This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft File: BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft (raw, json) Hash identifier: 9MmppbzyPHonezILAdSBEijWbPEPfJhK+ajyX6YaxjY= Subject key identifier: 18:E7:E6:FB:70:94:7A:0F:74:54:71:CD:7E:A5:BC:35:D9:B9:A8:5F Authority key identifier: BC:BE:AD:46:72:B1:9E:91:24:8E:58:DD:91:C4:EC:D8:94:A7:A3:A8 Certificate issuer: /CN=BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8 Certificate serial: 314F7297C1ECF40389335708987E3FEBB725ACB1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft Manifest number: 0105 Signing time: Sat 31 Jan 2026 14:41:08 +0000 Manifest this update: Sat 31 Jan 2026 14:36:08 +0000 Manifest next update: Wed 04 Feb 2026 01:31:08 +0000 Files and hashes: 1: 3130332e3134322e39302e302f32332d3234203d3e20313339333734.roa (hash: BCR4399uDrDPTCg+MIbL26PuI+e2Uq0NkSYBiX921Hw=) 2: BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl (hash: hNno3E7X+qMb7EEpvFMDkH9FKx9rGpLn/4SjwypkTBQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 01:31:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:4f:72:97:c1:ec:f4:03:89:33:57:08:98:7e:3f:eb:b7:25:ac:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8 Validity Not Before: Jan 31 14:36:08 2026 GMT Not After : Feb 4 01:31:08 2026 GMT Subject: CN=18E7E6FB70947A0F745471CD7EA5BC35D9B9A85F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1c:da:d6:9c:60:00:47:67:21:39:b1:e1:3d: 83:54:0e:52:26:05:48:42:f5:83:47:f0:b8:d0:ce: dc:5d:36:d7:89:3a:dd:17:74:9f:33:23:27:f8:0f: a7:ed:f5:25:ce:c4:ea:8d:c9:79:60:73:10:0d:46: 49:cd:06:e5:dc:fb:19:06:a3:f6:05:fe:9d:e1:74: e7:33:88:2e:48:61:c2:a3:7d:dd:8e:2c:dc:95:51: a0:f5:55:8b:e9:9b:35:7c:f4:b8:38:50:47:c6:1e: 4f:d4:20:fc:e1:2d:22:4a:10:41:8c:19:4e:7e:d9: 0c:73:f3:ae:12:2f:46:c4:57:fc:f8:40:a9:77:4a: 53:54:47:61:8b:70:33:45:52:46:13:7d:f7:83:71: 38:d5:4d:08:65:35:ab:a3:13:4f:e6:24:b0:4c:2b: cc:87:7d:ac:93:b8:d1:c8:62:c0:f4:2b:4e:b7:01: bd:18:ef:60:c3:71:a6:0f:7c:4a:9f:c4:88:8a:28: 27:88:4a:8d:35:bb:5e:f4:e2:cd:a8:b0:bc:7c:16: 50:02:6b:44:1a:8b:2b:49:1c:ef:bf:df:d2:6f:11: 32:f1:fd:fa:eb:12:15:bb:9a:cb:23:58:1f:83:d3: 75:21:51:72:88:2c:a3:79:30:5b:8c:be:6d:2e:fe: 49:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:E7:E6:FB:70:94:7A:0F:74:54:71:CD:7E:A5:BC:35:D9:B9:A8:5F X509v3 Authority Key Identifier: keyid:BC:BE:AD:46:72:B1:9E:91:24:8E:58:DD:91:C4:EC:D8:94:A7:A3:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:77:b1:97:ba:7d:b6:e3:74:b0:c2:2b:9d:e4:d1:42:f4:63: 0f:41:db:75:ab:a7:68:42:ac:69:1b:e2:9d:40:c9:a5:56:90: db:ae:f7:e4:85:a3:2a:98:f4:1f:e8:48:02:56:77:1b:88:50: 69:2d:fb:04:a3:e3:c5:8b:d2:74:dd:6b:4a:f4:da:53:26:76: b0:20:e8:93:a2:18:64:4a:03:57:85:1c:4c:f1:85:81:c4:a6: 87:10:99:a5:1e:8f:75:9a:82:da:5d:60:6e:89:56:7a:fe:1e: 05:1d:37:41:11:0f:47:13:f5:45:41:9d:bc:d4:3e:9f:2a:80: a6:77:bf:70:7d:4e:ba:0f:e7:10:d9:ab:a0:c2:03:6e:df:c5: a7:aa:f1:97:e1:a6:3e:6f:e1:43:34:54:3d:d2:e7:90:f7:21: 51:8f:5e:62:b5:89:b0:31:80:e8:19:8d:61:11:de:6b:03:e5: 9e:dd:22:c7:a1:c2:36:d7:94:26:be:69:5b:8e:c8:d6:1f:50: 76:3c:c0:88:85:26:3c:21:c4:81:32:b1:36:4b:fa:be:3b:89: b8:1c:c6:7a:62:17:2b:61:85:6b:3f:31:bf:fd:3f:6f:86:5a: 36:f1:57:48:5f:69:f2:b9:91:33:63:f0:a8:3f:0c:f2:0c:14: 4f:36:a0:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMU9yl8Hs9AOJM1cImH4/67clrLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVDRDg5 NEE3QTNBODAeFw0yNjAxMzExNDM2MDhaFw0yNjAyMDQwMTMxMDhaMDMxMTAvBgNV BAMTKDE4RTdFNkZCNzA5NDdBMEY3NDU0NzFDRDdFQTVCQzM1RDlCOUE4NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCHNrWnGAAR2chObHhPYNUDlIm BUhC9YNH8LjQztxdNteJOt0XdJ8zIyf4D6ft9SXOxOqNyXlgcxANRknNBuXc+xkG o/YF/p3hdOcziC5IYcKjfd2OLNyVUaD1VYvpmzV89Lg4UEfGHk/UIPzhLSJKEEGM GU5+2Qxz864SL0bEV/z4QKl3SlNUR2GLcDNFUkYTffeDcTjVTQhlNaujE0/mJLBM K8yHfayTuNHIYsD0K063Ab0Y72DDcaYPfEqfxIiKKCeISo01u1704s2osLx8FlAC a0QaiytJHO+/39JvETLx/frrEhW7mssjWB+D03UhUXKILKN5MFuMvm0u/km9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGOfm+3CUeg90VHHNfqW8Ndm5qF8wHwYDVR0j BBgwFoAUvL6tRnKxnpEkjljdkcTs2JSno6gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTkyMTkxNy0xM2FmLTQ0MDMtOTdhYi05YWRhZjUxMDRjMTIvMC9CQ0JFQUQ0Njcy QjE5RTkxMjQ4RTU4REQ5MUM0RUNEODk0QTdBM0E4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVDRDg5NEE3 QTNBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU5MjE5MTctMTNhZi00NDAzLTk3 YWItOWFkYWY1MTA0YzEyLzAvQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVD RDg5NEE3QTNBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA13sZe6fbbjdLDCK53k0UL0Yw9B23Wrp2hC rGkb4p1AyaVWkNuu9+SFoyqY9B/oSAJWdxuIUGkt+wSj48WL0nTda0r02lMmdrAg 6JOiGGRKA1eFHEzxhYHEpocQmaUej3WagtpdYG6JVnr+HgUdN0ERD0cT9UVBnbzU Pp8qgKZ3v3B9TroP5xDZq6DCA27fxaeq8Zfhpj5v4UM0VD3S55D3IVGPXmK1ibAx gOgZjWER3msD5Z7dIsehwjbXlCa+aVuOyNYfUHY8wIiFJjwhxIEysTZL+r47ibgc xnpiFythhWs/Mb/9P2+GWjbxV0hfafK5kTNj8Kg/DPIMFE82oAc= -----END CERTIFICATE-----Generated at Mon Feb 2 10:06:38 2026 by rpki-client