This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft
File: BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft (raw, json)
Hash identifier: acsFrc0pH632ycD+i8tdorMErXgiN0ae71V0eZSL5Rw=
Subject key identifier: E6:92:39:85:73:58:8C:11:78:26:FC:35:32:48:FA:13:65:E6:0D:62
Authority key identifier: BE:E3:6A:B8:35:1A:FE:80:F1:B0:CE:8F:12:AA:40:08:98:29:BB:6F
Certificate issuer: /CN=BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F
Certificate serial: 418833697A35A124C449EF6CE71E4AD9180C2A8A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft
Manifest number: 01FD
Signing time: Sun 01 Feb 2026 17:51:46 +0000
Manifest this update: Sun 01 Feb 2026 17:46:46 +0000
Manifest next update: Wed 04 Feb 2026 21:34:46 +0000
Files and hashes: 1: BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl (hash: vEcLdtDJvG4hCmeJhTIdFdDT9jEP85/y4YIkcIHAaBc=)
2: 3130332e34332e32362e302f32332d3233203d3e20313530323832.roa (hash: C/jOD70S/lq/f2o4lqBzdMrlb5+QMVzSY4OdcjUHnHk=)
3: 3130332e34332e32362e302f32342d3234203d3e20313530323832.roa (hash: u7eiIUnffNPdeqqP/VglXdzrnbj56dfexEAIJFCuTP0=)
4: 3130332e34332e32372e302f32342d3234203d3e20313530323832.roa (hash: lAY4AFx6j4ENTtX/5Sic1TWQTEW1WElYGoOsg0fzrX4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl
rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 21:34:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:88:33:69:7a:35:a1:24:c4:49:ef:6c:e7:1e:4a:d9:18:0c:2a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F
Validity
Not Before: Feb 1 17:46:46 2026 GMT
Not After : Feb 4 21:34:46 2026 GMT
Subject: CN=E692398573588C117826FC353248FA1365E60D62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:33:15:af:55:d7:40:e6:fa:3a:7a:33:44:4c:
db:83:8d:fc:c3:e3:61:7b:b1:de:c0:26:51:b2:ba:
8f:e4:e4:14:24:4d:e7:68:a8:03:a0:37:3b:21:ad:
6b:bc:a5:6f:0c:71:44:50:a2:76:7c:d2:e4:45:a6:
da:85:0b:ea:4f:a5:b6:f8:3b:d9:0b:e6:8c:f2:da:
7f:50:59:f9:38:8d:a9:24:9b:49:2a:fe:ac:5b:52:
c0:9f:8d:81:42:b8:0d:5a:81:f0:4a:0f:ce:ab:e5:
23:59:00:c3:3f:6a:d1:5f:b5:a0:f3:d4:28:32:19:
55:83:1f:3b:05:7c:07:14:a4:38:11:3d:27:f3:b1:
94:0a:bd:45:d4:9b:7c:ff:d5:96:b9:90:12:93:51:
f4:96:b4:ff:5c:7d:5a:fa:c5:f0:8f:30:26:57:cb:
ea:52:fa:d8:e0:0d:36:c7:3f:a8:77:eb:6e:47:7a:
ef:e8:7e:07:79:2d:0c:c5:95:7e:12:96:7b:1e:fe:
c3:cb:fd:57:a2:88:1f:02:51:ca:9e:8a:7c:cd:c1:
cc:71:f6:78:09:c1:1b:f3:e1:2d:bc:69:29:3d:f9:
ce:e7:6f:be:27:99:91:b2:62:ff:1e:98:2f:1a:28:
b5:79:e1:5a:1e:ad:47:59:54:b0:74:ac:20:ee:62:
89:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:92:39:85:73:58:8C:11:78:26:FC:35:32:48:FA:13:65:E6:0D:62
X509v3 Authority Key Identifier:
keyid:BE:E3:6A:B8:35:1A:FE:80:F1:B0:CE:8F:12:AA:40:08:98:29:BB:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:6e:d1:45:6b:54:34:76:47:3f:ba:22:65:ee:06:e9:1d:88:
b7:0e:43:f4:cf:de:cb:69:6f:be:dc:b9:e4:55:df:cb:eb:48:
97:7d:55:fa:27:09:bc:7a:6e:fd:83:25:4e:28:e1:02:a5:21:
b4:05:92:65:9f:a1:28:0a:ce:8f:35:ba:74:3d:cc:f8:2c:61:
20:46:a2:f0:86:e4:2e:0f:10:7c:83:ca:df:a8:2c:cc:64:98:
dd:0a:23:0b:fe:4b:38:e8:2d:92:2f:94:58:d0:64:46:a9:0f:
1e:0c:d8:d3:68:93:24:e2:5c:1e:c8:61:38:55:1b:07:50:1d:
67:78:02:22:6c:a9:ac:14:24:41:21:c0:bc:4c:ed:7f:70:65:
cd:de:30:a2:37:f6:ca:0c:53:b8:e7:d7:91:01:49:2b:42:6d:
b7:fd:ed:0a:00:34:f8:65:04:a8:7e:78:37:e0:86:60:66:f2:
b2:c6:3c:f0:50:ae:b8:d4:40:fa:ef:b9:e5:34:8c:dc:ad:c8:
0a:f4:1c:b4:72:a7:b4:c6:32:7e:16:ad:39:58:e3:51:8c:fb:
2e:ba:09:5d:42:b0:2f:de:94:5c:99:eb:1e:15:2c:0e:15:57:
2b:b7:ae:02:20:4d:7f:d3:42:9f:7a:a2:fc:1d:52:8b:c6:52:
96:f3:06:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:47:03 2026 by rpki-client