This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.mft File: B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.mft (raw, json) Hash identifier: nk8SL+wgJ/A2R79EvzGyKoEsa6XCEpgAzGZ76cOHmwI= Subject key identifier: 32:4E:AF:30:99:C6:84:EB:CE:AE:8E:36:21:A4:32:D6:29:EC:38:53 Authority key identifier: B1:01:5F:DC:3A:BD:C9:EC:59:4F:6E:8A:82:A1:16:F7:69:CA:56:65 Certificate issuer: /CN=B1015FDC3ABDC9EC594F6E8A82A116F769CA5665 Certificate serial: 2DDFC2D5046DB118A2827B2C5C82DF2DD8606769 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.mft Manifest number: 01CC Signing time: Tue 20 Jan 2026 20:20:46 +0000 Manifest this update: Tue 20 Jan 2026 20:15:46 +0000 Manifest next update: Fri 23 Jan 2026 23:42:46 +0000 Files and hashes: 1: 3130332e3134312e3235352e302f32342d3234203d3e20313331373639.roa (hash: UcW1iFtA3xmwGxl0rMA15ydO8ueLUu0PDp6eYLpRscg=) 2: B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.crl (hash: j6xpoMaUsGXToGFGOuh6FZWfksl8O8OeogG+CT5C4Pw=) 3: 3130332e3134312e3235342e302f32342d3234203d3e20313331373639.roa (hash: fR4/sRkESHHEeZ0tfJRKaTFK0AKCxACnf8guj16EfzE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.crl rsync://repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 23:42:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:df:c2:d5:04:6d:b1:18:a2:82:7b:2c:5c:82:df:2d:d8:60:67:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1015FDC3ABDC9EC594F6E8A82A116F769CA5665 Validity Not Before: Jan 20 20:15:46 2026 GMT Not After : Jan 23 23:42:46 2026 GMT Subject: CN=324EAF3099C684EBCEAE8E3621A432D629EC3853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:f1:cd:67:bb:1d:fd:67:81:9e:3f:7f:dc:9e: 3f:c0:e1:bd:22:bb:f4:62:17:57:b0:c3:20:c8:4f: 5f:bd:0d:59:4f:61:12:aa:74:bb:b6:f8:84:54:8c: 8a:d7:ae:23:27:3e:1c:29:2f:bf:e9:9a:2a:06:57: 4d:85:e7:81:aa:ad:19:92:51:36:3c:d8:b9:8d:89: f0:7a:a9:49:32:39:6d:46:c4:7d:5c:97:b9:45:64: 16:1f:1c:5f:f1:b3:b9:7e:ad:0f:f1:e9:12:61:8c: d5:68:ea:5c:09:c1:4d:cd:35:92:0d:f0:4f:25:af: 14:ec:87:00:35:bc:48:95:77:00:72:97:7d:88:fc: 1a:f4:81:6b:96:34:22:50:dc:3d:25:ac:2f:dd:d0: 6e:e5:4e:e9:ad:1b:0f:be:7f:14:0a:4a:b9:9b:22: 30:8f:cb:e1:6c:df:66:59:dc:64:64:bf:13:1b:35: 6c:b8:e2:f0:7b:45:8e:06:d6:a5:cc:a5:e1:b1:02: 8d:d0:65:ca:fd:63:34:d7:de:74:06:11:02:f5:7b: b3:58:47:5c:b2:7d:21:5c:ab:16:b0:3f:3f:02:8f: 78:8f:92:5a:49:1e:8e:2b:6c:d1:89:2a:25:f5:80: 88:db:e9:98:fa:64:1d:52:b7:21:55:fd:6e:00:5e: 50:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:4E:AF:30:99:C6:84:EB:CE:AE:8E:36:21:A4:32:D6:29:EC:38:53 X509v3 Authority Key Identifier: keyid:B1:01:5F:DC:3A:BD:C9:EC:59:4F:6E:8A:82:A1:16:F7:69:CA:56:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:6d:e9:19:76:f4:ac:48:fa:e7:a0:65:45:ad:ea:fc:a4:01: e8:d8:36:eb:c8:aa:a9:e2:71:5d:59:db:dd:ed:7d:da:c8:98: d5:4e:f5:4e:80:bb:01:6e:7d:eb:24:0e:63:b9:2d:e1:4a:bc: ff:89:a6:b3:f2:97:0b:33:a7:b0:1d:c7:3c:4c:0a:c1:aa:fc: ae:61:fe:17:bf:0c:91:03:fc:ec:78:2f:d4:28:e3:dd:8d:4f: 20:2f:c1:35:c6:4b:fb:d4:4b:34:f0:f6:ba:9f:3d:4c:0c:e6: 03:fa:25:68:be:01:c0:01:d6:bc:f3:f8:86:01:b8:76:9d:9f: b3:77:80:6f:b6:14:8a:4a:99:b8:bd:84:8a:11:f6:75:32:33: 27:27:fb:74:26:98:82:85:97:21:17:53:6e:89:c5:6f:e8:06: 49:02:3e:af:0a:38:02:8a:f3:4d:d3:b3:cc:53:ba:19:d7:0d: ce:f8:96:95:01:8f:9b:2f:42:eb:fd:cb:38:f8:66:02:58:27: 6d:e4:33:93:14:9b:2b:9d:f3:ea:ba:46:52:05:53:7e:09:b0: 44:7d:bf:83:80:c1:88:92:3e:a9:21:45:d6:6b:8d:35:f1:8d: ee:35:48:45:72:07:44:ae:f1:2c:fb:9d:4a:14:08:a1:5a:9b: 29:f7:a4:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULd/C1QRtsRiignssXILfLdhgZ2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjEwMTVGREMzQUJEQzlFQzU5NEY2RThBODJBMTE2Rjc2 OUNBNTY2NTAeFw0yNjAxMjAyMDE1NDZaFw0yNjAxMjMyMzQyNDZaMDMxMTAvBgNV BAMTKDMyNEVBRjMwOTlDNjg0RUJDRUFFOEUzNjIxQTQzMkQ2MjlFQzM4NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz8c1nux39Z4GeP3/cnj/A4b0i u/RiF1ewwyDIT1+9DVlPYRKqdLu2+IRUjIrXriMnPhwpL7/pmioGV02F54GqrRmS UTY82LmNifB6qUkyOW1GxH1cl7lFZBYfHF/xs7l+rQ/x6RJhjNVo6lwJwU3NNZIN 8E8lrxTshwA1vEiVdwByl32I/Br0gWuWNCJQ3D0lrC/d0G7lTumtGw++fxQKSrmb IjCPy+Fs32ZZ3GRkvxMbNWy44vB7RY4G1qXMpeGxAo3QZcr9YzTX3nQGEQL1e7NY R1yyfSFcqxawPz8Cj3iPklpJHo4rbNGJKiX1gIjb6Zj6ZB1StyFV/W4AXlBlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMk6vMJnGhOvOro42IaQy1insOFMwHwYDVR0j BBgwFoAUsQFf3Dq9yexZT26KgqEW92nKVmUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWQ4NTBhOC1hYmI5LTQ0ODItYTViYy01NGQ3OWViN2YzMjMvMC9CMTAxNUZEQzNB QkRDOUVDNTk0RjZFOEE4MkExMTZGNzY5Q0E1NjY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjEwMTVGREMzQUJEQzlFQzU5NEY2RThBODJBMTE2Rjc2OUNB NTY2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVkODUwYTgtYWJiOS00NDgyLWE1 YmMtNTRkNzllYjdmMzIzLzAvQjEwMTVGREMzQUJEQzlFQzU5NEY2RThBODJBMTE2 Rjc2OUNBNTY2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGNt6Rl29KxI+uegZUWt6vykAejYNuvIqqni cV1Z293tfdrImNVO9U6AuwFufeskDmO5LeFKvP+JprPylwszp7AdxzxMCsGq/K5h /he/DJED/Ox4L9Qo492NTyAvwTXGS/vUSzTw9rqfPUwM5gP6JWi+AcAB1rzz+IYB uHadn7N3gG+2FIpKmbi9hIoR9nUyMycn+3QmmIKFlyEXU26JxW/oBkkCPq8KOAKK 803Ts8xTuhnXDc74lpUBj5svQuv9yzj4ZgJYJ23kM5MUmyud8+q6RlIFU34JsER9 v4OAwYiSPqkhRdZrjTXxje41SEVyB0Su8Sz7nUoUCKFamyn3pE0= -----END CERTIFICATE-----Generated at Wed Jan 21 14:45:33 2026 by rpki-client