This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft File: BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft (raw, json) Hash identifier: yH5kM50HC16FJTy5vhb1dylO4tNowiR5MYpkRa+Sg2w= Subject key identifier: B9:98:C2:D5:E3:57:F2:70:B8:DF:CA:51:84:08:C8:8A:CC:65:3B:D9 Authority key identifier: BE:41:FE:7D:C7:71:48:07:9E:A1:CA:C4:C9:00:5D:EB:68:84:BB:8C Certificate issuer: /CN=BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C Certificate serial: 402931FF68E7088BB0ABE5B7DB0B4FDBED4A1626 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft Manifest number: 010B Signing time: Tue 20 Jan 2026 10:42:14 +0000 Manifest this update: Tue 20 Jan 2026 10:37:14 +0000 Manifest next update: Fri 23 Jan 2026 11:27:14 +0000 Files and hashes: 1: BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl (hash: Gi3aVqctK7gF8F3cD08CUN7lgHE8GxqqKz58EZQHmtQ=) 2: 3136302e32322e32362e302f32332d3233203d3e20313532383036.roa (hash: Kzrvc50VZVqxvNyylv+S6nQsNORPDp45F0+BBKuP5OE=) 3: 3136302e32322e32362e302f32342d3234203d3e20313532383036.roa (hash: 9EHkZCz3jJLHmIc/2dkH9Ib/3pIoSydcnX/ESKF5C0o=) 4: 3136302e32322e32372e302f32342d3234203d3e20313532383036.roa (hash: 0OeYR75ixQZTlrIcMsAEVIAMsFHHHRmOANT+VjAQdGg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 11:27:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:29:31:ff:68:e7:08:8b:b0:ab:e5:b7:db:0b:4f:db:ed:4a:16:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C Validity Not Before: Jan 20 10:37:14 2026 GMT Not After : Jan 23 11:27:14 2026 GMT Subject: CN=B998C2D5E357F270B8DFCA518408C88ACC653BD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:fb:7f:ff:00:a7:a2:89:87:d0:0e:73:aa:50: 6b:00:e7:f8:3b:ab:14:b9:89:d8:f6:87:60:7e:a3: d6:b1:4f:a6:c9:68:86:e4:32:b6:c4:5e:5a:0e:bd: 2d:9d:b0:9d:6c:f3:44:77:af:c1:d8:30:66:0a:0d: be:cf:94:0d:9e:9c:18:b4:cd:3a:1e:a7:1f:5a:2b: 64:43:ee:ff:ee:25:8b:29:66:3a:82:8d:03:a0:91: 40:68:40:c4:5a:85:cc:d0:ae:bd:fb:43:f4:bd:54: 7d:ff:55:55:a3:b5:b6:b5:c3:8a:58:d9:cc:97:ce: 66:c0:fb:4d:8f:dc:61:d4:88:b5:9f:cc:09:0f:bb: 83:7b:38:b0:47:c4:7a:9d:84:6a:02:09:b9:ba:f7: dc:ca:c8:05:f0:55:67:c5:85:1c:62:ce:5b:96:a0: 3b:f5:8e:2c:43:19:7a:fe:74:ad:cd:79:a0:25:c7: 6c:24:b7:41:49:dd:08:9a:77:d7:2c:58:e0:63:d0: 9d:bd:cc:de:ef:cf:ca:9d:11:bb:84:fa:10:cf:ad: 21:c4:f2:f7:ab:b0:03:a9:11:36:37:9e:45:10:b0: 3d:c9:49:b8:d8:c1:a2:b7:53:c7:5c:76:ab:26:d7: a5:e8:12:89:a1:36:60:0a:02:89:64:79:56:dd:73: 11:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:98:C2:D5:E3:57:F2:70:B8:DF:CA:51:84:08:C8:8A:CC:65:3B:D9 X509v3 Authority Key Identifier: keyid:BE:41:FE:7D:C7:71:48:07:9E:A1:CA:C4:C9:00:5D:EB:68:84:BB:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:5e:21:d1:56:43:cd:e7:37:b5:67:52:fc:16:a3:4d:59:15: ef:ef:21:f0:5a:a1:11:0f:da:3d:bc:2e:64:25:df:2a:ab:b1: 85:05:31:1d:8e:f6:75:7f:82:40:28:61:6d:75:5a:db:c4:a0: 2d:bb:28:8c:15:06:bf:d9:9f:5c:5e:d8:fc:7b:f4:74:56:e2: eb:7a:31:75:85:ff:54:d4:6b:6d:b6:02:41:de:e8:f8:88:67: 7b:28:e3:6d:49:a9:f4:69:f8:e7:3d:08:9b:1d:5d:37:13:7c: 2a:cc:19:8e:ba:92:c9:c1:41:c6:22:90:97:40:26:78:5d:71: fd:75:7e:6f:5c:42:d9:19:1c:82:64:0d:df:83:da:7b:5c:e8: 17:7e:9c:5d:62:fe:77:70:d3:fa:86:39:9d:c4:18:49:8e:16: be:94:af:d9:38:f3:17:bb:c5:15:63:31:cf:c9:ad:b0:d0:b7: be:8d:ee:d7:65:f2:0c:9b:df:d0:66:0e:fb:77:fb:36:ce:51: a2:09:42:3c:a9:60:ad:6a:3c:cf:f5:35:46:14:d5:75:ac:f1: 88:9a:94:85:fa:23:f1:91:99:49:74:30:bf:12:44:84:d2:6d: ef:19:8a:04:52:94:b2:6b:a4:14:1a:b1:93:72:03:b3:8e:e6: 83:bd:41:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQCkx/2jnCIuwq+W32wtP2+1KFiYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVERUI2 ODg0QkI4QzAeFw0yNjAxMjAxMDM3MTRaFw0yNjAxMjMxMTI3MTRaMDMxMTAvBgNV BAMTKEI5OThDMkQ1RTM1N0YyNzBCOERGQ0E1MTg0MDhDODhBQ0M2NTNCRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb+3//AKeiiYfQDnOqUGsA5/g7 qxS5idj2h2B+o9axT6bJaIbkMrbEXloOvS2dsJ1s80R3r8HYMGYKDb7PlA2enBi0 zToepx9aK2RD7v/uJYspZjqCjQOgkUBoQMRahczQrr37Q/S9VH3/VVWjtba1w4pY 2cyXzmbA+02P3GHUiLWfzAkPu4N7OLBHxHqdhGoCCbm699zKyAXwVWfFhRxizluW oDv1jixDGXr+dK3NeaAlx2wkt0FJ3Qiad9csWOBj0J29zN7vz8qdEbuE+hDPrSHE 8versAOpETY3nkUQsD3JSbjYwaK3U8dcdqsm16XoEomhNmAKAolkeVbdcxG1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuZjC1eNX8nC438pRhAjIisxlO9kwHwYDVR0j BBgwFoAUvkH+fcdxSAeeocrEyQBd62iEu4wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRjZTM5MS1hNWQzLTQxMWItYTk3Yi1lODYyZmJmNTYzMWMvMC9CRTQxRkU3REM3 NzE0ODA3OUVBMUNBQzRDOTAwNURFQjY4ODRCQjhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVERUI2ODg0 QkI4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkY2UzOTEtYTVkMy00MTFiLWE5 N2ItZTg2MmZiZjU2MzFjLzAvQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVE RUI2ODg0QkI4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKpeIdFWQ83nN7VnUvwWo01ZFe/vIfBaoREP 2j28LmQl3yqrsYUFMR2O9nV/gkAoYW11WtvEoC27KIwVBr/Zn1xe2Px79HRW4ut6 MXWF/1TUa222AkHe6PiIZ3so421JqfRp+Oc9CJsdXTcTfCrMGY66ksnBQcYikJdA Jnhdcf11fm9cQtkZHIJkDd+D2ntc6Bd+nF1i/ndw0/qGOZ3EGEmOFr6Ur9k48xe7 xRVjMc/JrbDQt76N7tdl8gyb39BmDvt3+zbOUaIJQjypYK1qPM/1NUYU1XWs8Yia lIX6I/GRmUl0ML8SRITSbe8ZigRSlLJrpBQasZNyA7OO5oO9QUc= -----END CERTIFICATE-----Generated at Wed Jan 21 12:03:30 2026 by rpki-client