This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft File: BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft (raw, json) Hash identifier: 1MxjJ8WZyUBeIClPQvCo2bvq2MEX/Fpkvi0g5UiP0b0= Subject key identifier: 95:E9:AC:0C:44:B8:75:B6:D8:1B:B1:01:C7:C5:D4:1F:83:10:31:91 Authority key identifier: BD:67:31:D0:5C:D6:18:15:BC:0A:71:1C:65:9F:17:31:3E:F0:F5:EB Certificate issuer: /CN=BD6731D05CD61815BC0A711C659F17313EF0F5EB Certificate serial: 0C3145A1FBFFF28327D811473CAD0F0388457E85 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD6731D05CD61815BC0A711C659F17313EF0F5EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft Manifest number: B8 Signing time: Tue 06 Jan 2026 14:11:05 +0000 Manifest this update: Tue 06 Jan 2026 14:06:05 +0000 Manifest next update: Fri 09 Jan 2026 19:10:05 +0000 Files and hashes: 1: BD6731D05CD61815BC0A711C659F17313EF0F5EB.crl (hash: Y8IWfnxtSw3vE7v7UwhwIlT0Rbjk3aS+jonA9/oMnDc=) 2: 3136302e32322e39322e302f32342d3234203d3e20313532383335.roa (hash: +o6+ngIFA4hU6bMKlAFkTNxS1BaRiBEB0UhCbvig7rE=) 3: 3136302e32322e39332e302f32342d3234203d3e20313532383335.roa (hash: SeJIZiTXDjba/24vDFwUassgzTgVWzwJ94ejAOzdpPE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.crl rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD6731D05CD61815BC0A711C659F17313EF0F5EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Jan 2026 14:43:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:31:45:a1:fb:ff:f2:83:27:d8:11:47:3c:ad:0f:03:88:45:7e:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD6731D05CD61815BC0A711C659F17313EF0F5EB Validity Not Before: Jan 6 14:06:05 2026 GMT Not After : Jan 9 19:10:05 2026 GMT Subject: CN=95E9AC0C44B875B6D81BB101C7C5D41F83103191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:28:80:ed:2f:1c:14:2d:61:0a:67:e0:d6:03: 53:ca:7a:e3:76:71:e8:93:56:79:d1:a1:21:09:b6: 87:3e:9d:1f:f4:90:55:6a:30:23:fd:d6:c6:ad:10: 6d:0c:dd:09:c9:1b:f2:b6:07:b0:b0:b8:1d:b2:be: e5:a7:c9:5f:5e:a2:e1:47:7a:50:ad:70:41:20:a4: cd:f2:ee:24:77:52:20:f7:07:da:bb:8b:5c:e1:7a: 91:a9:39:cb:c8:6c:1e:9f:27:61:53:39:64:0f:e2: 4c:64:4b:dd:cd:57:29:0b:ed:aa:09:5c:c9:e6:05: 53:e3:7f:83:51:3c:b4:3f:03:10:ec:ee:38:40:35: 8c:fb:d7:a6:ef:ea:e5:cf:5d:f3:78:62:5a:38:22: 4c:80:e5:d6:e8:04:7e:f6:b5:a1:79:14:03:3c:06: 8e:22:7b:e0:fd:fa:0d:ea:e1:91:cc:5c:f0:c4:8d: 7b:84:f0:dd:12:1a:4a:ec:f2:d6:6b:dc:83:65:2d: 78:d8:12:ee:37:4e:4d:8b:d2:bd:f7:d8:2f:87:a8: cd:73:99:1c:71:31:10:8b:23:27:2a:e8:38:9c:0b: 95:79:ad:d8:79:2a:33:4a:12:94:f4:31:6d:32:e3: 48:c1:7e:03:13:67:95:d7:9b:c7:2c:16:aa:c4:76: 19:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E9:AC:0C:44:B8:75:B6:D8:1B:B1:01:C7:C5:D4:1F:83:10:31:91 X509v3 Authority Key Identifier: keyid:BD:67:31:D0:5C:D6:18:15:BC:0A:71:1C:65:9F:17:31:3E:F0:F5:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD6731D05CD61815BC0A711C659F17313EF0F5EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:84:8e:76:90:d1:9b:22:65:0e:71:c0:4d:b8:53:7a:ff:03: 9d:4e:bb:b1:33:7f:84:6b:a9:9b:25:e0:6c:aa:8c:74:f9:e3: 2b:b3:a6:9e:0d:ac:c2:22:8e:19:1b:00:de:fd:48:0a:45:a6: ea:fc:70:ff:f3:ba:70:df:0e:21:5c:d8:84:42:13:42:c3:d0: 19:b6:0c:76:76:e2:b0:fa:23:a9:dd:af:0e:e7:89:e9:1b:2b: 2c:30:6a:ab:d8:97:7e:2f:4f:b0:b7:3e:a2:1e:d9:de:08:16: ca:8e:16:8b:e9:01:21:02:53:0b:06:c7:86:1e:da:ad:c0:40: 9a:7f:10:08:97:db:25:4a:99:08:88:39:5a:11:6b:47:a4:19: b2:fe:72:74:ba:4b:a6:f2:11:35:85:a0:94:2a:d2:6a:6b:a2: f8:dc:b0:f7:11:0e:93:be:11:02:0c:43:c6:9c:7f:1e:04:ff: e0:e9:88:16:67:a8:ad:d8:a9:50:d9:64:bd:6f:b8:c3:71:98: 76:f0:3c:6e:f0:8a:44:ea:ed:6b:82:53:d9:2a:d8:e2:e0:96: be:68:ca:a5:08:5d:73:4b:1c:5c:96:2e:fe:d4:8c:97:30:1c: aa:a0:36:4c:9a:1f:29:17:62:60:47:9c:e3:41:ff:a5:df:ed: 96:d3:92:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDDFFofv/8oMn2BFHPK0PA4hFfoUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ2NzMxRDA1Q0Q2MTgxNUJDMEE3MTFDNjU5RjE3MzEz RUYwRjVFQjAeFw0yNjAxMDYxNDA2MDVaFw0yNjAxMDkxOTEwMDVaMDMxMTAvBgNV BAMTKDk1RTlBQzBDNDRCODc1QjZEODFCQjEwMUM3QzVENDFGODMxMDMxOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDKIDtLxwULWEKZ+DWA1PKeuN2 ceiTVnnRoSEJtoc+nR/0kFVqMCP91satEG0M3QnJG/K2B7CwuB2yvuWnyV9eouFH elCtcEEgpM3y7iR3UiD3B9q7i1zhepGpOcvIbB6fJ2FTOWQP4kxkS93NVykL7aoJ XMnmBVPjf4NRPLQ/AxDs7jhANYz716bv6uXPXfN4Ylo4IkyA5dboBH72taF5FAM8 Bo4ie+D9+g3q4ZHMXPDEjXuE8N0SGkrs8tZr3INlLXjYEu43Tk2L0r332C+HqM1z mRxxMRCLIycq6DicC5V5rdh5KjNKEpT0MW0y40jBfgMTZ5XXm8csFqrEdhkLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlemsDES4dbbYG7EBx8XUH4MQMZEwHwYDVR0j BBgwFoAUvWcx0FzWGBW8CnEcZZ8XMT7w9eswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmQyOWIzMi0zYTI5LTRhMTQtYmM5Yi1jNzZhMDA3Y2EwMzIvMC9CRDY3MzFEMDVD RDYxODE1QkMwQTcxMUM2NTlGMTczMTNFRjBGNUVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkQ2NzMxRDA1Q0Q2MTgxNUJDMEE3MTFDNjU5RjE3MzEzRUYw RjVFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJkMjliMzItM2EyOS00YTE0LWJj OWItYzc2YTAwN2NhMDMyLzAvQkQ2NzMxRDA1Q0Q2MTgxNUJDMEE3MTFDNjU5RjE3 MzEzRUYwRjVFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHiEjnaQ0ZsiZQ5xwE24U3r/A51Ou7Ezf4Rr qZsl4GyqjHT54yuzpp4NrMIijhkbAN79SApFpur8cP/zunDfDiFc2IRCE0LD0Bm2 DHZ24rD6I6ndrw7niekbKywwaqvYl34vT7C3PqIe2d4IFsqOFovpASECUwsGx4Ye 2q3AQJp/EAiX2yVKmQiIOVoRa0ekGbL+cnS6S6byETWFoJQq0mprovjcsPcRDpO+ EQIMQ8acfx4E/+DpiBZnqK3YqVDZZL1vuMNxmHbwPG7wikTq7WuCU9kq2OLglr5o yqUIXXNLHFyWLv7UjJcwHKqgNkyaHykXYmBHnONB/6Xf7ZbTkvU= -----END CERTIFICATE-----Generated at Wed Jan 7 22:49:55 2026 by rpki-client