This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft
File: 67749A065BBCF1E57768F4207E1B2FE788604D47.mft (raw, json)
Hash identifier: usjsPlFVvkVvpyqjuIrqeEWJ3Pa+snAkiR6FoVWE2ck=
Subject key identifier: CF:84:6A:1F:DF:F6:EC:5E:23:EA:50:E2:BB:DC:FD:ED:69:3A:2B:45
Authority key identifier: 67:74:9A:06:5B:BC:F1:E5:77:68:F4:20:7E:1B:2F:E7:88:60:4D:47
Certificate issuer: /CN=67749A065BBCF1E57768F4207E1B2FE788604D47
Certificate serial: 6D21B5AD5FEAA015167811A73488FBAD08CF0235
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft
Manifest number: 01AE
Signing time: Mon 02 Feb 2026 01:21:15 +0000
Manifest this update: Mon 02 Feb 2026 01:16:15 +0000
Manifest next update: Thu 05 Feb 2026 04:19:15 +0000
Files and hashes: 1: 67749A065BBCF1E57768F4207E1B2FE788604D47.crl (hash: uElhCP0JPLTFjUSEwBeACOKvH1LncFFKuvrtuIqcGdc=)
2: 3130332e3139332e3134372e302f32342d3234203d3e20313530393836.roa (hash: tIbwoMZK41wfJ142ETUMWiif6nOoigy0JRS2kkbypRw=)
3: 3130332e3139332e3134362e302f32342d3234203d3e20313530393836.roa (hash: DrfxLIvnXV7Zd1k+L6FjxK0p1QfF/z3NuqgLUILzqc8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.crl
rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 04:19:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:21:b5:ad:5f:ea:a0:15:16:78:11:a7:34:88:fb:ad:08:cf:02:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67749A065BBCF1E57768F4207E1B2FE788604D47
Validity
Not Before: Feb 2 01:16:15 2026 GMT
Not After : Feb 5 04:19:15 2026 GMT
Subject: CN=CF846A1FDFF6EC5E23EA50E2BBDCFDED693A2B45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e8:68:3d:d2:e3:62:2b:0b:44:90:7f:48:c0:
e9:dc:3a:bd:ce:9c:c2:f2:8b:98:f5:5c:f4:b0:84:
81:7d:21:ed:4b:a9:d2:d1:1d:d3:1f:f5:e5:aa:e0:
1e:0e:85:4d:d6:bf:28:d2:2c:6d:8a:72:f8:68:12:
61:ab:cc:23:17:4c:09:f5:66:c5:88:e3:42:20:a8:
a9:a2:ed:6a:0f:82:55:38:63:7d:7d:22:e1:73:7b:
b1:cf:1f:29:dc:30:2e:63:9b:ba:cb:27:a7:08:d6:
55:9d:f4:6c:c2:4d:b4:09:62:f9:fd:14:c3:2f:25:
06:6b:3c:3c:7e:0f:bd:6e:d1:50:ca:dd:18:90:3d:
85:71:79:24:eb:9f:aa:2b:dd:fc:67:56:2d:80:23:
44:e7:89:3f:ac:1c:31:a4:99:36:9a:78:0c:ad:c1:
dc:a1:99:c8:7a:f2:68:61:69:3b:78:04:91:f7:ff:
5a:0a:2e:c7:50:12:a9:2e:4d:33:02:06:eb:73:f6:
12:77:dc:f8:73:eb:49:cf:9d:ab:5f:6f:e0:03:76:
ac:00:3c:36:45:f7:e5:a4:90:fd:f6:14:dd:40:db:
f2:e6:1d:4c:44:7b:03:6a:d0:af:bb:33:95:41:18:
40:61:44:da:3a:b6:1e:6c:4d:63:07:dd:f5:b9:46:
ff:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:84:6A:1F:DF:F6:EC:5E:23:EA:50:E2:BB:DC:FD:ED:69:3A:2B:45
X509v3 Authority Key Identifier:
keyid:67:74:9A:06:5B:BC:F1:E5:77:68:F4:20:7E:1B:2F:E7:88:60:4D:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ca:ec:34:65:2f:83:73:69:50:68:e9:dd:ca:48:fe:57:71:
9d:24:9f:95:c7:5f:69:0f:e7:28:b4:21:c8:f3:61:be:b6:01:
db:a8:83:c9:1a:7a:96:38:af:4c:59:68:43:a0:39:b1:2a:2e:
40:c1:8e:c0:81:62:05:ed:64:1f:73:b7:1a:a6:44:01:bd:be:
80:3a:db:7c:4a:80:cc:a7:61:19:4f:85:13:a2:6d:0e:50:23:
b5:75:cb:dc:e0:c1:f3:dd:62:89:0c:b9:3f:63:f0:2e:7b:fe:
64:40:cc:db:42:d9:8d:ba:12:db:d2:c9:0d:ca:15:9c:97:e6:
ab:e2:1b:dc:a8:85:b2:7d:34:02:53:49:2e:7d:d6:c2:8b:87:
4b:8c:67:4f:65:f7:8b:01:7c:d3:19:8e:af:be:33:3b:6b:79:
fe:30:af:4f:67:ad:83:2f:53:78:7c:07:8c:1f:75:26:8e:82:
ed:f1:6e:02:c3:85:48:b9:fb:1b:65:72:83:b5:9a:96:ce:a9:
30:69:7e:df:29:31:f5:26:b2:42:4e:84:cd:72:d2:0f:62:29:
ac:09:3d:ac:a0:71:6f:b8:cd:c5:54:3a:3c:f6:94:0f:d1:5d:
b6:88:ce:5e:11:ed:a9:7e:4f:34:3c:07:2c:55:a1:32:90:3b:
73:f3:d6:e3
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUbSG1rV/qoBUWeBGnNIj7rQjPAjUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjc3NDlBMDY1QkJDRjFFNTc3NjhGNDIwN0UxQjJGRTc4
ODYwNEQ0NzAeFw0yNjAyMDIwMTE2MTVaFw0yNjAyMDUwNDE5MTVaMDMxMTAvBgNV
BAMTKENGODQ2QTFGREZGNkVDNUUyM0VBNTBFMkJCRENGREVENjkzQTJCNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL6Gg90uNiKwtEkH9IwOncOr3O
nMLyi5j1XPSwhIF9Ie1LqdLRHdMf9eWq4B4OhU3WvyjSLG2KcvhoEmGrzCMXTAn1
ZsWI40IgqKmi7WoPglU4Y319IuFze7HPHyncMC5jm7rLJ6cI1lWd9GzCTbQJYvn9
FMMvJQZrPDx+D71u0VDK3RiQPYVxeSTrn6or3fxnVi2AI0TniT+sHDGkmTaaeAyt
wdyhmch68mhhaTt4BJH3/1oKLsdQEqkuTTMCButz9hJ33Phz60nPnatfb+ADdqwA
PDZF9+WkkP32FN1A2/LmHUxEewNq0K+7M5VBGEBhRNo6th5sTWMH3fW5Rv+zAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUz4RqH9/27F4j6lDiu9z97Wk6K0UwHwYDVR0j
BBgwFoAUZ3SaBlu88eV3aPQgfhsv54hgTUcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
OTE1N2NlZC1lODJjLTQzMzQtOTAzYS1jY2NiYmU5Y2ZlODkvMC82Nzc0OUEwNjVC
QkNGMUU1Nzc2OEY0MjA3RTFCMkZFNzg4NjA0RDQ3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjc3NDlBMDY1QkJDRjFFNTc3NjhGNDIwN0UxQjJGRTc4ODYw
NEQ0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTkxNTdjZWQtZTgyYy00MzM0LTkw
M2EtY2NjYmJlOWNmZTg5LzAvNjc3NDlBMDY1QkJDRjFFNTc3NjhGNDIwN0UxQjJG
RTc4ODYwNEQ0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAG7K7DRlL4NzaVBo6d3KSP5XcZ0kn5XHX2kP
5yi0IcjzYb62Aduog8kaepY4r0xZaEOgObEqLkDBjsCBYgXtZB9ztxqmRAG9voA6
23xKgMynYRlPhROibQ5QI7V1y9zgwfPdYokMuT9j8C57/mRAzNtC2Y26EtvSyQ3K
FZyX5qviG9yohbJ9NAJTSS591sKLh0uMZ09l94sBfNMZjq++Mztref4wr09nrYMv
U3h8B4wfdSaOgu3xbgLDhUi5+xtlcoO1mpbOqTBpft8pMfUmskJOhM1y0g9iKawJ
PaygcW+4zcVUOjz2lA/RXbaIzl4R7al+TzQ8ByxVoTKQO3Pz1uM=
-----END CERTIFICATE-----
Generated at Mon Feb 2 10:02:20 2026 by rpki-client