This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.mft
File: 677D4AA669244DA65D976651DB5D051EEBDD0644.mft (raw, json)
Hash identifier: TLVFOW2kGsx1+xVH2yHyvYqxJP+WsCtN8Ld3S7jqsgs=
Subject key identifier: 1F:C2:4A:7D:38:D5:60:C0:70:33:B0:D3:C8:63:8F:CB:8A:57:59:38
Authority key identifier: 67:7D:4A:A6:69:24:4D:A6:5D:97:66:51:DB:5D:05:1E:EB:DD:06:44
Certificate issuer: /CN=677D4AA669244DA65D976651DB5D051EEBDD0644
Certificate serial: 6DEB22BB21798E84B5289C59E46C6258F85B915E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/677D4AA669244DA65D976651DB5D051EEBDD0644.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.mft
Manifest number: 0215
Signing time: Sun 01 Feb 2026 13:01:51 +0000
Manifest this update: Sun 01 Feb 2026 12:56:51 +0000
Manifest next update: Thu 05 Feb 2026 00:42:51 +0000
Files and hashes: 1: 677D4AA669244DA65D976651DB5D051EEBDD0644.crl (hash: jlghOuHTqxYPwk+Q5hfW1FkR5iQY4izVDUnSgH7nu4k=)
2: 3130332e31382e3138342e302f32332d3234203d3e20313530323330.roa (hash: F7Gs7c34XXwy69oloBM+A2EWyB4TbouNV2bsholc9KU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.crl
rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/677D4AA669244DA65D976651DB5D051EEBDD0644.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 00:42:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:eb:22:bb:21:79:8e:84:b5:28:9c:59:e4:6c:62:58:f8:5b:91:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677D4AA669244DA65D976651DB5D051EEBDD0644
Validity
Not Before: Feb 1 12:56:51 2026 GMT
Not After : Feb 5 00:42:51 2026 GMT
Subject: CN=1FC24A7D38D560C07033B0D3C8638FCB8A575938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:dd:ce:64:cc:35:ff:9b:77:71:a8:eb:14:bc:
1e:82:be:bb:7a:73:5a:c3:ef:2d:d9:f4:a2:a1:b1:
2c:8f:69:10:be:50:14:73:f0:6e:34:89:79:5f:67:
17:76:95:cb:79:80:45:26:5b:d4:b3:3b:d8:c5:c6:
cd:c9:37:97:0b:e9:f3:85:ba:b9:ab:80:c2:d3:40:
b8:cd:4d:10:02:ae:10:49:7e:62:09:d7:ec:b4:61:
52:89:f1:cb:c1:0b:48:2f:81:de:7c:c0:b3:76:c7:
f1:d7:88:64:93:80:72:11:0e:36:93:a8:ec:5e:8e:
0f:86:ed:15:5a:b4:f6:eb:03:2d:84:f7:59:3d:1e:
e3:9c:91:00:71:ba:87:64:91:68:80:c3:6b:df:47:
74:74:1f:3a:8a:d3:28:89:e8:16:08:ab:86:86:0b:
dc:d6:b4:70:b9:ff:22:14:b3:31:1b:f1:7c:6f:fa:
45:29:58:eb:58:c4:b6:d6:32:e2:13:20:ed:e0:d5:
fe:31:d5:df:a1:37:ac:7e:6d:97:59:70:5d:53:ee:
f3:96:93:e0:f9:f5:71:fa:a2:f3:ff:b0:3a:2c:66:
f5:1e:fb:db:45:a7:8d:87:8a:40:6d:cf:2f:ba:fe:
77:5f:69:f3:3c:de:b6:09:e3:8a:a8:f0:38:e6:b7:
aa:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C2:4A:7D:38:D5:60:C0:70:33:B0:D3:C8:63:8F:CB:8A:57:59:38
X509v3 Authority Key Identifier:
keyid:67:7D:4A:A6:69:24:4D:A6:5D:97:66:51:DB:5D:05:1E:EB:DD:06:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/677D4AA669244DA65D976651DB5D051EEBDD0644.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:1e:c4:6d:87:8d:6c:60:fa:4e:a0:93:24:9a:cc:b1:38:8b:
6e:0c:f0:6a:d1:77:f8:fb:43:86:e1:a3:8d:58:93:de:2d:99:
3c:ee:dd:14:07:22:59:94:1a:66:a1:ac:ac:fb:30:c2:cc:6a:
5a:90:82:38:4e:1d:ce:17:6a:15:17:31:37:0a:58:ed:5e:ec:
29:2f:4e:ff:d4:5f:01:5d:3f:b5:33:4e:6d:87:d9:25:89:dc:
d9:b3:ac:02:6f:30:cb:0c:9b:80:09:b6:6c:9a:d0:9c:c8:0f:
27:8c:4a:61:aa:39:c9:70:97:d4:5a:86:5a:42:d5:92:a0:5d:
5c:3c:5d:72:3d:cc:90:28:1d:e9:34:f0:d4:ca:ff:2e:65:92:
23:4f:e2:e0:f7:65:4b:55:67:75:dd:1d:45:68:08:b3:1c:12:
05:e2:5e:64:e9:be:a1:53:2e:c3:c4:a7:aa:c7:09:27:fb:31:
1e:1a:2b:b6:ac:f8:3b:40:69:da:c3:9a:6c:0d:52:a4:d0:13:
d6:3c:27:fd:25:49:9a:31:d6:d4:73:fc:d0:65:19:b0:c8:70:
e0:8e:04:bc:0f:ba:88:15:b8:de:7a:3f:6b:e9:01:49:6f:fc:
b8:34:60:fa:27:5e:a3:fb:e8:29:9d:90:07:db:8e:fd:8c:0d:
01:54:cd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:09 2026 by rpki-client