This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/B6F29F770F5B30B5F7B738F4524506F1A235DABC.mft
File: B6F29F770F5B30B5F7B738F4524506F1A235DABC.mft (raw, json)
Hash identifier: Dqc0XrkIdPXyMfaG9ZePBUxCIlxr1MziaOs1TJSYkag=
Subject key identifier: 23:3C:3C:E3:58:6C:04:8A:CA:26:8A:BB:B2:04:12:42:50:47:7F:28
Authority key identifier: B6:F2:9F:77:0F:5B:30:B5:F7:B7:38:F4:52:45:06:F1:A2:35:DA:BC
Certificate issuer: /CN=B6F29F770F5B30B5F7B738F4524506F1A235DABC
Certificate serial: 46E2DD66D2F3E3D54AB46F2B2C20FFFDC5A04C6F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F29F770F5B30B5F7B738F4524506F1A235DABC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/B6F29F770F5B30B5F7B738F4524506F1A235DABC.mft
Manifest number: 54
Signing time: Sun 01 Feb 2026 23:01:52 +0000
Manifest this update: Sun 01 Feb 2026 22:56:52 +0000
Manifest next update: Thu 05 Feb 2026 10:22:52 +0000
Files and hashes: 1: 3130332e3232342e36372e302f32342d3234203d3e203539313538.roa (hash: 63tfpqlJCEzr1F8+1HAkrMYkUUC5brVRNqbAmx9Yovs=)
2: 3130332e3232342e36352e302f32342d3234203d3e203539313538.roa (hash: KdcszIzsjtlFTy1TnrOq7FG5XAfFe/aLCqLEjewq8yE=)
3: 3130332e3232342e36342e302f32342d3234203d3e203539313538.roa (hash: DZ++EX33vrVv29PriPGZOi+tkuRnHbRvl+nMO8/2+oI=)
4: B6F29F770F5B30B5F7B738F4524506F1A235DABC.crl (hash: CioGHAoXkOZ/Um6tAOto9CvNamcfjD0C4VHZT7oWvuM=)
5: 3130332e3232342e36362e302f32342d3234203d3e203539313538.roa (hash: pZ8/jlcW67uo3RV+YVwV6BROA/FZ969qlSyF5c20C4w=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/B6F29F770F5B30B5F7B738F4524506F1A235DABC.crl
rsync://repo-rpki.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/B6F29F770F5B30B5F7B738F4524506F1A235DABC.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F29F770F5B30B5F7B738F4524506F1A235DABC.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:e2:dd:66:d2:f3:e3:d5:4a:b4:6f:2b:2c:20:ff:fd:c5:a0:4c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6F29F770F5B30B5F7B738F4524506F1A235DABC
Validity
Not Before: Feb 1 22:56:52 2026 GMT
Not After : Feb 5 10:22:52 2026 GMT
Subject: CN=233C3CE3586C048ACA268ABBB204124250477F28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:32:5b:73:c2:cf:2d:43:66:a1:a2:ff:88:ce:
a8:88:55:30:76:ff:ef:c6:ca:ab:9a:e2:95:61:41:
e4:4c:1e:d8:2b:a9:4c:e2:cf:b1:54:b0:65:19:6f:
1e:87:1e:a1:55:52:b4:ee:65:09:bf:8e:9a:0a:a2:
1d:f9:5a:19:22:4f:35:8c:c3:7b:3e:14:8c:cb:b1:
67:76:65:45:89:48:24:d2:bf:4a:a2:74:b2:b3:4a:
be:68:8a:0b:9c:d7:67:89:46:cd:37:b3:94:af:d2:
f5:32:c7:bc:05:1e:ed:39:37:b2:ef:63:2f:23:bc:
b9:84:66:07:92:15:01:e8:65:ff:4f:39:62:63:f7:
80:de:f0:5a:dd:57:11:c0:15:e9:d0:9b:6e:ae:cf:
9c:8e:f0:fb:b5:0a:11:70:48:45:d4:3c:13:26:74:
52:2c:4e:cf:7a:d6:04:0c:70:72:c6:9e:bc:5e:b7:
1e:b7:71:ca:34:e3:72:a7:f8:10:c4:f1:cb:c1:56:
4f:22:b1:29:a2:37:8d:04:f4:02:26:24:f1:1c:f7:
63:2a:35:c3:5d:51:f6:e1:c4:f2:e8:a5:65:7a:9d:
7f:5a:63:18:89:0c:98:8b:b3:e2:7a:d0:fb:89:cf:
46:28:7d:3f:70:b0:94:9c:eb:18:13:4b:b8:05:d4:
4e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3C:3C:E3:58:6C:04:8A:CA:26:8A:BB:B2:04:12:42:50:47:7F:28
X509v3 Authority Key Identifier:
keyid:B6:F2:9F:77:0F:5B:30:B5:F7:B7:38:F4:52:45:06:F1:A2:35:DA:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/B6F29F770F5B30B5F7B738F4524506F1A235DABC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F29F770F5B30B5F7B738F4524506F1A235DABC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/B6F29F770F5B30B5F7B738F4524506F1A235DABC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ef:a9:40:8b:8d:2b:39:07:7a:d6:46:a2:f3:2f:06:c1:18:
d7:be:a9:89:d1:a7:04:1c:07:87:d4:19:27:d3:6c:c2:fb:21:
5f:cc:36:2e:42:03:f7:2d:6d:85:43:2b:2c:99:19:41:84:75:
3e:9d:37:75:68:df:14:7e:52:32:9d:9c:b0:d6:58:25:a1:52:
c2:33:c3:7f:09:e4:c4:09:d4:ae:82:48:e6:c2:d3:d0:28:ca:
ec:77:96:ef:9d:79:ec:9e:4b:91:8b:4a:a4:29:2f:f7:eb:64:
7a:eb:ed:a3:b7:be:89:16:28:ea:1f:99:f0:4a:44:9e:7c:bb:
ac:10:3c:d0:74:b5:6f:64:44:5e:a0:fd:0f:eb:24:3d:a8:98:
12:77:e7:17:95:fc:9c:d1:32:f5:ec:88:1a:a5:aa:5c:c3:31:
a2:7c:e4:47:80:77:8f:5b:ea:43:bb:f4:f6:40:74:85:a8:21:
7b:20:8d:28:52:b7:98:e8:d8:81:05:aa:3b:20:ee:be:2e:d9:
93:7a:ce:b9:b1:06:33:af:5a:b7:c8:ae:b9:78:5d:fa:5b:5e:
57:33:e5:d9:62:d5:7b:b6:22:10:80:db:33:57:31:08:d5:be:
b7:bf:ab:87:ed:8c:67:1f:3e:0e:6a:27:df:67:0d:05:a2:83:
ad:11:80:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:45:12 2026 by rpki-client