This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft
File: 6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft (raw, json)
Hash identifier: ZvvHlzQhZIbMtjy1PZZcCUDbo5UBhzMAh/5BG9uvffQ=
Subject key identifier: 38:6F:1A:ED:72:B5:77:60:BB:53:5B:A7:5E:C8:DB:30:80:C9:85:F2
Authority key identifier: 6B:A0:87:A8:C1:BF:46:BB:D4:74:8D:23:F9:E3:4B:92:77:4F:CC:66
Certificate issuer: /CN=6BA087A8C1BF46BBD4748D23F9E34B92774FCC66
Certificate serial: 799B820FCEA819FBD12B4EF681E1D08F40B5576A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft
Manifest number: F9
Signing time: Sat 31 Jan 2026 08:40:58 +0000
Manifest this update: Sat 31 Jan 2026 08:35:58 +0000
Manifest next update: Tue 03 Feb 2026 17:37:58 +0000
Files and hashes: 1: 3230332e3131342e3232342e302f32332d3234203d3e203435363937.roa (hash: teH2zqo+KFTz5fsLV5Az67IPM5Fevb+2T7eyV5BSfR4=)
2: 6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.crl (hash: Cr2ebb1yzvwGA+BzglwBeC0S2uqdWeFmzUn5c6kmm0I=)
3: 323030313a6466303a39613a3a2f34382d3438203d3e203435363937.roa (hash: ZceMWlNxLHIqsif36KN1ms0kpQpQ1f71pr5K0XWa9aY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.crl
rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:9b:82:0f:ce:a8:19:fb:d1:2b:4e:f6:81:e1:d0:8f:40:b5:57:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6BA087A8C1BF46BBD4748D23F9E34B92774FCC66
Validity
Not Before: Jan 31 08:35:58 2026 GMT
Not After : Feb 3 17:37:58 2026 GMT
Subject: CN=386F1AED72B57760BB535BA75EC8DB3080C985F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:30:bc:ab:79:3e:32:58:68:5d:9d:f9:a5:20:
8a:14:46:d5:ee:5f:1b:b0:95:18:71:49:ca:50:a5:
9b:bc:b5:4c:fc:04:0a:e4:c1:6d:e7:42:be:24:f4:
ef:68:09:1e:3b:62:6d:fc:c4:d5:1a:c9:0e:2f:56:
e2:73:b6:7d:c0:1b:eb:91:3c:09:66:ed:12:38:ba:
0f:bf:08:66:78:c4:e8:59:1f:6f:54:68:a1:01:f6:
c0:3e:cf:0b:87:23:30:1c:fa:8c:97:f5:e0:ba:43:
13:46:c9:b6:cf:93:c8:7a:9d:15:c3:36:c7:24:f0:
20:a0:a8:48:1e:2a:97:98:03:f6:be:9f:25:13:00:
b8:01:38:a3:53:f8:60:ac:19:86:35:96:cf:61:92:
96:1e:c5:aa:fe:c0:ca:bf:fc:87:69:95:96:c0:35:
bd:78:a8:30:25:d9:93:d1:96:1e:6d:ae:f2:25:73:
e1:3c:1d:07:f2:32:64:78:27:f3:22:d2:91:62:1a:
67:11:f2:aa:08:dd:97:64:a8:2f:90:a8:f3:ba:06:
23:76:67:ae:d1:43:5c:ac:30:0b:a4:e5:b6:7e:69:
0b:99:d8:1f:9d:7a:1d:b7:29:d2:61:42:4d:11:04:
7f:6a:02:04:a4:3a:63:79:23:b8:3e:65:f6:2e:26:
51:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6F:1A:ED:72:B5:77:60:BB:53:5B:A7:5E:C8:DB:30:80:C9:85:F2
X509v3 Authority Key Identifier:
keyid:6B:A0:87:A8:C1:BF:46:BB:D4:74:8D:23:F9:E3:4B:92:77:4F:CC:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:7c:0a:80:37:91:ff:d8:64:70:42:8f:6a:a6:c8:84:b6:41:
f0:69:c6:8c:5f:45:76:6f:42:f8:ba:23:d5:b4:3f:e6:e8:39:
79:e9:7b:10:aa:ae:56:56:5f:8d:9a:ef:eb:3c:b4:82:f6:8b:
85:67:84:10:df:e8:48:01:a5:ec:3a:a8:cf:88:9c:11:cc:34:
88:1b:b0:c7:da:9e:d3:f0:d9:44:6b:8c:c1:e1:da:68:6d:35:
4f:09:d5:af:37:c7:a4:7f:4c:5d:66:20:7f:6d:e7:bf:ac:72:
b1:d7:e8:97:91:b0:ad:28:7d:55:ea:0e:43:b6:df:0c:8f:0d:
c5:06:f1:f3:be:e0:4d:dd:8b:32:57:8a:d7:df:96:29:6d:2a:
c8:11:80:b5:03:e4:a7:ea:e0:18:64:6b:3a:28:02:02:ae:79:
ae:66:1e:8c:f4:37:3d:9e:d8:84:db:7b:f4:50:64:27:7d:15:
f4:79:6a:e1:a4:59:e7:02:39:37:4e:5b:2c:f8:6b:83:50:0f:
f6:7f:08:0d:23:65:98:52:ca:5b:2f:7d:8f:a8:a4:ed:37:46:
20:c9:6d:ee:09:18:6c:03:79:71:25:36:5b:dd:08:2d:f1:a3:
44:ad:37:b9:03:75:cd:1a:6b:9a:50:1d:f0:98:cc:ea:e6:fb:
0b:e2:6e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:05:26 2026 by rpki-client