This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft File: BB64FDB64281947C3567104C08735A011C6210F4.mft (raw, json) Hash identifier: DWvf4RVxk+B41rp8PTLY+RO+ala/JJuob8jxP0CIFpE= Subject key identifier: BB:06:7C:08:9B:F3:C2:C0:34:7C:85:7C:38:07:46:DC:C9:87:01:4A Authority key identifier: BB:64:FD:B6:42:81:94:7C:35:67:10:4C:08:73:5A:01:1C:62:10:F4 Certificate issuer: /CN=BB64FDB64281947C3567104C08735A011C6210F4 Certificate serial: 653907ACABD48C79AC7E67F1EF02AD26273A23CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft Manifest number: 03CE Signing time: Sun 01 Feb 2026 06:31:50 +0000 Manifest this update: Sun 01 Feb 2026 06:26:50 +0000 Manifest next update: Wed 04 Feb 2026 13:28:50 +0000 Files and hashes: 1: 3130332e3136392e3139322e302f32332d3234203d3e20313432333438.roa (hash: WO1pfWHoqTdWNx4bevNPCtJdd2Sq+t2I2uTA3HBPJBM=) 2: BB64FDB64281947C3567104C08735A011C6210F4.crl (hash: gIcu0j4UbrcksElz72fORDcyyqjGz5dqaPSnbeyS7dw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.crl rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 13:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:39:07:ac:ab:d4:8c:79:ac:7e:67:f1:ef:02:ad:26:27:3a:23:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB64FDB64281947C3567104C08735A011C6210F4 Validity Not Before: Feb 1 06:26:50 2026 GMT Not After : Feb 4 13:28:50 2026 GMT Subject: CN=BB067C089BF3C2C0347C857C380746DCC987014A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e6:09:54:5c:04:6f:ec:94:94:db:f1:a0:ce: 11:10:91:79:b3:44:e6:08:77:3e:14:12:3c:fa:d0: b3:d4:80:f8:46:04:1f:d4:91:47:35:e0:ae:37:2a: ec:24:0e:79:00:e2:b7:53:e4:f7:e0:06:a2:40:57: 52:97:a3:2b:e6:3f:6a:dd:c7:45:0f:a9:3b:52:ac: 23:f4:23:67:3a:b6:60:6f:da:df:f0:0c:0c:aa:d0: 45:67:63:00:9e:89:a8:ed:c8:9b:ca:1b:1a:e6:83: 1d:00:a6:90:3a:ae:21:b6:0a:44:90:25:93:e7:0b: d7:40:13:e7:ce:f4:a6:6e:d3:19:4b:aa:9f:62:38: 68:16:30:f0:d2:82:2c:54:bd:ea:34:b4:f9:ed:52: a6:c9:67:34:16:66:29:ba:28:ee:a4:c2:c2:22:ed: 8d:4b:16:69:6a:d7:e2:34:6d:8c:b5:5f:35:77:2d: e3:95:28:4a:37:89:3f:18:2a:d1:43:b2:9f:bd:36: 57:1a:8d:10:ef:1e:b6:dd:03:15:22:35:2c:f2:d3: b0:a5:a4:24:0b:8b:64:b0:cd:86:8c:28:4f:53:36: 74:49:7f:e2:ca:76:cc:5d:74:31:a5:23:35:ec:07: f9:77:8e:8f:ba:0d:3f:85:03:1e:3f:b2:c9:74:f2: 98:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:06:7C:08:9B:F3:C2:C0:34:7C:85:7C:38:07:46:DC:C9:87:01:4A X509v3 Authority Key Identifier: keyid:BB:64:FD:B6:42:81:94:7C:35:67:10:4C:08:73:5A:01:1C:62:10:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:11:03:f8:1f:5f:8e:5b:03:e8:b2:f2:b7:15:7a:67:e1:d4: 1e:85:bc:3f:02:71:ae:40:38:84:71:b6:79:05:7d:c8:7f:7b: cc:e7:2a:8b:e3:38:a6:97:c8:dc:74:9c:23:21:c2:af:64:a0: a1:d1:7f:70:4e:2f:66:a9:c3:78:79:fd:94:db:6c:54:61:e4: 35:27:3b:d8:7d:4f:6e:af:41:11:56:58:e3:17:35:81:a8:60: 9a:13:fd:90:56:ff:19:36:43:39:21:fc:e9:e5:94:dd:4e:5a: 93:0c:f7:54:3d:e7:5b:5e:86:0b:9e:c5:74:5e:14:e2:e5:60: 58:a4:e2:67:c4:71:4a:89:9d:be:26:83:39:18:41:95:6d:e3: 15:a5:74:87:77:b0:37:de:fe:1b:2a:c3:46:e1:7e:bb:72:62: bc:1f:1e:43:74:01:03:0b:0d:50:5d:1c:8a:12:06:f9:b2:e2: 27:57:ad:f5:ec:81:59:b8:f9:a9:85:00:2f:66:ca:93:7f:4c: 9d:1d:9c:50:99:70:1d:34:ca:bf:72:ff:a3:b6:56:29:c2:61: c9:c8:f5:93:00:b9:56:a5:8a:4a:a1:ff:97:60:30:4e:6e:e4: 3c:ff:95:17:d9:94:a4:30:36:35:63:0f:4c:76:71:d0:42:0a: 1d:c0:b9:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZTkHrKvUjHmsfmfx7wKtJic6I8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVBMDEx QzYyMTBGNDAeFw0yNjAyMDEwNjI2NTBaFw0yNjAyMDQxMzI4NTBaMDMxMTAvBgNV BAMTKEJCMDY3QzA4OUJGM0MyQzAzNDdDODU3QzM4MDc0NkRDQzk4NzAxNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY5glUXARv7JSU2/GgzhEQkXmz ROYIdz4UEjz60LPUgPhGBB/UkUc14K43KuwkDnkA4rdT5PfgBqJAV1KXoyvmP2rd x0UPqTtSrCP0I2c6tmBv2t/wDAyq0EVnYwCeiajtyJvKGxrmgx0AppA6riG2CkSQ JZPnC9dAE+fO9KZu0xlLqp9iOGgWMPDSgixUveo0tPntUqbJZzQWZim6KO6kwsIi 7Y1LFmlq1+I0bYy1XzV3LeOVKEo3iT8YKtFDsp+9NlcajRDvHrbdAxUiNSzy07Cl pCQLi2SwzYaMKE9TNnRJf+LKdsxddDGlIzXsB/l3jo+6DT+FAx4/ssl08piPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuwZ8CJvzwsA0fIV8OAdG3MmHAUowHwYDVR0j BBgwFoAUu2T9tkKBlHw1ZxBMCHNaARxiEPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGEwMmQzNy0zYjlkLTQ1M2EtOGM4MS0zMjhlNTQwMTQxZmQvMC9CQjY0RkRCNjQy ODE5NDdDMzU2NzEwNEMwODczNUEwMTFDNjIxMEY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVBMDExQzYy MTBGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRhMDJkMzctM2I5ZC00NTNhLThj ODEtMzI4ZTU0MDE0MWZkLzAvQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVB MDExQzYyMTBGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA8RA/gfX45bA+iy8rcVemfh1B6FvD8Cca5A OIRxtnkFfch/e8znKovjOKaXyNx0nCMhwq9koKHRf3BOL2apw3h5/ZTbbFRh5DUn O9h9T26vQRFWWOMXNYGoYJoT/ZBW/xk2Qzkh/OnllN1OWpMM91Q951tehguexXRe FOLlYFik4mfEcUqJnb4mgzkYQZVt4xWldId3sDfe/hsqw0bhfrtyYrwfHkN0AQML DVBdHIoSBvmy4idXrfXsgVm4+amFAC9mypN/TJ0dnFCZcB00yr9y/6O2VinCYcnI 9ZMAuValikqh/5dgME5u5Dz/lRfZlKQwNjVjD0x2cdBCCh3Aue4= -----END CERTIFICATE-----Generated at Mon Feb 2 09:44:59 2026 by rpki-client