This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft File: BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft (raw, json) Hash identifier: 9a9Q8tmjmNGeUBvJdzooi7198RvGcJDTNSKrgl601bQ= Subject key identifier: 86:8B:3A:1C:34:7E:0E:0D:A0:21:E0:77:4D:74:4C:92:DD:80:14:B4 Authority key identifier: BE:B3:B3:5B:A1:C3:DA:CA:59:C6:C5:25:EA:98:23:FF:90:2A:F9:98 Certificate issuer: /CN=BEB3B35BA1C3DACA59C6C525EA9823FF902AF998 Certificate serial: 320CC6859F4DC02D601387358FDB4879D3E9177B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.cer Subject info access: rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft Manifest number: 0544 Signing time: Sat 31 Jan 2026 13:31:13 +0000 Manifest this update: Sat 31 Jan 2026 13:26:13 +0000 Manifest next update: Tue 03 Feb 2026 14:05:13 +0000 Files and hashes: 1: 3130332e3135312e32322e302f32342d3234203d3e20313430343034.roa (hash: 2DJXbY7xN8WlOd/aLrW1rEx9vxnt9jS/uQOEXM2RB4s=) 2: 3130332e3135312e32322e302f32332d3233203d3e20313430343034.roa (hash: 7A1iTDrwk8kXb580V7UHZYGVNfXcQ2O63NbSELLsFpc=) 3: BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.crl (hash: UySm6I9hon6DqqqIhrXlFyCGJIzD0DMczv11FayrojQ=) 4: 3130332e3135312e32332e302f32342d3234203d3e20313430343034.roa (hash: bYtdH3bHM7U4F7bJ3T9zU9hXlE72l+eUu+9la3AGBTU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.crl rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 14:05:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:0c:c6:85:9f:4d:c0:2d:60:13:87:35:8f:db:48:79:d3:e9:17:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEB3B35BA1C3DACA59C6C525EA9823FF902AF998 Validity Not Before: Jan 31 13:26:13 2026 GMT Not After : Feb 3 14:05:13 2026 GMT Subject: CN=868B3A1C347E0E0DA021E0774D744C92DD8014B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:79:39:34:9d:02:70:f0:0a:23:10:1e:f4:0a: 51:ef:16:31:84:15:c1:8b:d9:ce:d4:e4:ad:23:97: 69:77:b1:26:a1:1e:54:b5:75:9e:40:43:e9:83:67: db:aa:8a:58:c1:56:16:3b:b3:98:3c:63:23:11:65: fb:d8:35:33:65:8c:93:97:10:33:c1:f5:26:65:64: c6:ee:e6:ec:04:c8:2e:3e:47:e6:88:35:23:9c:f9: 20:7f:90:1b:ab:2a:be:45:e7:60:b5:d9:a1:91:11: 7c:39:43:5d:7d:b1:f3:80:f0:03:a1:be:49:d5:6d: ff:a5:f2:c0:1a:36:71:9c:bd:04:44:c1:60:b6:46: 0a:26:cc:85:81:c6:5f:14:66:19:30:6e:9d:85:17: ca:8b:8b:7b:a3:7c:a5:5a:57:ee:fa:97:4c:bb:52: d6:1b:71:8b:b8:70:24:27:dc:39:75:71:c1:e0:ac: 87:b3:42:13:25:21:af:69:81:e9:db:97:b0:70:ed: 29:eb:69:4c:de:24:12:30:1b:24:68:f1:04:07:1a: d1:f1:f6:5d:f0:e2:ca:b8:89:51:82:97:3f:5c:86: 5f:ab:56:de:33:42:57:36:0d:76:6d:88:44:58:f3: 85:29:68:0e:d4:4c:29:5d:b6:e6:58:2b:c3:5a:ae: 21:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:8B:3A:1C:34:7E:0E:0D:A0:21:E0:77:4D:74:4C:92:DD:80:14:B4 X509v3 Authority Key Identifier: keyid:BE:B3:B3:5B:A1:C3:DA:CA:59:C6:C5:25:EA:98:23:FF:90:2A:F9:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption db:6f:ca:88:32:bd:96:80:d5:c2:4e:36:92:4a:12:71:7f:91: 77:00:bc:db:c8:49:c3:5f:c4:13:a3:0b:d4:d6:6b:e1:8b:33: 50:0c:eb:2b:e5:96:5c:4f:34:7d:24:3e:c3:56:54:0d:40:29: 14:61:3a:6c:11:cd:60:b2:85:9b:fa:5b:08:10:98:00:2a:ea: 77:10:f5:6c:ae:e5:be:eb:ef:2c:ad:81:9a:9e:d6:0f:6d:94: f8:2e:15:ea:8d:d2:17:32:59:26:8c:cd:41:f5:ee:b7:6d:34: 71:80:66:d4:57:13:74:0b:16:a5:ae:0e:f2:8a:2b:5b:97:2e: 97:7d:59:0d:a6:14:d0:79:54:07:c6:17:3b:7a:1a:07:83:f9: 08:59:ef:cc:15:b8:f8:20:9d:ad:f4:e6:37:35:8b:2d:fd:7f: c4:0d:73:73:8f:21:f9:90:50:bc:69:a2:41:6f:24:67:d3:46: 3b:8e:21:39:9b:fa:bb:b6:9c:79:10:81:e7:1f:3b:ff:84:b4: 8c:c4:fe:ce:82:6c:ef:db:de:65:d3:b3:21:17:b3:94:94:46: f4:1b:4b:ff:2c:a3:4a:48:bc:af:2b:f2:c2:2d:f5:7c:75:30: 85:54:fc:17:d8:65:72:81:31:a0:14:52:24:3a:9c:54:8b:c7: 9d:ba:44:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMgzGhZ9NwC1gE4c1j9tIedPpF3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVCM0IzNUJBMUMzREFDQTU5QzZDNTI1RUE5ODIzRkY5 MDJBRjk5ODAeFw0yNjAxMzExMzI2MTNaFw0yNjAyMDMxNDA1MTNaMDMxMTAvBgNV BAMTKDg2OEIzQTFDMzQ3RTBFMERBMDIxRTA3NzRENzQ0QzkyREQ4MDE0QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCveTk0nQJw8AojEB70ClHvFjGE FcGL2c7U5K0jl2l3sSahHlS1dZ5AQ+mDZ9uqiljBVhY7s5g8YyMRZfvYNTNljJOX EDPB9SZlZMbu5uwEyC4+R+aINSOc+SB/kBurKr5F52C12aGREXw5Q119sfOA8AOh vknVbf+l8sAaNnGcvQREwWC2RgomzIWBxl8UZhkwbp2FF8qLi3ujfKVaV+76l0y7 UtYbcYu4cCQn3Dl1ccHgrIezQhMlIa9pgenbl7Bw7SnraUzeJBIwGyRo8QQHGtHx 9l3w4sq4iVGClz9chl+rVt4zQlc2DXZtiERY84UpaA7UTCldtuZYK8NariF7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhos6HDR+Dg2gIeB3TXRMkt2AFLQwHwYDVR0j BBgwFoAUvrOzW6HD2spZxsUl6pgj/5Aq+ZgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MGNiNWM5Yi1mMzgzLTRlODEtODEyYy0wZTIyN2FkNDZiMWIvMC9CRUIzQjM1QkEx QzNEQUNBNTlDNkM1MjVFQTk4MjNGRjkwMkFGOTk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkVCM0IzNUJBMUMzREFDQTU5QzZDNTI1RUE5ODIzRkY5MDJB Rjk5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTBjYjVjOWItZjM4My00ZTgxLTgx MmMtMGUyMjdhZDQ2YjFiLzAvQkVCM0IzNUJBMUMzREFDQTU5QzZDNTI1RUE5ODIz RkY5MDJBRjk5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANtvyogyvZaA1cJONpJKEnF/kXcAvNvIScNf xBOjC9TWa+GLM1AM6yvlllxPNH0kPsNWVA1AKRRhOmwRzWCyhZv6WwgQmAAq6ncQ 9Wyu5b7r7yytgZqe1g9tlPguFeqN0hcyWSaMzUH17rdtNHGAZtRXE3QLFqWuDvKK K1uXLpd9WQ2mFNB5VAfGFzt6GgeD+QhZ78wVuPggna305jc1iy39f8QNc3OPIfmQ ULxpokFvJGfTRjuOITmb+ru2nHkQgecfO/+EtIzE/s6CbO/b3mXTsyEXs5SURvQb S/8so0pIvK8r8sIt9Xx1MIVU/BfYZXKBMaAUUiQ6nFSLx526RBo= -----END CERTIFICATE-----Generated at Mon Feb 2 10:04:21 2026 by rpki-client