This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft
File: 64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft (raw, json)
Hash identifier: loLDrgM/GR7PihAWPW+Rm0uPBYmEbWlU0S/EEnq7G5c=
Subject key identifier: 90:BB:E2:E7:20:4E:0F:8C:B4:63:D6:6A:DA:AB:1F:69:3D:C1:F1:76
Authority key identifier: 64:B4:66:51:D7:B0:C7:57:E4:AE:DE:01:69:1F:06:2F:EE:F1:5D:B6
Certificate issuer: /CN=64B46651D7B0C757E4AEDE01691F062FEEF15DB6
Certificate serial: 548417E98295569D3418EECCE9579679A99A96C6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft
Manifest number: 0244
Signing time: Sun 01 Feb 2026 05:21:38 +0000
Manifest this update: Sun 01 Feb 2026 05:16:38 +0000
Manifest next update: Wed 04 Feb 2026 11:20:38 +0000
Files and hashes: 1: 64B46651D7B0C757E4AEDE01691F062FEEF15DB6.crl (hash: BaRBxkuzOsL+A642f0KoMQbxkyWfhZZ+mDj0WJBc67U=)
2: 3130332e3135382e3230392e302f32342d3234203d3e20313431313436.roa (hash: cu+gkkkTCuwJj0tPWyI4oDjIIQe1JqfFTuFCDD6tSKw=)
3: 3130332e3135382e3230382e302f32342d3234203d3e20313431313436.roa (hash: Mc8Ea5+5WJ6GF7G0KNR6Ybiy7ufabhA8F83CYeyA+z0=)
4: 3130332e3135382e3230382e302f32332d3234203d3e20313431313436.roa (hash: fQYP6KBmK43mZ1BOpBi0K6IbkEvJhG31/o2xXC40uG8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.crl
rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 11:20:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:84:17:e9:82:95:56:9d:34:18:ee:cc:e9:57:96:79:a9:9a:96:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64B46651D7B0C757E4AEDE01691F062FEEF15DB6
Validity
Not Before: Feb 1 05:16:38 2026 GMT
Not After : Feb 4 11:20:38 2026 GMT
Subject: CN=90BBE2E7204E0F8CB463D66ADAAB1F693DC1F176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1b:72:3d:87:22:7f:98:83:75:b7:45:08:1d:
18:d8:21:61:b5:5a:38:24:00:ce:29:36:6d:b6:5e:
32:09:a8:f9:9d:20:f6:fb:ba:0e:b3:c4:dd:ca:cb:
ac:da:a0:6e:59:69:b6:7c:14:10:79:ff:8d:bf:71:
75:48:3e:1a:6e:c3:37:ed:9b:21:47:9d:9d:90:82:
60:0c:0e:81:e3:1f:d6:16:63:c0:bf:40:27:4d:b1:
df:fb:6f:a4:c4:8b:94:5c:65:12:d6:07:f4:a6:c2:
9c:9b:10:48:46:24:0e:af:d8:c4:3c:b3:09:3d:f6:
d8:85:14:13:32:98:bf:cd:8d:6b:a8:d2:69:23:24:
d9:c7:29:b6:c2:6f:0a:8a:07:82:82:30:56:eb:ef:
c5:e4:c2:48:c6:af:37:10:ae:19:94:1e:34:87:33:
8e:9e:04:93:4d:b4:31:08:a8:09:18:5b:52:3b:77:
a7:33:7d:f9:cf:6f:8a:b7:d4:c5:f1:4f:e4:a5:24:
60:f5:9b:51:bf:c6:cc:37:bf:89:5c:d9:f0:e3:2a:
2d:59:f9:d4:cd:e7:54:84:ef:ed:bb:5e:6d:d8:fe:
87:c1:fe:09:51:e6:86:5d:d5:70:7b:78:16:30:08:
eb:d0:5f:36:fe:65:4b:87:49:f7:8c:33:d1:1c:b6:
da:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:BB:E2:E7:20:4E:0F:8C:B4:63:D6:6A:DA:AB:1F:69:3D:C1:F1:76
X509v3 Authority Key Identifier:
keyid:64:B4:66:51:D7:B0:C7:57:E4:AE:DE:01:69:1F:06:2F:EE:F1:5D:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ce:a6:a1:d7:d6:7f:be:77:e9:e5:26:00:5e:bc:0f:2f:58:
65:47:94:61:ae:2e:5a:30:fd:4e:a1:3a:98:91:e2:78:cc:6e:
42:d5:ae:13:1e:b6:ce:dc:01:a6:e3:d1:2a:79:28:f1:e8:09:
14:6e:a7:21:6d:7c:c5:8e:06:26:18:ea:53:aa:66:17:f1:ac:
3a:1d:c8:d5:5f:34:00:2b:93:24:94:f8:14:34:3e:1a:cf:ec:
a7:44:c9:d3:ae:12:80:47:58:70:c6:e4:90:c6:07:62:4a:89:
4c:b4:92:72:b4:aa:cd:2e:3f:cb:2e:62:58:e7:12:50:65:d4:
19:42:6b:fe:fd:23:73:3b:68:09:1e:9d:5d:18:05:26:4a:c9:
89:e9:42:76:25:51:b4:75:23:bd:90:b9:ad:e4:2f:ef:f7:6d:
db:99:c3:6b:d9:c5:7e:fa:22:ec:5d:bc:5f:2f:21:9a:26:cc:
c0:c7:0c:68:81:45:3e:fe:0b:55:39:e0:cc:63:61:21:73:19:
04:41:ba:71:f7:a5:68:cb:51:9d:46:3d:bf:22:3f:40:c3:de:
7c:47:1d:3b:90:31:d4:b4:4d:b9:54:22:3f:08:52:4a:16:ea:
ad:12:a7:b3:bc:ad:fb:e6:58:8f:64:3b:40:70:36:8c:09:6f:
3b:23:47:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:48 2026 by rpki-client