This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft File: B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft (raw, json) Hash identifier: mDoZSJNvR89tQw+45TpuryOuGZJneIWtNGS/gnukSAM= Subject key identifier: 1F:87:96:67:86:79:A4:E7:C3:9D:10:D0:91:7A:CF:41:87:C4:61:3A Authority key identifier: B8:77:CD:1C:54:2C:3D:E2:CB:B8:EF:15:1F:17:9B:85:7E:93:76:E4 Certificate issuer: /CN=B877CD1C542C3DE2CBB8EF151F179B857E9376E4 Certificate serial: 2AADE8CF14BD1D3FFDFF8207DC5869BBF797928D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft Manifest number: 01BD Signing time: Tue 13 Jan 2026 13:22:28 +0000 Manifest this update: Tue 13 Jan 2026 13:17:28 +0000 Manifest next update: Fri 16 Jan 2026 13:42:28 +0000 Files and hashes: 1: B877CD1C542C3DE2CBB8EF151F179B857E9376E4.crl (hash: sq04ZTRDA35PQoBgjz6+PD0ZOGoazcKMOpjZsfU2yWU=) 2: 3136302e32302e3232322e302f32342d3234203d3e20313338303737.roa (hash: qNVUMuIrsRym1al7QBcjtB+KpEbJtW/3ayQKIjCttbA=) 3: 3131372e3130332e3131362e302f32342d3234203d3e20313338303737.roa (hash: XZBWXgwi6/bY0uActUG5TDU+WKOBs9TQUHXitVU+Zwk=) 4: 3130332e3133302e3139382e302f32332d3234203d3e20313338303737.roa (hash: GBdm9qQ0p29KR8e28QB9UjrYbB7/EDKaMJEitqFkR/M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.crl rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Jan 2026 13:42:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:ad:e8:cf:14:bd:1d:3f:fd:ff:82:07:dc:58:69:bb:f7:97:92:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B877CD1C542C3DE2CBB8EF151F179B857E9376E4 Validity Not Before: Jan 13 13:17:28 2026 GMT Not After : Jan 16 13:42:28 2026 GMT Subject: CN=1F8796678679A4E7C39D10D0917ACF4187C4613A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7b:70:bf:3c:44:f9:98:c9:0b:58:5b:62:57: 44:89:5a:3a:64:e8:92:71:58:df:66:c0:c9:b7:62: 03:56:ba:e0:58:1a:d4:64:a2:02:a0:7c:4c:41:24: 74:f5:ee:c4:bf:e9:a7:b3:06:3d:f1:2a:bb:12:37: d9:3b:95:6b:5e:82:e9:ba:bd:8e:44:45:fc:c7:8a: ff:76:5f:2f:3e:c8:4c:7d:30:37:c1:60:d9:c2:a9: 02:e2:b3:91:ac:f1:61:3f:d0:e6:6c:ac:35:39:99: 9f:8e:27:f1:21:25:04:9e:24:54:1e:e2:d9:ca:53: ee:a8:b8:83:fc:03:62:53:f2:d7:8a:36:8d:dd:34: 09:e6:03:f0:ac:34:13:bd:5c:d1:5d:8f:11:c5:78: 28:21:28:7d:6f:6a:58:7d:d9:3c:c3:95:cf:07:76: c4:fb:59:a5:e0:c3:50:f7:46:c8:d1:55:6b:71:60: 6d:a2:67:d4:84:77:b9:26:c1:ee:0e:5a:6a:f4:90: a4:d8:14:67:59:e5:3a:bc:64:13:95:e1:51:8d:13: 93:2b:de:4b:06:b6:46:ea:9f:d2:3c:0e:12:51:b5: 81:87:75:ac:d5:c8:b0:c6:95:64:e0:22:42:55:76: 07:07:d0:97:9b:d6:05:4a:7a:3f:9f:b0:12:9e:02: ee:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:87:96:67:86:79:A4:E7:C3:9D:10:D0:91:7A:CF:41:87:C4:61:3A X509v3 Authority Key Identifier: keyid:B8:77:CD:1C:54:2C:3D:E2:CB:B8:EF:15:1F:17:9B:85:7E:93:76:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:72:5a:0c:62:8b:10:42:4f:a5:42:96:7f:af:5b:82:d7:42: 8f:59:5e:44:80:22:05:02:bd:c1:2f:3c:74:c1:6a:7c:99:5f: 18:f0:59:93:44:8e:44:71:d0:23:07:ee:92:16:c5:48:f4:ee: 8a:93:a0:07:a8:60:f6:b4:f3:a6:37:00:96:95:d9:aa:b9:48: bc:b9:2d:d4:e8:c9:08:d3:3d:d4:78:60:88:a0:48:b8:65:25: 3a:c0:72:f1:38:71:a8:e5:8e:b5:81:71:d9:b9:38:f8:ca:6b: 31:d1:00:f0:ad:5b:f0:16:a2:f8:6b:2a:34:e0:2b:e4:20:8e: c9:c4:06:ad:19:4a:4b:4b:ba:be:fe:ca:27:b2:19:e8:93:2e: 7c:af:8e:70:1f:06:2b:a8:63:1f:37:66:d3:f5:eb:59:81:c3: d7:90:a4:cf:1e:cf:e0:e0:4f:c4:28:d7:c6:29:4e:26:c6:dc: 8a:b3:4d:72:44:d6:28:fd:e4:64:cd:78:63:38:e7:94:74:dc: 5e:57:27:97:da:d6:96:7a:b7:e3:69:bf:d3:fd:34:2e:12:ec: da:85:76:08:c4:ff:4c:cc:dc:77:7e:cc:16:25:56:0a:a8:4b: a2:79:c2:87:dd:d1:f2:f0:3f:bb:37:e8:21:6e:e4:49:02:3c: 1d:09:73:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKq3ozxS9HT/9/4IH3Fhpu/eXko0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg3N0NEMUM1NDJDM0RFMkNCQjhFRjE1MUYxNzlCODU3 RTkzNzZFNDAeFw0yNjAxMTMxMzE3MjhaFw0yNjAxMTYxMzQyMjhaMDMxMTAvBgNV BAMTKDFGODc5NjY3ODY3OUE0RTdDMzlEMTBEMDkxN0FDRjQxODdDNDYxM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9e3C/PET5mMkLWFtiV0SJWjpk 6JJxWN9mwMm3YgNWuuBYGtRkogKgfExBJHT17sS/6aezBj3xKrsSN9k7lWtegum6 vY5ERfzHiv92Xy8+yEx9MDfBYNnCqQLis5Gs8WE/0OZsrDU5mZ+OJ/EhJQSeJFQe 4tnKU+6ouIP8A2JT8teKNo3dNAnmA/CsNBO9XNFdjxHFeCghKH1valh92TzDlc8H dsT7WaXgw1D3RsjRVWtxYG2iZ9SEd7kmwe4OWmr0kKTYFGdZ5Tq8ZBOV4VGNE5Mr 3ksGtkbqn9I8DhJRtYGHdazVyLDGlWTgIkJVdgcH0Jeb1gVKej+fsBKeAu5BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH4eWZ4Z5pOfDnRDQkXrPQYfEYTowHwYDVR0j BBgwFoAUuHfNHFQsPeLLuO8VHxebhX6TduQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjZkMTg1ZS1kNGY0LTQ4MjAtYjRiNi03OThjMzA3YWQ3ZTUvMC9CODc3Q0QxQzU0 MkMzREUyQ0JCOEVGMTUxRjE3OUI4NTdFOTM3NkU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg3N0NEMUM1NDJDM0RFMkNCQjhFRjE1MUYxNzlCODU3RTkz NzZFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWY2ZDE4NWUtZDRmNC00ODIwLWI0 YjYtNzk4YzMwN2FkN2U1LzAvQjg3N0NEMUM1NDJDM0RFMkNCQjhFRjE1MUYxNzlC ODU3RTkzNzZFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACpyWgxiixBCT6VCln+vW4LXQo9ZXkSAIgUC vcEvPHTBanyZXxjwWZNEjkRx0CMH7pIWxUj07oqToAeoYPa086Y3AJaV2aq5SLy5 LdToyQjTPdR4YIigSLhlJTrAcvE4cajljrWBcdm5OPjKazHRAPCtW/AWovhrKjTg K+QgjsnEBq0ZSktLur7+yieyGeiTLnyvjnAfBiuoYx83ZtP161mBw9eQpM8ez+Dg T8Qo18YpTibG3IqzTXJE1ij95GTNeGM455R03F5XJ5fa1pZ6t+Npv9P9NC4S7NqF dgjE/0zM3Hd+zBYlVgqoS6J5wofd0fLwP7s36CFu5EkCPB0Jc28= -----END CERTIFICATE-----Generated at Wed Jan 14 11:30:30 2026 by rpki-client