This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft
File: BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft (raw, json)
Hash identifier: Iad8RovMRtRGhbYHO//hTNm64QHkoW5F73fMsGqf7vs=
Subject key identifier: 8D:90:67:7A:F6:56:75:60:B4:59:05:FE:D9:4A:D9:EE:D8:81:A7:A5
Authority key identifier: BC:18:FD:A2:49:B3:BD:56:02:06:48:E8:3F:0B:24:DD:BF:1E:66:E5
Certificate issuer: /CN=BC18FDA249B3BD56020648E83F0B24DDBF1E66E5
Certificate serial: 364D2E3C177344748677DB08FD3B66116BA1DFCC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft
Manifest number: 04AF
Signing time: Sun 01 Feb 2026 06:12:10 +0000
Manifest this update: Sun 01 Feb 2026 06:07:10 +0000
Manifest next update: Wed 04 Feb 2026 11:29:10 +0000
Files and hashes: 1: BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl (hash: HOzR1KMv1j3van4jqXUUZRH5Vf5gO9fnd0mNbyZL84I=)
2: 3130332e3136302e3136342e302f32342d3234203d3e203538343935.roa (hash: 16HQZb88y83aHIsJXjQBx7+/lMzUX78B/OozTUnK7s4=)
3: 3130332e3136302e3136352e302f32342d3234203d3e203538343935.roa (hash: tvbrgpnRc/Q6RgyaqccXwIS95wHSwvk+hPXU5wbUrgY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl
rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 11:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:4d:2e:3c:17:73:44:74:86:77:db:08:fd:3b:66:11:6b:a1:df:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC18FDA249B3BD56020648E83F0B24DDBF1E66E5
Validity
Not Before: Feb 1 06:07:10 2026 GMT
Not After : Feb 4 11:29:10 2026 GMT
Subject: CN=8D90677AF6567560B45905FED94AD9EED881A7A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b7:09:24:35:30:fa:86:48:92:ca:da:2a:53:
3a:e8:40:46:45:7c:63:c1:41:39:3a:d9:a5:09:36:
a0:e7:3d:25:53:26:b1:86:a5:81:5b:98:26:ec:56:
02:f0:21:2c:fb:2b:e7:1d:22:5a:0a:0d:1b:f1:3d:
5d:12:5b:51:e8:48:50:ae:20:d4:41:ca:09:18:d7:
b8:d8:9b:ea:85:f6:15:fe:b3:ee:59:bc:3b:85:0b:
ff:bf:0e:ab:b2:65:ec:b9:a0:c1:71:4f:60:f1:37:
d5:9f:7a:d2:da:9f:6a:9d:f9:c1:64:50:aa:ce:8d:
cd:85:0b:69:e9:d1:58:a5:b6:a9:ab:cf:47:2c:71:
13:2c:9a:5e:21:65:2c:b2:dc:38:18:b6:f7:86:51:
49:3f:20:d4:33:56:41:de:fb:94:26:5c:e7:4b:1e:
c3:57:58:27:e7:45:6c:51:74:d0:2d:74:3e:b0:50:
7c:0d:7e:c8:16:3e:86:47:93:53:49:4a:cf:43:78:
6b:20:55:7d:c7:1b:68:a3:47:92:cf:9c:78:78:37:
d5:fd:6e:85:61:a5:01:99:4b:af:b9:ea:cb:10:0b:
fa:41:a0:9e:e7:f4:ca:75:d9:7c:9f:cd:3c:31:97:
e2:9a:08:75:d7:bb:28:7d:8c:f3:8f:46:33:e3:a2:
cf:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:90:67:7A:F6:56:75:60:B4:59:05:FE:D9:4A:D9:EE:D8:81:A7:A5
X509v3 Authority Key Identifier:
keyid:BC:18:FD:A2:49:B3:BD:56:02:06:48:E8:3F:0B:24:DD:BF:1E:66:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:3b:55:73:71:c1:c6:a9:a6:a9:94:97:7c:84:0d:89:78:d8:
09:cd:9f:87:b4:bc:74:e0:57:47:16:50:b7:46:65:28:87:ee:
8e:76:71:b8:10:83:d2:e0:72:a5:b4:16:8b:07:3c:7a:71:9c:
cd:78:45:50:4b:a3:93:03:f8:7f:b5:f7:99:c3:66:53:a9:0d:
a4:21:d6:ca:57:c1:d4:ae:c2:eb:cf:68:9a:9f:da:92:d5:d4:
db:4b:05:b9:c7:f9:65:57:77:9f:ae:e5:4d:40:45:46:a5:86:
aa:6f:a1:bf:85:2f:17:f7:5e:cd:89:c7:9a:ef:f1:ae:a5:2f:
7c:49:42:9d:42:2e:a3:94:2b:c8:e6:b9:64:66:27:3d:70:ac:
92:bf:d0:0f:41:3b:72:81:76:14:ad:eb:6e:a0:21:40:ca:d3:
34:be:4f:d6:d4:d5:0e:43:26:ba:f6:d7:08:7b:db:74:f1:39:
2a:5c:27:27:3f:56:97:79:cc:10:29:25:f1:5d:b8:38:69:83:
ed:1e:f9:d8:38:51:8d:1f:72:d9:54:d4:e0:f6:53:30:af:eb:
12:0d:28:d1:05:46:df:ce:cd:64:92:57:ad:58:a4:af:7b:0a:
94:10:45:9f:cb:2c:21:b1:33:1d:d9:1a:12:89:87:52:e8:6c:
81:a8:36:a0
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUNk0uPBdzRHSGd9sI/TtmEWuh38wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0RERC
RjFFNjZFNTAeFw0yNjAyMDEwNjA3MTBaFw0yNjAyMDQxMTI5MTBaMDMxMTAvBgNV
BAMTKDhEOTA2NzdBRjY1Njc1NjBCNDU5MDVGRUQ5NEFEOUVFRDg4MUE3QTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTtwkkNTD6hkiSytoqUzroQEZF
fGPBQTk62aUJNqDnPSVTJrGGpYFbmCbsVgLwISz7K+cdIloKDRvxPV0SW1HoSFCu
INRBygkY17jYm+qF9hX+s+5ZvDuFC/+/DquyZey5oMFxT2DxN9WfetLan2qd+cFk
UKrOjc2FC2np0Viltqmrz0cscRMsml4hZSyy3DgYtveGUUk/INQzVkHe+5QmXOdL
HsNXWCfnRWxRdNAtdD6wUHwNfsgWPoZHk1NJSs9DeGsgVX3HG2ijR5LPnHh4N9X9
boVhpQGZS6+56ssQC/pBoJ7n9Mp12XyfzTwxl+KaCHXXuyh9jPOPRjPjos+HAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUjZBnevZWdWC0WQX+2UrZ7tiBp6UwHwYDVR0j
BBgwFoAUvBj9okmzvVYCBkjoPwsk3b8eZuUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
NjQ3YTZhMi0xYWQwLTQ2YzctOWNhZC01OGJiZDcxZmI1YTQvMC9CQzE4RkRBMjQ5
QjNCRDU2MDIwNjQ4RTgzRjBCMjREREJGMUU2NkU1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0RERCRjFF
NjZFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY0N2E2YTItMWFkMC00NmM3LTlj
YWQtNThiYmQ3MWZiNWE0LzAvQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0
RERCRjFFNjZFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFU7VXNxwcappqmUl3yEDYl42AnNn4e0vHTg
V0cWULdGZSiH7o52cbgQg9LgcqW0FosHPHpxnM14RVBLo5MD+H+195nDZlOpDaQh
1spXwdSuwuvPaJqf2pLV1NtLBbnH+WVXd5+u5U1ARUalhqpvob+FLxf3Xs2Jx5rv
8a6lL3xJQp1CLqOUK8jmuWRmJz1wrJK/0A9BO3KBdhSt626gIUDK0zS+T9bU1Q5D
Jrr21wh723TxOSpcJyc/Vpd5zBApJfFduDhpg+0e+dg4UY0fctlU1OD2UzCv6xIN
KNEFRt/OzWSSV61YpK97CpQQRZ/LLCGxMx3ZGhKJh1LobIGoNqA=
-----END CERTIFICATE-----
Generated at Mon Feb 2 15:59:15 2026 by rpki-client