This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft
File: B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft (raw, json)
Hash identifier: r8j1SGnzokSjasUYxsRMaot0Ja8wxBRnA8HN8gT9P9o=
Subject key identifier: 95:E0:50:54:56:9A:C9:20:8E:AE:71:61:C6:D5:D9:21:84:88:EA:AA
Authority key identifier: B7:0A:D8:6C:83:CA:BA:C7:AA:D7:B6:64:F2:F6:24:8A:4C:42:BF:84
Certificate issuer: /CN=B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84
Certificate serial: 7399C02A741EA329BA96CFF0DEFF0DB545283243
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft
Manifest number: 04E6
Signing time: Sat 31 Jan 2026 13:21:59 +0000
Manifest this update: Sat 31 Jan 2026 13:16:59 +0000
Manifest next update: Tue 03 Feb 2026 23:42:59 +0000
Files and hashes: 1: 3130332e3136302e35362e302f32332d3234203d3e20313431353830.roa (hash: Ygp8V6ySgNlfzeAzxcG8tV45vBV3m6RFvl0r9jM7VeY=)
2: B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.crl (hash: QxakBCXryFv1j8DAYtN0muMa0IGYI6SSP9joeFeQTlg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.crl
rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 23:42:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:99:c0:2a:74:1e:a3:29:ba:96:cf:f0:de:ff:0d:b5:45:28:32:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84
Validity
Not Before: Jan 31 13:16:59 2026 GMT
Not After : Feb 3 23:42:59 2026 GMT
Subject: CN=95E05054569AC9208EAE7161C6D5D9218488EAAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:70:4f:2f:3f:aa:75:06:23:7e:1a:53:ee:87:
a8:4a:bf:90:4e:2d:e3:e7:21:03:25:94:49:91:91:
e0:1f:e8:9e:f3:0f:2c:8b:48:55:ab:f5:11:76:5b:
e7:9f:9c:3c:1f:ae:b0:38:36:29:97:6d:a0:49:c8:
c9:a3:4c:88:48:9e:af:ce:e4:2c:db:43:3c:2a:0d:
b3:57:0f:34:63:5d:69:df:36:38:24:bf:b5:f3:43:
d5:38:09:b6:c8:ea:eb:55:ff:46:d2:08:6b:32:a1:
e7:3d:29:e5:15:00:ca:1c:64:4c:d3:3a:d3:b6:9a:
71:c3:d4:0c:ae:26:29:2a:79:7f:0f:8e:98:23:51:
d9:44:34:79:28:ae:e4:80:0c:ba:92:8f:6a:42:25:
2e:4d:7c:48:05:d5:e5:84:e5:bc:cf:5d:76:06:ef:
ef:3f:9f:a9:6a:8d:b2:71:cb:9a:d4:65:5b:6b:a1:
05:84:2c:a5:86:48:87:88:6e:c5:ee:b0:7d:08:6e:
0f:9d:7e:e6:89:c9:be:87:18:bc:18:6c:f7:fa:bd:
ab:e1:88:f3:ef:3c:d0:2e:72:56:2b:0c:19:a3:8c:
19:70:26:cd:50:57:50:0a:b5:33:e5:52:12:be:a9:
1a:35:2e:0b:ec:2f:6d:40:dd:a5:db:22:6a:43:45:
09:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E0:50:54:56:9A:C9:20:8E:AE:71:61:C6:D5:D9:21:84:88:EA:AA
X509v3 Authority Key Identifier:
keyid:B7:0A:D8:6C:83:CA:BA:C7:AA:D7:B6:64:F2:F6:24:8A:4C:42:BF:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e0:8c:b5:94:1d:9d:1e:9f:4c:b4:a0:de:f4:ff:27:f7:2c:
a2:a4:3a:96:0c:fa:80:b1:ab:85:3d:af:e5:cc:9f:a9:1c:00:
60:07:f2:88:a1:5a:59:8c:d0:49:ed:48:52:ff:c9:04:67:b4:
55:6b:20:a0:c3:cc:7e:78:e5:88:49:10:8e:0d:a4:4a:d4:51:
05:0b:1e:fa:f7:ee:93:58:07:36:aa:80:7e:fd:73:93:73:4e:
fb:b2:9a:bd:2f:bf:79:35:8a:b3:d7:c5:66:bb:78:c7:e0:ab:
ad:27:09:19:d5:e9:a6:8b:8a:f3:20:7e:8c:98:c7:2b:a6:85:
fc:62:a9:9f:83:2f:4a:80:9c:66:6e:32:c4:41:6a:6c:c4:ab:
4e:b9:f6:40:4a:7b:96:47:46:0e:3d:a6:fa:49:f2:e8:46:3e:
54:6c:73:28:4e:69:38:04:d9:43:6a:9e:37:78:fd:09:da:a8:
1a:43:8d:b3:8d:fa:14:21:dd:b7:23:43:04:30:cb:7e:e8:86:
2f:da:24:d8:20:8c:c4:34:85:7f:fe:78:90:03:f6:a5:4f:90:
e7:47:2c:c5:46:8a:72:2a:8e:a0:b9:b5:f1:b9:cd:3b:a5:bd:
d5:1b:3c:ec:22:31:1b:36:cd:21:ba:d8:37:05:99:a9:47:72:
2d:65:d1:a7
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUc5nAKnQeoym6ls/w3v8NtUUoMkMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjcwQUQ4NkM4M0NBQkFDN0FBRDdCNjY0RjJGNjI0OEE0
QzQyQkY4NDAeFw0yNjAxMzExMzE2NTlaFw0yNjAyMDMyMzQyNTlaMDMxMTAvBgNV
BAMTKDk1RTA1MDU0NTY5QUM5MjA4RUFFNzE2MUM2RDVEOTIxODQ4OEVBQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbcE8vP6p1BiN+GlPuh6hKv5BO
LePnIQMllEmRkeAf6J7zDyyLSFWr9RF2W+efnDwfrrA4NimXbaBJyMmjTIhInq/O
5CzbQzwqDbNXDzRjXWnfNjgkv7XzQ9U4CbbI6utV/0bSCGsyoec9KeUVAMocZEzT
OtO2mnHD1AyuJikqeX8PjpgjUdlENHkoruSADLqSj2pCJS5NfEgF1eWE5bzPXXYG
7+8/n6lqjbJxy5rUZVtroQWELKWGSIeIbsXusH0Ibg+dfuaJyb6HGLwYbPf6vavh
iPPvPNAuclYrDBmjjBlwJs1QV1AKtTPlUhK+qRo1LgvsL21A3aXbImpDRQmVAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUleBQVFaaySCOrnFhxtXZIYSI6qowHwYDVR0j
BBgwFoAUtwrYbIPKuseq17Zk8vYkikxCv4QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
MWI5MzY4Ny0yYjIwLTQxYzktYmZiYi0wMDVmNjdlOTZhOGMvMC9CNzBBRDg2Qzgz
Q0FCQUM3QUFEN0I2NjRGMkY2MjQ4QTRDNDJCRjg0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjcwQUQ4NkM4M0NBQkFDN0FBRDdCNjY0RjJGNjI0OEE0QzQy
QkY4NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFiOTM2ODctMmIyMC00MWM5LWJm
YmItMDA1ZjY3ZTk2YThjLzAvQjcwQUQ4NkM4M0NBQkFDN0FBRDdCNjY0RjJGNjI0
OEE0QzQyQkY4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAA7gjLWUHZ0en0y0oN70/yf3LKKkOpYM+oCx
q4U9r+XMn6kcAGAH8oihWlmM0EntSFL/yQRntFVrIKDDzH545YhJEI4NpErUUQUL
Hvr37pNYBzaqgH79c5NzTvuymr0vv3k1irPXxWa7eMfgq60nCRnV6aaLivMgfoyY
xyumhfxiqZ+DL0qAnGZuMsRBamzEq0659kBKe5ZHRg49pvpJ8uhGPlRscyhOaTgE
2UNqnjd4/QnaqBpDjbON+hQh3bcjQwQwy37ohi/aJNggjMQ0hX/+eJAD9qVPkOdH
LMVGinIqjqC5tfG5zTulvdUbPOwiMRs2zSG62DcFmalHci1l0ac=
-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:21 2026 by rpki-client