This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft
File: 00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft (raw, json)
Hash identifier: VSD11WfcOtLiJgR86oY1MuWuq+FRSJc+WDrE3AnBCD0=
Subject key identifier: BF:31:9F:BB:8B:98:BB:F7:5E:BD:55:65:5F:27:4F:C2:C1:B7:47:9C
Authority key identifier: 00:B4:EC:FC:CA:E9:0A:94:63:FD:71:82:2A:3C:EE:4C:8C:14:5A:D4
Certificate issuer: /CN=00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4
Certificate serial: 74850621A0FB666CB37683BD3BD2D0A597E71C6C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft
Manifest number: FE
Signing time: Mon 02 Feb 2026 03:31:39 +0000
Manifest this update: Mon 02 Feb 2026 03:26:39 +0000
Manifest next update: Thu 05 Feb 2026 11:17:39 +0000
Files and hashes: 1: 00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.crl (hash: ONO/3Z32PqdOEREp8WUa3EXeEqyyA7UfMw7BN1lss9A=)
2: 323030313a6466323a663334303a3a2f34382d3438203d3e20313432333333.roa (hash: TsqNIUGKVArIBEGfFPOQj0RJMusrdrLAysbKak+tetA=)
3: 3130332e3136392e33322e302f32332d3234203d3e20313432333333.roa (hash: K+l/g4p9y6cTiWHXp9qbhWcap/gI8HD7/DZcp0av7uY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.crl
rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:85:06:21:a0:fb:66:6c:b3:76:83:bd:3b:d2:d0:a5:97:e7:1c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4
Validity
Not Before: Feb 2 03:26:39 2026 GMT
Not After : Feb 5 11:17:39 2026 GMT
Subject: CN=BF319FBB8B98BBF75EBD55655F274FC2C1B7479C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b9:24:f6:6a:a1:ae:49:9e:66:03:c7:65:ae:
3b:6b:68:c8:dc:d3:18:88:a6:59:bd:13:25:3e:49:
5e:37:8e:f0:42:a5:41:16:d2:0a:a9:f1:ca:a9:5b:
84:40:9b:94:af:fe:8c:f7:79:d9:5f:e2:b3:8b:82:
0d:dc:83:2b:e8:42:a0:59:7d:28:ac:d4:b9:eb:af:
7e:5b:18:c4:e6:97:42:52:f0:b6:25:02:27:22:2e:
25:d6:ad:67:d8:bd:e8:51:63:2f:50:13:c2:af:ec:
8c:4a:d9:05:31:f1:d1:dd:06:b3:fd:8a:5f:e9:ca:
db:56:e5:7a:6c:c4:38:c1:db:ed:24:2e:0d:e3:55:
4f:8c:f0:18:2c:f9:75:05:f3:c2:1f:a0:37:d1:c1:
fa:17:3a:34:51:cb:3b:ea:c7:02:06:17:1f:42:ff:
1f:99:48:16:6f:dd:b9:0e:b8:7c:b6:e1:b7:0b:50:
58:9b:bc:9a:37:4e:7c:c5:7b:7b:8d:f5:73:73:ab:
05:f5:f0:1f:c8:28:5a:01:cd:e5:da:ac:a9:ac:c1:
39:45:db:90:47:fb:97:b5:df:c5:70:b8:00:62:12:
a6:5a:1b:af:6a:02:14:a2:50:e2:d2:3f:69:b9:6d:
c8:aa:23:3e:da:ab:7a:d2:ca:74:e6:25:20:8d:15:
26:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:31:9F:BB:8B:98:BB:F7:5E:BD:55:65:5F:27:4F:C2:C1:B7:47:9C
X509v3 Authority Key Identifier:
keyid:00:B4:EC:FC:CA:E9:0A:94:63:FD:71:82:2A:3C:EE:4C:8C:14:5A:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:db:f6:b2:cd:db:10:55:87:66:1b:57:85:8f:fa:f6:90:ae:
b9:a3:99:d5:37:75:95:f2:29:21:9c:cb:ad:59:88:13:ba:df:
f9:0d:5c:35:d1:35:5f:d6:17:05:13:4e:4f:b4:35:49:f9:1c:
2a:0a:e7:b0:20:cc:d1:86:e9:28:01:06:7b:7e:91:1b:82:8b:
35:17:d3:fe:9e:a3:35:70:9d:df:c0:3a:35:2c:a7:17:b5:f0:
c4:a7:fe:04:69:dd:1d:2f:2e:af:5d:f4:d8:75:8a:f5:b8:70:
cf:76:ca:6a:e8:f4:8d:f6:f5:13:c5:0a:f1:d5:48:43:d1:85:
58:15:cd:cd:c7:61:00:3f:5d:3b:34:cb:3d:e8:88:90:f3:10:
6f:90:62:65:e3:89:22:a5:dd:58:5e:6c:66:65:f2:07:b8:b4:
5d:7f:83:98:72:98:5d:29:60:db:a7:0e:45:72:77:12:fc:14:
d4:9f:33:c7:5d:6f:ec:a3:0c:8f:e4:8b:5b:d7:80:81:f3:df:
e1:df:26:c0:fd:ae:0c:ee:ad:65:3b:57:ab:d0:92:94:58:c1:
e7:01:90:7f:ba:b5:15:1b:c4:c7:77:88:4b:71:0a:79:42:32:
d7:ec:30:d6:3f:1b:65:6d:6e:cf:07:c2:cd:ad:17:3f:d5:4e:
fa:2e:3e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:03:42 2026 by rpki-client