This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft
File: 065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft (raw, json)
Hash identifier: CNb6lcTSaVQqS7+kLX5Dkc+PlH14teGZ9cZohaPtaV8=
Subject key identifier: E7:EB:C4:33:03:06:BC:B4:0C:EA:41:6B:81:35:F7:BA:F4:28:11:D6
Authority key identifier: 06:5F:83:1F:0E:07:E2:88:D3:3E:CF:4D:FA:A1:8E:2C:93:64:4E:43
Certificate issuer: /CN=065F831F0E07E288D33ECF4DFAA18E2C93644E43
Certificate serial: 720E1F3C00F8385B823D24C2457A41DD5077A46B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/065F831F0E07E288D33ECF4DFAA18E2C93644E43.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft
Manifest number: 01DD
Signing time: Sat 31 Jan 2026 00:22:20 +0000
Manifest this update: Sat 31 Jan 2026 00:17:20 +0000
Manifest next update: Tue 03 Feb 2026 08:16:20 +0000
Files and hashes: 1: 065F831F0E07E288D33ECF4DFAA18E2C93644E43.crl (hash: /C4A8E8YlnoEeNAg17q3kNq/jrH+bQ7S9BQCIQOrrD8=)
2: 3130332e37372e3232362e302f32332d3233203d3e203634323938.roa (hash: 8bdcuP86nx1UFfxVnnh8wGJritVHJXJ+E76C/c7hdYk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.crl
rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/065F831F0E07E288D33ECF4DFAA18E2C93644E43.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 08:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:0e:1f:3c:00:f8:38:5b:82:3d:24:c2:45:7a:41:dd:50:77:a4:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=065F831F0E07E288D33ECF4DFAA18E2C93644E43
Validity
Not Before: Jan 31 00:17:20 2026 GMT
Not After : Feb 3 08:16:20 2026 GMT
Subject: CN=E7EBC4330306BCB40CEA416B8135F7BAF42811D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:45:5a:b4:29:30:a1:ad:df:93:f7:85:04:2b:
3f:5a:d4:0f:4e:8b:fb:89:00:3b:c2:b5:ca:12:50:
6a:85:44:1c:52:26:bb:c9:02:1d:65:fe:16:9c:35:
2c:b2:b2:36:c8:1d:73:1a:36:29:f4:8a:54:b7:15:
41:6e:4c:24:d5:9b:2f:7d:db:c7:c5:cf:21:e7:5b:
67:d1:b8:b8:10:e1:b7:10:d5:94:c6:9e:a8:99:b1:
da:45:78:84:8c:77:bc:f2:b0:9c:e0:c0:16:9e:eb:
c1:ae:c0:ee:fc:68:2f:fd:52:73:f9:8e:f2:97:ff:
97:4c:e3:d8:5f:a8:c1:54:1b:cc:0d:47:75:4b:69:
54:3f:d4:0f:19:5b:76:e5:b7:dc:74:bc:f7:3b:0c:
d4:9f:d4:8f:1a:ac:9a:0c:09:05:b3:4d:f9:22:ea:
22:05:7d:bf:46:b8:73:66:29:a8:e4:a7:7a:c8:89:
bd:9d:41:53:c5:22:05:68:c8:3f:a8:e5:c6:fb:b8:
27:11:c9:8a:62:b9:7e:2c:de:39:29:76:e2:c3:01:
a6:ab:04:72:55:6c:75:44:49:5b:38:38:be:12:c2:
0e:8d:82:18:fd:38:e9:ee:cc:a3:6e:ae:6d:29:c3:
4e:0e:cf:e6:8d:d1:04:1d:8b:fb:21:d9:c4:8f:ae:
43:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:EB:C4:33:03:06:BC:B4:0C:EA:41:6B:81:35:F7:BA:F4:28:11:D6
X509v3 Authority Key Identifier:
keyid:06:5F:83:1F:0E:07:E2:88:D3:3E:CF:4D:FA:A1:8E:2C:93:64:4E:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/065F831F0E07E288D33ECF4DFAA18E2C93644E43.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:62:0e:5a:19:9b:e8:79:48:d7:f7:4a:d9:45:16:ae:e8:72:
79:83:91:9d:ae:be:b1:53:2b:47:f9:36:81:3c:d3:ea:ee:9a:
b9:52:f4:bc:bb:58:e6:1f:5f:46:67:30:9c:74:bb:45:43:82:
c6:81:4f:c7:cf:ac:d3:f3:b1:26:88:49:1e:0f:dd:59:9b:1f:
1a:1f:8d:14:d5:de:df:63:1d:95:79:46:fd:ae:53:42:09:29:
5a:c2:81:fb:56:0c:dc:45:94:96:71:90:1e:63:e5:3a:6e:9c:
76:7a:bc:2d:f2:fd:78:75:a0:1b:17:d9:9a:9b:7b:6e:f5:c1:
d6:c8:e3:bc:21:2b:22:6f:49:73:51:f9:2e:86:a4:5d:3e:94:
a6:9d:10:5a:e3:2d:d5:fa:ff:f5:84:8b:c4:2d:fb:8b:a6:d1:
45:8b:26:6d:e7:8f:48:35:6f:db:b1:03:e5:50:a4:43:e0:e2:
c2:83:d5:f3:e6:cf:28:cc:d7:0e:96:ec:e1:e7:3a:bc:ee:f6:
08:76:06:b2:14:d7:f6:fb:a8:ed:62:c7:76:f7:65:ed:f3:74:
50:7c:2c:56:8a:d4:8a:05:27:72:36:46:cc:f9:68:87:08:e4:
7b:e4:23:59:a0:0d:54:62:b7:e9:7b:12:20:e2:bc:61:9b:f9:
d7:bf:d7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:33 2026 by rpki-client