This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft File: BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft (raw, json) Hash identifier: 5jPybrM7Chq9S6DzAoQjxAOoGuYUfvenc92I+ScJ3dc= Subject key identifier: E4:A9:4D:EE:CE:B1:39:9A:96:10:5A:98:55:69:5A:25:28:E9:15:93 Authority key identifier: BD:0C:A7:BB:7E:E1:45:97:A1:71:F1:B1:E3:E3:12:7A:79:DF:FF:D0 Certificate issuer: /CN=BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0 Certificate serial: 62EFAFFA1A420B90C0782BF5505AF0F9C314A818 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft Manifest number: 021D Signing time: Sun 01 Feb 2026 18:40:56 +0000 Manifest this update: Sun 01 Feb 2026 18:35:56 +0000 Manifest next update: Wed 04 Feb 2026 23:10:56 +0000 Files and hashes: 1: 3130332e32302e38352e302f32342d3234203d3e20313530323337.roa (hash: /Ll9XnZwq9kQ7KqFTm1tz2GQbHOFyxKz40lfWdvRTyg=) 2: BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.crl (hash: /g7aOVeVEqag2xviKOWV9TSBqCzqZIf5vXXxIC0s91M=) 3: 3130332e32302e38342e302f32342d3234203d3e20313530323337.roa (hash: Q4o71jeTV80A1Kcs2rXwd40dCqE8n3Drpr6hWhmrWZg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.crl rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 23:10:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:ef:af:fa:1a:42:0b:90:c0:78:2b:f5:50:5a:f0:f9:c3:14:a8:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0 Validity Not Before: Feb 1 18:35:56 2026 GMT Not After : Feb 4 23:10:56 2026 GMT Subject: CN=E4A94DEECEB1399A96105A9855695A2528E91593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b0:27:87:aa:7a:b9:b8:61:a2:87:a8:b3:c5: f7:7f:2c:4e:11:a2:15:5f:96:a1:02:34:bd:71:52: d2:a4:a5:86:ca:cb:7e:9c:7f:67:96:f9:40:2c:70: fb:f3:50:d7:0b:8d:27:99:ed:2b:e9:18:56:61:cf: c7:92:6e:9e:e9:7b:77:f4:a6:5e:bc:2d:c6:2b:3a: 00:cc:12:14:d9:f2:f0:18:80:2f:da:86:03:7c:3e: 21:84:d6:e5:f4:17:31:60:94:56:57:47:63:3d:4a: c1:45:f1:c9:04:b1:2f:0d:09:66:83:67:86:85:b1: 06:ef:84:68:51:f5:de:b2:f7:34:e9:e1:9d:81:27: 76:df:ac:89:74:f1:da:9b:69:b7:f8:2b:35:2a:44: 8f:8e:4c:03:d9:c0:cf:49:ec:9f:d6:0b:fa:a2:b9: 2a:ac:01:8f:32:8c:f4:fd:12:35:49:40:01:2a:3a: 00:fa:1b:e2:db:80:65:5d:42:e4:57:ae:bd:f4:cc: 3b:b0:bd:ac:87:78:57:2e:49:db:b9:26:a7:5c:50: e6:e0:d6:30:e4:67:2b:52:98:17:d2:58:63:b3:eb: 0b:c6:44:48:97:a1:5f:b3:ef:b1:5f:f4:ef:dd:99: 2b:55:fb:51:d5:df:4f:f3:9f:93:24:d5:ab:98:75: 6b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:A9:4D:EE:CE:B1:39:9A:96:10:5A:98:55:69:5A:25:28:E9:15:93 X509v3 Authority Key Identifier: keyid:BD:0C:A7:BB:7E:E1:45:97:A1:71:F1:B1:E3:E3:12:7A:79:DF:FF:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:bd:ba:00:54:ff:ee:c5:b3:ca:b8:10:5d:ee:bd:75:ad:39: 1b:09:35:4a:9a:7c:f3:1c:b9:ce:8b:28:28:e9:12:5d:1e:4b: 51:6e:37:0e:a0:3d:6e:20:d8:74:95:26:b3:2b:21:38:ef:ff: ea:0c:0d:23:44:17:51:c8:d0:3c:ce:b5:47:bd:fa:06:37:6c: c9:35:63:9b:07:78:f7:cb:85:6f:d0:c3:50:c8:36:1a:35:6d: a3:30:52:ca:5e:16:e4:62:29:40:5b:25:de:42:74:d4:cd:2b: a4:ce:31:18:2a:d4:dc:4b:0e:39:bf:70:26:41:9b:5a:bf:33: 83:2a:9f:f1:a4:59:e5:06:63:97:0b:2a:48:26:bc:66:e0:b7: 76:0a:bb:d3:29:60:3d:46:10:eb:f8:0f:ba:7a:df:2e:a6:e7: 72:f2:6a:44:c4:0b:39:09:29:44:cb:a2:46:c4:47:8c:84:0f: 59:37:fa:76:a7:60:94:dd:94:ea:6e:9d:d8:1a:18:12:98:05: e3:00:f3:a5:4c:4c:1a:38:c7:db:74:2d:36:cc:85:f6:d6:21: 1a:48:26:04:db:03:45:16:12:d0:d2:cd:77:fe:28:5d:12:d5: 21:7c:e9:ff:d3:ba:e1:09:31:7d:c9:18:72:52:83:43:1e:b6: 5c:87:95:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYu+v+hpCC5DAeCv1UFrw+cMUqBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQwQ0E3QkI3RUUxNDU5N0ExNzFGMUIxRTNFMzEyN0E3 OURGRkZEMDAeFw0yNjAyMDExODM1NTZaFw0yNjAyMDQyMzEwNTZaMDMxMTAvBgNV BAMTKEU0QTk0REVFQ0VCMTM5OUE5NjEwNUE5ODU1Njk1QTI1MjhFOTE1OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHsCeHqnq5uGGih6izxfd/LE4R ohVflqECNL1xUtKkpYbKy36cf2eW+UAscPvzUNcLjSeZ7SvpGFZhz8eSbp7pe3f0 pl68LcYrOgDMEhTZ8vAYgC/ahgN8PiGE1uX0FzFglFZXR2M9SsFF8ckEsS8NCWaD Z4aFsQbvhGhR9d6y9zTp4Z2BJ3bfrIl08dqbabf4KzUqRI+OTAPZwM9J7J/WC/qi uSqsAY8yjPT9EjVJQAEqOgD6G+LbgGVdQuRXrr30zDuwvayHeFcuSdu5JqdcUObg 1jDkZytSmBfSWGOz6wvGREiXoV+z77Ff9O/dmStV+1HV30/zn5Mk1auYdWtPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5KlN7s6xOZqWEFqYVWlaJSjpFZMwHwYDVR0j BBgwFoAUvQynu37hRZehcfGx4+MSennf/9AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZDdhNzFiYy1mOTEwLTRiOGMtOWNmZi0wODU3ZDVmMmQzN2YvMC9CRDBDQTdCQjdF RTE0NTk3QTE3MUYxQjFFM0UzMTI3QTc5REZGRkQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQwQ0E3QkI3RUUxNDU5N0ExNzFGMUIxRTNFMzEyN0E3OURG RkZEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Q3YTcxYmMtZjkxMC00YjhjLTlj ZmYtMDg1N2Q1ZjJkMzdmLzAvQkQwQ0E3QkI3RUUxNDU5N0ExNzFGMUIxRTNFMzEy N0E3OURGRkZEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIa9ugBU/+7Fs8q4EF3uvXWtORsJNUqafPMc uc6LKCjpEl0eS1FuNw6gPW4g2HSVJrMrITjv/+oMDSNEF1HI0DzOtUe9+gY3bMk1 Y5sHePfLhW/Qw1DINho1baMwUspeFuRiKUBbJd5CdNTNK6TOMRgq1NxLDjm/cCZB m1q/M4Mqn/GkWeUGY5cLKkgmvGbgt3YKu9MpYD1GEOv4D7p63y6m53LyakTECzkJ KUTLokbER4yED1k3+nanYJTdlOpundgaGBKYBeMA86VMTBo4x9t0LTbMhfbWIRpI JgTbA0UWEtDSzXf+KF0S1SF86f/TuuEJMX3JGHJSg0MetlyHleM= -----END CERTIFICATE-----Generated at Mon Feb 2 10:06:08 2026 by rpki-client