This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft
File: B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft (raw, json)
Hash identifier: voAesBnOkicGp9r8JBHcmIvWwnpFRB8fVVg5oD/aOvQ=
Subject key identifier: E3:01:D1:37:47:EE:09:97:7F:A1:94:D1:75:DB:48:2A:12:27:A1:0B
Authority key identifier: B5:F8:E7:71:2A:83:BE:2B:D7:8C:FC:40:65:8C:80:32:F0:3B:66:82
Certificate issuer: /CN=B5F8E7712A83BE2BD78CFC40658C8032F03B6682
Certificate serial: 046FEDF6D7FFF1F3358F023E0CD3C24EAA8747C9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft
Manifest number: 0174
Signing time: Sun 01 Feb 2026 08:01:58 +0000
Manifest this update: Sun 01 Feb 2026 07:56:58 +0000
Manifest next update: Wed 04 Feb 2026 10:44:58 +0000
Files and hashes: 1: 3130332e33382e3130382e302f32332d3234203d3e20313531353539.roa (hash: FEHaz0M5qWTtLzVTFwwxjOLyrh7B+FWo8+ydx+5qUx0=)
2: B5F8E7712A83BE2BD78CFC40658C8032F03B6682.crl (hash: ThlyZlWQZFomg7pJCmdwlh68CdTzCRisOiTuW66Jf0A=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.crl
rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 10:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:6f:ed:f6:d7:ff:f1:f3:35:8f:02:3e:0c:d3:c2:4e:aa:87:47:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5F8E7712A83BE2BD78CFC40658C8032F03B6682
Validity
Not Before: Feb 1 07:56:58 2026 GMT
Not After : Feb 4 10:44:58 2026 GMT
Subject: CN=E301D13747EE09977FA194D175DB482A1227A10B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d2:da:e1:bc:08:89:83:9f:f9:4e:b3:5c:f3:
b5:17:d5:f7:b4:19:94:a8:c1:65:e5:d6:a9:2f:e9:
16:77:e4:8d:66:84:6b:e2:19:59:27:1a:9b:aa:21:
bb:ed:eb:47:11:2f:89:71:43:28:ba:a3:72:f3:cb:
6e:19:79:92:22:03:4f:15:f0:81:86:a3:da:67:bb:
1f:ea:78:2f:43:d6:c9:fa:23:a3:4f:85:d8:21:4f:
5d:8d:95:9c:bf:5d:69:03:ca:83:e1:3e:db:c6:af:
90:a7:68:3d:89:f1:99:f2:f0:d9:97:f7:ed:08:fc:
32:2f:af:6b:23:c8:33:84:9b:de:b7:c2:12:a2:d1:
2d:c9:d5:b0:57:ac:e2:0a:7c:cd:cc:31:c0:f0:a2:
cd:aa:80:52:22:30:14:db:65:db:2c:f0:8d:fa:62:
9c:53:35:49:5b:09:cd:68:35:78:c9:13:9a:2a:0c:
c5:0f:0d:8f:78:39:79:03:7c:dc:6d:b8:1f:e7:ab:
0a:71:69:51:a5:03:b0:72:ac:0e:bc:b0:78:7d:43:
7f:1a:67:52:09:ff:ee:fa:78:84:34:35:8f:e2:8c:
7d:64:d3:1a:d2:fa:72:25:c8:06:01:e5:be:45:ef:
d9:b4:60:ea:55:fb:92:98:b6:e5:9e:a0:0a:58:1a:
27:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:01:D1:37:47:EE:09:97:7F:A1:94:D1:75:DB:48:2A:12:27:A1:0B
X509v3 Authority Key Identifier:
keyid:B5:F8:E7:71:2A:83:BE:2B:D7:8C:FC:40:65:8C:80:32:F0:3B:66:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:2c:0b:1b:24:88:84:3f:ab:23:0b:25:a6:14:1f:58:f5:ba:
b7:6e:2d:92:c4:de:58:ab:96:d9:2d:c9:ff:5e:c7:77:3e:23:
dd:2c:5f:cd:e4:43:45:ad:e0:01:73:c9:fb:71:54:b0:6d:76:
83:85:7b:4c:bc:0c:a4:31:e4:3a:f7:ab:8a:6b:00:60:8a:e0:
e5:b4:99:7b:66:d8:4b:8c:97:a4:7d:6e:24:7d:f4:fb:4b:9d:
6b:cf:f0:23:ab:07:87:e3:f6:8e:11:b6:7c:6e:b3:54:98:a7:
0b:a6:e7:52:df:c9:92:68:f3:da:a8:f2:8f:d8:27:20:d6:31:
ff:6f:02:ff:8b:27:ed:bb:a8:06:4a:ac:8c:bf:d3:a5:56:76:
7b:56:ac:09:2b:31:ea:27:4f:7f:a2:1a:1d:3c:d4:af:94:4f:
98:17:29:af:74:95:91:32:34:99:55:4d:e0:d8:f8:06:fa:42:
6a:3d:52:ac:ba:c5:e0:d4:f0:97:aa:9c:ef:2b:6d:63:ab:61:
93:c8:a5:02:cd:dd:9f:cc:9a:10:03:48:bb:63:1f:c5:2c:e9:
2c:18:66:e7:45:95:6e:3e:3c:34:32:c1:a9:a9:b1:a5:48:c7:
40:a6:ed:a8:ab:42:7a:f5:fc:d3:e5:62:9c:16:31:40:89:c2:
4f:99:99:22
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUBG/t9tf/8fM1jwI+DNPCTqqHR8kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVGOEU3NzEyQTgzQkUyQkQ3OENGQzQwNjU4QzgwMzJG
MDNCNjY4MjAeFw0yNjAyMDEwNzU2NThaFw0yNjAyMDQxMDQ0NThaMDMxMTAvBgNV
BAMTKEUzMDFEMTM3NDdFRTA5OTc3RkExOTREMTc1REI0ODJBMTIyN0ExMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC50trhvAiJg5/5TrNc87UX1fe0
GZSowWXl1qkv6RZ35I1mhGviGVknGpuqIbvt60cRL4lxQyi6o3Lzy24ZeZIiA08V
8IGGo9pnux/qeC9D1sn6I6NPhdghT12NlZy/XWkDyoPhPtvGr5CnaD2J8Zny8NmX
9+0I/DIvr2sjyDOEm963whKi0S3J1bBXrOIKfM3MMcDwos2qgFIiMBTbZdss8I36
YpxTNUlbCc1oNXjJE5oqDMUPDY94OXkDfNxtuB/nqwpxaVGlA7ByrA68sHh9Q38a
Z1IJ/+76eIQ0NY/ijH1k0xrS+nIlyAYB5b5F79m0YOpV+5KYtuWeoApYGieBAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU4wHRN0fuCZd/oZTRddtIKhInoQswHwYDVR0j
BBgwFoAUtfjncSqDvivXjPxAZYyAMvA7ZoIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
ZGI1OWExMC01OGQwLTQ2MmUtYjA5Yi0xOTE5YjFjMzVkNzIvMC9CNUY4RTc3MTJB
ODNCRTJCRDc4Q0ZDNDA2NThDODAzMkYwM0I2NjgyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjVGOEU3NzEyQTgzQkUyQkQ3OENGQzQwNjU4QzgwMzJGMDNC
NjY4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2RiNTlhMTAtNThkMC00NjJlLWIw
OWItMTkxOWIxYzM1ZDcyLzAvQjVGOEU3NzEyQTgzQkUyQkQ3OENGQzQwNjU4Qzgw
MzJGMDNCNjY4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEMsCxskiIQ/qyMLJaYUH1j1urduLZLE3lir
ltktyf9ex3c+I90sX83kQ0Wt4AFzyftxVLBtdoOFe0y8DKQx5Dr3q4prAGCK4OW0
mXtm2EuMl6R9biR99PtLnWvP8COrB4fj9o4Rtnxus1SYpwum51LfyZJo89qo8o/Y
JyDWMf9vAv+LJ+27qAZKrIy/06VWdntWrAkrMeonT3+iGh081K+UT5gXKa90lZEy
NJlVTeDY+Ab6Qmo9Uqy6xeDU8JeqnO8rbWOrYZPIpQLN3Z/MmhADSLtjH8Us6SwY
ZudFlW4+PDQywampsaVIx0Cm7airQnr1/NPlYpwWMUCJwk+ZmSI=
-----END CERTIFICATE-----
Generated at Mon Feb 2 09:52:25 2026 by rpki-client