This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft
File: 065943D1744CF4841A6D3D50944D2A4DB537A128.mft (raw, json)
Hash identifier: CVTNjsYp0y5w0xHtGH7XNHvJheMQZnP63h2rvhr1Nvk=
Subject key identifier: AF:57:7F:29:18:D0:20:18:33:18:B1:C7:18:7C:FB:66:D5:A3:CD:66
Authority key identifier: 06:59:43:D1:74:4C:F4:84:1A:6D:3D:50:94:4D:2A:4D:B5:37:A1:28
Certificate issuer: /CN=065943D1744CF4841A6D3D50944D2A4DB537A128
Certificate serial: 11DE56748CCA119469EB3FEE98167A2D7DD367D5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft
Manifest number: 013E
Signing time: Sun 01 Feb 2026 01:11:59 +0000
Manifest this update: Sun 01 Feb 2026 01:06:59 +0000
Manifest next update: Wed 04 Feb 2026 05:26:59 +0000
Files and hashes: 1: 3135372e31352e37372e302f32342d3234203d3e20313338313331.roa (hash: I8arlV9bMVGsAQTZtHx6y++6HiyiMdDVTXwTw+QSjwU=)
2: 065943D1744CF4841A6D3D50944D2A4DB537A128.crl (hash: GDeUJpi/wfaMVsNSbI7li9JPgIDbyOcunCwYDWnOxdE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.crl
rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 05:26:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:de:56:74:8c:ca:11:94:69:eb:3f:ee:98:16:7a:2d:7d:d3:67:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=065943D1744CF4841A6D3D50944D2A4DB537A128
Validity
Not Before: Feb 1 01:06:59 2026 GMT
Not After : Feb 4 05:26:59 2026 GMT
Subject: CN=AF577F2918D020183318B1C7187CFB66D5A3CD66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f6:5d:4e:7b:50:6a:29:51:0c:3f:c1:bd:58:
4d:1a:3a:b0:fc:c2:98:ba:bc:a8:a4:74:4f:73:fa:
72:d3:80:89:bc:36:e2:50:fc:e3:ce:61:72:64:63:
2a:eb:66:47:c4:56:8d:70:55:26:f2:30:80:41:ad:
48:b1:f9:ed:0e:74:47:92:d1:7b:07:fa:9d:99:f6:
f9:49:b7:14:f7:01:75:e8:73:24:f8:19:99:66:3b:
e5:39:5f:f3:7b:71:24:1d:d3:82:2e:5c:fb:38:95:
2b:7c:9c:e2:83:ef:9f:4a:b2:d6:0e:b9:06:c4:b9:
0d:be:10:02:98:eb:63:3c:dc:54:ee:bb:01:79:a2:
31:01:39:93:f4:07:60:a1:09:52:bc:5b:81:c4:65:
18:a8:79:c6:c9:e3:f4:b8:b6:0f:fc:1d:2a:05:4c:
4f:24:ff:f4:84:b8:4f:09:fd:ea:b3:61:98:dc:f4:
08:3b:15:05:5a:61:27:bc:9a:14:dc:99:2f:88:14:
0d:a5:ec:68:34:de:0e:75:c0:47:f1:e0:43:38:8a:
77:33:cb:c0:20:bd:73:4d:be:ee:7f:f9:78:7a:9e:
6f:b8:38:93:37:a0:c1:28:af:f4:89:18:7d:43:f4:
b5:20:98:7e:b5:7d:af:73:fc:dd:c8:c7:ec:76:92:
ff:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:57:7F:29:18:D0:20:18:33:18:B1:C7:18:7C:FB:66:D5:A3:CD:66
X509v3 Authority Key Identifier:
keyid:06:59:43:D1:74:4C:F4:84:1A:6D:3D:50:94:4D:2A:4D:B5:37:A1:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:2f:f4:eb:61:58:4c:72:27:2f:2f:3b:b2:d4:08:99:9d:da:
b7:79:aa:4a:34:81:ce:20:c7:0c:62:cc:04:4f:25:46:f0:80:
d7:d3:43:e7:5f:d6:dc:ee:6a:76:3e:cd:07:de:cd:71:ca:5a:
e6:cc:92:7a:9f:7a:b2:d1:aa:2a:3f:95:37:4e:6f:e8:b6:c1:
f5:cc:5b:ec:df:61:46:cc:4d:7e:3a:83:2f:21:94:6d:51:76:
20:45:cd:bf:dd:69:fa:f6:fa:2b:c0:d3:3c:f0:99:e3:f6:3c:
ae:d1:ac:8e:81:a3:05:e3:25:08:26:54:df:1c:77:75:d7:d0:
36:ce:37:41:b2:4e:58:08:0f:03:0a:32:2b:a0:aa:71:0b:8b:
a0:d1:d8:a9:7f:3a:1f:7b:32:4c:86:ef:72:a4:23:7b:6f:f9:
31:c7:de:51:86:39:fa:cc:bf:58:61:61:e8:9f:f6:4b:a0:3e:
5c:81:3d:a5:60:35:fa:87:60:8c:52:8f:eb:e8:33:22:49:ec:
d3:2a:fb:11:f8:80:69:75:ca:72:ac:e8:1b:8c:fb:a7:98:86:
d0:74:ad:fb:af:52:84:62:f8:1e:55:7d:d5:cf:15:10:72:e5:
8f:e1:e6:93:1a:47:4a:3a:85:6b:00:47:50:84:9e:ca:b8:32:
2a:5d:4a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 15:48:33 2026 by rpki-client