This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft
File: 665965FB7DA174CF19CD5F64A0820D37AB444D99.mft (raw, json)
Hash identifier: LuFPBbDoeaNDLCGdpJFz0tVQR7IlDLakFLOdqVkAYb4=
Subject key identifier: 67:FC:03:44:6F:1A:36:DF:B5:0D:9F:99:5F:25:A0:A6:43:1B:44:27
Authority key identifier: 66:59:65:FB:7D:A1:74:CF:19:CD:5F:64:A0:82:0D:37:AB:44:4D:99
Certificate issuer: /CN=665965FB7DA174CF19CD5F64A0820D37AB444D99
Certificate serial: 701EDE9BEBD786A3E62D6E0A72F5149E1CD32DE4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665965FB7DA174CF19CD5F64A0820D37AB444D99.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft
Manifest number: 0329
Signing time: Mon 02 Feb 2026 07:30:50 +0000
Manifest this update: Mon 02 Feb 2026 07:25:50 +0000
Manifest next update: Thu 05 Feb 2026 09:25:50 +0000
Files and hashes: 1: 665965FB7DA174CF19CD5F64A0820D37AB444D99.crl (hash: TKd/mwPL3u9bzdkotQijdr74yirThUyCE/+c6iB2HsA=)
2: 3130332e3137352e34322e302f32332d3234203d3e20313331313131.roa (hash: pdzJ3feYpdN0es8wvDONiu7iYeQvrOwzFhl3IbpxT1I=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.crl
rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665965FB7DA174CF19CD5F64A0820D37AB444D99.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:1e:de:9b:eb:d7:86:a3:e6:2d:6e:0a:72:f5:14:9e:1c:d3:2d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665965FB7DA174CF19CD5F64A0820D37AB444D99
Validity
Not Before: Feb 2 07:25:50 2026 GMT
Not After : Feb 5 09:25:50 2026 GMT
Subject: CN=67FC03446F1A36DFB50D9F995F25A0A6431B4427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1c:ae:31:9a:ea:e5:91:24:02:bc:5d:41:ed:
3c:9b:6c:39:48:8f:d9:43:68:db:4e:e8:69:a2:c2:
c7:eb:7b:4d:71:88:df:58:7e:70:a7:a5:d0:be:b7:
98:df:2e:1e:a0:02:74:a7:b3:c6:a8:a3:a9:98:8a:
71:f1:f5:01:84:23:57:88:ec:dc:36:43:fb:26:8d:
d6:1b:03:ef:be:27:7b:a6:54:e4:29:86:79:cf:61:
fc:88:14:b3:b5:89:4f:91:ff:ef:b9:1a:ea:6b:f8:
81:bf:13:9a:3d:47:9d:95:a8:4f:f3:c4:6f:7d:50:
26:37:da:87:2a:d0:98:ab:83:ba:87:77:e6:90:18:
ba:08:bb:d4:6b:dc:4a:22:ae:0f:cf:88:00:2d:5f:
57:ec:47:7c:ab:e2:d0:31:e9:a0:30:28:78:df:76:
df:12:44:a0:eb:27:cf:c7:59:de:eb:69:f0:f8:73:
fa:e8:f8:5f:18:b0:80:d5:06:ad:1a:7e:e3:44:a8:
bf:89:a2:09:25:8d:17:13:80:1a:2d:6a:7b:80:7c:
08:1b:cc:e4:d7:5e:63:3f:52:61:cd:a8:43:79:59:
7e:75:6c:bf:6e:13:e6:83:5c:b4:5c:49:5a:5a:59:
4b:1b:b0:73:3b:9c:64:22:66:25:a9:29:da:08:ad:
4f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FC:03:44:6F:1A:36:DF:B5:0D:9F:99:5F:25:A0:A6:43:1B:44:27
X509v3 Authority Key Identifier:
keyid:66:59:65:FB:7D:A1:74:CF:19:CD:5F:64:A0:82:0D:37:AB:44:4D:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665965FB7DA174CF19CD5F64A0820D37AB444D99.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:44:c2:de:9c:f9:c7:2e:64:6b:78:70:5f:af:46:b0:6f:42:
4b:8f:fa:e4:ca:14:2a:f3:6e:6a:b6:20:4c:9d:69:3f:7d:ce:
e4:57:39:ce:ee:5d:9b:d4:00:f4:a2:05:c4:01:13:22:9a:78:
f4:56:b2:9d:e2:78:1b:11:05:4d:7a:9d:78:06:3a:90:75:e4:
80:13:71:73:ac:54:3f:5d:02:e7:c4:6f:79:ae:1c:59:6c:4d:
dc:01:b2:65:97:62:c7:a8:56:64:15:27:dd:f5:7d:2e:f8:e1:
34:6a:69:5f:48:6b:b5:f4:66:f8:d7:72:5e:2b:8b:b9:5c:f9:
75:c3:6c:76:65:79:c1:11:2a:d4:7b:9b:98:3f:49:eb:82:d3:
7f:b2:eb:ca:fd:4e:40:0a:af:50:02:f3:f1:b6:4c:46:3d:e6:
01:c3:ce:56:a4:e8:6c:bb:14:60:13:41:c3:da:ea:a0:be:38:
f1:a3:13:f1:ec:a1:dd:63:86:d3:5c:f4:ab:58:34:aa:e6:f1:
f4:c6:cc:0e:29:6b:ea:fa:e7:b5:ab:aa:47:7a:de:98:98:10:
ac:d8:6a:e2:25:4b:f5:46:5b:79:3d:65:e0:31:87:0c:7b:7f:
9b:e9:1e:33:69:93:22:a7:23:86:33:73:af:f7:e7:88:90:0b:
48:a1:f5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:02:20 2026 by rpki-client