This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft File: B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft (raw, json) Hash identifier: pTWOXSE2zu0sKQaCc5VliuJL14r4WQNpzPTaOeMyizU= Subject key identifier: C3:0C:97:A5:14:9F:74:30:6A:D7:93:D5:C3:01:74:38:40:EB:63:08 Authority key identifier: B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7 Certificate issuer: /CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7 Certificate serial: 16831B3610BC54D584DE9C69BEFAD3334BDD92FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft Manifest number: 01D5 Signing time: Sun 01 Feb 2026 14:20:41 +0000 Manifest this update: Sun 01 Feb 2026 14:15:41 +0000 Manifest next update: Wed 04 Feb 2026 15:06:41 +0000 Files and hashes: 1: 3130332e3138352e3139372e302f32342d3234203d3e20313333333535.roa (hash: RTSCZBlu6Dp5iZ9tqUQjdWds0uYS19fumhuWQjrAUY0=) 2: 3130332e3230392e3133312e302f32342d3234203d3e20313333333535.roa (hash: FYuBNptiifXDdz3r8ww5+PIUEMM0vizifHMr9sxc+Mk=) 3: B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl (hash: uS4pOUqi+0IznFYlMCcphfJAxu6ifqUiruDA0r0AmgM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 15:06:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:83:1b:36:10:bc:54:d5:84:de:9c:69:be:fa:d3:33:4b:dd:92:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7 Validity Not Before: Feb 1 14:15:41 2026 GMT Not After : Feb 4 15:06:41 2026 GMT Subject: CN=C30C97A5149F74306AD793D5C301743840EB6308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0a:30:71:56:18:8c:15:94:15:02:75:5a:94: bb:b1:8a:f0:92:dc:28:5c:5a:a9:58:eb:f4:11:61: 43:5a:da:93:26:f4:3d:78:6f:d7:56:eb:48:da:31: 84:d6:78:87:af:2d:b4:fa:dd:26:30:0b:14:fe:de: 05:86:d8:83:c2:ba:c8:d6:3a:3d:5c:f3:8f:fd:a0: 22:98:12:0c:4f:43:3a:d2:79:37:1c:1d:45:95:86: 61:23:53:0e:5b:44:85:dd:43:82:10:21:d6:ae:4a: ef:c2:15:f4:69:17:36:49:79:43:ca:59:56:a6:06: 45:5f:bc:b9:6e:7c:c3:76:a1:70:27:79:75:a4:ad: cd:50:4b:3e:b1:5f:0f:a3:aa:75:e4:f7:82:85:fe: 50:96:dd:9a:3c:22:79:fd:71:10:d3:18:bd:ac:d6: 46:ed:9b:1a:10:91:5f:57:2e:b9:f9:c5:05:35:07: 91:86:ce:e2:25:4c:e4:79:cc:f8:e6:08:ff:9d:57: 2c:c1:9c:44:94:bc:ec:2e:bb:70:1b:02:47:86:65: 2c:18:8e:5a:0a:0b:58:3f:a7:a2:01:ff:c2:95:f5: ca:84:e7:7f:cf:42:0c:69:51:54:f3:96:96:ad:46: fa:b5:39:11:96:b5:a2:75:9a:8e:a7:97:34:72:03: 89:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:0C:97:A5:14:9F:74:30:6A:D7:93:D5:C3:01:74:38:40:EB:63:08 X509v3 Authority Key Identifier: keyid:B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:f2:7d:94:8b:d7:d5:5e:2c:c8:ba:d0:ef:d7:a3:5f:3e:8f: 91:db:83:c6:cf:a0:25:fd:c9:cb:07:88:65:2d:ba:76:fd:f4: ee:1f:0e:27:ac:29:ac:1c:e4:0c:4d:7c:00:8d:10:1b:62:59: cd:41:28:d5:b7:69:1f:0f:84:46:d1:28:fe:e6:62:99:9b:bd: 19:35:d1:fb:6c:ce:11:83:aa:6b:ae:3f:6c:f8:bb:2c:32:f8: 5e:2a:27:ab:67:9a:9a:54:ca:fd:50:28:58:49:ba:71:4c:b8: 67:9f:d5:04:a4:ea:45:c5:e2:19:26:0b:21:3d:9d:ac:45:16: 49:98:1a:a0:f5:ca:94:57:91:b8:e6:47:7b:6f:c0:26:5a:af: 79:b7:b4:b8:5e:07:c9:60:73:29:20:6b:76:97:cd:88:b7:ee: 19:71:12:5d:02:2c:24:9b:6e:cf:03:17:a6:09:0b:76:4e:6a: 62:73:87:0d:ed:4b:d0:f0:f8:e0:7a:d8:40:23:e3:6e:1e:28: a1:5e:0d:f8:a2:8e:5f:a9:35:5c:35:86:3e:d3:d2:09:90:82: 63:99:49:4e:8c:ac:23:1b:03:e3:78:59:27:1c:43:cd:f8:99: 26:c0:18:44:69:18:38:51:3b:ef:e5:3c:b2:9f:d8:8f:71:a1: e8:73:78:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFoMbNhC8VNWE3pxpvvrTM0vdkvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYwQUYz QTgxRkZGNzAeFw0yNjAyMDExNDE1NDFaFw0yNjAyMDQxNTA2NDFaMDMxMTAvBgNV BAMTKEMzMEM5N0E1MTQ5Rjc0MzA2QUQ3OTNENUMzMDE3NDM4NDBFQjYzMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYCjBxVhiMFZQVAnValLuxivCS 3ChcWqlY6/QRYUNa2pMm9D14b9dW60jaMYTWeIevLbT63SYwCxT+3gWG2IPCusjW Oj1c84/9oCKYEgxPQzrSeTccHUWVhmEjUw5bRIXdQ4IQIdauSu/CFfRpFzZJeUPK WVamBkVfvLlufMN2oXAneXWkrc1QSz6xXw+jqnXk94KF/lCW3Zo8Inn9cRDTGL2s 1kbtmxoQkV9XLrn5xQU1B5GGzuIlTOR5zPjmCP+dVyzBnESUvOwuu3AbAkeGZSwY jloKC1g/p6IB/8KV9cqE53/PQgxpUVTzlpatRvq1ORGWtaJ1mo6nlzRyA4nVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwwyXpRSfdDBq15PVwwF0OEDrYwgwHwYDVR0j BBgwFoAUub62DNYiTUHzM6B+GCDwrzqB//cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MWY4N2Y1YS1mNmY5LTQ2OGQtODk1ZS0zMTQ0ODdmNWUyNWUvMC9COUJFQjYwQ0Q2 MjI0RDQxRjMzM0EwN0UxODIwRjBBRjNBODFGRkY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYwQUYzQTgx RkZGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjFmODdmNWEtZjZmOS00NjhkLTg5 NWUtMzE0NDg3ZjVlMjVlLzAvQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYw QUYzQTgxRkZGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAETyfZSL19VeLMi60O/Xo18+j5Hbg8bPoCX9 ycsHiGUtunb99O4fDiesKawc5AxNfACNEBtiWc1BKNW3aR8PhEbRKP7mYpmbvRk1 0ftszhGDqmuuP2z4uywy+F4qJ6tnmppUyv1QKFhJunFMuGef1QSk6kXF4hkmCyE9 naxFFkmYGqD1ypRXkbjmR3tvwCZar3m3tLheB8lgcykga3aXzYi37hlxEl0CLCSb bs8DF6YJC3ZOamJzhw3tS9Dw+OB62EAj424eKKFeDfiijl+pNVw1hj7T0gmQgmOZ SU6MrCMbA+N4WSccQ834mSbAGERpGDhRO+/lPLKf2I9xoehzePU= -----END CERTIFICATE-----Generated at Mon Feb 2 09:44:02 2026 by rpki-client