This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/6B35526165718CDFDDCB202D241332F565BEE7B0.mft
File: 6B35526165718CDFDDCB202D241332F565BEE7B0.mft (raw, json)
Hash identifier: mfBvrPdhU+ooPvnnTwJDdq3tOCZcGzFtBcEZ+BHkEL4=
Subject key identifier: B8:83:F7:1E:7B:71:C3:09:20:9B:F4:91:B1:85:F6:D8:31:B5:11:18
Authority key identifier: 6B:35:52:61:65:71:8C:DF:DD:CB:20:2D:24:13:32:F5:65:BE:E7:B0
Certificate issuer: /CN=6B35526165718CDFDDCB202D241332F565BEE7B0
Certificate serial: 733B667F26FB9F79772C93F802FA9D74AB0DCE8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B35526165718CDFDDCB202D241332F565BEE7B0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/6B35526165718CDFDDCB202D241332F565BEE7B0.mft
Manifest number: 010B
Signing time: Sun 01 Feb 2026 12:01:25 +0000
Manifest this update: Sun 01 Feb 2026 11:56:25 +0000
Manifest next update: Wed 04 Feb 2026 13:27:25 +0000
Files and hashes: 1: 323030313a6466333a623034303a3a2f34382d3438203d3e20313532343432.roa (hash: mKIqmd/EOitm2VkjJ4/rdItHB7wxpB5sjP3tcWKMCX8=)
2: 6B35526165718CDFDDCB202D241332F565BEE7B0.crl (hash: i464VPh5tWnUocfTXTdZt9jgWcjqjXMI8MAOpcRvHwg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/6B35526165718CDFDDCB202D241332F565BEE7B0.crl
rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/6B35526165718CDFDDCB202D241332F565BEE7B0.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B35526165718CDFDDCB202D241332F565BEE7B0.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 13:27:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:3b:66:7f:26:fb:9f:79:77:2c:93:f8:02:fa:9d:74:ab:0d:ce:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B35526165718CDFDDCB202D241332F565BEE7B0
Validity
Not Before: Feb 1 11:56:25 2026 GMT
Not After : Feb 4 13:27:25 2026 GMT
Subject: CN=B883F71E7B71C309209BF491B185F6D831B51118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f0:7f:bd:c3:0a:be:68:98:09:3e:f9:7a:68:
50:0a:49:94:c9:16:2a:f0:b9:90:b2:1c:ef:75:e6:
a1:6b:57:b6:24:5b:c3:b5:d8:c9:3a:fa:e2:8a:fa:
0c:86:db:36:85:c1:aa:08:73:36:34:fb:20:5b:cd:
cc:c0:74:54:9f:1c:d6:e4:c4:05:70:98:5b:c9:78:
c3:78:a8:8b:15:60:12:54:ca:7f:50:49:27:39:2e:
4d:3f:ad:a2:e0:fd:91:4d:32:a2:fd:60:20:c5:c6:
d6:66:c8:20:61:6d:cc:19:7a:28:62:ba:6c:ae:3a:
01:3b:08:be:45:f3:be:90:e9:d4:f5:bb:00:98:46:
8f:70:fc:b1:a7:47:d7:14:81:af:4f:4a:9e:90:e5:
c4:93:d8:14:e5:76:27:ab:9c:06:38:76:c0:e4:26:
c0:7b:6f:ab:79:7c:83:3c:b8:bb:61:89:06:26:1e:
8b:3c:b1:ba:f7:1f:15:98:d5:bd:5b:a5:fc:ec:f4:
21:e7:2f:8e:3f:e4:a8:df:e8:6c:9f:c3:f0:da:85:
f6:b6:c9:8f:76:2c:ea:eb:79:f3:a5:40:bb:77:1c:
30:d2:74:d1:f2:1e:f3:62:9b:b6:b3:78:38:83:21:
d1:a4:06:7a:6f:48:65:33:67:27:0d:d6:a3:cb:a5:
09:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:83:F7:1E:7B:71:C3:09:20:9B:F4:91:B1:85:F6:D8:31:B5:11:18
X509v3 Authority Key Identifier:
keyid:6B:35:52:61:65:71:8C:DF:DD:CB:20:2D:24:13:32:F5:65:BE:E7:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/6B35526165718CDFDDCB202D241332F565BEE7B0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B35526165718CDFDDCB202D241332F565BEE7B0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/6B35526165718CDFDDCB202D241332F565BEE7B0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:34:98:a0:82:0c:68:a0:57:ce:1d:44:48:70:e7:0d:a5:05:
b9:8a:a7:4b:9c:47:28:02:89:6b:f8:6d:8c:57:e9:83:6b:59:
be:ec:b9:33:0a:0b:f2:57:2c:2e:e3:04:ea:80:10:88:3e:51:
b3:25:8e:a3:98:44:33:07:f2:5d:40:0b:ee:f4:cc:c8:06:27:
89:f6:d2:f3:b7:82:b7:10:ba:14:98:27:67:d0:c5:36:4d:57:
cb:5d:77:8f:85:b9:e9:e8:c9:22:ad:8c:ed:96:f8:b1:c2:e2:
fe:ae:11:5f:f3:8c:4f:5c:96:5a:c6:1e:24:f4:c0:e7:be:0f:
d8:f8:54:20:eb:cf:76:05:a6:76:3a:4b:1b:e7:cc:e9:d3:77:
0a:41:48:8e:27:f6:99:cf:1b:fe:cd:7d:e1:2c:d7:5a:60:47:
bd:03:df:e7:ea:e8:cc:23:f8:ec:16:08:2a:40:53:7f:25:0d:
1d:48:64:11:c7:ab:af:87:bf:4d:d1:cd:94:b6:10:a7:c4:1f:
95:5e:7a:78:71:b9:63:7e:f2:de:ae:cc:f3:21:a8:ff:b8:ea:
ed:30:86:2e:9f:d6:81:20:94:7b:f0:ef:e1:36:a5:4c:34:53:
84:06:8a:1e:85:a1:bd:d9:00:7e:c2:8d:db:8a:56:de:42:99:
dd:61:a3:72
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUcztmfyb7n3l3LJP4AvqddKsNzoswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkIzNTUyNjE2NTcxOENERkREQ0IyMDJEMjQxMzMyRjU2
NUJFRTdCMDAeFw0yNjAyMDExMTU2MjVaFw0yNjAyMDQxMzI3MjVaMDMxMTAvBgNV
BAMTKEI4ODNGNzFFN0I3MUMzMDkyMDlCRjQ5MUIxODVGNkQ4MzFCNTExMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz8H+9wwq+aJgJPvl6aFAKSZTJ
FirwuZCyHO915qFrV7YkW8O12Mk6+uKK+gyG2zaFwaoIczY0+yBbzczAdFSfHNbk
xAVwmFvJeMN4qIsVYBJUyn9QSSc5Lk0/raLg/ZFNMqL9YCDFxtZmyCBhbcwZeihi
umyuOgE7CL5F876Q6dT1uwCYRo9w/LGnR9cUga9PSp6Q5cST2BTldiernAY4dsDk
JsB7b6t5fIM8uLthiQYmHos8sbr3HxWY1b1bpfzs9CHnL44/5Kjf6Gyfw/Dahfa2
yY92LOrrefOlQLt3HDDSdNHyHvNim7azeDiDIdGkBnpvSGUzZycN1qPLpQlDAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUuIP3Hntxwwkgm/SRsYX22DG1ERgwHwYDVR0j
BBgwFoAUazVSYWVxjN/dyyAtJBMy9WW+57AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
ODdkZDU5Ny00MGNkLTQwOWItYjNjNS0yODUyY2UwMTQ4ODkvMS82QjM1NTI2MTY1
NzE4Q0RGRERDQjIwMkQyNDEzMzJGNTY1QkVFN0IwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkIzNTUyNjE2NTcxOENERkREQ0IyMDJEMjQxMzMyRjU2NUJF
RTdCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjg3ZGQ1OTctNDBjZC00MDliLWIz
YzUtMjg1MmNlMDE0ODg5LzEvNkIzNTUyNjE2NTcxOENERkREQ0IyMDJEMjQxMzMy
RjU2NUJFRTdCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAM00mKCCDGigV84dREhw5w2lBbmKp0ucRygC
iWv4bYxX6YNrWb7suTMKC/JXLC7jBOqAEIg+UbMljqOYRDMH8l1AC+70zMgGJ4n2
0vO3grcQuhSYJ2fQxTZNV8tdd4+FuenoySKtjO2W+LHC4v6uEV/zjE9cllrGHiT0
wOe+D9j4VCDrz3YFpnY6SxvnzOnTdwpBSI4n9pnPG/7NfeEs11pgR70D3+fq6Mwj
+OwWCCpAU38lDR1IZBHHq6+Hv03RzZS2EKfEH5VeenhxuWN+8t6uzPMhqP+46u0w
hi6f1oEglHvw7+E2pUw0U4QGih6Fob3ZAH7CjduKVt5Cmd1ho3I=
-----END CERTIFICATE-----
Generated at Mon Feb 2 10:03:42 2026 by rpki-client