This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft
File: D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft (raw, json)
Hash identifier: 4VSw8e9Pti7Ybya6Q2LbQl4p7AX4Hh/OigwGRQA5bsA=
Subject key identifier: 6B:4D:53:7F:2B:5C:21:52:D5:13:9F:E1:B0:CD:B6:42:EF:81:AE:51
Authority key identifier: D8:5B:24:E8:18:A4:DA:C3:88:41:5F:B8:C9:69:05:DF:03:C8:D6:EA
Certificate issuer: /CN=D85B24E818A4DAC388415FB8C96905DF03C8D6EA
Certificate serial: 64FA4A34C288C479D8CC65B503D281CA41FE2D34
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft
Manifest number: 01E1
Signing time: Sat 31 Jan 2026 06:22:05 +0000
Manifest this update: Sat 31 Jan 2026 06:17:05 +0000
Manifest next update: Tue 03 Feb 2026 12:29:05 +0000
Files and hashes: 1: 3130332e3131382e3132312e302f32342d3234203d3e20313530323033.roa (hash: XcmiTK4lbXwTUsCM0a8uD99kDHrKe3SuEWNxjOChLtA=)
2: D85B24E818A4DAC388415FB8C96905DF03C8D6EA.crl (hash: HxyCqjwMBYrKBAUqfxaHz8BIh2wO2m/nwPjKZ9PvYdo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.crl
rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 12:29:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:fa:4a:34:c2:88:c4:79:d8:cc:65:b5:03:d2:81:ca:41:fe:2d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D85B24E818A4DAC388415FB8C96905DF03C8D6EA
Validity
Not Before: Jan 31 06:17:05 2026 GMT
Not After : Feb 3 12:29:05 2026 GMT
Subject: CN=6B4D537F2B5C2152D5139FE1B0CDB642EF81AE51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5b:3d:54:ee:77:eb:53:9f:df:9a:8d:7b:14:
b7:08:e2:b5:31:1f:12:b6:fb:f0:3f:b0:99:f7:f8:
93:26:33:1d:00:a9:07:f5:aa:62:1f:7c:d2:c2:8a:
b3:b2:7e:99:20:b7:80:7f:6a:7e:4e:d5:fd:6a:b6:
23:2a:f1:e7:8a:45:55:ce:04:41:43:77:2f:9b:97:
d9:c4:8b:e5:63:0f:38:a0:14:a6:0f:62:08:f0:6c:
c6:e1:ba:1d:e2:98:d2:08:51:2e:2d:87:82:89:27:
40:6c:1e:52:18:73:21:39:58:b4:ca:94:57:04:7d:
fe:72:0a:de:a5:18:ee:ee:4b:a1:98:ce:4a:d9:a0:
e9:20:a6:59:2c:25:27:37:d6:c2:f1:a2:04:5c:1e:
35:8b:1d:4b:00:ac:6e:f2:0c:d2:a3:a0:e3:27:5e:
82:62:a2:a7:bf:75:ca:a0:df:84:04:9c:3a:0d:b8:
45:82:b9:8e:1a:c4:db:32:6c:3c:57:ad:7d:1a:fa:
39:2f:ef:f8:e6:cb:83:14:b3:15:9f:63:5c:16:94:
a8:5e:4e:61:40:05:ab:16:e6:d1:64:12:cc:e0:63:
7f:1c:2d:e4:91:36:0e:d0:6c:bb:42:9e:c1:54:5a:
28:1d:35:79:1b:4c:40:7d:42:d7:2d:ca:52:c1:35:
1c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:4D:53:7F:2B:5C:21:52:D5:13:9F:E1:B0:CD:B6:42:EF:81:AE:51
X509v3 Authority Key Identifier:
keyid:D8:5B:24:E8:18:A4:DA:C3:88:41:5F:B8:C9:69:05:DF:03:C8:D6:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:28:6d:4b:d3:1e:ab:80:a0:7c:29:9e:bc:d9:c5:fb:e1:cb:
cf:9a:de:ea:25:15:36:99:52:69:89:f9:5c:17:94:22:86:8a:
44:10:0a:96:95:19:51:1a:0a:c4:ab:7f:68:48:44:4e:cf:34:
8c:36:7e:3d:29:de:e0:76:70:1e:0d:df:1e:dc:bd:07:6b:64:
e8:d6:a4:ec:ad:8a:57:9a:6d:41:f6:37:f3:4b:58:5a:7f:ae:
81:e3:7c:17:40:0d:22:1f:32:43:71:e9:a7:97:f3:0a:f2:24:
c2:24:79:bf:ba:57:93:53:51:15:44:20:b3:77:2e:c3:dd:d4:
18:cd:a2:50:e6:62:4e:b3:76:6e:e5:83:f6:0b:91:a7:6a:35:
f6:89:a9:7a:8a:f3:19:58:6d:b4:f1:2e:7d:cc:b6:32:64:3a:
3b:92:19:73:e5:44:2b:fe:45:39:9b:79:b1:86:36:6b:ba:77:
f8:a9:e6:b3:b3:cd:78:4e:4c:f7:80:5b:2b:07:68:3a:97:d9:
08:6c:86:8d:bb:3d:c6:b1:ff:dd:73:aa:4f:9e:26:56:9d:2d:
5f:ce:64:2f:ff:25:2c:17:58:93:bf:d0:ab:70:27:35:f9:d0:
67:d0:c2:6d:f3:8b:57:5e:0e:75:ed:00:f5:fd:81:f8:0c:08:
f2:d1:df:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:04:22 2026 by rpki-client