This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft File: BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft (raw, json) Hash identifier: fixUjuaRlzaYXugTQG7lqaQ17Zh4GwazaWVdodO9WUM= Subject key identifier: 52:42:A1:4D:35:C6:CD:02:5D:C5:5C:6E:CC:63:4E:0B:95:96:63:45 Authority key identifier: BE:69:E9:E2:99:CE:2D:FF:17:6C:7E:FA:B1:45:44:2D:3C:79:0D:C8 Certificate issuer: /CN=BE69E9E299CE2DFF176C7EFAB145442D3C790DC8 Certificate serial: 4B25E23AFA948733D420B1AECA533097EF288571 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft Manifest number: 01FF Signing time: Fri 23 Jan 2026 16:21:46 +0000 Manifest this update: Fri 23 Jan 2026 16:16:46 +0000 Manifest next update: Mon 26 Jan 2026 19:17:46 +0000 Files and hashes: 1: BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.crl (hash: qep/Hx/yYznUNP+ubDKqjQuFc1ObYlLSJxuMCltB1so=) 2: 3230322e38302e3131322e302f32302d3234203d3e203233363939.roa (hash: gm33V+FpkTZp4vhfMn0R1HmBUVRHmRHaTZRlyRWh1Lc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.crl rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 19:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:25:e2:3a:fa:94:87:33:d4:20:b1:ae:ca:53:30:97:ef:28:85:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE69E9E299CE2DFF176C7EFAB145442D3C790DC8 Validity Not Before: Jan 23 16:16:46 2026 GMT Not After : Jan 26 19:17:46 2026 GMT Subject: CN=5242A14D35C6CD025DC55C6ECC634E0B95966345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c3:be:f8:98:5b:26:c8:2b:e7:6b:14:1d:06: 51:8d:df:d4:b7:0d:2c:9a:2a:03:0c:18:a4:23:b1: d0:5a:25:8b:54:d0:63:59:6e:91:88:78:bd:cb:39: 01:b6:b7:05:2d:c5:d0:16:e4:59:32:5b:11:8e:b0: 0a:10:80:19:07:7b:ce:b4:0d:1d:90:e1:58:d1:b5: 02:6a:73:42:2f:15:14:2f:bd:6b:7f:d6:16:a9:aa: 52:02:23:7d:f5:45:b8:67:cf:5f:a6:2f:a7:30:1c: 53:87:2b:5f:97:41:fe:36:56:57:be:c9:5c:d1:e1: fb:51:75:2b:c7:c7:6b:f0:ff:c0:ac:54:25:4f:60: 10:fd:c1:83:63:2c:60:97:3f:7f:1b:03:27:96:86: 60:25:4b:45:d7:83:9d:b7:c0:bd:5e:8f:08:85:2d: c4:62:f7:dc:34:c0:15:b8:c2:39:a5:4e:83:f5:bd: d2:bf:21:dd:7d:b0:b4:bf:31:b1:24:e7:27:17:6a: 3a:d5:d4:26:37:b0:2b:ce:72:bc:5e:cd:45:56:ef: 04:09:19:75:b2:01:09:a1:94:b4:5f:e3:c9:4b:34: 0e:55:10:ad:85:d1:7b:34:f6:f8:1e:df:5d:e9:ec: 56:da:e8:87:cf:d2:86:24:df:9d:3d:47:c5:66:02: f7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:42:A1:4D:35:C6:CD:02:5D:C5:5C:6E:CC:63:4E:0B:95:96:63:45 X509v3 Authority Key Identifier: keyid:BE:69:E9:E2:99:CE:2D:FF:17:6C:7E:FA:B1:45:44:2D:3C:79:0D:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:d2:16:b4:af:d6:ca:08:84:64:e7:ea:16:6d:72:68:84:75: 5a:77:70:a5:49:ae:d2:5c:33:80:c9:6e:68:1a:3b:e6:b6:39: b0:c7:17:84:a3:9c:9e:ba:15:ce:41:a9:61:10:bc:00:5b:6d: 6c:2d:8d:57:f7:d4:7b:c6:22:1b:76:3b:af:39:90:9c:8b:24: 2e:b9:33:c7:40:f8:61:3a:f2:df:71:ee:11:7a:a5:74:26:53: 4a:63:11:0c:12:24:c1:ef:e0:5e:1c:30:e0:ae:f1:dc:89:4f: e5:28:23:8f:df:4f:60:97:0f:ba:bf:55:02:1e:8c:a6:da:97: cc:41:ec:fe:78:96:fa:62:29:18:fe:12:63:7c:7a:9c:cc:0f: de:f2:4b:63:9e:5b:bb:49:32:c7:aa:85:18:34:42:e6:0d:01: af:29:01:c1:75:91:a1:bd:06:f8:fe:99:a8:a2:3d:24:34:85: 94:0b:5c:45:6f:f6:62:c7:3b:cd:63:32:b3:e5:39:e5:ef:55: 10:d0:9d:fe:db:26:30:b7:22:04:54:03:c8:42:bd:b0:56:06: 77:0c:8a:56:d2:c3:6c:06:14:32:40:e5:b4:17:f5:f2:da:2e: 0f:7d:75:28:cc:b9:6e:22:48:17:c8:9d:19:a3:70:d3:38:7c: 8d:07:dd:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSyXiOvqUhzPUILGuylMwl+8ohXEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU2OUU5RTI5OUNFMkRGRjE3NkM3RUZBQjE0NTQ0MkQz Qzc5MERDODAeFw0yNjAxMjMxNjE2NDZaFw0yNjAxMjYxOTE3NDZaMDMxMTAvBgNV BAMTKDUyNDJBMTREMzVDNkNEMDI1REM1NUM2RUNDNjM0RTBCOTU5NjYzNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpw774mFsmyCvnaxQdBlGN39S3 DSyaKgMMGKQjsdBaJYtU0GNZbpGIeL3LOQG2twUtxdAW5FkyWxGOsAoQgBkHe860 DR2Q4VjRtQJqc0IvFRQvvWt/1hapqlICI331Rbhnz1+mL6cwHFOHK1+XQf42Vle+ yVzR4ftRdSvHx2vw/8CsVCVPYBD9wYNjLGCXP38bAyeWhmAlS0XXg523wL1ejwiF LcRi99w0wBW4wjmlToP1vdK/Id19sLS/MbEk5ycXajrV1CY3sCvOcrxezUVW7wQJ GXWyAQmhlLRf48lLNA5VEK2F0Xs09vge313p7Fba6IfP0oYk3509R8VmAvfpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUkKhTTXGzQJdxVxuzGNOC5WWY0UwHwYDVR0j BBgwFoAUvmnp4pnOLf8XbH76sUVELTx5DcgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzhhMjMxOS1iNGZmLTQ5NzMtOGRhOS1jNDFhZDJmNzMxZjMvMC9CRTY5RTlFMjk5 Q0UyREZGMTc2QzdFRkFCMTQ1NDQyRDNDNzkwREM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkU2OUU5RTI5OUNFMkRGRjE3NkM3RUZBQjE0NTQ0MkQzQzc5 MERDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjM4YTIzMTktYjRmZi00OTczLThk YTktYzQxYWQyZjczMWYzLzAvQkU2OUU5RTI5OUNFMkRGRjE3NkM3RUZBQjE0NTQ0 MkQzQzc5MERDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAADSFrSv1soIhGTn6hZtcmiEdVp3cKVJrtJc M4DJbmgaO+a2ObDHF4SjnJ66Fc5BqWEQvABbbWwtjVf31HvGIht2O685kJyLJC65 M8dA+GE68t9x7hF6pXQmU0pjEQwSJMHv4F4cMOCu8dyJT+UoI4/fT2CXD7q/VQIe jKbal8xB7P54lvpiKRj+EmN8epzMD97yS2OeW7tJMseqhRg0QuYNAa8pAcF1kaG9 Bvj+maiiPSQ0hZQLXEVv9mLHO81jMrPlOeXvVRDQnf7bJjC3IgRUA8hCvbBWBncM ilbSw2wGFDJA5bQX9fLaLg99dSjMuW4iSBfInRmjcNM4fI0H3S0= -----END CERTIFICATE-----Generated at Sun Jan 25 20:37:09 2026 by rpki-client