This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft
File: D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft (raw, json)
Hash identifier: wMYP8in+jQM5yihi7Wqa52pa+gwcH0FRkFiMrvPEjbc=
Subject key identifier: 6E:64:CC:E1:5F:40:A3:87:A3:FB:9A:9B:BE:8F:DD:10:AE:04:D3:FA
Authority key identifier: D6:E5:4A:F6:C4:37:86:88:99:B9:9F:43:12:CD:3D:BB:49:3B:5D:29
Certificate issuer: /CN=D6E54AF6C437868899B99F4312CD3DBB493B5D29
Certificate serial: 2EEBA46D5C1B5264C0F45316E7C00958F808C7C1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft
Manifest number: 01FD
Signing time: Sun 01 Feb 2026 17:22:24 +0000
Manifest this update: Sun 01 Feb 2026 17:17:24 +0000
Manifest next update: Thu 05 Feb 2026 04:54:24 +0000
Files and hashes: 1: D6E54AF6C437868899B99F4312CD3DBB493B5D29.crl (hash: eQUfqec1phg2H8oUejFV8xNzCb6CVlhAXPXU/QQ+ipg=)
2: 3130332e33392e37322e302f32342d3234203d3e20313530343838.roa (hash: PWfgrIEAW5Ka7/l46DQwRT/6uSCPsoFbZO34zUTjWEM=)
3: 3130332e33392e37332e302f32342d3234203d3e20313530343838.roa (hash: qhQA0cj7kuBqIGVwCLG9U/r/eXfYDiDRD7UKEazkyf0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.crl
rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 04:54:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:eb:a4:6d:5c:1b:52:64:c0:f4:53:16:e7:c0:09:58:f8:08:c7:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6E54AF6C437868899B99F4312CD3DBB493B5D29
Validity
Not Before: Feb 1 17:17:24 2026 GMT
Not After : Feb 5 04:54:24 2026 GMT
Subject: CN=6E64CCE15F40A387A3FB9A9BBE8FDD10AE04D3FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:51:54:10:7b:63:71:bc:10:c9:70:f5:40:58:
95:2f:8a:90:f5:8c:82:76:88:a8:12:c5:23:e1:8c:
52:f2:40:6b:cf:72:d8:75:07:33:eb:23:26:6a:82:
74:35:b2:31:85:00:90:d4:f9:36:34:a7:33:fc:73:
77:d4:66:3b:cf:38:86:4d:82:0c:d9:3d:d4:36:c3:
ff:4b:d6:1b:f7:ef:f1:cc:ff:4f:86:43:f7:b0:1e:
13:b2:ce:1c:56:b9:33:99:6b:01:38:5f:c7:43:fe:
ec:1c:3c:bf:6d:d3:42:f5:b1:09:01:fe:4b:aa:3a:
98:e4:ab:72:05:8c:a1:96:f6:c2:fe:6f:0d:65:69:
70:21:f2:f4:6b:1f:11:d3:eb:bf:9a:16:4d:59:92:
0b:b6:1d:26:c6:b1:97:e7:03:a1:8c:87:f6:69:43:
de:54:72:7d:c9:74:81:00:c0:9b:43:7a:bb:2e:fc:
ab:bf:a4:5a:0d:27:bb:d6:99:3a:25:e5:f9:19:ab:
e8:49:08:fa:42:6f:9e:49:40:eb:6b:5b:f3:84:a2:
9f:f9:29:aa:46:08:38:4a:06:d8:57:ce:57:ee:45:
99:24:29:17:8a:21:ef:24:01:f0:98:b1:35:2b:5d:
17:9c:d2:97:92:d0:4a:b9:72:43:f1:4e:79:63:5c:
ae:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:64:CC:E1:5F:40:A3:87:A3:FB:9A:9B:BE:8F:DD:10:AE:04:D3:FA
X509v3 Authority Key Identifier:
keyid:D6:E5:4A:F6:C4:37:86:88:99:B9:9F:43:12:CD:3D:BB:49:3B:5D:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:16:d3:98:a5:ad:ac:f0:1a:c9:41:28:10:1c:2f:30:ab:09:
70:26:c0:ba:ce:4b:78:15:12:82:83:b5:de:a8:b1:de:e1:44:
b7:af:9f:00:51:92:b7:38:69:e7:1b:19:79:c5:c5:93:6c:ee:
be:d0:db:8d:78:37:cb:be:8e:54:b3:32:5c:2a:d7:03:14:ec:
a7:df:3e:3c:94:b5:29:a6:dc:b1:c2:62:c1:6c:cd:76:5a:43:
3a:42:13:73:7c:bd:05:cd:2f:e1:78:42:34:fb:03:65:02:2b:
ee:17:15:49:de:ca:96:16:2e:8e:46:18:37:0e:14:0c:19:e5:
89:f9:6b:8a:d4:99:06:e0:62:24:ec:d0:af:bb:25:cb:ef:a6:
48:a1:04:59:4f:8a:fc:8f:5d:f9:74:96:20:8d:47:df:c5:01:
9c:f4:fc:80:43:fa:78:d6:24:21:bb:18:be:f0:48:5b:80:aa:
aa:2d:1d:3f:cc:46:44:98:76:70:23:95:73:f8:8e:ab:2b:fa:
f9:f1:45:b2:45:1f:5a:1d:f2:46:ea:92:62:3a:19:e7:d1:3c:
9f:33:38:24:c9:44:ef:cf:ad:ed:16:c5:ca:0d:a0:9f:2e:8a:
de:1c:c0:5f:cd:4e:b3:f8:3b:c9:ae:5e:d1:bb:27:0f:93:81:
fe:9c:7a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:42:15 2026 by rpki-client