This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft
File: 85B934D25B97AC3F22C3D45778109B50456E4722.mft (raw, json)
Hash identifier: GemkmKT02uVdvZeUs4aMfbsCAvWqLM+k8fc7nPEM/9M=
Subject key identifier: D7:4E:A7:C3:9C:E2:FF:1B:C4:78:5E:33:4C:7F:64:ED:DE:BE:D0:DD
Authority key identifier: 85:B9:34:D2:5B:97:AC:3F:22:C3:D4:57:78:10:9B:50:45:6E:47:22
Certificate issuer: /CN=85B934D25B97AC3F22C3D45778109B50456E4722
Certificate serial: 16215D691F61C6CA76A69AB4D65F70E2F4705A6F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85B934D25B97AC3F22C3D45778109B50456E4722.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft
Manifest number: 0144
Signing time: Sun 01 Feb 2026 11:01:55 +0000
Manifest this update: Sun 01 Feb 2026 10:56:55 +0000
Manifest next update: Wed 04 Feb 2026 12:52:55 +0000
Files and hashes: 1: 85B934D25B97AC3F22C3D45778109B50456E4722.crl (hash: 6V53kGeCAB9W0RYR2sq+Wy9/N0qi2/kCJmeaVoa8Rl4=)
2: 3130332e3234352e35372e302f32342d3234203d3e20313531353335.roa (hash: 26Hr94IvTPNWLtyGYpXVN8+IvP+74Uco2RJ0Tu/T2Wg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.crl
rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85B934D25B97AC3F22C3D45778109B50456E4722.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 12:52:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:21:5d:69:1f:61:c6:ca:76:a6:9a:b4:d6:5f:70:e2:f4:70:5a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85B934D25B97AC3F22C3D45778109B50456E4722
Validity
Not Before: Feb 1 10:56:55 2026 GMT
Not After : Feb 4 12:52:55 2026 GMT
Subject: CN=D74EA7C39CE2FF1BC4785E334C7F64EDDEBED0DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:19:07:4a:44:fe:1f:ab:70:9c:f9:bd:ac:ab:
cb:40:a0:a1:d4:a4:f8:c6:5f:20:54:4a:05:af:c1:
56:be:28:08:6d:0b:cd:5f:82:d8:ad:08:21:a0:fa:
af:38:a2:62:ce:e1:e6:2f:6b:58:61:98:1c:ec:1f:
02:19:b6:e0:49:25:c2:ad:55:41:52:be:5f:91:66:
04:5f:79:f5:9c:90:f0:47:eb:5b:d1:38:c2:2d:6e:
48:b6:be:5f:fc:a4:12:ce:42:0d:62:46:0f:3b:c7:
57:e4:cf:99:36:af:86:4b:f4:ba:5b:4c:9f:1e:f3:
1e:3b:46:72:ca:24:ea:23:55:e7:86:04:2e:71:cd:
03:c7:3a:e0:a5:fe:68:10:71:f8:a4:c8:fb:95:a9:
e0:72:f6:d4:c5:3a:e4:ba:f5:13:07:74:47:92:5e:
3a:d0:19:7f:3d:42:46:6e:2d:a6:dd:60:d3:6a:e2:
19:b7:43:0b:89:f2:b7:a8:9f:d2:f7:c8:4d:66:59:
04:b7:15:59:94:14:0a:4a:35:6a:a8:2b:a0:b1:64:
72:ca:52:6f:85:fa:0e:da:c3:c7:9e:49:11:fb:2f:
74:40:68:01:75:f6:86:19:21:f2:32:f0:f9:3e:82:
88:8d:af:fd:31:14:6e:d1:c0:68:ec:e6:08:15:d3:
bb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4E:A7:C3:9C:E2:FF:1B:C4:78:5E:33:4C:7F:64:ED:DE:BE:D0:DD
X509v3 Authority Key Identifier:
keyid:85:B9:34:D2:5B:97:AC:3F:22:C3:D4:57:78:10:9B:50:45:6E:47:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85B934D25B97AC3F22C3D45778109B50456E4722.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:a6:72:ae:4e:2d:49:9a:22:a4:94:5c:70:33:7f:00:07:16:
ec:97:b1:c8:2d:3f:a3:9a:8e:f7:d0:78:7f:19:4c:4b:ad:e7:
d0:75:d3:7b:b3:82:12:fe:4c:db:e8:fd:ca:48:14:12:75:9f:
23:4b:c5:cd:cf:a4:b2:2e:35:c2:57:a5:c9:28:b5:51:70:d3:
ad:16:c3:4d:95:8b:dd:cf:7c:36:61:c0:76:f1:e1:18:72:1f:
a1:a9:ea:85:65:8b:1b:ce:84:58:5e:c6:8b:e2:b5:f6:ca:8c:
e0:ee:32:7c:8d:ae:ca:ef:96:f6:40:8e:10:33:8f:83:f2:88:
02:ce:c6:fb:1f:5e:05:ba:03:e6:a6:0f:12:8a:fd:a6:72:9b:
b1:e6:2b:b7:bf:9c:06:15:02:82:aa:6b:b8:8e:12:5a:63:63:
4f:3d:16:70:7a:fe:12:4d:cf:1c:5c:37:7a:b6:31:b8:31:20:
87:72:91:0b:eb:db:d7:4e:ee:da:d3:54:a9:a4:20:4c:ba:43:
71:29:7f:b6:d0:b6:4b:3b:aa:f7:60:ca:83:38:f8:0b:40:1e:
0a:7c:a2:38:bf:29:4e:d7:c2:c2:db:c1:b1:e9:9e:f8:bc:4e:
86:66:e3:ca:27:47:5d:93:cd:a2:34:93:87:fd:1b:cf:a0:0f:
5a:f2:f0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:05:11 2026 by rpki-client