This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft
File: 067116F928280AE09336BC39D005AAC13695F63C.mft (raw, json)
Hash identifier: j5xsDc8ANhGdbWR6vcp3MaNIpA4RHodLdxI4uGo/qOc=
Subject key identifier: AD:E9:97:26:C9:99:FA:FB:C0:04:7E:A0:8A:D4:08:C6:FD:F0:F4:74
Authority key identifier: 06:71:16:F9:28:28:0A:E0:93:36:BC:39:D0:05:AA:C1:36:95:F6:3C
Certificate issuer: /CN=067116F928280AE09336BC39D005AAC13695F63C
Certificate serial: 62A0B1360C64AD1BAC4D11F1628FD7E0AC2D0DFF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/067116F928280AE09336BC39D005AAC13695F63C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft
Manifest number: 0211
Signing time: Sat 31 Jan 2026 00:21:53 +0000
Manifest this update: Sat 31 Jan 2026 00:16:53 +0000
Manifest next update: Tue 03 Feb 2026 09:58:53 +0000
Files and hashes: 1: 067116F928280AE09336BC39D005AAC13695F63C.crl (hash: 5Nvf7jM1MwmMsunPhMzCYv5Ikt+LXWPKm2GS+V4z7Ms=)
2: 3130332e38322e3234362e302f32342d3234203d3e20313432333730.roa (hash: vY8WV98Jcmzb4ODBeT1hqvxozKSfqOYtlfGMabwL6vk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.crl
rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/067116F928280AE09336BC39D005AAC13695F63C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 09:58:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:a0:b1:36:0c:64:ad:1b:ac:4d:11:f1:62:8f:d7:e0:ac:2d:0d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=067116F928280AE09336BC39D005AAC13695F63C
Validity
Not Before: Jan 31 00:16:53 2026 GMT
Not After : Feb 3 09:58:53 2026 GMT
Subject: CN=ADE99726C999FAFBC0047EA08AD408C6FDF0F474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:3c:3d:79:06:f1:d7:f9:b3:d5:68:b1:c1:f5:
5c:bd:bb:bd:87:de:6e:79:3b:ea:c2:53:21:6f:3a:
14:f6:3a:b8:be:69:f8:97:79:2f:72:07:7a:63:0c:
2f:e4:f5:21:d0:a7:e6:2f:1f:3e:39:55:72:11:c8:
48:26:bd:53:0b:14:c3:a2:f7:ce:a9:01:da:db:c1:
0e:6e:3c:8e:1d:57:b8:e6:51:5d:f9:6f:fd:db:04:
1c:14:93:8b:61:98:72:57:1a:6b:2f:72:ad:01:f9:
09:29:7b:62:91:e4:ed:7a:eb:d2:43:18:a3:76:8b:
4a:55:f6:6c:fb:f4:3d:d9:f9:1c:e0:4d:07:3f:2c:
c4:2d:de:b5:10:08:03:26:a4:fd:b4:04:29:f6:f2:
00:ff:19:c8:69:1a:a7:ca:23:fa:fb:c7:b4:d4:04:
5e:b1:bc:f2:f3:23:38:ad:e8:57:b5:5e:1c:34:fb:
4c:e2:71:49:9c:58:56:f4:a1:d6:65:6e:68:da:14:
14:b2:73:9d:e6:2e:c8:0a:b4:24:9d:18:98:7d:93:
b6:dd:ae:58:83:34:8d:fc:c4:6a:15:ac:95:b2:da:
2b:69:59:3c:a0:4b:a7:5a:4a:38:18:29:19:5b:c3:
9b:50:09:c1:3b:2f:7e:98:f3:fa:fd:2f:4e:04:8f:
c0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E9:97:26:C9:99:FA:FB:C0:04:7E:A0:8A:D4:08:C6:FD:F0:F4:74
X509v3 Authority Key Identifier:
keyid:06:71:16:F9:28:28:0A:E0:93:36:BC:39:D0:05:AA:C1:36:95:F6:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/067116F928280AE09336BC39D005AAC13695F63C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:6c:cb:62:1d:0e:4e:6b:01:1d:65:5d:d7:18:09:87:2f:39:
c4:59:f6:e4:3c:c9:6a:c1:6f:ed:09:26:f3:42:2b:5a:5c:7a:
3d:5a:21:99:c3:b5:f9:89:f8:43:3a:4e:21:53:97:58:dd:98:
7b:39:17:0f:0d:ed:db:8f:d5:3f:42:24:ab:fe:3b:8d:a2:23:
37:0b:ec:5d:b2:ba:8c:6c:f1:9c:04:9d:71:a9:25:72:5a:70:
4a:9d:a1:65:3f:33:ff:11:06:02:4a:f8:76:5b:bd:31:a3:8c:
4d:69:8f:9c:c1:9c:e7:17:a6:31:cc:bb:46:c3:9c:82:72:c3:
28:04:13:80:50:e0:f9:a8:d7:8c:89:05:3a:de:34:38:a0:97:
a1:61:d3:fb:ce:9a:66:84:78:f0:44:46:d4:6c:a8:30:4c:ee:
1f:6e:4e:2f:a0:02:24:bb:e9:e9:6d:10:60:bb:10:26:8e:85:
ac:84:cb:78:93:85:21:18:38:0d:df:96:97:1d:8a:03:4a:f8:
4a:f5:1b:d5:ce:03:56:1c:a0:85:49:b5:05:af:b9:4f:cf:75:
c8:ea:f0:0d:72:1e:07:73:42:c5:90:9a:48:7d:2b:50:64:22:
0b:61:4e:6d:82:b1:d5:27:18:d9:12:6b:40:81:8a:31:46:43:
fb:f2:34:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:44 2026 by rpki-client