This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft
File: 6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft (raw, json)
Hash identifier: joK5NG182RkxsiqmJlHj/LfyiC3ocMKrEJ3xSFM3e/M=
Subject key identifier: FB:32:81:E4:EE:A0:92:AD:78:2C:26:24:F4:70:8C:89:AC:36:38:CD
Authority key identifier: 6A:39:96:AF:E1:13:82:38:53:0C:2F:C9:2B:2A:B6:75:FC:D2:18:C8
Certificate issuer: /CN=6A3996AFE1138238530C2FC92B2AB675FCD218C8
Certificate serial: 29C00AFB9D5AD70BCF7AD2448215EB004B57CA81
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft
Manifest number: CF
Signing time: Sun 01 Feb 2026 03:11:38 +0000
Manifest this update: Sun 01 Feb 2026 03:06:38 +0000
Manifest next update: Wed 04 Feb 2026 12:04:38 +0000
Files and hashes: 1: 323030313a6466343a353663303a3a2f34382d3438203d3e20313533313231.roa (hash: EZ7jR9+lQhRaaJFDwK6y0EbEgy21NUoqJfk8uRlaKvI=)
2: 6A3996AFE1138238530C2FC92B2AB675FCD218C8.crl (hash: WFvo20e70mUxcaMl8QrrRmY5ozrhOpQnnG0HzZ8oAu8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.crl
rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 12:04:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:c0:0a:fb:9d:5a:d7:0b:cf:7a:d2:44:82:15:eb:00:4b:57:ca:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A3996AFE1138238530C2FC92B2AB675FCD218C8
Validity
Not Before: Feb 1 03:06:38 2026 GMT
Not After : Feb 4 12:04:38 2026 GMT
Subject: CN=FB3281E4EEA092AD782C2624F4708C89AC3638CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d0:bf:1b:d1:6e:14:af:9e:64:be:6f:19:f8:
67:ea:eb:54:37:b9:4d:4c:a2:46:3d:b4:81:48:85:
37:81:98:f0:47:0b:30:41:aa:70:47:b6:69:92:77:
ec:ba:57:2a:fd:37:b8:e7:e8:f5:a0:5a:e7:13:31:
b4:ea:63:dd:78:62:2e:40:e5:6d:89:cf:ab:95:a7:
63:71:d0:29:9c:aa:0e:e5:c7:0a:80:a2:60:e4:b1:
fb:d2:5a:35:f4:8e:cf:ae:98:c4:de:69:28:34:8e:
98:fa:88:20:93:70:a3:23:fb:a2:e2:69:8d:c8:85:
fe:cb:65:88:31:32:9c:ea:fb:0f:b2:dd:9d:a3:39:
7e:52:75:3f:b3:d5:82:83:7c:d6:85:e9:e3:e3:9b:
45:69:a5:40:c2:ff:3f:aa:ee:6a:b4:eb:84:7c:1c:
e3:4d:fe:77:48:30:db:f4:76:02:40:9a:0d:ed:67:
9c:95:2f:50:c9:b9:a7:9d:34:f3:0c:55:d6:54:85:
5f:4d:0b:17:7b:dc:07:cf:c2:52:ea:98:da:eb:81:
42:53:e9:b6:77:a7:62:ce:5e:1c:03:aa:f8:ec:0c:
b0:91:9f:06:57:80:60:83:f4:4e:de:66:29:51:1a:
85:ad:15:ea:84:32:79:b8:f3:16:d7:7e:ca:9a:7a:
ad:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:32:81:E4:EE:A0:92:AD:78:2C:26:24:F4:70:8C:89:AC:36:38:CD
X509v3 Authority Key Identifier:
keyid:6A:39:96:AF:E1:13:82:38:53:0C:2F:C9:2B:2A:B6:75:FC:D2:18:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:b3:67:a3:ba:eb:48:da:9c:5b:be:94:6a:97:c6:dd:dc:43:
1e:54:b9:84:6c:d1:10:49:9f:7b:06:78:12:36:b5:2b:a2:44:
e6:35:ed:94:e9:2e:b6:be:4b:a3:62:fe:f9:85:83:28:c8:f8:
61:21:20:39:bc:00:af:06:59:d8:4d:b1:44:5b:12:87:61:7b:
fe:f3:5d:ce:6e:1f:31:c6:99:b6:dc:ce:43:16:1d:b5:cd:da:
d7:05:51:4d:34:1c:a8:26:a8:9f:4b:ba:32:06:5e:a3:52:5a:
2b:3d:d8:8b:02:11:86:fa:71:a5:da:98:26:52:1f:1e:c5:93:
59:d6:38:58:95:a3:7c:ff:6a:55:69:26:6b:78:07:a3:46:2c:
a4:4e:29:2b:bf:fd:e2:81:af:79:f4:e3:25:20:b2:76:27:a6:
b9:cf:8d:26:09:cf:b8:fd:f2:25:74:c8:b2:6a:29:73:77:e0:
ec:63:bc:1b:bf:2e:b7:28:30:b5:84:8f:6e:53:0d:f0:d6:3b:
3a:5f:f6:e1:80:0a:d5:3f:83:4d:d6:f2:be:0c:91:b8:e6:01:
d0:a3:63:9e:52:f6:ee:69:3e:25:d5:fe:40:2e:64:3d:c9:52:
33:bc:21:42:34:6d:db:0e:a1:d8:18:47:9b:c4:43:f8:f8:55:
61:6c:50:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:42:10 2026 by rpki-client