This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.mft
File: C6076E330D4679EF0455EA400D1158D4F49B0BF1.mft (raw, json)
Hash identifier: IUVdC4KcBJ5DAO1FSzlZsmWzLOTViK5cDtHlrg2CpDg=
Subject key identifier: CD:F2:E8:50:94:BE:17:C1:3B:12:E3:24:6A:63:28:66:A9:08:33:A1
Authority key identifier: C6:07:6E:33:0D:46:79:EF:04:55:EA:40:0D:11:58:D4:F4:9B:0B:F1
Certificate issuer: /CN=C6076E330D4679EF0455EA400D1158D4F49B0BF1
Certificate serial: 5DDBDAFA2E95E9C0F2D40ECC941986EF073720F5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6076E330D4679EF0455EA400D1158D4F49B0BF1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.mft
Manifest number: 02C9
Signing time: Sun 01 Feb 2026 10:32:09 +0000
Manifest this update: Sun 01 Feb 2026 10:27:09 +0000
Manifest next update: Wed 04 Feb 2026 14:29:09 +0000
Files and hashes: 1: 3130332e3137382e322e302f32332d3233203d3e20313431303737.roa (hash: Ngt//yoU0gPCcUNIg6gz5GqlpjqLXC6sDwhwp1ku9U0=)
2: C6076E330D4679EF0455EA400D1158D4F49B0BF1.crl (hash: zt9kgdLVyDPgWh4rzP5OC+zDW5g28Isa0ov9BBWidmc=)
3: 3130332e3137382e322e302f32332d3234203d3e20313431303737.roa (hash: 0uhRI2twQUwOL4bXfxCRKkhSHjZlw1Z+9ZZ7PGpOhe4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.crl
rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6076E330D4679EF0455EA400D1158D4F49B0BF1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 14:29:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:db:da:fa:2e:95:e9:c0:f2:d4:0e:cc:94:19:86:ef:07:37:20:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C6076E330D4679EF0455EA400D1158D4F49B0BF1
Validity
Not Before: Feb 1 10:27:09 2026 GMT
Not After : Feb 4 14:29:09 2026 GMT
Subject: CN=CDF2E85094BE17C13B12E3246A632866A90833A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ea:31:1c:bd:c6:96:2d:b6:20:ed:6a:ef:a9:
d2:d1:62:39:a5:06:d8:cc:87:b2:16:6c:6d:59:df:
1b:90:5c:ab:bb:71:5a:42:64:5f:78:e7:dc:ba:b2:
b3:32:76:90:d9:07:c0:73:dc:f7:0d:d5:e9:59:f7:
d9:9b:75:54:af:cd:9e:63:e6:55:80:cb:70:46:95:
35:55:73:83:57:e9:92:ad:8a:fd:86:79:53:d5:84:
d6:7e:7a:c8:f6:dc:d7:9c:a0:f4:96:5f:34:23:7f:
0c:74:5c:38:f5:c5:81:b7:ee:97:54:21:57:c0:e0:
4c:ee:22:e5:fc:ff:ae:36:52:39:7a:5a:d9:05:d3:
82:a6:18:74:17:43:61:75:2d:9e:74:ef:7d:f3:fa:
16:e1:00:33:87:c3:f1:37:74:34:8c:e3:07:9a:78:
79:68:f0:e5:b8:d5:0e:84:2f:44:a0:bf:8d:0e:11:
ed:b8:81:41:0b:55:f1:f8:2f:79:6a:d7:2c:6d:fe:
88:fd:98:7a:c4:6b:f2:f2:f2:fc:93:57:c9:a3:fe:
ad:e4:f5:5b:7f:fc:89:7b:75:34:6e:3d:1d:6c:5e:
6a:53:05:15:50:8b:b2:08:ea:be:ef:1a:12:95:23:
32:0c:56:14:1d:74:e9:af:d1:9f:0c:d8:7d:c8:77:
a5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F2:E8:50:94:BE:17:C1:3B:12:E3:24:6A:63:28:66:A9:08:33:A1
X509v3 Authority Key Identifier:
keyid:C6:07:6E:33:0D:46:79:EF:04:55:EA:40:0D:11:58:D4:F4:9B:0B:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6076E330D4679EF0455EA400D1158D4F49B0BF1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ae:f7:d2:26:7e:78:62:d7:b0:06:a1:62:fe:f3:0b:e9:01:
e5:a2:3e:e9:16:98:cf:71:70:d9:f2:1b:87:fb:01:c2:02:27:
55:08:0f:6a:bf:13:6a:4e:cb:82:87:5d:2f:bf:08:ec:9a:b1:
2c:03:d7:99:65:f7:4a:a2:c6:e1:0f:fc:f4:44:70:fa:cd:e4:
82:11:5d:8e:5d:88:58:f5:88:0d:27:09:b4:52:6b:32:31:1a:
a4:81:86:49:66:8c:86:3d:93:9f:32:ec:56:9d:3b:9e:bd:e4:
e8:83:85:83:06:20:01:5b:7b:94:75:b5:bc:d3:45:23:18:8f:
f4:2a:e2:ea:5f:27:fa:0f:69:9c:d5:e2:76:79:54:2d:51:29:
fa:66:61:b3:71:56:2f:4b:82:31:42:be:97:27:be:ea:44:52:
34:42:de:1b:77:e5:0b:6e:6b:0c:31:fc:89:40:d4:a1:d2:a9:
40:4f:d8:ff:a6:dc:c9:b8:d5:e1:99:98:5c:57:15:64:05:b8:
d9:79:9d:fc:40:7c:fe:b7:a0:56:ae:51:64:e4:95:2e:71:86:
8a:61:fd:5a:93:f7:86:de:e2:79:d8:2f:6d:c8:ad:63:be:6d:
39:7c:06:1e:09:c0:ef:59:b8:c8:d5:2d:8f:a2:6d:5b:9a:5d:
fe:19:27:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:05:25 2026 by rpki-client