This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft File: B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft (raw, json) Hash identifier: obdF5E1ywXyuPxtMBA/kQ+PULYUPb8L9fB24iBMTLEc= Subject key identifier: 95:25:5C:C0:13:D1:6C:B6:44:C2:1E:CA:E8:82:0C:D5:F1:EF:E9:DA Authority key identifier: B0:D7:26:41:9F:BF:35:E7:C6:EB:43:7E:23:8F:3D:2A:3F:06:3B:4C Certificate issuer: /CN=B0D726419FBF35E7C6EB437E238F3D2A3F063B4C Certificate serial: 15A362CDB67EC6938266B219F0544E69E17CD992 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft Manifest number: F2 Signing time: Sun 11 Jan 2026 08:40:06 +0000 Manifest this update: Sun 11 Jan 2026 08:35:06 +0000 Manifest next update: Wed 14 Jan 2026 12:01:06 +0000 Files and hashes: 1: B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.crl (hash: 8UZaeD34mWkuehH/0IncadeIrBz97k+i0s0erJUMsts=) 2: 3136302e32352e35382e302f32332d3234203d3e20313532383333.roa (hash: 7IuV0NhxXlp455EXe3FaAoXVfJrAOl6E2yru0xUglkI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.crl rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Jan 2026 12:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:a3:62:cd:b6:7e:c6:93:82:66:b2:19:f0:54:4e:69:e1:7c:d9:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0D726419FBF35E7C6EB437E238F3D2A3F063B4C Validity Not Before: Jan 11 08:35:06 2026 GMT Not After : Jan 14 12:01:06 2026 GMT Subject: CN=95255CC013D16CB644C21ECAE8820CD5F1EFE9DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:09:0d:bc:73:91:bd:16:70:9c:fe:09:2a:ed: fd:34:ef:c8:a8:41:4a:bd:d9:de:52:c5:3c:85:14: 9d:8c:45:08:cf:a7:aa:d2:57:4c:b0:5a:e7:a6:13: b4:ba:86:63:c0:d0:c9:95:c2:fb:0d:4a:ef:b0:d3: b2:8e:8c:c2:ee:d0:0d:aa:b3:1a:8a:f5:f6:b3:d6: f7:22:8d:4f:0c:29:17:85:e0:18:57:83:73:3e:e2: fe:57:36:1a:08:24:c5:70:10:11:a9:2c:27:dd:49: d7:12:a4:e4:ea:73:61:b5:79:78:fd:f6:63:c9:32: 44:8f:6a:9f:87:83:bd:c3:1d:df:79:13:96:aa:fa: 02:c7:f2:dd:e8:d2:ab:6a:f0:9e:86:f9:a4:aa:7c: a4:1c:67:18:27:a4:aa:d8:18:36:e8:d5:03:75:17: 1b:17:d9:d5:df:a7:00:bc:b5:09:dc:fe:c0:36:a8: c2:56:b2:15:ed:7b:a7:27:56:a0:be:04:e3:c8:de: 57:a9:ae:7b:25:aa:ee:86:2b:01:c2:44:b8:6f:39: 25:af:60:bb:5d:15:fc:1d:d6:c0:5f:db:fc:83:99: 00:45:c4:7f:c3:b3:a1:a0:0a:7f:43:53:d6:90:41: 6d:d3:57:99:39:a8:00:b6:bb:7d:74:9d:e1:12:dc: 8c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:25:5C:C0:13:D1:6C:B6:44:C2:1E:CA:E8:82:0C:D5:F1:EF:E9:DA X509v3 Authority Key Identifier: keyid:B0:D7:26:41:9F:BF:35:E7:C6:EB:43:7E:23:8F:3D:2A:3F:06:3B:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:eb:66:5a:ea:34:06:ad:50:e0:6b:ca:f7:d3:66:5a:2b:a3: 98:44:77:c8:51:34:ee:e5:3c:0d:2c:df:52:5d:ce:05:75:2b: c6:9b:15:7a:44:16:68:3a:44:40:c9:6b:35:ea:10:0c:11:34: 76:d4:31:ea:cd:68:69:fb:2b:ef:e3:b0:1c:0a:56:65:8f:d4: 47:47:ea:ea:60:b3:69:dc:b8:64:ed:69:e5:37:ef:c2:2f:b5: e8:21:ab:d0:9d:4e:64:99:9a:ab:bb:3c:4f:19:a4:08:b4:6c: d3:78:3c:06:c0:43:a2:ce:11:53:6e:60:90:48:bb:ad:3b:36: 89:94:a2:f1:81:2b:43:4e:c3:9d:b1:a4:d6:45:44:f6:7d:6f: 19:a7:fb:27:e2:1f:0a:08:77:eb:e4:f1:c5:6d:98:eb:78:77: fd:09:9e:fb:e7:d1:aa:b3:e1:3b:f7:63:49:74:f0:b9:47:f7: 5e:91:da:9a:e0:86:41:98:e0:2f:f8:9d:01:bc:bc:79:ab:0f: 0d:b2:44:41:ed:68:46:2e:9f:f4:5e:72:93:e0:f6:9d:85:2e: 8d:f6:ea:35:4e:af:90:cd:6c:06:9d:be:47:42:aa:71:47:1d: cf:5c:f1:47:70:d4:a5:15:65:7e:78:34:aa:0f:a5:86:0c:8a: 5d:09:6d:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFaNizbZ+xpOCZrIZ8FROaeF82ZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBENzI2NDE5RkJGMzVFN0M2RUI0MzdFMjM4RjNEMkEz RjA2M0I0QzAeFw0yNjAxMTEwODM1MDZaFw0yNjAxMTQxMjAxMDZaMDMxMTAvBgNV BAMTKDk1MjU1Q0MwMTNEMTZDQjY0NEMyMUVDQUU4ODIwQ0Q1RjFFRkU5REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuCQ28c5G9FnCc/gkq7f0078io QUq92d5SxTyFFJ2MRQjPp6rSV0ywWuemE7S6hmPA0MmVwvsNSu+w07KOjMLu0A2q sxqK9faz1vcijU8MKReF4BhXg3M+4v5XNhoIJMVwEBGpLCfdSdcSpOTqc2G1eXj9 9mPJMkSPap+Hg73DHd95E5aq+gLH8t3o0qtq8J6G+aSqfKQcZxgnpKrYGDbo1QN1 FxsX2dXfpwC8tQnc/sA2qMJWshXte6cnVqC+BOPI3leprnslqu6GKwHCRLhvOSWv YLtdFfwd1sBf2/yDmQBFxH/Ds6GgCn9DU9aQQW3TV5k5qAC2u310neES3Iz/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlSVcwBPRbLZEwh7K6IIM1fHv6dowHwYDVR0j BBgwFoAUsNcmQZ+/NefG60N+I489Kj8GO0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MmRhYjQ2YS0wODVlLTQ0MzItOTgzMy03MWI4ZGIxNDRkOTQvMC9CMEQ3MjY0MTlG QkYzNUU3QzZFQjQzN0UyMzhGM0QyQTNGMDYzQjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjBENzI2NDE5RkJGMzVFN0M2RUI0MzdFMjM4RjNEMkEzRjA2 M0I0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDJkYWI0NmEtMDg1ZS00NDMyLTk4 MzMtNzFiOGRiMTQ0ZDk0LzAvQjBENzI2NDE5RkJGMzVFN0M2RUI0MzdFMjM4RjNE MkEzRjA2M0I0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABLrZlrqNAatUOBryvfTZloro5hEd8hRNO7l PA0s31JdzgV1K8abFXpEFmg6REDJazXqEAwRNHbUMerNaGn7K+/jsBwKVmWP1EdH 6upgs2ncuGTtaeU378Ivteghq9CdTmSZmqu7PE8ZpAi0bNN4PAbAQ6LOEVNuYJBI u607NomUovGBK0NOw52xpNZFRPZ9bxmn+yfiHwoId+vk8cVtmOt4d/0Jnvvn0aqz 4Tv3Y0l08LlH916R2prghkGY4C/4nQG8vHmrDw2yREHtaEYun/RecpPg9p2FLo32 6jVOr5DNbAadvkdCqnFHHc9c8Udw1KUVZX54NKoPpYYMil0Jbfs= -----END CERTIFICATE-----Generated at Mon Jan 12 16:05:45 2026 by rpki-client