This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft File: BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft (raw, json) Hash identifier: +eG1vT1CM0e26zh9zGZOz0WIw0yrfEz+CjeolDXBMOQ= Subject key identifier: A9:88:0A:DB:91:F8:07:0C:D5:E1:1B:B5:1E:57:6B:67:4C:7A:0A:1E Authority key identifier: BC:0E:CF:DD:D0:81:CE:51:32:BE:C9:CF:DC:1A:39:0A:9A:F3:BC:BE Certificate issuer: /CN=BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE Certificate serial: 5A1B9F148DE497821D4F3E20362208BA44180F93 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft Manifest number: 0237 Signing time: Sat 31 Jan 2026 16:21:35 +0000 Manifest this update: Sat 31 Jan 2026 16:16:35 +0000 Manifest next update: Wed 04 Feb 2026 01:09:35 +0000 Files and hashes: 1: BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.crl (hash: 8lAFyjsYWZbAxKmIOQm8ZQmfaj+xRl+TiyYYF5f0BIk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.crl rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 01:09:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:1b:9f:14:8d:e4:97:82:1d:4f:3e:20:36:22:08:ba:44:18:0f:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE Validity Not Before: Jan 31 16:16:35 2026 GMT Not After : Feb 4 01:09:35 2026 GMT Subject: CN=A9880ADB91F8070CD5E11BB51E576B674C7A0A1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ef:9f:a0:ce:1e:aa:de:98:10:63:0e:19:67: af:3a:8a:8e:f7:6b:67:88:e5:36:f7:a8:0c:b1:b4: 59:02:22:7d:79:56:3b:24:18:d4:00:83:b8:2f:6c: ea:81:00:58:b3:36:39:6f:93:67:ac:1a:1c:71:59: 38:58:74:32:df:b4:44:80:96:15:53:d0:1e:3b:01: 9d:8d:c0:43:8c:d7:43:65:ff:59:34:29:62:42:0a: 05:59:d6:ce:35:30:bc:a3:57:3f:65:d3:03:56:0b: f2:f6:f8:ad:d7:58:8b:6b:d8:97:7f:94:2e:1d:5c: bd:d3:f7:bf:98:42:ea:72:57:ac:c8:93:81:f4:60: 9f:cf:9a:bf:27:ba:9e:26:c5:50:91:8b:2c:6b:ed: 77:5d:8b:0f:14:91:4c:ff:21:c2:84:d9:0f:39:53: e1:6b:08:c2:e3:13:b1:80:de:eb:61:85:1c:86:76: ed:38:0d:38:d4:60:eb:00:72:97:4b:94:7e:71:f8: 79:2a:21:2c:14:40:8e:6d:68:1b:a7:21:be:6d:58: 83:71:25:48:a1:5b:fc:0a:ea:93:1a:05:1b:4b:15: a2:8b:82:4e:b8:1d:b7:91:5c:63:ca:a3:bc:25:0a: a4:66:a3:ec:7f:ad:59:55:26:8d:36:81:b8:ab:a5: 4d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:88:0A:DB:91:F8:07:0C:D5:E1:1B:B5:1E:57:6B:67:4C:7A:0A:1E X509v3 Authority Key Identifier: keyid:BC:0E:CF:DD:D0:81:CE:51:32:BE:C9:CF:DC:1A:39:0A:9A:F3:BC:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:5b:f7:5a:51:88:44:89:b0:bf:9c:43:a2:06:45:fc:80:af: 05:41:7d:a0:2a:0f:68:86:da:51:33:da:a2:a7:9a:54:03:fc: 97:4c:fb:d0:79:58:12:91:aa:36:25:0c:e4:27:65:b8:cf:bf: 1c:17:51:c2:52:86:62:31:d2:6f:ee:c9:e0:5d:84:95:04:a9: 73:7d:c7:54:cc:20:2a:a2:91:4b:54:0b:dc:a7:56:34:24:e0: 68:bb:d6:2d:ee:bf:72:3e:84:50:fb:60:45:cb:dd:92:e8:4d: 06:5e:96:20:9f:b2:d5:f0:64:78:9b:e7:ec:0c:2f:15:7e:22: c2:fc:18:b8:c7:90:ca:27:5b:0d:5d:3f:3f:40:47:31:bd:ac: 23:d8:ef:4e:cb:16:16:4e:d4:54:91:76:cf:0b:b2:4e:1e:d8: 6e:f0:14:42:ad:78:d8:2d:ce:0e:57:2c:26:12:3e:e0:38:e3: bc:ab:ab:0d:a3:a6:c4:ba:93:5e:4e:be:e6:ea:6f:39:e0:83: 33:97:06:64:ed:4e:1a:f7:64:9d:eb:36:24:6d:40:b3:af:57: 68:46:21:b3:35:2c:ed:c0:9e:f3:e0:b3:88:0e:7b:ad:2d:a9: aa:ac:9d:1e:6a:b9:9c:85:c1:c9:38:22:0d:eb:c0:42:ee:1c: 2f:f6:14:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWhufFI3kl4IdTz4gNiIIukQYD5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMwRUNGREREMDgxQ0U1MTMyQkVDOUNGREMxQTM5MEE5 QUYzQkNCRTAeFw0yNjAxMzExNjE2MzVaFw0yNjAyMDQwMTA5MzVaMDMxMTAvBgNV BAMTKEE5ODgwQURCOTFGODA3MENENUUxMUJCNTFFNTc2QjY3NEM3QTBBMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn75+gzh6q3pgQYw4ZZ686io73 a2eI5Tb3qAyxtFkCIn15VjskGNQAg7gvbOqBAFizNjlvk2esGhxxWThYdDLftESA lhVT0B47AZ2NwEOM10Nl/1k0KWJCCgVZ1s41MLyjVz9l0wNWC/L2+K3XWItr2Jd/ lC4dXL3T97+YQupyV6zIk4H0YJ/Pmr8nup4mxVCRiyxr7Xddiw8UkUz/IcKE2Q85 U+FrCMLjE7GA3uthhRyGdu04DTjUYOsAcpdLlH5x+HkqISwUQI5taBunIb5tWINx JUihW/wK6pMaBRtLFaKLgk64HbeRXGPKo7wlCqRmo+x/rVlVJo02gbirpU3vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqYgK25H4BwzV4Ru1HldrZ0x6Ch4wHwYDVR0j BBgwFoAUvA7P3dCBzlEyvsnP3Bo5CprzvL4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ODZhMTNiZC1iNzlhLTQ1MGUtOWJlMy0zZDVhMDNhYjkzYjEvMC9CQzBFQ0ZEREQw ODFDRTUxMzJCRUM5Q0ZEQzFBMzkwQTlBRjNCQ0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkMwRUNGREREMDgxQ0U1MTMyQkVDOUNGREMxQTM5MEE5QUYz QkNCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjg2YTEzYmQtYjc5YS00NTBlLTli ZTMtM2Q1YTAzYWI5M2IxLzAvQkMwRUNGREREMDgxQ0U1MTMyQkVDOUNGREMxQTM5 MEE5QUYzQkNCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZb91pRiESJsL+cQ6IGRfyArwVBfaAqD2iG 2lEz2qKnmlQD/JdM+9B5WBKRqjYlDOQnZbjPvxwXUcJShmIx0m/uyeBdhJUEqXN9 x1TMICqikUtUC9ynVjQk4Gi71i3uv3I+hFD7YEXL3ZLoTQZeliCfstXwZHib5+wM LxV+IsL8GLjHkMonWw1dPz9ARzG9rCPY707LFhZO1FSRds8Lsk4e2G7wFEKteNgt zg5XLCYSPuA447yrqw2jpsS6k15OvubqbznggzOXBmTtThr3ZJ3rNiRtQLOvV2hG IbM1LO3AnvPgs4gOe60tqaqsnR5quZyFwck4Ig3rwELuHC/2FPM= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:42 2026 by rpki-client