This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft File: B1F0A7585ED1882783C6AF802B826607ABB92671.mft (raw, json) Hash identifier: 3eDvvlrZQKjLY+60G9aDYu6e0s8oTHvMbxToaExG8F4= Subject key identifier: 99:9B:4C:E8:79:78:A2:CA:89:33:A2:36:E7:F7:68:33:C4:E4:C5:BB Authority key identifier: B1:F0:A7:58:5E:D1:88:27:83:C6:AF:80:2B:82:66:07:AB:B9:26:71 Certificate issuer: /CN=B1F0A7585ED1882783C6AF802B826607ABB92671 Certificate serial: 61DCFCBA8A1ADEDFF541AF82078917D3266C607D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B1F0A7585ED1882783C6AF802B826607ABB92671.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft Manifest number: DE Signing time: Mon 19 Jan 2026 23:52:30 +0000 Manifest this update: Mon 19 Jan 2026 23:47:30 +0000 Manifest next update: Fri 23 Jan 2026 04:55:30 +0000 Files and hashes: 1: 3136302e3138372e33362e302f32342d3234203d3e20313533333237.roa (hash: W6x4NYRtAG+Mf6fIyPCm/XsF8bO9fqqOCjC78Il5Kyw=) 2: 3136302e3138372e33372e302f32342d3234203d3e20313533333237.roa (hash: HwU0+K4pKIjqZ0rwzIAxU1cLuPfwooIJjDIs7VIOPKk=) 3: B1F0A7585ED1882783C6AF802B826607ABB92671.crl (hash: mgaO2DLtoQlLHPC25O+7ZjeZcaQPeWvdCAejx3lHYLI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.crl rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B1F0A7585ED1882783C6AF802B826607ABB92671.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 04:55:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:dc:fc:ba:8a:1a:de:df:f5:41:af:82:07:89:17:d3:26:6c:60:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1F0A7585ED1882783C6AF802B826607ABB92671 Validity Not Before: Jan 19 23:47:30 2026 GMT Not After : Jan 23 04:55:30 2026 GMT Subject: CN=999B4CE87978A2CA8933A236E7F76833C4E4C5BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:22:87:f8:05:94:85:08:dc:b7:14:c7:5a:e5: 09:bb:bc:0d:7f:13:a0:f3:23:b4:b1:d3:b5:cb:2a: 22:b7:84:e1:62:25:ce:e6:30:78:75:f1:94:3d:32: dc:df:37:64:c5:fd:72:72:21:35:69:31:03:33:f7: 32:37:a6:fb:79:8f:31:c4:f5:1b:68:10:a5:7e:31: be:12:e6:73:52:c2:98:f6:83:06:d2:37:d1:d5:39: fd:62:a8:88:3d:30:fe:61:df:b4:2a:5b:ea:99:a9: 4d:96:f2:70:2b:ea:ab:49:54:00:ba:04:71:44:42: 4f:d5:30:ae:1b:bd:50:6b:c6:d4:81:b9:6c:16:4c: f1:d8:d0:67:d5:61:0e:26:4a:cc:53:bf:5c:0f:0c: c2:77:ec:0c:5a:af:27:69:63:ac:a3:a4:21:68:83: 07:2e:02:3d:78:46:de:5c:cb:48:16:4d:67:e8:1c: 55:f4:f7:fd:9b:17:b1:13:6a:5e:60:0d:02:8b:99: 5f:dc:d8:0d:a3:2f:ff:8e:3f:d2:a0:90:86:b6:93: 34:e1:af:30:90:9d:a4:ed:c1:8f:2f:c6:b8:42:bc: 51:28:85:fe:49:40:db:77:e3:6f:f4:7e:da:92:03: b9:3d:fd:ea:b4:bf:3e:ba:8a:c8:84:65:e2:03:05: 69:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:9B:4C:E8:79:78:A2:CA:89:33:A2:36:E7:F7:68:33:C4:E4:C5:BB X509v3 Authority Key Identifier: keyid:B1:F0:A7:58:5E:D1:88:27:83:C6:AF:80:2B:82:66:07:AB:B9:26:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B1F0A7585ED1882783C6AF802B826607ABB92671.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:09:5b:5d:95:dc:a0:8b:d9:07:3e:87:af:3d:db:e3:a2:4c: 8c:18:af:2b:f8:c3:70:df:71:07:5b:83:b3:42:1c:f4:ca:1b: 5e:2b:6e:f8:04:68:0c:86:55:2e:a4:ee:3c:49:56:03:cb:9b: ad:0c:89:ba:b4:07:54:64:a0:fb:06:58:c0:54:23:96:37:18: ff:72:23:19:92:d2:74:8e:fb:a8:b5:06:84:56:c9:aa:53:8a: f2:8e:17:f1:6a:71:b5:cd:a8:53:63:1b:fe:25:69:d2:b5:5d: 4b:0b:af:56:9a:70:69:72:b0:b4:6f:6c:d6:28:2f:3b:91:3c: ff:ce:14:02:7a:0e:d4:fd:bf:41:75:84:a7:8a:39:d1:c2:6e: 8d:0c:c5:07:80:cb:67:6f:9d:13:6a:b8:b4:52:0b:c0:44:c4: f7:f3:cc:f2:e8:2b:70:06:39:e4:bf:fb:02:19:18:7d:9b:d1: e4:2b:51:ce:05:dd:8b:e1:4c:46:30:9d:69:11:48:d9:22:10: 80:65:93:f8:ac:5e:ad:bc:56:57:e6:ea:22:1b:5d:64:7d:5b: 01:e0:71:12:b7:8e:cf:2c:f7:0a:1b:e9:f0:c2:a2:aa:96:15: 35:b7:46:f6:5d:04:9a:dd:a4:ca:ff:c5:37:da:29:63:bd:36: 67:aa:b0:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYdz8uooa3t/1Qa+CB4kX0yZsYH0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjFGMEE3NTg1RUQxODgyNzgzQzZBRjgwMkI4MjY2MDdB QkI5MjY3MTAeFw0yNjAxMTkyMzQ3MzBaFw0yNjAxMjMwNDU1MzBaMDMxMTAvBgNV BAMTKDk5OUI0Q0U4Nzk3OEEyQ0E4OTMzQTIzNkU3Rjc2ODMzQzRFNEM1QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSIof4BZSFCNy3FMda5Qm7vA1/ E6DzI7Sx07XLKiK3hOFiJc7mMHh18ZQ9MtzfN2TF/XJyITVpMQMz9zI3pvt5jzHE 9RtoEKV+Mb4S5nNSwpj2gwbSN9HVOf1iqIg9MP5h37QqW+qZqU2W8nAr6qtJVAC6 BHFEQk/VMK4bvVBrxtSBuWwWTPHY0GfVYQ4mSsxTv1wPDMJ37AxarydpY6yjpCFo gwcuAj14Rt5cy0gWTWfoHFX09/2bF7ETal5gDQKLmV/c2A2jL/+OP9KgkIa2kzTh rzCQnaTtwY8vxrhCvFEohf5JQNt342/0ftqSA7k9/eq0vz66isiEZeIDBWm7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmZtM6Hl4osqJM6I25/doM8TkxbswHwYDVR0j BBgwFoAUsfCnWF7RiCeDxq+AK4JmB6u5JnEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODkxMzg5My01ZjY0LTRhNWUtYThkMi01ZDUxZWJkZTQ3M2YvMC9CMUYwQTc1ODVF RDE4ODI3ODNDNkFGODAyQjgyNjYwN0FCQjkyNjcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjFGMEE3NTg1RUQxODgyNzgzQzZBRjgwMkI4MjY2MDdBQkI5 MjY3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzg5MTM4OTMtNWY2NC00YTVlLWE4 ZDItNWQ1MWViZGU0NzNmLzAvQjFGMEE3NTg1RUQxODgyNzgzQzZBRjgwMkI4MjY2 MDdBQkI5MjY3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI4JW12V3KCL2Qc+h6892+OiTIwYryv4w3Df cQdbg7NCHPTKG14rbvgEaAyGVS6k7jxJVgPLm60Mibq0B1RkoPsGWMBUI5Y3GP9y IxmS0nSO+6i1BoRWyapTivKOF/FqcbXNqFNjG/4ladK1XUsLr1aacGlysLRvbNYo LzuRPP/OFAJ6DtT9v0F1hKeKOdHCbo0MxQeAy2dvnRNquLRSC8BExPfzzPLoK3AG OeS/+wIZGH2b0eQrUc4F3YvhTEYwnWkRSNkiEIBlk/isXq28Vlfm6iIbXWR9WwHg cRK3js8s9wob6fDCoqqWFTW3RvZdBJrdpMr/xTfaKWO9NmeqsMI= -----END CERTIFICATE-----Generated at Wed Jan 21 12:22:36 2026 by rpki-client