This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.mft
File: 64285236074D6BC2BB384B2D544C7F545C16CF31.mft (raw, json)
Hash identifier: JtsI9Hy8AurSkZkRy374eECi7ru8SQ1lN9I/b51w9u4=
Subject key identifier: BD:ED:69:DC:12:F5:75:42:4C:C5:7B:4B:9A:65:7A:AD:D1:41:0B:8B
Authority key identifier: 64:28:52:36:07:4D:6B:C2:BB:38:4B:2D:54:4C:7F:54:5C:16:CF:31
Certificate issuer: /CN=64285236074D6BC2BB384B2D544C7F545C16CF31
Certificate serial: 3EB8B323D1206F0DA6E9AEA045E49BC2CB9E08C6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64285236074D6BC2BB384B2D544C7F545C16CF31.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.mft
Manifest number: 0273
Signing time: Sun 01 Feb 2026 18:21:33 +0000
Manifest this update: Sun 01 Feb 2026 18:16:33 +0000
Manifest next update: Thu 05 Feb 2026 01:54:33 +0000
Files and hashes: 1: 64285236074D6BC2BB384B2D544C7F545C16CF31.crl (hash: x8kJeSRjw3XzS+b9jAJNkBg4Stcoga2Bh/GPg6bjR5Q=)
2: 3130332e3138342e35302e302f32332d3234203d3e20313439363732.roa (hash: wmIuzk0Oh9311GQSErNLF7rj7zFPZyoKari4za10W8M=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.crl
rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64285236074D6BC2BB384B2D544C7F545C16CF31.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 01:54:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:b8:b3:23:d1:20:6f:0d:a6:e9:ae:a0:45:e4:9b:c2:cb:9e:08:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64285236074D6BC2BB384B2D544C7F545C16CF31
Validity
Not Before: Feb 1 18:16:33 2026 GMT
Not After : Feb 5 01:54:33 2026 GMT
Subject: CN=BDED69DC12F575424CC57B4B9A657AADD1410B8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a4:f3:4a:cb:3c:2e:8e:16:03:f5:07:c1:f4:
45:d8:4c:7e:fa:ad:05:6f:33:ca:85:e9:04:54:d1:
23:69:ea:3c:fb:54:7f:a9:30:1e:12:8e:9d:7c:12:
54:39:eb:51:2f:b4:5e:55:a3:bd:8c:77:57:b8:03:
06:01:e8:83:66:83:8f:c1:24:9f:e0:2d:e5:d5:e3:
80:a7:62:62:f6:53:f8:af:69:bc:de:3f:9c:88:40:
48:16:31:74:d3:54:00:8d:9a:dc:85:87:a1:c0:6d:
24:cb:be:a5:0f:16:03:a2:d7:17:e9:93:17:f5:e6:
5e:2e:95:17:4f:c1:cb:7a:06:4d:d2:d8:20:79:4f:
77:a6:53:b0:c0:b5:ab:3a:07:8e:50:18:25:ce:69:
c2:98:74:7d:13:38:04:b7:81:00:9b:da:a6:58:f1:
44:24:c5:f4:d2:36:35:68:b1:89:f3:04:f9:a0:da:
33:64:ee:00:1b:2a:4d:0a:bd:11:29:40:d3:cc:77:
25:e2:00:f4:be:cf:aa:4a:53:38:50:dd:29:d9:43:
f2:14:da:cf:1c:62:a7:54:b1:59:79:e5:40:ce:79:
36:a5:d8:50:52:29:0d:2d:b8:a0:fc:35:7c:20:0e:
6c:a4:87:f3:61:b9:f3:ae:5a:59:23:30:4b:ea:10:
0e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:ED:69:DC:12:F5:75:42:4C:C5:7B:4B:9A:65:7A:AD:D1:41:0B:8B
X509v3 Authority Key Identifier:
keyid:64:28:52:36:07:4D:6B:C2:BB:38:4B:2D:54:4C:7F:54:5C:16:CF:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64285236074D6BC2BB384B2D544C7F545C16CF31.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:a5:04:ac:7e:ae:bd:44:0c:ce:45:3b:d7:2c:17:72:0f:f7:
74:3d:9e:4a:2f:b8:09:c9:4e:74:64:6c:de:af:3c:81:be:9a:
cd:ce:ae:ae:55:56:cb:bb:4c:39:f8:66:04:8d:2e:25:45:0c:
35:97:9e:56:e0:54:5e:4b:44:fc:c5:c6:17:6e:42:2f:a1:8b:
23:c4:42:12:31:23:fc:e0:c9:97:aa:18:f0:d4:6d:d0:14:9c:
d7:ab:64:60:d5:cf:87:cc:46:1d:f8:8a:66:3e:7e:33:47:b7:
59:50:2e:ba:41:d5:27:c4:9a:24:46:d8:ab:23:bd:d3:48:dd:
c0:60:40:f6:f1:0a:c8:e4:30:24:8f:23:21:cb:9e:77:85:75:
54:a8:55:b4:ed:2e:66:04:e9:2f:59:25:47:1c:ca:e7:d9:e8:
1b:81:e0:c1:27:d8:e3:84:46:fe:c9:8a:53:d4:db:0f:4f:b4:
0b:a8:25:76:81:ad:5a:d3:c9:a7:c9:e0:29:e1:97:31:d7:a5:
43:6e:d3:f3:eb:fa:43:4a:5a:27:9a:f7:d4:ea:81:f8:48:2e:
66:57:d3:f2:22:72:9f:ee:0b:4b:b9:4e:14:35:50:8d:55:1d:
b5:39:50:05:a1:7b:52:ad:0f:29:87:19:88:83:96:40:54:5d:
7f:b2:08:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:42:11 2026 by rpki-client