This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft File: BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft (raw, json) Hash identifier: nG5t/vAIkYXM/rAc/UjQMGCpdGolgjNLDePjIEvYxpU= Subject key identifier: BC:44:4E:CE:3F:F0:3C:89:0C:02:5A:2D:27:00:59:F0:DE:8D:57:F2 Authority key identifier: BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B Certificate issuer: /CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B Certificate serial: 6FACDAA03D124A8BF23E04490A59A97AEC075F0C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft Manifest number: 0369 Signing time: Sun 01 Feb 2026 05:31:40 +0000 Manifest this update: Sun 01 Feb 2026 05:26:40 +0000 Manifest next update: Wed 04 Feb 2026 10:07:40 +0000 Files and hashes: 1: 3130332e3232362e35302e302f32342d3234203d3e203539323733.roa (hash: ImyXAYYU6gxFlWNkFMZjYF3LgN4oXFfG1+SCVAdQsYE=) 2: BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl (hash: ihnqERtuz7rKHmNEMJuSbzeqEu5opbC1tLmGaTGwr58=) 3: 3130332e3232362e34382e302f32342d3234203d3e203539323733.roa (hash: 2RhwyxU2ZZMzvcv7V8AkytYIscjSPeyUgoz7RilYeSY=) 4: 3130332e3232362e35312e302f32342d3234203d3e203539323733.roa (hash: vEMXCI3M8VvAH47LiF9RDbq7pXkdLmDpmzWuC+Jv+wQ=) 5: 3130332e3232362e34382e302f32322d3232203d3e203539323733.roa (hash: NVnL3gu/ETV/ZZkGXx0LBYWbHfOXol4OHsqTQpLumLs=) 6: 3130332e3232362e34392e302f32342d3234203d3e203539323733.roa (hash: Cv0EMC5062htKdHyxcMyy6exUpE5aD8gtMnGLSz9Wog=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 10:07:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:ac:da:a0:3d:12:4a:8b:f2:3e:04:49:0a:59:a9:7a:ec:07:5f:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B Validity Not Before: Feb 1 05:26:40 2026 GMT Not After : Feb 4 10:07:40 2026 GMT Subject: CN=BC444ECE3FF03C890C025A2D270059F0DE8D57F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6a:ee:90:d0:f2:99:a3:c2:cd:9d:6d:d8:b9: b4:ad:a5:31:61:51:65:82:dc:08:a9:12:16:f1:bf: e2:f1:7b:40:7d:83:85:5d:28:06:19:ee:e9:97:82: e6:20:33:3e:d4:c6:8d:eb:8b:f2:8a:17:46:e6:b4: 3e:3a:d3:21:a3:42:67:ee:7d:c7:e1:f8:fb:fe:02: 79:73:be:52:41:3c:fa:03:3b:56:2b:30:4e:b1:fe: f2:91:9f:65:97:3d:3b:12:ef:69:36:07:98:8e:8f: 6b:0c:75:4a:c4:06:e4:86:ee:04:93:38:21:dd:76: 2c:5c:69:22:01:f4:e1:74:cc:ad:21:76:a4:da:54: b3:7b:2b:18:da:16:7b:11:92:69:69:9d:c0:65:70: 34:a5:56:49:1f:44:5e:ed:02:38:41:9d:d5:51:77: b2:aa:12:c8:56:74:d0:e1:72:77:1d:2b:2b:db:01: 51:d8:04:fe:65:4a:99:b4:0f:a8:f9:a0:da:c1:64: 3a:0d:0a:2e:29:51:8e:ec:1e:6a:12:ad:d4:a5:ce: a6:d5:4b:62:3d:19:f9:c8:56:f1:71:9e:35:cb:aa: 43:68:af:d5:29:43:d1:80:af:b3:dc:5d:43:f3:87: 62:f5:86:53:30:45:7e:1e:56:c5:96:65:a0:8f:fd: 9d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:44:4E:CE:3F:F0:3C:89:0C:02:5A:2D:27:00:59:F0:DE:8D:57:F2 X509v3 Authority Key Identifier: keyid:BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:90:e1:37:68:9b:06:53:65:70:07:1d:cf:6b:09:f6:cc:36: b0:6d:e8:09:58:60:e5:d4:d2:08:4e:88:14:10:b9:df:c3:4b: ea:ca:d8:ee:2b:4f:2b:b9:fa:1b:5f:e6:25:5a:88:a5:a5:75: d5:65:e5:59:e8:00:9a:81:83:a5:41:6b:cc:9d:b9:94:c2:01: 33:46:7a:e7:da:40:2e:89:6b:4e:e2:03:ad:88:f1:4c:ba:12: a0:a6:63:ca:ff:69:87:dc:a1:aa:e1:03:54:d8:22:85:2f:27: 59:88:fa:d0:0b:df:95:82:1f:3e:60:3f:60:aa:0a:79:f9:cb: 99:ff:4f:fc:b1:cf:9e:1c:7b:e3:e6:ac:8e:01:aa:76:32:1f: e8:3c:13:52:86:61:e7:86:42:1f:e7:3e:f6:76:65:04:e7:07: f1:86:37:0e:1a:8b:8d:25:99:03:ac:36:b5:dd:da:f7:19:c3: be:77:34:7c:c5:db:ba:de:a3:b8:e5:cc:db:a3:a0:5f:45:4e: c9:9c:0b:bb:78:2e:f1:57:04:7e:25:13:5e:2e:05:e3:15:ee: 84:68:49:2c:20:aa:7b:ce:82:54:a8:e4:6b:0e:66:94:3f:5c: 9d:c7:9e:12:00:65:e5:50:d5:30:6a:a3:cf:0c:c1:cf:42:28: c0:f4:c7:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb6zaoD0SSovyPgRJClmpeuwHXwwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBCRUQz RkZGQjUyQjAeFw0yNjAyMDEwNTI2NDBaFw0yNjAyMDQxMDA3NDBaMDMxMTAvBgNV BAMTKEJDNDQ0RUNFM0ZGMDNDODkwQzAyNUEyRDI3MDA1OUYwREU4RDU3RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyau6Q0PKZo8LNnW3YubStpTFh UWWC3AipEhbxv+Lxe0B9g4VdKAYZ7umXguYgMz7Uxo3ri/KKF0bmtD460yGjQmfu fcfh+Pv+AnlzvlJBPPoDO1YrME6x/vKRn2WXPTsS72k2B5iOj2sMdUrEBuSG7gST OCHddixcaSIB9OF0zK0hdqTaVLN7KxjaFnsRkmlpncBlcDSlVkkfRF7tAjhBndVR d7KqEshWdNDhcncdKyvbAVHYBP5lSpm0D6j5oNrBZDoNCi4pUY7sHmoSrdSlzqbV S2I9GfnIVvFxnjXLqkNor9UpQ9GAr7PcXUPzh2L1hlMwRX4eVsWWZaCP/Z2NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvEROzj/wPIkMAlotJwBZ8N6NV/IwHwYDVR0j BBgwFoAUviqe3IxVbU3XhGiSYS4L7T//tSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjBjZTczMy03N2Y0LTRlMWQtYjVlYy02MWVkZTRkYTA3NGQvMC9CRTJBOUVEQzhD NTU2RDRERDc4NDY4OTI2MTJFMEJFRDNGRkZCNTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBCRUQzRkZG QjUyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYwY2U3MzMtNzdmNC00ZTFkLWI1 ZWMtNjFlZGU0ZGEwNzRkLzAvQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBC RUQzRkZGQjUyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAICQ4TdomwZTZXAHHc9rCfbMNrBt6AlYYOXU 0ghOiBQQud/DS+rK2O4rTyu5+htf5iVaiKWlddVl5VnoAJqBg6VBa8yduZTCATNG eufaQC6Ja07iA62I8Uy6EqCmY8r/aYfcoarhA1TYIoUvJ1mI+tAL35WCHz5gP2Cq Cnn5y5n/T/yxz54ce+PmrI4BqnYyH+g8E1KGYeeGQh/nPvZ2ZQTnB/GGNw4ai40l mQOsNrXd2vcZw753NHzF27reo7jlzNujoF9FTsmcC7t4LvFXBH4lE14uBeMV7oRo SSwgqnvOglSo5GsOZpQ/XJ3HnhIAZeVQ1TBqo88Mwc9CKMD0x1o= -----END CERTIFICATE-----Generated at Mon Feb 2 12:47:02 2026 by rpki-client