This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft File: B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft (raw, json) Hash identifier: /QCgfrftlC0YTA90l9uHtckqKhc6+22x8l85LiFLx1g= Subject key identifier: 62:DF:65:D9:32:B4:05:AC:69:99:5E:FD:DE:4B:9B:42:8A:17:42:19 Authority key identifier: B5:76:6E:F9:69:F5:BB:0A:7C:76:FA:A9:E5:3B:DE:82:74:E5:64:3E Certificate issuer: /CN=B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E Certificate serial: 30BE6B1DFE3D19884794B989D74E6C7B6D47B155 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft Manifest number: F2 Signing time: Tue 06 Jan 2026 05:11:48 +0000 Manifest this update: Tue 06 Jan 2026 05:06:48 +0000 Manifest next update: Fri 09 Jan 2026 11:06:48 +0000 Files and hashes: 1: 3136302e32352e34382e302f32342d3234203d3e20313533303634.roa (hash: 5vrTiCPVa+g9uUAZqY7yIFrCeD1zTR9VGB0NveariYc=) 2: 3136302e32352e34392e302f32342d3234203d3e20313533303634.roa (hash: +r21VHJKiSG4g/R/zHmUKuYDBebHXXDRqabchwnAdGk=) 3: B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.crl (hash: vRS7W8n8MDwkSiCQcJlWfePcAiseKtwKagNV7YWHsa0=) 4: 3136302e32352e34382e302f32332d3233203d3e20313533303634.roa (hash: yPb8vzqBZ4SuTebiaZ2t1hQWOQT5EPzxImNlHmSkYG0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.crl rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Jan 2026 11:06:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:be:6b:1d:fe:3d:19:88:47:94:b9:89:d7:4e:6c:7b:6d:47:b1:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E Validity Not Before: Jan 6 05:06:48 2026 GMT Not After : Jan 9 11:06:48 2026 GMT Subject: CN=62DF65D932B405AC69995EFDDE4B9B428A174219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:76:9a:a3:82:01:4e:67:f2:67:b3:7a:72:34: fa:30:83:8e:5c:72:cf:ab:9c:de:a7:33:ad:b3:00: 97:b9:bc:3d:fe:81:96:c5:39:27:b9:3e:7e:30:39: 19:0d:00:d3:2e:92:c1:b9:13:e5:1f:72:e8:56:d3: b3:fc:55:36:65:37:eb:d3:ef:32:21:00:f9:21:04: 5a:2f:a9:6d:65:cb:43:b5:97:cf:b0:c6:b3:0e:4e: 4f:39:03:bb:a7:01:1e:f7:1a:30:be:39:fd:a6:64: 43:1f:74:0c:c8:e1:4d:9f:ad:28:39:65:e7:cc:b1: a2:9b:45:4c:e3:44:9f:c9:1f:c4:ae:81:bb:8d:a9: 32:4d:fc:27:89:0e:0f:46:97:05:d8:da:2b:84:20: 5c:a0:eb:6c:b8:e8:51:8f:7b:6e:56:d6:4c:e1:53: 64:ab:1b:bc:91:cb:23:89:ec:79:32:01:ca:18:45: 99:68:f9:f0:8c:14:9e:03:37:07:86:f2:b6:95:df: 9a:9b:9a:19:38:f6:cd:47:7a:f5:89:7f:0d:6b:e6: f4:c0:f6:e4:62:f0:a4:4f:b0:97:3c:29:07:c2:d8: 74:2b:9f:3f:87:94:47:89:f7:d5:0b:4c:c9:76:ed: 03:63:72:8a:dc:29:db:d0:2e:1b:c7:aa:f0:a2:67: f1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:DF:65:D9:32:B4:05:AC:69:99:5E:FD:DE:4B:9B:42:8A:17:42:19 X509v3 Authority Key Identifier: keyid:B5:76:6E:F9:69:F5:BB:0A:7C:76:FA:A9:E5:3B:DE:82:74:E5:64:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:31:dd:ca:ae:05:0e:d3:28:f5:84:87:cb:ee:7a:3f:19:f0: 80:e8:6c:d9:8b:f8:fa:c0:9c:03:12:08:fe:bc:65:14:b1:4b: 2f:0e:4a:c5:10:31:4b:54:9c:6d:1e:7e:ea:d7:da:86:3a:60: 3e:eb:a5:dc:fd:48:95:60:66:7e:65:cd:b2:83:b6:70:86:65: 5a:34:98:be:d1:f6:cb:6c:71:27:12:63:c8:71:00:1c:fc:43: ae:a4:09:b0:e6:5d:7a:87:21:cc:ac:88:5b:63:eb:db:ee:9e: 02:d3:e8:65:0b:62:6f:f1:60:e8:69:e1:85:73:bf:b0:2a:e5: e6:67:5f:4a:23:61:42:cb:eb:34:45:50:06:7a:46:d7:de:aa: 60:76:c0:2f:8d:60:fb:68:50:92:cd:92:e6:11:85:aa:60:35: 81:aa:b1:a0:ef:c6:bc:95:0e:cd:f7:2f:93:b1:27:4c:b4:35: 2b:a1:a6:49:8f:49:cd:3b:31:23:15:be:b4:51:60:f5:c0:91: 5f:5d:1d:d3:f7:b1:da:53:2b:49:03:e9:e8:89:35:ad:9b:38: da:12:95:e1:e8:59:43:8c:72:17:ed:76:75:96:8f:c6:24:ca: 81:5a:55:28:bd:59:d3:db:81:04:cc:e2:5a:c8:3a:e9:96:6a: e9:43:6e:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUML5rHf49GYhHlLmJ105se21HsVUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU3NjZFRjk2OUY1QkIwQTdDNzZGQUE5RTUzQkRFODI3 NEU1NjQzRTAeFw0yNjAxMDYwNTA2NDhaFw0yNjAxMDkxMTA2NDhaMDMxMTAvBgNV BAMTKDYyREY2NUQ5MzJCNDA1QUM2OTk5NUVGRERFNEI5QjQyOEExNzQyMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxdpqjggFOZ/Jns3pyNPowg45c cs+rnN6nM62zAJe5vD3+gZbFOSe5Pn4wORkNANMuksG5E+UfcuhW07P8VTZlN+vT 7zIhAPkhBFovqW1ly0O1l8+wxrMOTk85A7unAR73GjC+Of2mZEMfdAzI4U2frSg5 ZefMsaKbRUzjRJ/JH8SugbuNqTJN/CeJDg9GlwXY2iuEIFyg62y46FGPe25W1kzh U2SrG7yRyyOJ7HkyAcoYRZlo+fCMFJ4DNweG8raV35qbmhk49s1HevWJfw1r5vTA 9uRi8KRPsJc8KQfC2HQrnz+HlEeJ99ULTMl27QNjcorcKdvQLhvHqvCiZ/EJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYt9l2TK0BaxpmV793kubQooXQhkwHwYDVR0j BBgwFoAUtXZu+Wn1uwp8dvqp5TvegnTlZD4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTY4MmJmMi0wNjM0LTQ3ODItYTVhZi1lZWI5MTlmMTkxNDMvMC9CNTc2NkVGOTY5 RjVCQjBBN0M3NkZBQTlFNTNCREU4Mjc0RTU2NDNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjU3NjZFRjk2OUY1QkIwQTdDNzZGQUE5RTUzQkRFODI3NEU1 NjQzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTU2ODJiZjItMDYzNC00NzgyLWE1 YWYtZWViOTE5ZjE5MTQzLzAvQjU3NjZFRjk2OUY1QkIwQTdDNzZGQUE5RTUzQkRF ODI3NEU1NjQzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMAx3cquBQ7TKPWEh8vuej8Z8IDobNmL+PrA nAMSCP68ZRSxSy8OSsUQMUtUnG0efurX2oY6YD7rpdz9SJVgZn5lzbKDtnCGZVo0 mL7R9stscScSY8hxABz8Q66kCbDmXXqHIcysiFtj69vungLT6GULYm/xYOhp4YVz v7Aq5eZnX0ojYULL6zRFUAZ6RtfeqmB2wC+NYPtoUJLNkuYRhapgNYGqsaDvxryV Ds33L5OxJ0y0NSuhpkmPSc07MSMVvrRRYPXAkV9dHdP3sdpTK0kD6eiJNa2bONoS leHoWUOMchftdnWWj8YkyoFaVSi9WdPbgQTM4lrIOumWaulDbiI= -----END CERTIFICATE-----Generated at Wed Jan 7 02:40:08 2026 by rpki-client