This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft File: B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft (raw, json) Hash identifier: 1D4thMroFOD81Sm/S/ReMJG3SdFyBUVaT+QwG2afBsA= Subject key identifier: A7:D6:60:A2:20:4C:53:85:02:F2:4C:68:9F:07:EC:06:F5:86:FE:25 Authority key identifier: B5:AB:E8:6E:BB:2A:02:C5:83:92:74:9A:92:FE:A6:8F:BA:FC:5C:46 Certificate issuer: /CN=B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46 Certificate serial: 4FBF60CF0761D6F326F7E32988C0CD1BEC00BF63 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft Manifest number: 0132 Signing time: Wed 21 Jan 2026 02:10:02 +0000 Manifest this update: Wed 21 Jan 2026 02:05:02 +0000 Manifest next update: Sat 24 Jan 2026 09:47:02 +0000 Files and hashes: 1: B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.crl (hash: RjsU9zyrvcaKjqh8trK6WddvsxgxJ90lEsjrwrZAJO8=) 2: 3135372e32302e33362e302f32342d3234203d3e20313430343730.roa (hash: WZyPn+mq0I+eE3vcXNaLpwRID4wqkE6/jQ3zY3AffcI=) 3: 3135372e32302e33362e302f32332d3233203d3e20313430343730.roa (hash: P+lInV3ols6ftIxSpMHmtBDcdqTmvL+gkgGsnZZSjLQ=) 4: 3135372e32302e33372e302f32342d3234203d3e20313430343730.roa (hash: cFu5nteBBzan5faf9I4u2CSs1idRr42+5NP3IOF4DXY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.crl rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 09:47:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:bf:60:cf:07:61:d6:f3:26:f7:e3:29:88:c0:cd:1b:ec:00:bf:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46 Validity Not Before: Jan 21 02:05:02 2026 GMT Not After : Jan 24 09:47:02 2026 GMT Subject: CN=A7D660A2204C538502F24C689F07EC06F586FE25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:49:c7:fe:b0:84:1a:36:4f:47:d0:52:7a:8e: 8e:82:99:bd:e1:af:69:8f:f3:ad:5b:96:81:d1:0f: d7:0c:c8:f6:8e:8c:61:5a:3a:22:96:93:62:73:19: 76:0f:39:3d:73:8e:a4:3e:85:cb:f6:b8:81:e9:00: d2:df:6c:8e:1d:78:02:10:3b:30:44:e3:f9:b7:b2: ab:20:e7:af:e6:83:40:3a:78:c4:e8:98:cd:d5:12: 14:47:5c:7d:5b:9f:af:27:45:90:8e:d2:45:5b:dd: 15:92:d7:f3:68:d4:33:19:40:32:94:01:f5:34:80: 3b:7d:f1:2b:25:3d:cb:75:78:fa:23:da:dd:34:17: cb:e5:44:6b:16:3f:92:eb:8e:e8:f0:36:63:8c:3c: 7c:04:e3:92:16:93:ac:51:82:5e:30:e8:f9:bf:9e: dc:1b:b0:c8:56:c0:73:eb:1e:6f:e1:dd:ea:d8:64: 6a:f2:be:e6:f3:46:5d:48:f5:ca:15:68:1f:ac:fd: ea:50:42:77:18:ad:59:ec:69:64:b8:13:30:42:f5: ef:06:42:2f:7e:b8:f0:d4:5b:d4:50:f6:17:cb:0a: ae:02:95:33:7e:2c:c9:d5:7b:39:8e:20:a5:2e:46: 9c:38:f0:7b:2a:1d:1f:0d:f8:73:29:3d:31:b7:3e: 00:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D6:60:A2:20:4C:53:85:02:F2:4C:68:9F:07:EC:06:F5:86:FE:25 X509v3 Authority Key Identifier: keyid:B5:AB:E8:6E:BB:2A:02:C5:83:92:74:9A:92:FE:A6:8F:BA:FC:5C:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:06:b8:ae:82:80:70:0c:12:ef:23:9d:f8:61:56:95:ff:b4: 28:d0:22:df:2e:b1:53:fc:0a:93:bf:c5:64:07:1d:2f:3d:cb: f4:4f:e1:c9:8a:9e:1e:d9:bf:a5:06:fd:cd:7b:b0:88:a6:e7: bf:bd:78:04:8b:49:1d:5c:62:75:fa:a0:38:d6:3d:a3:7f:4a: 9e:15:84:cc:f3:a0:88:49:15:79:a8:f8:da:5d:a4:16:26:e3: 8b:d5:76:85:a4:29:97:f1:86:82:3e:c7:9b:9c:f1:cf:d1:68: d9:50:43:3f:cc:ca:3c:9c:b7:95:41:96:61:fe:d1:30:21:dd: 6b:e8:28:bf:db:4d:9d:e0:50:1a:2b:7c:35:43:94:53:6d:d2: 2c:27:7b:1a:0f:64:65:a7:0f:06:08:80:ba:3b:0e:c2:8f:c9: 62:c6:d5:a3:92:66:27:c3:4b:a6:87:1d:84:76:5e:e8:f5:f1: d5:4b:69:1b:f5:27:19:04:68:5a:96:a4:18:ec:e0:27:a0:f5: da:13:29:a9:58:2d:b4:88:3d:9d:29:e4:1d:92:a8:37:69:57: 02:5a:0d:a9:c4:9b:83:44:e4:70:52:fa:30:1e:ec:0f:54:3f: af:ee:71:73:55:9c:e4:a0:34:02:eb:db:d6:6f:be:1c:20:f1: ee:65:ef:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT79gzwdh1vMm9+MpiMDNG+wAv2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVBQkU4NkVCQjJBMDJDNTgzOTI3NDlBOTJGRUE2OEZC QUZDNUM0NjAeFw0yNjAxMjEwMjA1MDJaFw0yNjAxMjQwOTQ3MDJaMDMxMTAvBgNV BAMTKEE3RDY2MEEyMjA0QzUzODUwMkYyNEM2ODlGMDdFQzA2RjU4NkZFMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCScf+sIQaNk9H0FJ6jo6Cmb3h r2mP861bloHRD9cMyPaOjGFaOiKWk2JzGXYPOT1zjqQ+hcv2uIHpANLfbI4deAIQ OzBE4/m3sqsg56/mg0A6eMTomM3VEhRHXH1bn68nRZCO0kVb3RWS1/No1DMZQDKU AfU0gDt98SslPct1ePoj2t00F8vlRGsWP5LrjujwNmOMPHwE45IWk6xRgl4w6Pm/ ntwbsMhWwHPrHm/h3erYZGryvubzRl1I9coVaB+s/epQQncYrVnsaWS4EzBC9e8G Qi9+uPDUW9RQ9hfLCq4ClTN+LMnVezmOIKUuRpw48HsqHR8N+HMpPTG3PgDxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp9ZgoiBMU4UC8kxonwfsBvWG/iUwHwYDVR0j BBgwFoAUtavobrsqAsWDknSakv6mj7r8XEYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MGJkN2Q2Yy1lYTVhLTRjNDUtOTU1OC03MTc5OTRhYjY4MGUvMC9CNUFCRTg2RUJC MkEwMkM1ODM5Mjc0OUE5MkZFQTY4RkJBRkM1QzQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjVBQkU4NkVCQjJBMDJDNTgzOTI3NDlBOTJGRUE2OEZCQUZD NUM0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjBiZDdkNmMtZWE1YS00YzQ1LTk1 NTgtNzE3OTk0YWI2ODBlLzAvQjVBQkU4NkVCQjJBMDJDNTgzOTI3NDlBOTJGRUE2 OEZCQUZDNUM0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFMGuK6CgHAMEu8jnfhhVpX/tCjQIt8usVP8 CpO/xWQHHS89y/RP4cmKnh7Zv6UG/c17sIim57+9eASLSR1cYnX6oDjWPaN/Sp4V hMzzoIhJFXmo+NpdpBYm44vVdoWkKZfxhoI+x5uc8c/RaNlQQz/Myjyct5VBlmH+ 0TAh3WvoKL/bTZ3gUBorfDVDlFNt0iwnexoPZGWnDwYIgLo7DsKPyWLG1aOSZifD S6aHHYR2Xuj18dVLaRv1JxkEaFqWpBjs4Ceg9doTKalYLbSIPZ0p5B2SqDdpVwJa DanEm4NE5HBS+jAe7A9UP6/ucXNVnOSgNALr29Zvvhwg8e5l74U= -----END CERTIFICATE-----Generated at Wed Jan 21 12:03:21 2026 by rpki-client