This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.mft
File: 6DCC69508EF4E670EFBC5C69203D6B120FA9392F.mft (raw, json)
Hash identifier: QiQOynsbayOkeZQq+WcP+SB9qHYYJvvIQO+QidGmyw4=
Subject key identifier: AC:75:2D:01:71:12:BF:F9:1E:98:46:B7:A4:88:CF:DF:C4:29:4A:89
Authority key identifier: 6D:CC:69:50:8E:F4:E6:70:EF:BC:5C:69:20:3D:6B:12:0F:A9:39:2F
Certificate issuer: /CN=6DCC69508EF4E670EFBC5C69203D6B120FA9392F
Certificate serial: 09A5D5CD6B7FAF271BA2BCAE9A64F738DFC2F8A2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.mft
Manifest number: 054D
Signing time: Sun 01 Feb 2026 09:30:48 +0000
Manifest this update: Sun 01 Feb 2026 09:25:48 +0000
Manifest next update: Wed 04 Feb 2026 15:02:48 +0000
Files and hashes: 1: 3130332e3135322e3131392e302f32342d3234203d3e20313430343433.roa (hash: OYW0otw/C3geO3TMH4Vh+kOExJnpA1YbtcKJkivMvls=)
2: 3130332e3135322e3131382e302f32332d3233203d3e20313430343433.roa (hash: /yZJ48q5869CHyqd6SiEVpfiGq8gtKkTaa5YhAFQVoI=)
3: 6DCC69508EF4E670EFBC5C69203D6B120FA9392F.crl (hash: 0XakZlTGL5sWyiHc3tFhynxt7w2KHYFP92QzEfx8BOw=)
4: 3130332e3135322e3131382e302f32342d3234203d3e20313430343433.roa (hash: E4zG118v/qHLN7ZNOQGDXXsw7DicdH5quyuAOIhYJfs=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.crl
rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 15:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:a5:d5:cd:6b:7f:af:27:1b:a2:bc:ae:9a:64:f7:38:df:c2:f8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6DCC69508EF4E670EFBC5C69203D6B120FA9392F
Validity
Not Before: Feb 1 09:25:48 2026 GMT
Not After : Feb 4 15:02:48 2026 GMT
Subject: CN=AC752D017112BFF91E9846B7A488CFDFC4294A89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:07:bb:74:0d:6d:a3:7f:da:6c:4b:c0:0d:61:
3e:ea:e8:df:b5:a2:6e:ab:cc:11:fe:30:3a:e0:e6:
af:8f:12:05:30:02:65:f6:91:b2:b6:37:e5:aa:47:
69:0d:75:5d:5d:58:8b:d8:cd:06:bc:35:d2:f5:87:
d1:fa:5d:b9:b1:1f:a5:8e:f2:94:39:94:d3:2e:9a:
ac:89:c9:0c:00:ae:35:61:1a:61:9c:48:68:70:e0:
e4:fe:1a:fe:67:d2:c9:80:7a:5b:70:52:c1:36:53:
70:fc:e2:f5:52:cf:18:f7:8a:83:87:22:39:6f:bd:
ab:60:05:3d:90:d3:59:fd:bc:15:fa:6c:52:5a:fb:
3c:7a:0a:e5:60:f8:6b:3b:92:c8:d9:1a:29:9a:08:
2f:5b:e4:90:e2:c9:de:de:ae:b2:4e:7e:19:55:d1:
ea:ec:c3:38:19:9f:24:f0:ea:09:1f:92:8d:59:c1:
7f:30:c6:4c:d7:82:67:a7:ad:d4:fc:86:ba:63:df:
e5:2e:5d:d1:32:33:64:01:04:0a:6b:df:65:5d:97:
9d:ac:3a:fe:04:6a:88:45:c7:81:68:ab:41:5f:3c:
38:6c:a3:a9:4c:c2:8d:fb:2a:1d:b4:8d:13:2d:aa:
9c:83:ad:94:d6:55:eb:ad:e9:06:7e:75:89:97:53:
2e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:75:2D:01:71:12:BF:F9:1E:98:46:B7:A4:88:CF:DF:C4:29:4A:89
X509v3 Authority Key Identifier:
keyid:6D:CC:69:50:8E:F4:E6:70:EF:BC:5C:69:20:3D:6B:12:0F:A9:39:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a7:01:80:30:18:4c:38:1b:8e:01:96:11:27:3e:f8:5c:96:
c8:df:48:eb:aa:e2:97:b2:9e:5b:aa:12:0b:95:da:69:2d:5e:
b0:05:a1:6c:f8:b1:22:01:14:6f:07:fd:95:ca:29:14:0a:e8:
7f:53:38:ae:6c:bc:66:ec:a6:dd:81:a4:e1:cb:bd:a8:ae:8e:
33:d8:e4:28:db:51:8e:57:b6:8e:85:3f:1a:0b:d1:47:1c:7c:
61:78:65:84:60:43:2d:ba:e0:6e:4f:73:87:e9:e6:7a:3a:16:
9c:78:8a:bb:9c:f6:7e:32:8a:45:7d:42:1f:ff:22:27:0c:37:
88:7b:7b:03:bc:bb:20:24:5f:e6:8f:9e:47:95:ad:4d:8b:92:
f4:3e:af:df:c9:56:0f:31:ed:ef:09:62:eb:cd:ff:47:b4:03:
23:31:1d:eb:1a:f1:09:d2:fe:8f:09:71:5e:74:1a:a9:8a:be:
85:cf:e6:de:1c:27:d2:96:bb:55:2e:0b:a0:61:19:98:6f:54:
bb:1a:aa:15:00:51:2c:35:e3:81:dd:69:a8:bb:4f:a2:8a:7f:
ca:db:9c:10:3f:c0:a4:e0:e7:41:12:a3:f7:49:b7:48:e7:8b:
bf:2f:60:02:71:40:c0:97:cb:15:8f:38:2e:f2:8e:79:f2:87:
7f:66:06:9d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUCaXVzWt/rycboryummT3ON/C+KIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkRDQzY5NTA4RUY0RTY3MEVGQkM1QzY5MjAzRDZCMTIw
RkE5MzkyRjAeFw0yNjAyMDEwOTI1NDhaFw0yNjAyMDQxNTAyNDhaMDMxMTAvBgNV
BAMTKEFDNzUyRDAxNzExMkJGRjkxRTk4NDZCN0E0ODhDRkRGQzQyOTRBODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxB7t0DW2jf9psS8ANYT7q6N+1
om6rzBH+MDrg5q+PEgUwAmX2kbK2N+WqR2kNdV1dWIvYzQa8NdL1h9H6XbmxH6WO
8pQ5lNMumqyJyQwArjVhGmGcSGhw4OT+Gv5n0smAeltwUsE2U3D84vVSzxj3ioOH
IjlvvatgBT2Q01n9vBX6bFJa+zx6CuVg+Gs7ksjZGimaCC9b5JDiyd7errJOfhlV
0erswzgZnyTw6gkfko1ZwX8wxkzXgmenrdT8hrpj3+UuXdEyM2QBBApr32Vdl52s
Ov4EaohFx4Foq0FfPDhso6lMwo37Kh20jRMtqpyDrZTWVeut6QZ+dYmXUy6HAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUrHUtAXESv/kemEa3pIjP38QpSokwHwYDVR0j
BBgwFoAUbcxpUI705nDvvFxpID1rEg+pOS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
MjA3M2FjZS1hNjkxLTQ4NjMtOWMxYy01OWIyZGI5Y2I0NjMvMC82RENDNjk1MDhF
RjRFNjcwRUZCQzVDNjkyMDNENkIxMjBGQTkzOTJGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkRDQzY5NTA4RUY0RTY3MEVGQkM1QzY5MjAzRDZCMTIwRkE5
MzkyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDIwNzNhY2UtYTY5MS00ODYzLTlj
MWMtNTliMmRiOWNiNDYzLzAvNkRDQzY5NTA4RUY0RTY3MEVGQkM1QzY5MjAzRDZC
MTIwRkE5MzkyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHunAYAwGEw4G44BlhEnPvhclsjfSOuq4pey
nluqEguV2mktXrAFoWz4sSIBFG8H/ZXKKRQK6H9TOK5svGbspt2BpOHLvaiujjPY
5CjbUY5Xto6FPxoL0UccfGF4ZYRgQy264G5Pc4fp5no6Fpx4iruc9n4yikV9Qh//
IicMN4h7ewO8uyAkX+aPnkeVrU2LkvQ+r9/JVg8x7e8JYuvN/0e0AyMxHesa8QnS
/o8JcV50GqmKvoXP5t4cJ9KWu1UuC6BhGZhvVLsaqhUAUSw144Hdaai7T6KKf8rb
nBA/wKTg50ESo/dJt0jni78vYAJxQMCXyxWPOC7yjnnyh39mBp0=
-----END CERTIFICATE-----
Generated at Mon Feb 2 10:05:26 2026 by rpki-client