This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft
File: 6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft (raw, json)
Hash identifier: U/hANRRnFcpuHbidzpVBwhazTMfcGnPo1Hta+YuNF8E=
Subject key identifier: 93:96:9D:1D:B4:B3:4A:44:DC:07:54:31:3D:0E:2F:D0:93:D1:32:A2
Authority key identifier: 6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA
Certificate issuer: /CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA
Certificate serial: 59179491CC5A67D23E7CCFBCBAAF6FF7B111AC28
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft
Manifest number: 0249
Signing time: Sat 31 Jan 2026 05:00:03 +0000
Manifest this update: Sat 31 Jan 2026 04:55:03 +0000
Manifest next update: Tue 03 Feb 2026 14:22:03 +0000
Files and hashes: 1: 3130332e3138392e3136382e302f32332d3233203d3e2039333431.roa (hash: R1C6O4ul1Ppozfaiesg+Uhn8MwDAOfzdAmq+sSEet2w=)
2: 6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl (hash: PwgDNhjItM+5PqEsKEjMgvEB9b+o16MXuI1gRjfGIcA=)
3: 3130332e3138392e3136392e302f32342d3234203d3e2039333431.roa (hash: XLXbrSM75a4OOhdIFSVSWGya3QA7TZER3P7tGhI+wW0=)
4: 3130332e3138392e3136382e302f32342d3234203d3e2039333431.roa (hash: jcYNuwq5tBbtUM+5LFf+gih2lHYu/silWmdWErgVy5M=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl
rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 14:22:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:17:94:91:cc:5a:67:d2:3e:7c:cf:bc:ba:af:6f:f7:b1:11:ac:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA
Validity
Not Before: Jan 31 04:55:03 2026 GMT
Not After : Feb 3 14:22:03 2026 GMT
Subject: CN=93969D1DB4B34A44DC0754313D0E2FD093D132A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:25:49:64:c2:09:4a:8f:0a:6f:07:a4:1b:c2:
d4:59:2a:64:8a:55:dc:32:ec:de:d2:ea:e4:09:98:
8b:43:d4:ee:5d:6f:6c:85:a9:1f:0e:73:97:ea:84:
44:c4:7e:9d:34:b6:bf:a8:4e:b0:e4:9e:c4:01:00:
58:c5:78:ca:32:2f:84:8f:73:eb:c4:ee:41:56:d9:
10:f4:49:33:4e:96:75:85:a6:73:80:52:75:13:f6:
2a:7c:68:7f:45:bc:a1:9f:d2:19:6b:84:e9:ee:fb:
53:dd:11:49:c4:ba:bd:32:c9:3c:b2:ad:0d:4b:07:
4d:62:05:f0:79:ba:5c:81:bd:76:58:1d:95:d7:fa:
c7:89:83:f8:15:01:b0:87:a7:33:7d:bc:e2:a4:e8:
8f:8b:8e:22:f6:f8:82:b3:80:41:f6:34:5e:10:db:
fd:50:8c:52:4d:01:ed:ab:9c:f0:a8:e6:09:db:38:
0f:27:df:e8:d6:14:b4:18:b6:f9:87:8d:e4:2b:cc:
82:44:64:c2:3b:e0:c0:88:81:6b:8a:31:df:5d:c9:
70:c3:89:c9:de:7e:0d:77:95:72:a6:9d:48:e0:fa:
75:7f:df:5e:98:15:1f:fe:5d:b1:70:30:a9:3f:85:
93:8b:7a:34:62:5e:ef:11:33:8d:08:98:c1:4a:8d:
c8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:96:9D:1D:B4:B3:4A:44:DC:07:54:31:3D:0E:2F:D0:93:D1:32:A2
X509v3 Authority Key Identifier:
keyid:6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:ba:28:a8:6e:7a:31:71:6c:b8:6d:cd:58:5c:65:2b:b7:7f:
cd:76:b6:cc:e7:db:9b:4c:c0:5a:3a:02:8d:e1:3c:3d:8f:7d:
e1:44:a2:e6:1f:b3:46:f2:b3:b1:00:7b:2e:2e:88:eb:5f:fb:
58:3f:bb:2f:51:71:61:36:f8:24:56:f6:5a:96:c6:78:c7:f3:
b8:2e:4c:83:9e:44:c5:68:c5:97:ac:9f:99:ab:1d:d3:79:ca:
b7:46:c2:70:86:d5:3a:02:6c:76:db:7d:32:66:dc:dc:03:18:
3b:8f:f7:fe:8e:d4:fc:71:16:0c:73:53:41:94:c7:c7:31:34:
aa:13:cd:39:97:f6:ee:73:3a:eb:66:5d:05:2b:0c:5b:e0:51:
49:96:3a:2b:e6:9f:38:6c:e8:08:88:56:28:2f:ee:56:fc:9b:
47:31:65:ce:b4:73:72:3c:58:9e:9a:b1:fe:30:56:5d:94:eb:
66:47:21:11:af:1a:c3:48:9c:47:9d:f7:a3:ce:62:a0:9d:f4:
cc:88:93:c3:11:c9:03:69:b2:93:57:0a:c1:ac:9e:10:70:42:
6b:a5:04:74:44:cf:95:a3:7e:c2:be:49:65:c0:11:c3:1f:48:
26:6b:06:1c:c9:18:21:16:5a:2e:83:bd:39:7b:dd:c5:e7:26:
bb:a2:f0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:07 2026 by rpki-client