This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft
File: B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft (raw, json)
Hash identifier: 2S283inVQ/FyUOxmpw2ta8jn5iPrKAVJvzvS3ECmcJM=
Subject key identifier: 6A:E7:F9:25:63:38:BF:4D:7F:28:A6:C3:85:4D:04:7C:12:75:42:0B
Authority key identifier: B1:1E:5C:9B:4E:32:24:60:FD:70:13:87:F2:5B:9E:AE:FE:67:C3:EC
Certificate issuer: /CN=B11E5C9B4E322460FD701387F25B9EAEFE67C3EC
Certificate serial: 538837135785BA55CAC8935C379AFF2E5251ABAA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft
Manifest number: 04B2
Signing time: Sun 01 Feb 2026 04:30:42 +0000
Manifest this update: Sun 01 Feb 2026 04:25:42 +0000
Manifest next update: Wed 04 Feb 2026 15:51:42 +0000
Files and hashes: 1: 323430343a366338303a3a2f33322d3438203d3e20313334363538.roa (hash: /De9PraBKQ9VNMLW73eKsHyTdK5CxUO/Ms23Vqs0bog=)
2: 3130332e3231302e3132332e302f32342d3234203d3e20313334363538.roa (hash: NkQ9eWcHVREh5sfesIOFWzh9yqFj5sw8tkhu4ZxcoSQ=)
3: 3130332e3231302e3132302e302f32342d3234203d3e20313334363538.roa (hash: 9ga4Dz2S1yZEHVR/bNJu6K+f7jqkSZliYiYDlhJqlSc=)
4: 3130332e3231302e3132322e302f32342d3234203d3e20313334363538.roa (hash: P41PFR8M2pkKOmCdUu6l5sHUIprRbj+Eb/jozno97jU=)
5: B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.crl (hash: nItnnMur13BgRFWIBcCD/Pq23j+WTgG4OMAt9BIFm0M=)
6: 3130332e3231302e3132302e302f32322d3234203d3e20313334363538.roa (hash: w/W7ZPLOwJZFB+XGZFv4rUXEnNF/+lRXZH9LftXeoZo=)
7: 3130332e3231302e3132312e302f32342d3234203d3e20313334363538.roa (hash: LTZWN20UeEpbk3/6yOOjk81arYUEDuYxFg/WlS2mmEI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.crl
rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 15:51:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:88:37:13:57:85:ba:55:ca:c8:93:5c:37:9a:ff:2e:52:51:ab:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B11E5C9B4E322460FD701387F25B9EAEFE67C3EC
Validity
Not Before: Feb 1 04:25:42 2026 GMT
Not After : Feb 4 15:51:42 2026 GMT
Subject: CN=6AE7F9256338BF4D7F28A6C3854D047C1275420B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8d:c2:91:d2:10:13:4c:cd:b7:b6:ac:3f:b2:
58:d3:78:4f:8c:37:de:0a:c0:44:8e:1d:32:60:bf:
e2:d5:9e:75:c8:e0:5d:db:b5:88:59:a8:4d:50:40:
fa:04:16:79:74:5d:06:f7:b4:5f:16:8e:9f:24:bc:
25:ed:ec:79:4c:c6:9d:dc:6a:95:90:ea:6b:08:1b:
1e:e9:e3:a5:b4:45:ca:48:82:b1:13:01:9e:0f:54:
9b:47:c7:79:63:3f:f3:3d:fb:a0:c5:29:af:a2:cf:
b0:89:ec:e1:a7:7d:e7:7d:97:6f:f7:de:96:f3:b3:
55:16:9a:be:49:af:81:99:a8:29:ad:de:8a:a1:6c:
42:b1:72:46:ae:1b:0e:d1:1d:30:4a:7a:b8:ac:40:
79:47:be:28:51:d5:da:10:43:cc:36:e4:a8:34:4b:
ca:f1:a3:d4:d4:3f:56:5a:62:56:6f:e5:3a:04:14:
14:77:44:65:c9:23:00:ee:cf:da:c5:e7:17:58:3a:
a8:db:e4:22:0f:1c:b5:f2:96:06:75:ed:97:c0:00:
2a:0c:d9:c2:2d:45:b3:3d:25:c4:20:ee:a1:95:b1:
4b:e5:94:8d:a7:05:d8:af:ce:ef:8b:89:c7:9c:b8:
1e:1d:45:bd:d8:b9:14:4c:99:2c:94:61:84:ad:59:
59:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E7:F9:25:63:38:BF:4D:7F:28:A6:C3:85:4D:04:7C:12:75:42:0B
X509v3 Authority Key Identifier:
keyid:B1:1E:5C:9B:4E:32:24:60:FD:70:13:87:F2:5B:9E:AE:FE:67:C3:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:1a:9d:1a:8a:b1:e1:63:cb:1c:01:4b:8d:ef:05:93:b2:4c:
a0:d6:43:59:a0:fc:3d:9c:61:0f:57:f7:16:98:26:3a:fa:c9:
0b:b4:64:de:46:43:c6:63:a2:ac:11:c1:d4:93:52:39:8c:d9:
1a:d7:ac:f2:78:84:d3:d5:6d:bb:cc:96:34:0c:33:a8:7b:b6:
fa:d8:af:9e:f8:eb:01:3f:83:b2:f0:cb:c3:d1:07:df:c2:a7:
67:fb:f6:79:4b:59:15:0a:19:d4:a4:d9:b6:83:29:4f:1a:dd:
1b:cb:cc:ff:d6:e1:c2:9f:db:12:2d:58:10:9a:df:52:5f:1e:
49:4a:51:76:59:8f:7b:8f:be:64:af:31:ca:ad:d7:d5:53:c0:
b3:1d:1e:07:b3:a6:ad:fc:fc:33:f6:95:94:e9:56:43:0f:6b:
55:93:77:ba:de:8c:ae:9e:04:41:fe:e3:5a:ff:20:fe:a8:12:
27:a0:95:8d:e1:17:b2:aa:f7:2d:2d:a9:4f:f7:99:86:a2:18:
d7:a1:21:0a:f2:cf:e1:ce:11:a8:a0:a6:11:a7:b6:63:50:c0:
c4:09:8e:0e:f3:2c:dc:01:f9:92:b0:d6:0d:b3:e5:67:1c:48:
25:5c:5c:9b:d7:bc:41:47:24:2a:df:5f:02:32:05:2b:27:10:
ab:45:8f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:47 2026 by rpki-client