This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft File: BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft (raw, json) Hash identifier: qH+FW2fDkIH8JDp2ExJa0bcCzrcmV1fbxoZUkVyNhz0= Subject key identifier: D1:A3:E1:BC:12:A8:49:C9:A6:4C:43:7A:1A:AD:B8:42:84:03:32:23 Authority key identifier: BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9 Certificate issuer: /CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9 Certificate serial: 1FD228AB343A093253B8C4B25747AB2B395E36B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft Manifest number: 033F Signing time: Sun 25 Jan 2026 08:31:55 +0000 Manifest this update: Sun 25 Jan 2026 08:26:55 +0000 Manifest next update: Wed 28 Jan 2026 12:37:55 +0000 Files and hashes: 1: 3130332e3231302e3131362e302f32342d3234203d3e203634303234.roa (hash: yMj7uFI234xCcazZ5UUXhaecBl1WVAuun+atXN8IBlQ=) 2: BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl (hash: DiHYmY1bCIZdQMrkpBHI2Y9/ZvdkXurnqkr5ydLBgkc=) 3: 3130332e3231302e3131372e302f32342d3234203d3e203634303234.roa (hash: rvryrNsii8p5FWEuXQ/ZA1z3QEXlw8MezShqHde9HFo=) 4: 3130332e3231302e3131382e302f32342d3234203d3e203634303234.roa (hash: tavtmJbAGyPVyKNkS1yIlicvomGLqf7gKFQGKl+8wbg=) 5: 3130332e3231302e3131392e302f32342d3234203d3e203634303234.roa (hash: Ytr8LGrcIz/5Ip4kUA/P8vtfeNKUZXIGazNVZyLvVDY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 12:37:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:d2:28:ab:34:3a:09:32:53:b8:c4:b2:57:47:ab:2b:39:5e:36:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9 Validity Not Before: Jan 25 08:26:55 2026 GMT Not After : Jan 28 12:37:55 2026 GMT Subject: CN=D1A3E1BC12A849C9A64C437A1AADB84284033223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fc:b3:e4:14:f7:6f:54:15:a4:1a:f8:dc:6e: 7d:ee:f9:b6:f1:ef:7c:77:9f:16:94:0a:74:4e:03: 8e:40:45:8f:a8:ef:05:eb:e6:bc:62:42:cc:07:fe: ca:64:df:32:ff:69:95:29:37:0b:e2:8f:94:cc:8f: c4:a3:b2:b6:8f:47:21:53:5d:d9:5a:18:9e:ba:d2: 9a:db:bf:4c:b6:ec:4e:04:3a:e0:41:7c:db:99:10: 97:9e:7b:35:1d:5b:4e:6a:41:1f:e9:27:27:ab:2b: 10:cc:98:77:ed:f1:48:24:9f:33:bb:34:13:73:3b: c6:36:b0:6c:a2:7d:bc:b5:8b:55:53:57:2d:22:da: d3:34:c2:34:f1:52:e4:dd:04:b0:f7:14:3d:77:ed: da:97:b6:ea:3f:7e:1a:a0:b7:7d:02:86:e2:2e:c3: 63:e5:4b:93:9a:40:03:4f:a7:a0:6a:27:e2:0c:bb: d3:e3:e2:6a:ca:bc:6f:39:e5:c9:2f:ab:94:95:13: 13:86:3f:4d:34:ce:14:79:10:c8:a1:0f:23:50:45: 11:e9:d2:4a:46:87:72:94:5f:2b:3b:66:3f:3b:78: f3:58:2a:70:ab:7e:22:3c:d9:70:2e:40:fd:31:9e: 7f:e9:2c:9c:67:ef:ae:5b:ac:16:7d:7b:be:bd:ed: e3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:A3:E1:BC:12:A8:49:C9:A6:4C:43:7A:1A:AD:B8:42:84:03:32:23 X509v3 Authority Key Identifier: keyid:BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:8c:ca:92:55:ad:02:39:ee:6f:a2:28:84:0e:ce:ee:51:7c: b8:f5:e4:cc:f4:ce:30:09:cd:c1:9c:fc:f6:f7:a3:bb:cb:d2: a2:f2:b2:2b:14:61:86:7a:b8:cb:92:ad:b6:44:fe:d6:2d:f3: 8f:0f:1a:49:8d:97:38:09:b1:d7:4a:57:3b:61:84:f7:99:01: 5f:bc:32:f1:2c:a4:53:a7:c2:ee:1e:42:e0:0f:b3:bd:b9:46: 11:ea:e4:41:7e:3b:6d:7b:ee:0c:fe:0c:e8:3b:ea:99:d6:a9: 57:c1:fe:c1:5e:4c:fe:3d:66:55:ce:71:51:20:71:b8:18:b1: 56:6a:c4:d9:1e:c6:6f:7f:97:6a:14:ee:3c:0d:e8:96:aa:52: f2:fa:48:63:bc:3d:cc:0c:3d:cc:96:5d:ad:3a:ee:a3:c7:ff: 6d:a2:c7:f1:4d:94:75:bd:8b:35:10:de:f0:01:b8:e7:1f:d9: dd:92:f1:34:02:3d:39:c8:43:7e:64:1c:15:a5:6a:9a:8c:24: 5d:ec:94:05:b0:d8:71:a4:01:03:a6:49:52:1a:83:16:9c:c6: b8:85:dc:d2:86:f4:fc:a6:58:52:da:2b:19:c7:18:65:89:7d: 67:c8:28:c6:c8:4f:c8:21:c9:74:0b:52:d2:09:71:97:aa:be: 05:b0:aa:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH9IoqzQ6CTJTuMSyV0erKzleNrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThERDc0 Q0JDNUVFOTAeFw0yNjAxMjUwODI2NTVaFw0yNjAxMjgxMjM3NTVaMDMxMTAvBgNV BAMTKEQxQTNFMUJDMTJBODQ5QzlBNjRDNDM3QTFBQURCODQyODQwMzMyMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF/LPkFPdvVBWkGvjcbn3u+bbx 73x3nxaUCnROA45ARY+o7wXr5rxiQswH/spk3zL/aZUpNwvij5TMj8SjsraPRyFT XdlaGJ660prbv0y27E4EOuBBfNuZEJeeezUdW05qQR/pJyerKxDMmHft8UgknzO7 NBNzO8Y2sGyifby1i1VTVy0i2tM0wjTxUuTdBLD3FD137dqXtuo/fhqgt30ChuIu w2PlS5OaQANPp6BqJ+IMu9Pj4mrKvG855ckvq5SVExOGP000zhR5EMihDyNQRRHp 0kpGh3KUXys7Zj87ePNYKnCrfiI82XAuQP0xnn/pLJxn765brBZ9e7697eNZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0aPhvBKoScmmTEN6Gq24QoQDMiMwHwYDVR0j BBgwFoAUv+D1UkRs5cJj2FQUxy6N10y8XukwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWZkMzUxZS0yYmQ3LTQxOTEtOTEwNi01M2Y4NzUwMTZmMGUvMC9CRkUwRjU1MjQ0 NkNFNUMyNjNEODU0MTRDNzJFOERENzRDQkM1RUU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThERDc0Q0JD NUVFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFmZDM1MWUtMmJkNy00MTkxLTkx MDYtNTNmODc1MDE2ZjBlLzAvQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThE RDc0Q0JDNUVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAqMypJVrQI57m+iKIQOzu5RfLj15Mz0zjAJ zcGc/Pb3o7vL0qLysisUYYZ6uMuSrbZE/tYt848PGkmNlzgJsddKVzthhPeZAV+8 MvEspFOnwu4eQuAPs725RhHq5EF+O2177gz+DOg76pnWqVfB/sFeTP49ZlXOcVEg cbgYsVZqxNkexm9/l2oU7jwN6JaqUvL6SGO8PcwMPcyWXa067qPH/22ix/FNlHW9 izUQ3vABuOcf2d2S8TQCPTnIQ35kHBWlapqMJF3slAWw2HGkAQOmSVIagxacxriF 3NKG9PymWFLaKxnHGGWJfWfIKMbIT8ghyXQLUtIJcZeqvgWwqgM= -----END CERTIFICATE-----Generated at Sun Jan 25 20:32:34 2026 by rpki-client