This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft
File: B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft (raw, json)
Hash identifier: iY5BYe6++gidmpWP+EJdlqIu8J65gzqH0L7Z5Y5Yw2Y=
Subject key identifier: 45:06:89:F2:82:64:03:CF:26:88:65:1B:1F:17:B9:9F:83:0E:9A:62
Authority key identifier: B1:78:40:2B:ED:E3:EC:5A:5E:E2:E0:E7:1F:73:6A:13:60:C0:6A:F6
Certificate issuer: /CN=B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6
Certificate serial: 1D6E5BC8FCC91430882E7B9E66CCA20888F67A7D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft
Manifest number: 011B
Signing time: Sat 31 Jan 2026 16:32:03 +0000
Manifest this update: Sat 31 Jan 2026 16:27:03 +0000
Manifest next update: Tue 03 Feb 2026 23:02:03 +0000
Files and hashes: 1: 3130332e372e3130372e302f32342d3234203d3e20313531353939.roa (hash: tHzJEc4tVJbK/5ReWDfkb8wKbAgEEvzCH+vbGF7LXac=)
2: B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl (hash: uJs93WuMkX0WCYHSL3dSm8VQNaC8cC3Bv8dxkjlDX1Q=)
3: 3130332e372e3130362e302f32332d3233203d3e20313531353939.roa (hash: gKuzS0cjEmgd3PQlr3qETih9wH6v1uECgkfmF5qpn9s=)
4: 3130332e372e3130362e302f32342d3234203d3e20313531353939.roa (hash: DxiuVfLvcjyo+Mn8zZEZyq9g9x9MYwq6EjUmb+7l6rM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl
rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 23:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:6e:5b:c8:fc:c9:14:30:88:2e:7b:9e:66:cc:a2:08:88:f6:7a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6
Validity
Not Before: Jan 31 16:27:03 2026 GMT
Not After : Feb 3 23:02:03 2026 GMT
Subject: CN=450689F2826403CF2688651B1F17B99F830E9A62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bc:5b:7d:34:34:af:c4:9c:d4:e8:5b:b4:50:
6d:f8:2a:22:cc:de:6b:6c:2f:ef:25:07:9e:60:d3:
54:04:28:54:59:54:19:79:ce:47:63:97:ed:a0:42:
4b:3c:27:6e:4a:d7:9e:a8:ec:33:62:41:db:17:3d:
ba:a6:32:83:e1:e4:c1:3c:e8:64:96:cc:79:ed:f7:
45:a3:49:fe:23:86:48:f6:e1:07:58:ab:f7:40:db:
d1:4e:0b:64:12:3a:b7:1d:bb:69:87:05:be:aa:9d:
f1:9b:7a:c1:e7:f7:96:aa:68:a0:6b:34:d1:a6:55:
5c:70:55:34:f8:da:e1:8a:27:08:b7:44:8c:0e:89:
c4:12:08:b4:9e:66:fe:6f:a7:64:01:5b:e3:e6:6c:
56:ab:54:44:8d:d7:1a:25:fc:c1:aa:60:bc:b8:29:
67:e8:11:4d:48:8b:21:86:f0:05:b9:89:c9:67:c5:
5d:a0:b8:48:4a:e4:e6:c4:d8:02:96:b0:5e:b4:75:
60:b9:45:5a:a7:27:be:df:9f:1a:4c:da:4b:0b:8d:
f2:6d:06:48:fb:e7:c0:7b:e7:d0:d6:ba:6c:3d:23:
89:6a:96:28:74:67:2d:28:a7:71:19:c6:b4:10:84:
3d:74:64:f1:63:32:df:5c:46:fc:b2:5d:03:5a:06:
f9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:06:89:F2:82:64:03:CF:26:88:65:1B:1F:17:B9:9F:83:0E:9A:62
X509v3 Authority Key Identifier:
keyid:B1:78:40:2B:ED:E3:EC:5A:5E:E2:E0:E7:1F:73:6A:13:60:C0:6A:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:51:8e:c8:7d:04:34:bd:f8:aa:62:64:73:81:73:ba:da:15:
5f:35:75:28:0a:9a:fe:b3:e9:41:07:f0:58:cb:51:29:01:63:
e4:80:0d:f0:df:f5:51:73:50:b0:04:cc:c7:8c:1b:b3:29:6e:
76:0c:85:b7:ef:40:64:79:c1:b7:d8:87:97:ee:a6:54:f3:7b:
9b:30:68:a5:44:7e:1a:44:38:40:c5:88:90:fb:f5:b5:8a:50:
f9:f7:6c:22:0d:ba:5c:91:44:69:0b:a9:4a:4c:8c:25:d7:8f:
ce:bd:a2:fd:0a:5e:d7:25:74:10:e3:79:39:87:80:2d:6c:32:
85:82:d7:4f:b1:1a:d0:cd:3f:ab:a7:19:11:d6:84:b6:3f:7e:
1a:0a:1f:4c:93:00:f0:c1:a2:e7:68:1b:03:a3:18:45:6a:23:
79:d5:bd:12:ef:4e:f0:df:be:6b:48:38:1c:d5:db:6a:15:0f:
62:21:97:db:db:7d:53:b9:ee:d0:04:42:b1:f6:bc:b0:33:03:
ea:c5:ba:f2:90:99:e1:ca:4f:89:f2:34:8b:2e:d5:f6:e2:07:
73:66:16:28:fc:d5:82:38:70:a3:e6:09:96:a8:0f:25:45:01:
6b:32:9f:09:14:9d:5f:80:ca:28:70:ac:cf:26:ee:96:eb:1d:
85:22:66:e5
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUHW5byPzJFDCILnueZsyiCIj2en0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZBMTM2
MEMwNkFGNjAeFw0yNjAxMzExNjI3MDNaFw0yNjAyMDMyMzAyMDNaMDMxMTAvBgNV
BAMTKDQ1MDY4OUYyODI2NDAzQ0YyNjg4NjUxQjFGMTdCOTlGODMwRTlBNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/vFt9NDSvxJzU6Fu0UG34KiLM
3mtsL+8lB55g01QEKFRZVBl5zkdjl+2gQks8J25K156o7DNiQdsXPbqmMoPh5ME8
6GSWzHnt90WjSf4jhkj24QdYq/dA29FOC2QSOrcdu2mHBb6qnfGbesHn95aqaKBr
NNGmVVxwVTT42uGKJwi3RIwOicQSCLSeZv5vp2QBW+PmbFarVESN1xol/MGqYLy4
KWfoEU1IiyGG8AW5iclnxV2guEhK5ObE2AKWsF60dWC5RVqnJ77fnxpM2ksLjfJt
Bkj758B759DWumw9I4lqlih0Zy0op3EZxrQQhD10ZPFjMt9cRvyyXQNaBvkFAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQURQaJ8oJkA88miGUbHxe5n4MOmmIwHwYDVR0j
BBgwFoAUsXhAK+3j7Fpe4uDnH3NqE2DAavYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
YTEyNGU2YS1mNTFiLTQ2ZDAtOGVhMy03NmIyNzQ0NTU4YTYvMC9CMTc4NDAyQkVE
RTNFQzVBNUVFMkUwRTcxRjczNkExMzYwQzA2QUY2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZBMTM2MEMw
NkFGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ExMjRlNmEtZjUxYi00NmQwLThl
YTMtNzZiMjc0NDU1OGE2LzAvQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZB
MTM2MEMwNkFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEpRjsh9BDS9+KpiZHOBc7raFV81dSgKmv6z
6UEH8FjLUSkBY+SADfDf9VFzULAEzMeMG7MpbnYMhbfvQGR5wbfYh5fuplTze5sw
aKVEfhpEOEDFiJD79bWKUPn3bCINulyRRGkLqUpMjCXXj869ov0KXtcldBDjeTmH
gC1sMoWC10+xGtDNP6unGRHWhLY/fhoKH0yTAPDBoudoGwOjGEVqI3nVvRLvTvDf
vmtIOBzV22oVD2Ihl9vbfVO57tAEQrH2vLAzA+rFuvKQmeHKT4nyNIsu1fbiB3Nm
Fij81YI4cKPmCZaoDyVFAWsynwkUnV+AyihwrM8m7pbrHYUiZuU=
-----END CERTIFICATE-----
Generated at Mon Feb 2 08:31:36 2026 by rpki-client