This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft File: BD6194D3C25B637B15DAEB654B288A451054ABE0.mft (raw, json) Hash identifier: SSujzn8bKvsdhdm/Ujtnra1hgCS+oM5hrP/ZvTdwZxs= Subject key identifier: 01:01:37:1C:DF:E8:62:16:6B:F9:45:12:22:87:14:38:F8:77:AD:B7 Authority key identifier: BD:61:94:D3:C2:5B:63:7B:15:DA:EB:65:4B:28:8A:45:10:54:AB:E0 Certificate issuer: /CN=BD6194D3C25B637B15DAEB654B288A451054ABE0 Certificate serial: 3E33F25DA590788A3F4983CF208EE8D09F8F9B4C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft Manifest number: 01E4 Signing time: Fri 23 Jan 2026 19:41:17 +0000 Manifest this update: Fri 23 Jan 2026 19:36:17 +0000 Manifest next update: Tue 27 Jan 2026 01:27:17 +0000 Files and hashes: 1: 3130332e37392e3133302e302f32342d3234203d3e20313430343433.roa (hash: BlB54vUebVCTB7wA7qoqMH+xgyxkQDhZWNMRec/AbvE=) 2: BD6194D3C25B637B15DAEB654B288A451054ABE0.crl (hash: /wurIghuyxo3QNEIlr9OqZL1cJE5FU6pRUKT0+ogOX8=) 3: 3130332e37392e3133312e302f32342d3234203d3e20313430343433.roa (hash: 10mUGoiah4HNNhQPC/xIeaHPveRue0pYK34O0LI+OcA=) 4: 3130332e37392e3133302e302f32332d3233203d3e20313430343433.roa (hash: RNdh1+r+BNYLHAu4V1jupY7hG6iYrh06nO6HbqG1vXI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.crl rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 01:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:33:f2:5d:a5:90:78:8a:3f:49:83:cf:20:8e:e8:d0:9f:8f:9b:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD6194D3C25B637B15DAEB654B288A451054ABE0 Validity Not Before: Jan 23 19:36:17 2026 GMT Not After : Jan 27 01:27:17 2026 GMT Subject: CN=0101371CDFE862166BF9451222871438F877ADB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:28:74:05:cb:71:f0:52:cb:26:46:63:42:d5: 29:4a:9e:86:14:ac:5b:33:93:b5:85:d2:04:1d:52: 04:46:de:36:c5:66:64:9c:09:49:9c:bc:5a:92:09: 77:c0:ea:ba:df:cb:7e:39:32:bd:2e:51:12:40:c7: 54:09:4f:63:d7:ac:8d:e1:f1:d6:06:a7:5f:35:b0: 10:5f:1c:5d:71:14:5b:5c:b7:01:cd:77:fd:47:d5: 8b:83:4b:2e:2e:7f:0d:7f:68:e6:2f:2f:14:b0:a8: 7d:86:91:c9:99:15:bc:e6:17:13:72:58:c3:50:5c: 57:42:42:9d:47:47:32:17:f7:cf:ec:8d:38:76:e7: 65:94:b6:0a:af:ee:fd:10:5c:85:74:8d:04:2d:ef: a4:0d:bb:c7:52:56:ee:4c:d4:77:ae:5a:00:8e:17: 22:06:6a:eb:3e:99:cf:87:50:76:8c:0f:c9:f1:9a: f9:7e:60:a9:84:20:88:7b:3c:ab:ff:09:0d:94:31: 0c:24:94:fe:84:bf:bc:90:7a:28:69:bc:7b:f8:b0: c6:68:39:3c:03:74:ef:8e:93:c1:e2:3c:ca:3a:7b: 8e:d5:3c:7a:68:94:b0:ca:59:2f:b1:7f:fb:d3:f2: e1:4e:92:68:de:ed:a2:86:47:3b:02:7d:fd:3e:d1: 5b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:01:37:1C:DF:E8:62:16:6B:F9:45:12:22:87:14:38:F8:77:AD:B7 X509v3 Authority Key Identifier: keyid:BD:61:94:D3:C2:5B:63:7B:15:DA:EB:65:4B:28:8A:45:10:54:AB:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:01:4a:4e:e3:7a:26:2d:a5:37:35:e1:82:85:be:a6:7f:ae: 8c:8c:8e:1d:05:e6:91:d9:d7:ab:27:d7:b6:fc:ac:82:9d:b2: 0d:e8:24:4c:8a:f4:a1:c3:66:ba:72:d2:d5:d8:3d:3b:0e:41: 9b:c6:84:cc:87:38:a2:5c:37:d3:a4:5d:8f:d0:35:b7:6c:36: 9b:57:e2:73:50:5e:9f:b1:58:07:8e:53:ed:bc:43:2c:e4:c7: d8:38:95:e7:fc:71:7d:e2:8d:d2:78:86:01:e0:1b:53:36:93: 62:98:b7:48:bd:9d:5c:70:51:bf:55:1b:c9:06:0a:9f:74:eb: 68:ad:10:0e:43:12:d3:88:05:5c:1e:e9:7c:44:58:e0:71:e3: 40:6f:15:f4:b3:c1:c2:62:2f:a9:ae:55:79:ac:25:93:e5:82: 83:fe:c4:92:61:09:20:c0:b0:a3:6c:42:49:35:61:9c:e5:0a: cd:a6:02:79:e4:3c:13:97:a4:d7:0a:44:72:4b:a8:2a:2c:6a: 6a:e7:89:89:b9:3a:bc:cd:f6:04:6c:36:14:42:8f:f2:4b:5d: f7:06:90:25:e9:61:ce:7b:c5:50:5d:b5:f4:5d:60:20:b8:bd: 14:fb:35:73:2a:7c:d0:7d:1f:1a:a4:7e:61:dc:a9:76:e6:98: fa:b8:a0:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPjPyXaWQeIo/SYPPII7o0J+Pm0wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhBNDUx MDU0QUJFMDAeFw0yNjAxMjMxOTM2MTdaFw0yNjAxMjcwMTI3MTdaMDMxMTAvBgNV BAMTKDAxMDEzNzFDREZFODYyMTY2QkY5NDUxMjIyODcxNDM4Rjg3N0FEQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXKHQFy3HwUssmRmNC1SlKnoYU rFszk7WF0gQdUgRG3jbFZmScCUmcvFqSCXfA6rrfy345Mr0uURJAx1QJT2PXrI3h 8dYGp181sBBfHF1xFFtctwHNd/1H1YuDSy4ufw1/aOYvLxSwqH2GkcmZFbzmFxNy WMNQXFdCQp1HRzIX98/sjTh252WUtgqv7v0QXIV0jQQt76QNu8dSVu5M1HeuWgCO FyIGaus+mc+HUHaMD8nxmvl+YKmEIIh7PKv/CQ2UMQwklP6Ev7yQeihpvHv4sMZo OTwDdO+Ok8HiPMo6e47VPHpolLDKWS+xf/vT8uFOkmje7aKGRzsCff0+0VsPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAQE3HN/oYhZr+UUSIocUOPh3rbcwHwYDVR0j BBgwFoAUvWGU08JbY3sV2utlSyiKRRBUq+AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWUyNDkwNy1hNmYyLTRhNTUtYWE2Zi0xOGM3ZGIxNDNmZTgvMC9CRDYxOTREM0My NUI2MzdCMTVEQUVCNjU0QjI4OEE0NTEwNTRBQkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhBNDUxMDU0 QUJFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFlMjQ5MDctYTZmMi00YTU1LWFh NmYtMThjN2RiMTQzZmU4LzAvQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhB NDUxMDU0QUJFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADUBSk7jeiYtpTc14YKFvqZ/royMjh0F5pHZ 16sn17b8rIKdsg3oJEyK9KHDZrpy0tXYPTsOQZvGhMyHOKJcN9OkXY/QNbdsNptX 4nNQXp+xWAeOU+28Qyzkx9g4lef8cX3ijdJ4hgHgG1M2k2KYt0i9nVxwUb9VG8kG Cp9062itEA5DEtOIBVwe6XxEWOBx40BvFfSzwcJiL6muVXmsJZPlgoP+xJJhCSDA sKNsQkk1YZzlCs2mAnnkPBOXpNcKRHJLqCosamrniYm5OrzN9gRsNhRCj/JLXfcG kCXpYc57xVBdtfRdYCC4vRT7NXMqfNB9HxqkfmHcqXbmmPq4oFQ= -----END CERTIFICATE-----Generated at Sun Jan 25 18:59:27 2026 by rpki-client