This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.mft
File: C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.mft (raw, json)
Hash identifier: 2mFvhv06PcsiLcI3PSDlPasgvTml8C3HeVHSTQleM04=
Subject key identifier: 5B:CF:B4:07:CC:54:ED:17:78:20:54:07:EA:45:F7:E3:AA:B4:6F:9B
Authority key identifier: C6:E3:A2:28:17:CE:6E:09:8D:FC:67:4B:26:28:8C:83:D6:C3:F1:CE
Certificate issuer: /CN=C6E3A22817CE6E098DFC674B26288C83D6C3F1CE
Certificate serial: 034EF38F6B87397D24DC26A24F66D0801BCE888E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.mft
Manifest number: 04D5
Signing time: Mon 02 Feb 2026 02:01:03 +0000
Manifest this update: Mon 02 Feb 2026 01:56:03 +0000
Manifest next update: Thu 05 Feb 2026 04:05:03 +0000
Files and hashes: 1: C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.crl (hash: fUjYyOJ+GCGP5pRZv5xSsWfGWYkrl/hPB6ZOklDlIzQ=)
2: 3130332e3136302e3231322e302f32342d3234203d3e20313430333839.roa (hash: b/xbORHT+fQcjRsUPACV/EddNJE5h6xg8w5gIZewjWA=)
3: 3130332e3136302e3231322e302f32332d3233203d3e20313430333839.roa (hash: u5WfQAzN1c26Bk/yoWUZSKe+Zg3RVzlzDJ1SjGA5ptQ=)
4: 3130332e3136302e3231332e302f32342d3234203d3e20313430333839.roa (hash: sD1D71HTJcX0Tgc5u0wKCnB+drLmqPRrwWzHCdL5tpk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.crl
rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 04:05:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:4e:f3:8f:6b:87:39:7d:24:dc:26:a2:4f:66:d0:80:1b:ce:88:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C6E3A22817CE6E098DFC674B26288C83D6C3F1CE
Validity
Not Before: Feb 2 01:56:03 2026 GMT
Not After : Feb 5 04:05:03 2026 GMT
Subject: CN=5BCFB407CC54ED1778205407EA45F7E3AAB46F9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5c:d8:38:11:6d:77:f7:e3:ca:a9:26:8b:de:
cf:21:11:d9:ef:ef:68:8c:ee:f0:24:c0:c3:b6:d6:
85:fb:6f:b4:f5:3d:13:10:0d:30:f6:3d:bf:30:34:
07:d7:13:cd:67:a9:f0:62:bf:35:c6:3a:1f:93:14:
b7:36:2f:31:43:b2:b4:f2:55:51:25:ac:56:40:11:
15:a0:9a:15:57:71:0d:88:6d:33:0b:45:1a:86:e9:
0c:e4:aa:8f:ed:9a:d2:f4:a6:93:bd:ca:66:18:0a:
dd:91:8a:cf:89:a9:ef:a7:43:82:98:aa:98:8e:45:
1f:94:42:7e:ab:de:b8:e0:c6:7b:b3:cb:ce:6b:51:
38:f1:6b:aa:8a:1d:9e:54:be:04:50:55:9a:68:54:
14:96:27:54:a2:8a:e9:37:f2:49:e1:81:bd:11:22:
a1:1a:66:f3:a0:e5:3d:c9:dc:e5:23:50:48:c8:01:
bf:b2:d9:b6:48:ca:e0:b1:cd:15:09:84:99:b3:04:
e5:03:4b:f7:54:08:1a:d1:3f:c5:c2:60:23:29:74:
fe:10:ab:38:f3:fd:a6:5a:96:75:02:c9:5f:f2:65:
15:ad:79:b7:b5:c3:04:7b:e2:51:b5:08:43:19:c4:
cd:ef:e9:ff:32:a1:e0:f2:50:df:2f:2a:ed:ec:64:
61:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:CF:B4:07:CC:54:ED:17:78:20:54:07:EA:45:F7:E3:AA:B4:6F:9B
X509v3 Authority Key Identifier:
keyid:C6:E3:A2:28:17:CE:6E:09:8D:FC:67:4B:26:28:8C:83:D6:C3:F1:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:7e:92:8e:05:9e:21:92:05:ab:26:24:30:10:9d:a4:f2:ce:
37:fa:a7:8a:3a:54:d2:fc:dc:4a:90:20:00:d7:07:36:77:51:
2e:2c:db:97:05:d9:12:d0:71:67:b8:e5:f4:1f:ea:fc:c6:12:
6b:eb:ce:26:2b:0b:ba:5b:08:92:ee:da:29:db:30:0a:7b:a4:
6b:4b:7f:e7:94:41:c0:52:e3:15:73:64:57:a3:ec:b3:c7:05:
2e:68:1d:9a:7f:0c:58:af:de:ba:e4:75:c4:36:6d:42:bb:3d:
11:bb:10:95:97:ab:e2:83:ad:73:9c:e8:60:e2:a5:51:a7:f6:
a5:70:87:a9:bb:d6:8b:7d:f1:cd:b5:52:a1:9b:45:79:40:d9:
c2:7c:94:aa:74:be:e3:64:18:aa:0c:64:5d:43:11:a5:de:49:
fd:c4:cc:83:86:74:89:fc:d9:c9:94:4f:ea:3c:ff:8d:20:a6:
33:8b:f5:ff:f4:ef:ee:f7:2f:67:6f:94:1a:5c:fd:38:f7:a0:
40:9a:78:15:7d:55:de:e0:db:9a:57:a7:ad:97:87:f9:ae:71:
19:98:2c:70:b5:85:cd:0f:33:b0:0f:b6:23:5a:a0:32:20:2b:
4f:b5:35:aa:66:f3:f7:68:5f:fd:81:b4:a2:26:51:2e:af:12:
52:16:8c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:03:41 2026 by rpki-client