This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft File: BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft (raw, json) Hash identifier: GwiIeXPc0dnHUq/glw7mDex/b1suo2fwy60Nq34mFP4= Subject key identifier: D9:17:D9:1A:F2:27:99:F9:EA:5E:61:B2:8C:C7:E5:85:B3:E1:EE:71 Authority key identifier: BC:8B:D5:48:5C:9B:01:D1:76:F3:FA:A8:F3:81:E5:EC:ED:8C:D3:B8 Certificate issuer: /CN=BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8 Certificate serial: 25CCD47F18487D2F79156995B26BEC901E9D6257 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft Manifest number: 0245 Signing time: Sat 24 Jan 2026 02:00:41 +0000 Manifest this update: Sat 24 Jan 2026 01:55:41 +0000 Manifest next update: Tue 27 Jan 2026 03:06:41 +0000 Files and hashes: 1: BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl (hash: li3+rFTN2rZfQSh2wsxHp70Cxyhg1o5FhNkjl8XVykw=) 2: 3130332e37332e3139322e302f32342d3234203d3e20313439393434.roa (hash: kygHr26DqsY5AyJfGENb/AiH0P8fZ+v+8xcM4ekCjqw=) 3: 3130332e37332e3139332e302f32342d3234203d3e20313439393434.roa (hash: 0uJHSCFsdwdZP1NKhkt1f+yFu68JksGMAuDEtBg71VE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 03:06:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:cc:d4:7f:18:48:7d:2f:79:15:69:95:b2:6b:ec:90:1e:9d:62:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8 Validity Not Before: Jan 24 01:55:41 2026 GMT Not After : Jan 27 03:06:41 2026 GMT Subject: CN=D917D91AF22799F9EA5E61B28CC7E585B3E1EE71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:26:7e:49:dc:f7:c1:40:5e:cf:34:a3:05:3e: 74:86:5f:63:d4:c0:79:fb:11:a3:94:97:af:e5:00: 54:9e:d2:57:cc:1a:23:8b:9f:b2:6d:a1:e1:56:1f: e3:48:a6:90:cc:cc:b6:9b:62:48:76:7a:8b:71:9e: 05:7f:24:c5:ef:41:ca:53:1a:1f:6e:7d:82:30:53: 0e:41:b6:f6:da:89:ab:26:7e:02:34:93:82:05:d0: d1:e7:6b:54:08:ff:07:d2:13:50:02:ae:67:bf:74: 11:00:ca:1a:66:61:44:c7:a4:3d:0c:cc:55:1d:5c: 3c:1b:40:9c:35:1c:f6:97:65:96:55:11:24:45:1a: 75:eb:8c:63:29:2a:7d:0d:78:34:55:c1:54:1f:ac: 93:c2:4d:c9:70:df:c1:ab:a9:70:4b:c6:a4:14:de: e2:4f:04:12:13:28:cc:ef:db:9e:97:39:40:e0:af: 2f:e6:e4:9e:23:d1:34:58:34:f7:17:23:7f:97:67: 8d:f5:4e:b2:d1:ba:26:85:33:46:19:63:3a:48:dc: c3:17:7c:b6:a6:06:77:ea:a9:2d:37:90:ca:f2:aa: 30:4f:fe:70:e4:3a:6b:7e:c2:bf:17:00:9f:f1:54: b3:b8:22:3d:8a:8e:6a:a4:27:16:66:20:c4:2d:4a: 32:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:17:D9:1A:F2:27:99:F9:EA:5E:61:B2:8C:C7:E5:85:B3:E1:EE:71 X509v3 Authority Key Identifier: keyid:BC:8B:D5:48:5C:9B:01:D1:76:F3:FA:A8:F3:81:E5:EC:ED:8C:D3:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:6d:f6:05:ec:8e:b1:5c:60:2b:f5:92:18:9d:0f:36:35:36: 6a:f1:cd:ce:9b:d8:69:74:cb:24:66:9c:97:e1:3a:cf:15:61: 24:e5:98:fc:59:2b:71:97:2f:a1:b7:63:13:c0:d0:a6:a2:40: 04:2e:a1:09:94:c4:a5:1b:40:12:ac:c8:7f:46:cb:64:df:17: 16:90:a0:7c:de:8c:9d:7c:6f:6d:d1:e6:0c:8c:5c:bb:42:99: 70:02:32:1b:a4:3d:37:0c:18:34:55:26:ad:00:a4:8c:cf:3a: 6a:78:46:12:0d:31:c2:b7:b7:b3:9c:5d:c2:60:46:a4:89:be: 92:51:3a:38:2b:a3:1b:5e:1f:9c:9c:82:06:6a:82:88:cc:18: 78:1f:eb:83:9e:22:0a:2c:1d:80:2d:e1:a4:ef:d4:3f:33:27: 56:64:05:21:dc:85:8a:4e:b2:fe:3e:89:64:8b:81:66:3b:8f: 39:e8:87:a8:00:5f:64:14:ad:d1:f3:dd:26:83:3e:5a:6a:f5: d7:87:64:4b:b7:56:e3:b0:ee:03:c1:91:65:e1:ab:bd:d0:26: 40:29:e5:3d:18:38:57:16:64:74:89:c1:53:91:7b:9b:aa:ca: 60:16:11:79:c8:6a:a7:c4:ff:6f:71:af:8d:94:cf:88:90:1a: d1:7c:69:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJczUfxhIfS95FWmVsmvskB6dYlcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkM4QkQ1NDg1QzlCMDFEMTc2RjNGQUE4RjM4MUU1RUNF RDhDRDNCODAeFw0yNjAxMjQwMTU1NDFaFw0yNjAxMjcwMzA2NDFaMDMxMTAvBgNV BAMTKEQ5MTdEOTFBRjIyNzk5RjlFQTVFNjFCMjhDQzdFNTg1QjNFMUVFNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuJn5J3PfBQF7PNKMFPnSGX2PU wHn7EaOUl6/lAFSe0lfMGiOLn7JtoeFWH+NIppDMzLabYkh2eotxngV/JMXvQcpT Gh9ufYIwUw5BtvbaiasmfgI0k4IF0NHna1QI/wfSE1ACrme/dBEAyhpmYUTHpD0M zFUdXDwbQJw1HPaXZZZVESRFGnXrjGMpKn0NeDRVwVQfrJPCTclw38GrqXBLxqQU 3uJPBBITKMzv256XOUDgry/m5J4j0TRYNPcXI3+XZ431TrLRuiaFM0YZYzpI3MMX fLamBnfqqS03kMryqjBP/nDkOmt+wr8XAJ/xVLO4Ij2KjmqkJxZmIMQtSjJfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2RfZGvInmfnqXmGyjMflhbPh7nEwHwYDVR0j BBgwFoAUvIvVSFybAdF28/qo84Hl7O2M07gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzQxODAxMy0xNjc5LTQ5NmItODBmNi0yZDA1Y2M1YmU3MmYvMC9CQzhCRDU0ODVD OUIwMUQxNzZGM0ZBQThGMzgxRTVFQ0VEOENEM0I4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkM4QkQ1NDg1QzlCMDFEMTc2RjNGQUE4RjM4MUU1RUNFRDhD RDNCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjc0MTgwMTMtMTY3OS00OTZiLTgw ZjYtMmQwNWNjNWJlNzJmLzAvQkM4QkQ1NDg1QzlCMDFEMTc2RjNGQUE4RjM4MUU1 RUNFRDhDRDNCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHdt9gXsjrFcYCv1khidDzY1Nmrxzc6b2Gl0 yyRmnJfhOs8VYSTlmPxZK3GXL6G3YxPA0KaiQAQuoQmUxKUbQBKsyH9Gy2TfFxaQ oHzejJ18b23R5gyMXLtCmXACMhukPTcMGDRVJq0ApIzPOmp4RhINMcK3t7OcXcJg RqSJvpJROjgroxteH5ycggZqgojMGHgf64OeIgosHYAt4aTv1D8zJ1ZkBSHchYpO sv4+iWSLgWY7jznoh6gAX2QUrdHz3SaDPlpq9deHZEu3VuOw7gPBkWXhq73QJkAp 5T0YOFcWZHSJwVORe5uqymAWEXnIaqfE/29xr42Uz4iQGtF8aRs= -----END CERTIFICATE-----Generated at Sun Jan 25 20:33:18 2026 by rpki-client