This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.mft File: B891A45840F824B9F116CBEAA3574A68343F5538.mft (raw, json) Hash identifier: ydwtJYl+2d2BdL4jd9PajaHrcTTRbP15pI87didnZSU= Subject key identifier: 16:8F:5C:42:62:F5:18:41:72:36:44:45:A0:3F:F1:FC:E7:59:F7:58 Authority key identifier: B8:91:A4:58:40:F8:24:B9:F1:16:CB:EA:A3:57:4A:68:34:3F:55:38 Certificate issuer: /CN=B891A45840F824B9F116CBEAA3574A68343F5538 Certificate serial: 25F14917ABDA4210755827E85F80DBDB0304BFB9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B891A45840F824B9F116CBEAA3574A68343F5538.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.mft Manifest number: BB Signing time: Sat 31 Jan 2026 22:02:16 +0000 Manifest this update: Sat 31 Jan 2026 21:57:16 +0000 Manifest next update: Wed 04 Feb 2026 03:33:16 +0000 Files and hashes: 1: 3130332e32382e3231382e302f32342d3234203d3e203538333835.roa (hash: LRVa/+g9Phm4DS1KM+ftjtti7KXy6ccI0ROhTKpj7KU=) 2: 3130332e32332e3131362e302f32332d3234203d3e203538333835.roa (hash: GOKg9RSCe07Sx9GP7mLWYk+y2Rm870vCrIk4OhiKGTc=) 3: 3130332e3234362e3136392e302f32342d3234203d3e203538333835.roa (hash: M7vZQHPEWxI5UNs6yi6gKlm3olQkDzTXBE8xEqwNtQY=) 4: 3131302e39322e37342e302f32332d3234203d3e203538333835.roa (hash: XhWdokRSZKsmkPslfMXYqoYsZmB36DXqHyY6n5ueEW4=) 5: B891A45840F824B9F116CBEAA3574A68343F5538.crl (hash: gaaWlxvQ7UHTNIxmtOlajP4DtGKPABPaBb+Rpze/+tE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.crl rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B891A45840F824B9F116CBEAA3574A68343F5538.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 03:33:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:f1:49:17:ab:da:42:10:75:58:27:e8:5f:80:db:db:03:04:bf:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B891A45840F824B9F116CBEAA3574A68343F5538 Validity Not Before: Jan 31 21:57:16 2026 GMT Not After : Feb 4 03:33:16 2026 GMT Subject: CN=168F5C4262F5184172364445A03FF1FCE759F758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9d:fd:43:db:fa:49:c7:e8:f8:23:90:3f:48: 7d:44:17:54:21:87:a6:cb:d4:09:7a:51:22:91:4c: a4:20:8a:5a:54:30:06:9f:40:ff:39:46:d3:14:50: 4f:49:59:a8:f5:fd:e3:b7:72:18:6a:21:b4:e3:96: aa:cb:e9:ae:e4:ea:25:5f:4c:33:46:e8:dc:a4:61: 60:36:eb:74:70:21:35:d6:d1:b5:de:d7:e0:d2:84: 9c:a5:46:dc:76:90:42:3a:c2:53:d7:ec:b5:73:f7: 71:5b:41:60:85:a4:da:b0:25:4d:8b:21:e2:6f:27: 78:f4:b3:be:91:68:fa:02:85:59:85:4d:3b:92:90: ab:11:c8:5e:db:5e:73:6a:8d:06:03:72:68:24:6d: ff:ae:a5:bf:ee:3d:cc:a7:13:62:30:b2:66:c4:c7: 7b:44:56:38:c3:cf:4a:03:23:a3:d1:1d:6c:96:25: 69:5c:af:d1:0b:86:a7:dc:9e:6b:6a:9b:2a:20:8b: 36:87:7b:d8:ef:ce:1c:27:cf:6a:2f:ce:22:7a:b6: b5:11:ac:72:fa:31:15:bc:52:8b:66:cd:3e:f3:15: 58:74:a7:92:f6:a6:0b:71:2f:1f:42:8d:dd:37:0d: bd:23:26:59:1b:d5:56:25:61:33:e3:64:fc:7f:4d: da:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:8F:5C:42:62:F5:18:41:72:36:44:45:A0:3F:F1:FC:E7:59:F7:58 X509v3 Authority Key Identifier: keyid:B8:91:A4:58:40:F8:24:B9:F1:16:CB:EA:A3:57:4A:68:34:3F:55:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B891A45840F824B9F116CBEAA3574A68343F5538.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:b6:dc:ea:a2:03:82:cb:6c:99:cc:e3:0b:56:08:d2:9e:2b: 0d:06:53:4d:5c:ff:03:68:27:53:34:db:7a:3f:80:3e:a5:16: 89:57:42:0e:5f:4d:3e:76:7d:9a:03:c5:ee:eb:22:cc:23:f0: b5:ac:22:c3:c3:5a:f1:01:2b:24:09:c9:57:21:e1:2a:26:dd: e7:4c:03:78:af:29:7c:83:40:ba:2d:74:44:6a:c9:75:d4:64: 2a:6a:2c:6c:a4:3c:e9:88:15:93:8a:98:40:2b:c0:f4:70:ac: ee:9b:3d:ec:b5:ba:66:b3:f6:de:5d:00:cd:72:08:0c:aa:9b: f5:21:7b:8e:5c:26:71:9c:65:62:ae:cb:6c:55:31:b6:d3:dc: 71:c5:37:f4:fe:ce:d5:e5:c5:73:1f:d8:a0:55:e7:b9:f6:ca: 31:93:04:df:3d:3d:4b:17:39:9c:cc:57:ad:38:4d:16:d7:ab: c0:7b:cc:f7:83:25:3f:6e:5c:1b:76:26:0e:a7:a7:8f:77:20: 3d:5c:53:e6:9d:3d:17:ac:af:6e:09:4d:ee:2d:61:48:62:10: 87:e9:66:be:1c:59:38:62:da:e1:3f:24:b1:92:5f:52:ca:f3: 1a:74:f7:f8:ea:2b:14:d9:d1:69:00:e8:93:1f:b6:b6:b5:fe: 7a:11:5f:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJfFJF6vaQhB1WCfoX4Db2wMEv7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg5MUE0NTg0MEY4MjRCOUYxMTZDQkVBQTM1NzRBNjgz NDNGNTUzODAeFw0yNjAxMzEyMTU3MTZaFw0yNjAyMDQwMzMzMTZaMDMxMTAvBgNV BAMTKDE2OEY1QzQyNjJGNTE4NDE3MjM2NDQ0NUEwM0ZGMUZDRTc1OUY3NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDnf1D2/pJx+j4I5A/SH1EF1Qh h6bL1Al6USKRTKQgilpUMAafQP85RtMUUE9JWaj1/eO3chhqIbTjlqrL6a7k6iVf TDNG6NykYWA263RwITXW0bXe1+DShJylRtx2kEI6wlPX7LVz93FbQWCFpNqwJU2L IeJvJ3j0s76RaPoChVmFTTuSkKsRyF7bXnNqjQYDcmgkbf+upb/uPcynE2IwsmbE x3tEVjjDz0oDI6PRHWyWJWlcr9ELhqfcnmtqmyogizaHe9jvzhwnz2ovziJ6trUR rHL6MRW8UotmzT7zFVh0p5L2pgtxLx9Cjd03Db0jJlkb1VYlYTPjZPx/TdrrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFo9cQmL1GEFyNkRFoD/x/OdZ91gwHwYDVR0j BBgwFoAUuJGkWED4JLnxFsvqo1dKaDQ/VTgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MzkyNTM4OC0zNWM2LTQxZDctOWRjNC1kYjRkMTE4ZDEzNWEvMC9CODkxQTQ1ODQw RjgyNEI5RjExNkNCRUFBMzU3NEE2ODM0M0Y1NTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg5MUE0NTg0MEY4MjRCOUYxMTZDQkVBQTM1NzRBNjgzNDNG NTUzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDM5MjUzODgtMzVjNi00MWQ3LTlk YzQtZGI0ZDExOGQxMzVhLzAvQjg5MUE0NTg0MEY4MjRCOUYxMTZDQkVBQTM1NzRB NjgzNDNGNTUzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKy23OqiA4LLbJnM4wtWCNKeKw0GU01c/wNo J1M023o/gD6lFolXQg5fTT52fZoDxe7rIswj8LWsIsPDWvEBKyQJyVch4Som3edM A3ivKXyDQLotdERqyXXUZCpqLGykPOmIFZOKmEArwPRwrO6bPey1umaz9t5dAM1y CAyqm/Uhe45cJnGcZWKuy2xVMbbT3HHFN/T+ztXlxXMf2KBV57n2yjGTBN89PUsX OZzMV604TRbXq8B7zPeDJT9uXBt2Jg6np493ID1cU+adPResr24JTe4tYUhiEIfp Zr4cWThi2uE/JLGSX1LK8xp09/jqKxTZ0WkA6JMftra1/noRX00= -----END CERTIFICATE-----Generated at Mon Feb 2 10:06:07 2026 by rpki-client