This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft File: BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft (raw, json) Hash identifier: b3yh5bDm/cOOWhZEgWMd8/Vx67kbWKop9wYnC0SRYKw= Subject key identifier: 47:F5:8E:E8:E8:95:8D:08:5D:57:8A:F4:1E:22:5A:AE:0C:77:BB:E9 Authority key identifier: BD:8C:DE:6F:E3:DF:9F:A1:ED:A6:CE:A4:62:F7:7E:F6:04:78:99:0D Certificate issuer: /CN=BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D Certificate serial: 1958CDD8E64FD1F7A094A082F65909FB66D9C7D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft Manifest number: 0545 Signing time: Sat 31 Jan 2026 18:01:28 +0000 Manifest this update: Sat 31 Jan 2026 17:56:28 +0000 Manifest next update: Wed 04 Feb 2026 05:41:28 +0000 Files and hashes: 1: BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.crl (hash: axGehNjUtRt1WgN7ire16yHwqfDUQr4zReJamplNRm8=) 2: 3130332e34312e3234372e302f32342d3234203d3e20313333383032.roa (hash: 8V1al14v0fXTXIGlVH1c93VdIS9Ve5+tbHSMrRhqr58=) 3: 323030313a6466343a366330303a3a2f34382d3438203d3e20313333383032.roa (hash: 6j5m2VjCwkXGfQzXHijMICktkY7XqIoC3rD1yeh02OI=) 4: 3130332e3134312e36312e302f32342d3234203d3e20313333383032.roa (hash: sgxUrcQvRnNHbIUuVwSUcdBBcs11g4RjDxY5LVoPdt0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.crl rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 05:41:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:58:cd:d8:e6:4f:d1:f7:a0:94:a0:82:f6:59:09:fb:66:d9:c7:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D Validity Not Before: Jan 31 17:56:28 2026 GMT Not After : Feb 4 05:41:28 2026 GMT Subject: CN=47F58EE8E8958D085D578AF41E225AAE0C77BBE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0e:fc:db:e9:7d:75:e3:6d:0c:ab:d2:74:bf: e3:7b:e1:b8:56:ca:0d:39:b7:25:4e:2c:53:14:0e: b8:e2:ad:db:21:5d:c0:36:67:b1:97:ea:7f:82:57: 72:b1:9e:df:0b:cb:3f:8d:75:85:52:24:64:ad:34: 21:1d:77:49:a2:4c:54:8c:f7:d7:1b:20:60:7b:9b: b7:97:0c:4b:2e:bd:9f:8b:46:5a:d1:8d:1f:30:ac: 8f:30:39:da:0b:9a:b8:00:76:e8:bc:35:d5:ef:af: 12:8a:79:7b:f2:5d:c2:6c:25:b4:84:0f:67:a2:fa: 36:14:08:36:ce:41:d5:5f:73:4c:42:a9:e5:1d:f7: f9:f2:b3:b2:60:e8:36:4c:c5:5c:02:13:8c:63:53: 92:a9:0a:19:f9:d2:5c:80:1f:07:83:aa:c7:46:16: d7:e2:8b:38:e2:d0:59:e3:a8:b1:be:e0:1a:bf:a8: 5f:0e:9f:5a:70:79:da:7a:8f:63:04:80:81:23:b9: 5b:46:c4:e2:f8:60:12:69:23:aa:0f:16:df:22:92: 62:c8:d4:70:be:1e:f7:d1:ca:48:9e:be:cb:a4:38: 2e:c3:3d:9d:c1:14:6c:c7:d0:89:ad:47:38:90:46: dc:4e:80:96:a2:96:8a:96:53:b5:a7:64:54:52:40: ca:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F5:8E:E8:E8:95:8D:08:5D:57:8A:F4:1E:22:5A:AE:0C:77:BB:E9 X509v3 Authority Key Identifier: keyid:BD:8C:DE:6F:E3:DF:9F:A1:ED:A6:CE:A4:62:F7:7E:F6:04:78:99:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:bb:2f:a8:6d:42:35:51:ac:88:2d:95:2a:65:bc:31:04:e8: dc:5a:51:6c:51:41:96:63:5f:04:1f:da:23:d6:8d:77:7a:3e: ce:a0:ae:7e:55:5b:a5:c0:95:d2:70:12:f4:88:5d:a4:2e:61: c4:8e:f4:12:ad:da:e0:6e:bc:b7:77:00:bf:82:fd:68:2b:83: 7e:22:34:72:30:51:e7:10:c3:ed:f5:3c:29:ad:bb:2d:62:08: 68:84:cc:5a:5e:7d:35:46:7b:46:72:a0:22:7c:ad:27:a7:72: 1e:94:47:c0:05:11:52:1f:e5:58:21:76:47:1c:96:4f:30:65: 1c:c8:37:3a:fc:59:74:4a:cb:0a:c3:6b:44:94:03:ac:a7:02: 99:1c:50:de:f3:18:28:43:7a:1a:bf:f5:8a:98:db:19:04:98: f6:ce:2d:22:d7:fb:f4:ab:b7:2c:15:21:b7:ae:85:8d:7e:84: 58:f9:ff:ee:5f:e7:35:dc:90:c9:40:67:f8:a7:03:48:4e:ee: b8:93:68:d7:fe:a8:3a:2f:55:23:4b:94:c1:02:0d:8a:18:89: 1e:5f:db:55:47:c2:b5:b7:9e:a7:2d:cd:92:6b:a6:d1:d0:f1: f0:72:fd:5c:3f:59:07:9d:9e:b6:a0:83:da:ba:6d:f8:18:cf: 75:e3:95:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGVjN2OZP0feglKCC9lkJ+2bZx9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ4Q0RFNkZFM0RGOUZBMUVEQTZDRUE0NjJGNzdFRjYw NDc4OTkwRDAeFw0yNjAxMzExNzU2MjhaFw0yNjAyMDQwNTQxMjhaMDMxMTAvBgNV BAMTKDQ3RjU4RUU4RTg5NThEMDg1RDU3OEFGNDFFMjI1QUFFMEM3N0JCRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqDvzb6X11420Mq9J0v+N74bhW yg05tyVOLFMUDrjirdshXcA2Z7GX6n+CV3Kxnt8Lyz+NdYVSJGStNCEdd0miTFSM 99cbIGB7m7eXDEsuvZ+LRlrRjR8wrI8wOdoLmrgAdui8NdXvrxKKeXvyXcJsJbSE D2ei+jYUCDbOQdVfc0xCqeUd9/nys7Jg6DZMxVwCE4xjU5KpChn50lyAHweDqsdG Ftfiizji0FnjqLG+4Bq/qF8On1pwedp6j2MEgIEjuVtGxOL4YBJpI6oPFt8ikmLI 1HC+HvfRykievsukOC7DPZ3BFGzH0ImtRziQRtxOgJailoqWU7WnZFRSQMqrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR/WO6OiVjQhdV4r0HiJargx3u+kwHwYDVR0j BBgwFoAUvYzeb+Pfn6Htps6kYvd+9gR4mQ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTljZmQwNC02OWQwLTRkNGMtOGQwOS0yZDIyMTM4NDJjMmMvMC9CRDhDREU2RkUz REY5RkExRURBNkNFQTQ2MkY3N0VGNjA0Nzg5OTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ4Q0RFNkZFM0RGOUZBMUVEQTZDRUE0NjJGNzdFRjYwNDc4 OTkwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU5Y2ZkMDQtNjlkMC00ZDRjLThk MDktMmQyMjEzODQyYzJjLzAvQkQ4Q0RFNkZFM0RGOUZBMUVEQTZDRUE0NjJGNzdF RjYwNDc4OTkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAO7L6htQjVRrIgtlSplvDEE6NxaUWxRQZZj XwQf2iPWjXd6Ps6grn5VW6XAldJwEvSIXaQuYcSO9BKt2uBuvLd3AL+C/Wgrg34i NHIwUecQw+31PCmtuy1iCGiEzFpefTVGe0ZyoCJ8rSench6UR8AFEVIf5Vghdkcc lk8wZRzINzr8WXRKywrDa0SUA6ynApkcUN7zGChDehq/9YqY2xkEmPbOLSLX+/Sr tywVIbeuhY1+hFj5/+5f5zXckMlAZ/inA0hO7riTaNf+qDovVSNLlMECDYoYiR5f 21VHwrW3nqctzZJrptHQ8fBy/Vw/WQednragg9q6bfgYz3XjlQI= -----END CERTIFICATE-----Generated at Mon Feb 2 10:03:42 2026 by rpki-client