This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.mft
File: 6C11FF5474BE690E545132237E53030296585D32.mft (raw, json)
Hash identifier: RfCx3Na9EILpsLTZ+tpK/x4gn4m6+kE0tsdn+2s61B4=
Subject key identifier: 1F:79:64:14:EE:38:CA:0A:DA:BA:A6:7D:C8:7E:6D:E4:10:6D:27:16
Authority key identifier: 6C:11:FF:54:74:BE:69:0E:54:51:32:23:7E:53:03:02:96:58:5D:32
Certificate issuer: /CN=6C11FF5474BE690E545132237E53030296585D32
Certificate serial: 52C5F5692700E2C4232DB454AC330A3813563630
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C11FF5474BE690E545132237E53030296585D32.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.mft
Manifest number: 04A5
Signing time: Sun 01 Feb 2026 08:10:51 +0000
Manifest this update: Sun 01 Feb 2026 08:05:51 +0000
Manifest next update: Wed 04 Feb 2026 16:57:51 +0000
Files and hashes: 1: 6C11FF5474BE690E545132237E53030296585D32.crl (hash: OmZZKG1v6uLJqKPkztpK1kEFYnLlekh3EQdcGvNr+aI=)
2: 3130332e3235312e3138302e302f32322d3234203d3e203538383138.roa (hash: bRNZ8nUlgm5rj4Lv4Xn5qKIuBE6nw8cnVSc6VxHCPew=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.crl
rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C11FF5474BE690E545132237E53030296585D32.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 16:57:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:c5:f5:69:27:00:e2:c4:23:2d:b4:54:ac:33:0a:38:13:56:36:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6C11FF5474BE690E545132237E53030296585D32
Validity
Not Before: Feb 1 08:05:51 2026 GMT
Not After : Feb 4 16:57:51 2026 GMT
Subject: CN=1F796414EE38CA0ADABAA67DC87E6DE4106D2716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:35:e4:f4:b3:8c:8d:1e:59:14:c2:b3:63:ba:
7c:31:0e:be:ef:b9:db:18:77:0d:5a:cb:f3:e8:25:
9e:33:fc:c1:6b:a9:94:a0:ba:57:ba:1b:94:91:fd:
43:d5:2f:93:74:10:33:ad:25:07:62:79:7d:56:df:
51:c9:6c:6c:5f:29:da:df:c0:8f:05:de:d1:37:cb:
3e:5a:6a:90:0c:99:fc:38:e5:89:82:98:46:73:2f:
c0:9c:9b:01:b5:5e:c9:bc:93:e5:b2:db:80:c5:cf:
12:65:b0:a1:d0:a2:8d:46:3b:38:da:ed:48:46:07:
7e:d5:67:7a:cb:77:5c:20:8d:a4:81:e6:f1:88:52:
de:8c:0c:9a:f1:e2:1c:26:4a:f3:5e:a2:d3:b4:18:
17:44:72:67:a6:4e:32:fe:cc:69:56:a0:4a:1b:d4:
34:11:9c:71:1e:be:63:f3:a0:2b:f1:64:e3:75:50:
89:75:08:e1:de:2c:02:55:15:97:07:e4:d5:33:8a:
92:c5:27:fa:a9:bc:d6:1e:72:3f:9d:c3:ef:16:f0:
2b:57:7e:47:26:9d:bc:f6:4d:41:b5:08:22:25:20:
fb:a3:24:e2:b2:64:1d:87:e5:c8:1e:5c:c7:a6:55:
3e:76:76:5d:26:57:96:3a:10:62:c4:1d:8b:c2:a2:
e0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:79:64:14:EE:38:CA:0A:DA:BA:A6:7D:C8:7E:6D:E4:10:6D:27:16
X509v3 Authority Key Identifier:
keyid:6C:11:FF:54:74:BE:69:0E:54:51:32:23:7E:53:03:02:96:58:5D:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C11FF5474BE690E545132237E53030296585D32.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:8e:4b:d8:a4:d6:96:24:c7:bc:c9:aa:52:4d:cd:2b:75:6c:
35:6d:8b:e0:58:65:ec:d4:0f:f3:75:fc:8b:3b:20:52:4b:92:
c7:a4:9d:3d:bd:49:e3:71:66:a7:d9:c5:01:46:6c:15:16:4e:
23:83:5a:a7:cc:12:00:a1:5b:f7:72:32:e2:6f:fa:6c:53:3f:
7a:24:60:3e:ba:1b:af:91:92:9b:d8:f8:6b:9b:05:d5:50:49:
d8:a9:08:19:c5:75:0a:dc:8b:33:14:03:65:ce:9d:24:1a:8b:
09:f1:27:99:ed:1c:ac:02:1b:ca:b4:21:62:4e:0e:ba:e4:e7:
5d:b7:d6:be:20:05:df:d1:32:d9:dd:80:d1:11:c5:14:02:31:
4b:da:b7:9b:0e:1d:4c:60:a2:3f:b5:b2:80:8d:70:49:88:70:
38:85:97:7a:b5:95:d0:9c:1f:7b:b1:1f:e5:df:72:ce:af:5a:
0e:2b:dc:b4:d5:d1:59:e0:84:89:59:4a:bc:74:65:90:06:2c:
bd:59:70:09:7f:53:a4:69:12:09:dd:b6:a0:43:fe:aa:b3:17:
ff:65:9d:b3:ca:e5:ed:e4:61:f5:33:25:84:e0:da:82:7c:43:
25:94:aa:e3:da:14:87:95:ac:73:f6:46:17:ca:b1:b9:45:36:
d1:8d:18:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:50:42 2026 by rpki-client