBODY3QjM0 ODA1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk1NzdjM2MtNjZjZC00MGE0LWFm YzUtNmM2ZjhiNjY0YTUxLzAvQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFB ODY3QjM0ODA1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAZ7e9pNqd6Il4FB7BXCS5hE6ziuBMbh4i5V 1V2AddMivfzP4G+1P3vv4jFDZjxTd/6sjQxDm50v/Xj7fBNsak7fZN3CfTnnEWvM qH6lPsML4HNWF2AUkBojcRmY7igm18xRLwWSwhPwmQOJGZEKSGqTovJaHaGyaHtd LgpyRe5MGOeknjBf9MbGLOzMswqx0GMCy6t+H7AmHmYBh8Wop9s4BYFIr8Bov4mP 4YcrOUlrljeLy0j3TxPOMLl1bSYnIF+tMbVf1UcrPHL9us4AegGk/t2Y3fMObrGh FVC8j0vqaedI5mf7AT5pYFBJXs13tjLlXROk1mPmnNlnpcHzv5o= -----END CERTIFICATE-----Generated at Sun Jan 25 18:36:37 2026 by rpki-client