This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft
File: BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft (raw, json)
Hash identifier: fxkIJSMGrXJ1KFhXcaiCm4nPK/tViZSsAc/LB5l8+bQ=
Subject key identifier: 3C:90:B8:F0:B8:64:7E:22:A8:F2:F0:CE:EE:6E:F3:3C:B3:22:8D:89
Authority key identifier: BC:8B:D5:48:5C:9B:01:D1:76:F3:FA:A8:F3:81:E5:EC:ED:8C:D3:B8
Certificate issuer: /CN=BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8
Certificate serial: 690A4E50710F171CC301549FBAB7EB70C428E9C2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft
Manifest number: 0249
Signing time: Sun 01 Feb 2026 22:50:41 +0000
Manifest this update: Sun 01 Feb 2026 22:45:41 +0000
Manifest next update: Thu 05 Feb 2026 05:52:41 +0000
Files and hashes: 1: BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl (hash: egmV2gZ0hpe5BS1BywMtAWBOx+NjKrjoBpZBJIL8ve8=)
2: 3130332e37332e3139322e302f32342d3234203d3e20313439393434.roa (hash: kygHr26DqsY5AyJfGENb/AiH0P8fZ+v+8xcM4ekCjqw=)
3: 3130332e37332e3139332e302f32342d3234203d3e20313439393434.roa (hash: 0uJHSCFsdwdZP1NKhkt1f+yFu68JksGMAuDEtBg71VE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl
rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:0a:4e:50:71:0f:17:1c:c3:01:54:9f:ba:b7:eb:70:c4:28:e9:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8
Validity
Not Before: Feb 1 22:45:41 2026 GMT
Not After : Feb 5 05:52:41 2026 GMT
Subject: CN=3C90B8F0B8647E22A8F2F0CEEE6EF33CB3228D89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c2:a0:e7:1a:e8:eb:ac:44:d0:94:18:4e:e1:
5b:ba:52:43:0c:5e:9f:c7:4c:fb:1a:40:27:89:98:
bd:a9:06:bd:96:6b:e8:e2:1d:60:f3:9a:8c:58:cc:
06:fc:da:e2:87:61:16:0a:22:66:fd:e5:4d:0f:5f:
93:b4:c2:0c:51:ac:53:ee:04:30:3b:c4:8a:84:6c:
ee:da:bd:ef:18:41:c5:1e:3f:b6:39:ff:4a:75:fd:
86:f3:fb:c4:d7:ed:63:40:65:32:00:f4:35:33:e3:
64:03:d8:78:af:22:20:ec:44:59:ea:24:54:b6:a3:
07:06:32:ee:ac:be:4b:4e:8c:ed:7b:59:c4:d4:55:
ab:4f:95:dd:3d:35:e9:90:b3:b1:46:4d:8b:e8:01:
4e:66:80:b6:75:0f:20:ef:37:12:bd:4b:33:3c:4a:
a8:3c:e0:5d:13:a0:00:b7:54:b6:3c:cd:17:a6:e7:
a5:c4:d7:ab:86:3a:e0:f6:06:fa:d7:88:97:b5:79:
95:af:97:3d:9a:e2:3b:a8:fd:0c:31:4f:18:02:f7:
56:89:ad:92:18:a1:a6:aa:af:57:9b:6a:60:e5:bd:
7f:54:8e:20:eb:e9:2b:18:61:fc:f9:97:8b:c8:4f:
e8:50:bb:e3:0f:84:44:a8:9d:df:2a:e9:7b:92:3c:
89:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:90:B8:F0:B8:64:7E:22:A8:F2:F0:CE:EE:6E:F3:3C:B3:22:8D:89
X509v3 Authority Key Identifier:
keyid:BC:8B:D5:48:5C:9B:01:D1:76:F3:FA:A8:F3:81:E5:EC:ED:8C:D3:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:2d:90:74:23:c4:4b:58:85:56:d2:8b:52:5f:b8:91:60:fb:
84:5f:65:66:ae:bd:6a:68:73:3b:66:1d:8f:49:37:44:99:5b:
d4:12:bd:a1:fb:39:68:b9:97:55:29:e9:e1:d2:b4:1e:1a:c6:
c0:d6:76:4a:b3:96:06:df:9d:3d:fd:25:50:ac:9d:aa:cf:ca:
8b:4b:35:a3:1d:8e:ee:3e:86:41:ff:8a:83:77:06:09:34:84:
9c:a2:f4:ef:55:04:b2:56:55:e7:e3:18:bb:61:8c:cc:c4:2c:
50:05:3c:88:59:f5:8c:60:bd:8d:9d:dc:85:7c:8d:45:78:5e:
4b:21:32:9e:77:c7:f6:95:bc:5f:4c:56:1a:26:2e:76:d4:de:
14:90:20:d5:35:ab:d3:ab:77:98:66:48:74:d6:d0:73:25:02:
0d:28:54:9d:fd:24:b0:95:fe:48:fe:e4:c0:f9:bc:ca:28:42:
4b:2b:b1:23:15:e7:36:ce:e2:e8:a3:27:29:5d:e1:7a:aa:fc:
20:63:93:cb:3d:3b:66:c5:d2:6a:65:1b:7b:fb:c4:11:8f:87:
96:50:78:c8:c1:c2:a0:3e:e1:00:ea:e6:10:54:3c:d6:43:99:
6e:f8:b4:06:e8:83:5f:78:56:34:70:c1:3c:e5:b3:a0:1e:7d:
ba:c0:ac:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:11 2026 by rpki-client