This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft
File: B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft (raw, json)
Hash identifier: KVYSNUEPsbNImJ3SLziMkabZoR+nPzOEzTTFHByqI2Q=
Subject key identifier: EB:83:B9:9F:F3:D1:10:E5:DB:34:6C:F9:57:B6:D4:06:B3:BE:C0:14
Authority key identifier: B5:91:05:9B:6A:F2:F5:D6:6E:BB:D1:40:31:DA:23:E5:AA:FC:64:F7
Certificate issuer: /CN=B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7
Certificate serial: 420E36C4DA6A024B3D72DBF3A136859F1F8F5376
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft
Manifest number: 0545
Signing time: Sat 31 Jan 2026 12:31:24 +0000
Manifest this update: Sat 31 Jan 2026 12:26:24 +0000
Manifest next update: Tue 03 Feb 2026 22:00:24 +0000
Files and hashes: 1: B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.crl (hash: 6UwwJlfoDvnSPa29Bptw0XaL5AZ09Jb890fCoANUxSI=)
2: 3130332e3135332e33342e302f32342d3234203d3e20313430343532.roa (hash: L+WYyxtBJBb4IPQAp+Phpn95Mr1s/ocDbq38zQ6JLtA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.crl
rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:0e:36:c4:da:6a:02:4b:3d:72:db:f3:a1:36:85:9f:1f:8f:53:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7
Validity
Not Before: Jan 31 12:26:24 2026 GMT
Not After : Feb 3 22:00:24 2026 GMT
Subject: CN=EB83B99FF3D110E5DB346CF957B6D406B3BEC014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:84:12:9e:9d:52:0c:a7:ae:26:60:f4:a4:44:
be:ed:58:86:f8:f8:1f:2b:04:c3:53:b4:8d:b7:1b:
ac:20:9d:c9:e0:0f:c1:d2:1f:aa:fe:dc:6c:aa:9e:
13:5b:fd:84:c8:54:74:dd:96:52:ea:5e:33:0e:e0:
93:e2:24:c8:f0:e5:7f:b3:d8:09:87:59:6a:38:77:
35:82:2a:e7:14:73:69:89:ed:53:8f:b9:19:fb:f9:
d9:f9:75:77:56:5d:56:e0:60:ab:da:7d:1a:92:71:
f3:22:a9:8a:14:e5:ad:68:31:9b:97:af:64:b2:5a:
59:f5:53:f7:8c:df:db:05:6c:7a:1a:78:35:6d:07:
ce:d7:5b:27:8d:fa:9a:ff:7e:99:d9:9d:3c:b3:60:
be:3f:1a:21:9b:af:bc:b9:26:9a:6b:51:7f:fd:d2:
c7:d7:8f:80:1c:aa:e6:b6:29:6f:ca:52:29:1d:44:
a1:c1:b6:39:00:68:21:f7:29:ac:4a:84:4d:00:2e:
c7:aa:48:f2:73:d4:80:45:fb:b2:15:85:79:71:4e:
80:ca:5f:ff:0a:30:18:69:c6:c4:74:ff:62:57:d1:
bc:04:98:75:08:d4:16:c3:cf:f4:60:33:2e:56:bd:
91:3d:7d:1c:50:46:37:47:90:2b:4d:66:00:6f:f9:
d6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:83:B9:9F:F3:D1:10:E5:DB:34:6C:F9:57:B6:D4:06:B3:BE:C0:14
X509v3 Authority Key Identifier:
keyid:B5:91:05:9B:6A:F2:F5:D6:6E:BB:D1:40:31:DA:23:E5:AA:FC:64:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:1c:71:8b:c5:3a:67:83:75:38:04:80:f0:d6:ac:38:f9:c6:
bb:30:95:23:b9:07:e1:09:50:0a:d2:26:fd:b6:2e:35:78:de:
05:b3:7a:59:f4:ae:d6:d9:33:39:96:db:38:a8:f7:82:68:71:
c9:c9:8f:fc:b8:6c:3b:98:6e:71:63:db:79:02:f8:3b:e0:fb:
79:04:5c:48:a1:fd:6f:92:91:a1:b6:14:8c:01:db:17:6a:9f:
b7:8e:c5:1e:a3:f9:3d:43:f6:4c:4c:71:4c:76:32:d7:e7:ed:
cc:bb:bb:c3:c8:04:c3:cc:76:35:11:f5:7c:d6:88:68:95:cf:
cb:2e:6a:8e:7a:2c:45:fd:3c:83:6f:03:c7:f9:3d:4f:9b:8a:
3e:fa:7c:d5:a2:40:3e:99:d5:83:56:a8:4a:c8:e0:5d:cd:6e:
01:ed:6b:08:4e:73:c4:26:5f:dc:3f:13:28:38:90:3e:f3:84:
ec:14:64:db:8a:26:f0:7f:6f:48:9a:66:e9:90:6f:ba:91:22:
a6:3c:a6:d9:55:0f:bc:60:39:a2:b9:d1:2a:8e:e1:ad:be:62:
72:d8:92:ea:da:66:0b:dd:93:d7:b4:a7:87:9a:94:57:01:c1:
15:0a:6b:37:b5:e3:cd:ad:3a:83:76:d7:d5:67:b8:79:af:3c:
9f:8e:54:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:02:56 2026 by rpki-client