This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft File: BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft (raw, json) Hash identifier: Yj+maO9QGkiU02Nl+1rhSpQmM9bXg/rv73Zs91U7Mds= Subject key identifier: F4:21:7C:52:EB:FB:FE:4A:20:46:0F:AB:69:E6:A2:14:C4:E7:E9:9F Authority key identifier: BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9 Certificate issuer: /CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9 Certificate serial: 64066E1A8A26F3F4509C3D789F2660EC45DC918F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft Manifest number: 0342 Signing time: Sat 31 Jan 2026 19:01:56 +0000 Manifest this update: Sat 31 Jan 2026 18:56:56 +0000 Manifest next update: Wed 04 Feb 2026 02:18:56 +0000 Files and hashes: 1: 3130332e3231302e3131372e302f32342d3234203d3e203634303234.roa (hash: rvryrNsii8p5FWEuXQ/ZA1z3QEXlw8MezShqHde9HFo=) 2: 3130332e3231302e3131382e302f32342d3234203d3e203634303234.roa (hash: tavtmJbAGyPVyKNkS1yIlicvomGLqf7gKFQGKl+8wbg=) 3: 3130332e3231302e3131392e302f32342d3234203d3e203634303234.roa (hash: Ytr8LGrcIz/5Ip4kUA/P8vtfeNKUZXIGazNVZyLvVDY=) 4: BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl (hash: eaLIxpSU5+GsU+x9wD19GG3tXxRTg2vRQ0jljTV62OI=) 5: 3130332e3231302e3131362e302f32342d3234203d3e203634303234.roa (hash: yMj7uFI234xCcazZ5UUXhaecBl1WVAuun+atXN8IBlQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 02:18:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:06:6e:1a:8a:26:f3:f4:50:9c:3d:78:9f:26:60:ec:45:dc:91:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9 Validity Not Before: Jan 31 18:56:56 2026 GMT Not After : Feb 4 02:18:56 2026 GMT Subject: CN=F4217C52EBFBFE4A20460FAB69E6A214C4E7E99F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b2:00:43:c8:99:f7:64:3e:fa:09:f0:a7:d1: a1:ab:03:87:76:4a:29:6c:e4:0c:37:44:07:94:1f: dd:fa:19:8d:aa:9a:31:b8:f3:71:33:1b:f3:2e:b4: ae:f4:0f:59:c9:0f:9e:80:e0:7f:fd:0e:51:3e:a3: 22:cd:a5:ea:77:93:21:d6:8b:13:97:71:50:6d:07: 8e:ce:c7:b8:51:50:3c:39:70:32:ee:df:5f:b4:5c: 64:42:14:80:c8:79:68:73:27:f4:31:ec:6a:cf:44: 56:71:77:af:19:ee:83:76:1d:df:af:16:b1:b4:6f: df:2f:7d:86:67:57:4f:bf:87:77:4c:44:5d:37:42: 92:83:c3:07:4d:4d:5f:aa:ec:9c:ee:5c:03:4f:14: 90:cd:93:6b:e7:83:7a:2e:24:a9:4a:ab:fe:ae:34: 89:ea:e5:f6:df:e0:f3:d5:b8:62:f1:25:a0:b8:98: fd:3e:ed:06:f6:19:b6:0b:37:32:5b:47:ca:8c:c7: 1e:3e:55:cd:08:01:d1:70:08:9e:f2:ce:a6:c5:ef: 33:96:07:35:96:e0:2c:b4:24:6c:2a:2c:b0:b8:70: 9b:8c:7d:1a:a0:82:5d:be:40:d3:85:28:8d:d1:29: 58:9a:c8:56:36:20:e7:7d:e8:b8:47:ba:78:94:02: f6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:21:7C:52:EB:FB:FE:4A:20:46:0F:AB:69:E6:A2:14:C4:E7:E9:9F X509v3 Authority Key Identifier: keyid:BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:22:f7:ca:11:05:f4:dd:70:da:eb:b0:67:ca:1e:49:90:05: 6e:71:b3:05:2e:88:01:a8:13:61:03:e5:74:70:c4:79:cb:42: 89:62:db:5f:e7:00:ff:8f:ad:9d:0d:06:25:34:05:8e:5b:e3: 0b:21:91:0c:e5:f4:c9:f5:30:58:a5:97:aa:8c:5a:cc:9f:08: 8d:e7:d7:17:88:dd:97:ab:48:07:cd:ea:54:73:c7:20:04:c2: ca:6f:07:61:7f:70:ff:e5:49:4a:b2:3f:6f:8a:ee:44:69:94: a1:ff:a4:a9:f7:c9:52:45:1c:40:35:06:19:13:06:be:9b:6e: d0:6c:f4:38:b3:83:9d:1b:64:32:01:0e:cc:28:d3:cb:28:2b: ed:2a:b1:f9:38:9e:18:22:6b:98:2f:54:5a:d4:a7:c3:67:fa: 0c:8f:bd:c8:5d:66:3d:29:46:db:05:2a:6c:14:64:17:ba:47: a5:de:b3:21:61:00:86:ca:fa:0c:7e:c5:ed:01:01:4b:1e:bc: 5e:39:cc:a7:3a:6e:10:ac:f3:17:52:7b:c9:1a:68:96:48:cd: 1d:13:3e:6f:69:6b:82:31:58:b3:51:9c:07:c9:2a:1b:96:2c: c7:c2:97:77:f7:40:41:e8:ba:73:3f:a8:27:09:63:48:97:cd: b6:5f:d6:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZAZuGoom8/RQnD14nyZg7EXckY8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThERDc0 Q0JDNUVFOTAeFw0yNjAxMzExODU2NTZaFw0yNjAyMDQwMjE4NTZaMDMxMTAvBgNV BAMTKEY0MjE3QzUyRUJGQkZFNEEyMDQ2MEZBQjY5RTZBMjE0QzRFN0U5OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2sgBDyJn3ZD76CfCn0aGrA4d2 Sils5Aw3RAeUH936GY2qmjG483EzG/MutK70D1nJD56A4H/9DlE+oyLNpep3kyHW ixOXcVBtB47Ox7hRUDw5cDLu31+0XGRCFIDIeWhzJ/Qx7GrPRFZxd68Z7oN2Hd+v FrG0b98vfYZnV0+/h3dMRF03QpKDwwdNTV+q7JzuXANPFJDNk2vng3ouJKlKq/6u NInq5fbf4PPVuGLxJaC4mP0+7Qb2GbYLNzJbR8qMxx4+Vc0IAdFwCJ7yzqbF7zOW BzWW4Cy0JGwqLLC4cJuMfRqggl2+QNOFKI3RKViayFY2IOd96LhHuniUAvZNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9CF8Uuv7/kogRg+raeaiFMTn6Z8wHwYDVR0j BBgwFoAUv+D1UkRs5cJj2FQUxy6N10y8XukwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWZkMzUxZS0yYmQ3LTQxOTEtOTEwNi01M2Y4NzUwMTZmMGUvMC9CRkUwRjU1MjQ0 NkNFNUMyNjNEODU0MTRDNzJFOERENzRDQkM1RUU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThERDc0Q0JD NUVFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFmZDM1MWUtMmJkNy00MTkxLTkx MDYtNTNmODc1MDE2ZjBlLzAvQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThE RDc0Q0JDNUVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAwi98oRBfTdcNrrsGfKHkmQBW5xswUuiAGo E2ED5XRwxHnLQoli21/nAP+PrZ0NBiU0BY5b4wshkQzl9Mn1MFill6qMWsyfCI3n 1xeI3ZerSAfN6lRzxyAEwspvB2F/cP/lSUqyP2+K7kRplKH/pKn3yVJFHEA1BhkT Br6bbtBs9Dizg50bZDIBDswo08soK+0qsfk4nhgia5gvVFrUp8Nn+gyPvchdZj0p RtsFKmwUZBe6R6XesyFhAIbK+gx+xe0BAUsevF45zKc6bhCs8xdSe8kaaJZIzR0T Pm9pa4IxWLNRnAfJKhuWLMfCl3f3QEHounM/qCcJY0iXzbZf1uE= -----END CERTIFICATE-----Generated at Mon Feb 2 12:48:38 2026 by rpki-client