This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft
File: BF3B675AEBEE64D00B323056545D1F630F1C489E.mft (raw, json)
Hash identifier: gEm312vwAHs3+ztE0yqMaEPkAtMoR/ImWKGxeD05G2o=
Subject key identifier: 33:3B:FB:89:02:7A:1C:EF:E0:E1:A0:C2:A6:32:98:4F:65:B9:86:98
Authority key identifier: BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E
Certificate issuer: /CN=BF3B675AEBEE64D00B323056545D1F630F1C489E
Certificate serial: 5DC7F8FC421A515C4D0F41E669C40C277A25D0A1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft
Manifest number: 0548
Signing time: Sat 31 Jan 2026 13:50:52 +0000
Manifest this update: Sat 31 Jan 2026 13:45:52 +0000
Manifest next update: Tue 03 Feb 2026 18:39:52 +0000
Files and hashes: 1: 3230322e36392e39362e302f32302d3234203d3e2039373835.roa (hash: 9zTx3s0a2rHUUwPutdrNSjBytv6Kk1GTM8S/civ+mWo=)
2: 3131362e3231332e34382e302f32302d3234203d3e2039373835.roa (hash: ILkXkfNJzfGzwTYNzRYQw2a7890NKmPmydyWQw+HB7E=)
3: 3131362e3231332e34382e302f32302d3234203d3e20313331363931.roa (hash: GYZuxR+Zqxd6pxL2lTHKcyVNBpecVMAB2ZosCkKojM0=)
4: 3232302e3135372e39362e302f32302d3234203d3e2039373835.roa (hash: HNZfntXqIdjS6Oc1nk9EDrt/Ny6J1wp1N0wmznQcons=)
5: 3230322e3135312e382e302f32322d3234203d3e2039373835.roa (hash: J6bQJ2rdsim2ttJlJ/Bk72O/5PQxeXoEvre44CKnHWo=)
6: 3232332e3136342e302e302f31362d3234203d3e2039373835.roa (hash: GqlYotz76qpsvx0YbP1++o+soFVawkjmgw8JjYGM37s=)
7: 323430333a373230303a3a2f33322d3438203d3e2039373835.roa (hash: CtyzufwtsM1OsMWgnYCmXW6JoR/5zQKHjokkqsxGYYM=)
8: 3230322e36392e39362e302f32302d3234203d3e20313331363931.roa (hash: levW4fK5Av9j8+txVVV15SprxZ5Vl8IniN5F3a6MoCA=)
9: BF3B675AEBEE64D00B323056545D1F630F1C489E.crl (hash: ZPOUd2TWFUVFCBRl2nsFH0AUpYIOKD2cobKOai26aO4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl
rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 18:39:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:c7:f8:fc:42:1a:51:5c:4d:0f:41:e6:69:c4:0c:27:7a:25:d0:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF3B675AEBEE64D00B323056545D1F630F1C489E
Validity
Not Before: Jan 31 13:45:52 2026 GMT
Not After : Feb 3 18:39:52 2026 GMT
Subject: CN=333BFB89027A1CEFE0E1A0C2A632984F65B98698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:39:21:83:d8:67:40:8f:9c:56:73:e3:ba:b7:
cb:b3:50:f7:52:fd:eb:eb:5f:c9:bc:64:fb:35:2a:
99:84:c6:14:8b:16:f8:bb:c4:86:a8:be:c5:a9:0d:
6b:db:67:1e:b0:09:7c:1c:a7:17:b9:07:4c:74:66:
e5:ed:43:cb:33:7e:ad:41:95:e8:1c:3c:7d:7b:a1:
f4:86:21:56:04:fe:03:c4:7f:ec:24:c3:a8:2e:b6:
fe:3e:a4:a6:77:0a:35:6d:cf:6d:6b:48:e7:b8:9f:
dc:09:dd:54:f7:88:ad:1e:80:0f:8d:34:af:e9:e7:
5a:c9:7a:d9:5b:4a:9a:33:92:3f:a3:97:81:83:56:
7a:70:91:dd:79:69:8b:12:69:04:5d:c1:ff:c9:27:
86:4d:c4:85:c8:e3:2e:96:83:cd:32:d3:2e:68:a0:
99:ca:eb:7f:ba:6c:7c:4e:f3:3a:58:98:35:72:b7:
cb:75:e7:98:57:8d:07:20:01:ac:0c:b9:dc:8c:71:
e5:f4:c2:06:a5:36:be:b7:c5:62:7d:97:ea:2d:20:
27:76:49:7a:1d:12:2e:35:09:bc:13:b6:2c:f9:f1:
96:33:c1:54:ab:f6:a5:95:be:89:01:39:b9:70:cd:
0b:19:9f:6a:6f:b4:2e:73:76:38:1c:d9:a3:80:fa:
52:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3B:FB:89:02:7A:1C:EF:E0:E1:A0:C2:A6:32:98:4F:65:B9:86:98
X509v3 Authority Key Identifier:
keyid:BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:6e:7f:ac:55:35:bd:7b:a9:4e:69:e9:15:e2:25:9e:39:38:
34:8f:f8:0d:9e:e3:79:5d:87:30:ae:64:cb:59:8a:4a:f6:10:
69:ad:f7:42:cc:3f:42:72:83:f4:62:e8:73:21:b7:e2:c9:65:
97:cb:38:94:21:cf:4a:b4:74:15:c9:32:3c:55:34:f2:32:c9:
49:21:23:4a:6e:52:11:97:66:4a:88:1b:17:f5:69:b7:c2:26:
ec:a3:85:ca:69:b2:be:21:3a:c7:0e:bc:44:ea:5c:19:04:27:
1b:34:bb:1c:51:e5:53:10:43:38:5a:1e:7a:ce:8a:49:79:90:
56:cf:a5:a3:47:53:56:8b:2b:61:46:4e:ec:a2:e8:0e:f0:9f:
bf:2f:d3:e9:7b:03:69:69:ce:b8:73:4f:1d:f3:ab:87:1d:ab:
bb:e8:79:d7:1c:88:ba:3f:d6:7f:b8:40:f9:45:1d:f3:ea:43:
ff:6f:11:1a:05:ef:d6:42:67:57:c9:2f:95:60:6e:9c:c2:74:
87:5f:a3:55:8b:3d:3f:30:53:49:01:63:45:ea:d3:e6:c7:94:
47:56:92:be:52:1c:01:91:97:69:37:d3:65:37:f8:1f:39:3b:
f8:7f:e3:38:e3:a0:e3:22:eb:c2:2d:62:66:c5:0e:22:25:30:
d6:08:ce:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:06:54 2026 by rpki-client