This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.mft
File: BF00BBF622014234CC4A26C23F64AC5C143802B6.mft (raw, json)
Hash identifier: YyM9JZG0F1Ka1RIVZR9x2J2jfillkZHEQrnl6BOhmKs=
Subject key identifier: 80:ED:17:CA:F4:34:AF:79:8E:4A:86:6E:62:24:B9:F1:1E:24:77:23
Authority key identifier: BF:00:BB:F6:22:01:42:34:CC:4A:26:C2:3F:64:AC:5C:14:38:02:B6
Certificate issuer: /CN=BF00BBF622014234CC4A26C23F64AC5C143802B6
Certificate serial: 5B50FC8C181425D53DF17263C374626CA127038A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF00BBF622014234CC4A26C23F64AC5C143802B6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.mft
Manifest number: 024D
Signing time: Mon 02 Feb 2026 07:51:43 +0000
Manifest this update: Mon 02 Feb 2026 07:46:43 +0000
Manifest next update: Thu 05 Feb 2026 19:06:43 +0000
Files and hashes: 1: BF00BBF622014234CC4A26C23F64AC5C143802B6.crl (hash: hDzmQuVm7U31IUTBfEjRhr0vcZYJrwQwyMdiWCEGsKw=)
2: 3130332e3136392e382e302f32332d3234203d3e20313432333436.roa (hash: /hhYO5wRSFrwibEJunDDF1qr8Z/wP92fyPsYfBATpiA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.crl
rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF00BBF622014234CC4A26C23F64AC5C143802B6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:50:fc:8c:18:14:25:d5:3d:f1:72:63:c3:74:62:6c:a1:27:03:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF00BBF622014234CC4A26C23F64AC5C143802B6
Validity
Not Before: Feb 2 07:46:43 2026 GMT
Not After : Feb 5 19:06:43 2026 GMT
Subject: CN=80ED17CAF434AF798E4A866E6224B9F11E247723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d8:69:22:f2:cf:0d:a6:53:12:93:81:da:0b:
1a:7c:0c:81:89:93:98:43:8a:a4:bb:6c:2b:1c:a1:
5a:8c:f9:37:51:94:95:3f:35:f3:81:1e:47:3d:d1:
03:91:6b:73:34:21:73:83:39:26:83:4d:5c:8c:39:
73:05:91:3e:21:1d:62:6b:7d:3c:62:b8:8c:d9:d0:
3c:b5:86:ef:9c:98:c3:17:fd:49:2a:c5:0b:1e:4c:
48:fe:bc:ca:78:e8:3c:58:f3:93:71:8a:c9:c9:6e:
86:ae:32:93:81:ce:df:74:6e:72:2c:e6:33:0e:58:
33:b3:99:e0:3d:af:84:c6:2f:80:88:5e:58:89:3b:
2c:b4:ce:d0:ba:fc:05:78:8a:49:b1:df:7d:71:18:
11:c3:d0:66:96:d8:0e:b9:51:10:82:bb:67:26:c4:
62:c1:44:28:56:0a:ba:fb:f4:d9:c1:0a:89:4a:de:
6b:47:f6:85:64:13:2e:f0:16:1a:cc:e2:d3:3f:4b:
6c:67:86:12:6a:e0:67:c1:d2:a3:df:e3:9d:a5:34:
8b:60:e2:57:e4:7c:d6:b2:ed:2a:e4:20:e4:5d:20:
93:14:c1:2a:65:bb:be:4a:0f:81:3f:46:ad:56:2c:
74:bf:95:0d:f2:d9:62:ea:fa:da:71:c9:b8:ea:81:
b3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:ED:17:CA:F4:34:AF:79:8E:4A:86:6E:62:24:B9:F1:1E:24:77:23
X509v3 Authority Key Identifier:
keyid:BF:00:BB:F6:22:01:42:34:CC:4A:26:C2:3F:64:AC:5C:14:38:02:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF00BBF622014234CC4A26C23F64AC5C143802B6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:00:ac:18:3d:e6:43:6a:a0:63:3b:0b:6b:93:fd:df:48:17:
81:08:e6:61:1a:0b:1d:15:ab:54:ce:d3:2d:be:e9:38:b3:11:
4c:7d:80:80:e9:d1:da:00:83:28:00:50:45:06:96:17:88:0d:
8c:0b:6e:ea:4a:f2:2f:f0:e3:d6:33:55:c1:42:27:e4:cc:a6:
8e:e1:bf:c8:9b:6b:98:ac:f0:31:b5:b0:1d:d5:3b:ed:66:02:
b7:d7:26:d5:91:77:fa:df:62:ae:a4:f2:c9:f7:7c:f8:37:64:
67:3c:9c:28:c8:41:8f:41:e8:c8:f0:76:98:b7:2a:1b:9d:a2:
71:6c:cc:e4:fb:53:cf:4d:57:29:cd:3b:af:29:82:57:a8:9d:
27:00:e3:60:47:56:7a:da:b2:ea:ac:e4:16:ba:c3:c7:f1:ff:
91:83:e3:22:da:c1:db:f6:5f:3a:25:dc:74:3b:40:ef:67:ea:
f2:9f:89:5c:8c:50:65:ba:14:91:5e:12:28:9a:84:39:56:5e:
d5:9f:fa:1b:ea:51:f3:c2:24:7a:5e:9b:a4:ff:24:9c:41:da:
0b:fd:48:2c:ab:de:ea:59:83:e8:12:e9:33:c8:db:d3:9a:7a:
ca:cf:79:c8:19:80:65:6b:f3:ef:d8:a6:fe:5e:67:28:dc:2f:
01:76:c0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:26 2026 by rpki-client