This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft
File: B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft (raw, json)
Hash identifier: 2SqUPmgAGxM/kup+qsDcZO4ZtQOMxVgK+rO4IYSqcIk=
Subject key identifier: 58:D1:7A:B6:36:FC:D3:14:88:06:5D:06:F7:C9:49:73:D7:20:59:E2
Authority key identifier: B1:1A:6E:BA:7C:0F:02:09:30:47:3F:B7:FA:FC:2D:9C:97:E4:98:2D
Certificate issuer: /CN=B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D
Certificate serial: 142490021C1F6B8E539A5E03ED2EE6EED8E7A545
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft
Manifest number: 0559
Signing time: Fri 30 Jan 2026 21:22:08 +0000
Manifest this update: Fri 30 Jan 2026 21:17:08 +0000
Manifest next update: Tue 03 Feb 2026 08:57:08 +0000
Files and hashes: 1: 3130332e3232392e3136322e302f32342d3234203d3e20313338313138.roa (hash: 8cifjhYzuAjNoyrAY06aaQInEhEBLt9qHUL65hosVi4=)
2: B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl (hash: sNAdUzt7/AkowVIH0Hx8MAHK1S1VGZ68ZJm06a3SEiw=)
3: 32372e302e3139362e302f32322d3234203d3e203539323838.roa (hash: RNWDlcxD4hGN5htL+zEva85XMaiHyQP7jUNJ4v1dxa8=)
4: 3130332e3232392e3136302e302f32322d3234203d3e203539323838.roa (hash: i48IqlSbYMMK+v7SGCXzplkE2cHzSzt1Yn2nChsSsLc=)
5: 32372e302e3139382e302f32342d3234203d3e20313338313138.roa (hash: MMkB+mYw9fGjubHcr3S3RTRAdY7MvLNuzUgjIii6Fis=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl
rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 08:57:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:24:90:02:1c:1f:6b:8e:53:9a:5e:03:ed:2e:e6:ee:d8:e7:a5:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D
Validity
Not Before: Jan 30 21:17:08 2026 GMT
Not After : Feb 3 08:57:08 2026 GMT
Subject: CN=58D17AB636FCD31488065D06F7C94973D72059E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:74:86:a5:f9:31:f3:c6:99:d0:53:60:90:04:
17:d5:f8:4d:65:eb:15:0b:69:48:30:f4:e1:e9:f4:
f2:2b:b5:45:67:5c:5c:ec:7b:97:78:d7:6e:30:23:
90:9a:fe:e4:62:ca:3e:32:06:64:51:75:88:a5:a5:
b9:94:00:99:35:07:73:58:63:83:49:e8:8e:28:01:
36:2c:f1:17:1e:bd:9d:d1:ed:69:1e:ca:6d:36:86:
d8:f4:00:00:ec:1c:0f:bc:e9:6e:0f:99:77:29:10:
d9:94:96:a8:37:c2:14:7a:06:08:53:48:6a:9f:2c:
d9:ba:bc:e3:01:1e:86:be:08:d6:64:ac:9b:2d:aa:
b3:11:d5:92:1f:b1:5b:bb:7d:b7:d5:6f:55:f7:02:
ca:0a:93:0f:46:68:a8:b2:f8:2f:f2:ef:78:b2:a0:
81:b6:46:43:db:77:eb:a0:83:9f:47:09:37:1d:78:
e7:78:79:45:63:42:de:68:af:1d:21:f8:37:99:46:
e3:46:2d:b8:72:81:49:ab:65:91:28:06:5b:f7:71:
b2:7a:d7:ab:a4:06:fb:c8:af:4c:3f:83:4d:d8:81:
0b:34:30:4c:1d:0a:3c:55:b9:ad:49:3d:03:c1:39:
7f:64:10:d6:01:cd:53:8c:c6:96:86:82:67:38:ae:
c5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D1:7A:B6:36:FC:D3:14:88:06:5D:06:F7:C9:49:73:D7:20:59:E2
X509v3 Authority Key Identifier:
keyid:B1:1A:6E:BA:7C:0F:02:09:30:47:3F:B7:FA:FC:2D:9C:97:E4:98:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:06:b3:8c:ac:0c:16:02:ba:44:5c:72:4a:0e:34:38:36:8f:
99:12:1e:e9:35:2e:85:95:7a:bb:52:9a:37:b0:1e:92:e2:22:
e7:2a:9d:60:16:28:a7:2a:ee:02:57:0e:6d:4f:8d:1e:17:d9:
d7:40:62:1a:9b:a9:c3:dc:b4:b7:b1:a2:05:9f:fe:06:42:2c:
0c:f8:d5:3b:49:49:c0:f7:ba:c5:62:58:73:29:f7:89:e6:45:
28:a7:e1:e4:6a:51:69:a7:dd:12:9e:29:8c:7e:45:72:eb:87:
a7:65:6c:53:f5:31:7e:cb:da:53:51:36:de:03:5d:42:d4:ec:
76:6d:09:63:2f:ca:ec:a1:f6:87:c5:6c:05:28:52:7d:d1:6e:
f5:e5:a7:a2:18:14:e4:9e:ac:60:bd:0e:21:c3:5a:c2:ee:75:
97:42:5d:2c:84:80:19:8a:a9:11:c5:32:27:9b:0a:0f:fd:4c:
61:5a:25:0d:6d:7f:fa:9b:b2:b2:20:96:56:d8:86:fa:af:80:
08:3c:8e:b9:1c:fa:09:ae:69:2c:0c:2c:3f:09:a6:5b:47:f4:
d5:2f:d0:55:f5:8f:a9:dd:bc:c0:de:7a:69:a0:f5:1f:4d:ed:
ac:94:f5:ca:13:eb:55:ee:c0:3b:37:a9:33:d1:cb:78:11:1a:
18:7f:2e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:48:04 2026 by rpki-client