This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft
File: B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft (raw, json)
Hash identifier: Nb43mwsHl78ltVBTiHC6Qw948kyEZvJrixwqm5vFY/c=
Subject key identifier: 06:00:8F:2C:CC:2F:86:86:3B:90:DA:77:C5:EE:92:A6:DE:C1:73:27
Authority key identifier: B6:5D:14:60:AC:FC:8D:91:18:33:81:DC:64:E5:2D:2E:28:2D:14:B0
Certificate issuer: /CN=B65D1460ACFC8D91183381DC64E52D2E282D14B0
Certificate serial: 6B591CC24B54E05A24E3821CFE10D37DCEE13C3F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft
Manifest number: 0542
Signing time: Sat 24 Jan 2026 23:11:11 +0000
Manifest this update: Sat 24 Jan 2026 23:06:11 +0000
Manifest next update: Wed 28 Jan 2026 00:14:11 +0000
Files and hashes: 1: 3130332e3134322e3138332e302f32342d3234203d3e20313339343031.roa (hash: BnRp094CwKD0wwlckS4UWOO+QLVyTBF/UCeVs1CPJ7o=)
2: 3130332e3134322e3138322e302f32332d3233203d3e20313339343031.roa (hash: nDJsXQF4hqhJpcR0lg3wt+EWX7mJLFJQ/flot1hEV/U=)
3: 323430353a336663303a3a2f33322d3332203d3e20313339343031.roa (hash: nFTgph+YloLgW+6sxuKRYCRq1ouvahd5GZWPN5dkEg0=)
4: 3130332e3134322e3138322e302f32342d3234203d3e20313339343031.roa (hash: ToIgM0jAxY4WS16atQIWn5JwGnfQgFyIoACDw/eMgWU=)
5: B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl (hash: PJKcG9FnuGkQ+TYt6mxH1MoEtGsonRYaNad06XB8EZQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl
rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 00:14:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:59:1c:c2:4b:54:e0:5a:24:e3:82:1c:fe:10:d3:7d:ce:e1:3c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B65D1460ACFC8D91183381DC64E52D2E282D14B0
Validity
Not Before: Jan 24 23:06:11 2026 GMT
Not After : Jan 28 00:14:11 2026 GMT
Subject: CN=06008F2CCC2F86863B90DA77C5EE92A6DEC17327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3f:e0:83:6a:f6:f3:04:95:28:7d:65:f0:55:
5c:71:86:de:3f:07:48:36:81:ac:90:35:f1:7a:86:
44:5e:63:7c:1e:ff:c2:7d:17:bc:37:44:5b:fc:d6:
c4:ee:77:51:fb:f1:5b:e1:e9:2d:a4:48:1e:20:d3:
29:7d:32:c7:9a:98:d1:83:56:36:f2:be:1d:e9:9c:
75:b7:28:df:64:64:6b:a1:15:24:15:36:78:e4:38:
4a:b0:3c:5b:4b:f0:d1:59:fc:8d:50:d3:f6:c3:34:
43:c3:99:c3:cf:fe:1a:7a:a8:0e:b7:e5:c3:03:45:
de:59:91:be:5d:85:32:e8:9e:41:54:d9:01:b1:c7:
15:33:88:e2:65:ad:fe:e1:46:1b:1f:bc:22:d6:e5:
79:2a:ee:e6:00:d6:ee:7f:02:a0:a8:8f:6f:d7:3f:
42:fc:13:82:6c:1b:b9:5a:bf:e9:ef:0f:2e:50:74:
ea:6f:79:9f:7f:4c:df:51:ba:6e:a0:21:a0:80:a8:
a0:17:d7:57:6d:0b:a6:f5:10:10:d6:5b:90:c1:ec:
32:ec:4e:df:75:9e:bb:2e:2c:fb:7d:c7:4f:a5:d6:
c0:11:ae:0c:77:23:0c:65:4d:99:5a:47:d9:26:51:
c1:4e:71:97:b1:fb:e8:62:93:e1:44:f3:8e:16:64:
5c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:00:8F:2C:CC:2F:86:86:3B:90:DA:77:C5:EE:92:A6:DE:C1:73:27
X509v3 Authority Key Identifier:
keyid:B6:5D:14:60:AC:FC:8D:91:18:33:81:DC:64:E5:2D:2E:28:2D:14:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f8:5d:f5:a6:41:92:c9:b5:46:8b:a5:11:f0:dc:ea:63:99:
95:a6:48:ab:97:29:de:17:c7:42:6d:1b:9e:e8:b8:6d:14:da:
79:38:81:9b:cf:b4:f8:9c:78:7f:c1:15:40:e6:e0:60:5c:53:
3a:44:04:89:a1:1f:da:a4:66:fb:2b:04:a6:2d:96:62:ac:a2:
a6:12:67:f1:a1:cd:d3:8d:cd:61:ac:e7:f4:f9:4d:fa:18:55:
f8:70:f7:2e:9b:20:3d:58:f9:7e:81:cb:ee:c5:7e:8a:b7:c2:
fe:07:23:2a:77:d7:fa:f2:5b:d9:2b:93:d6:77:22:1a:95:0c:
ef:88:c8:12:28:bf:14:29:dc:a8:54:16:4c:b3:48:87:2f:88:
e2:0a:47:c2:b0:d0:17:f7:cd:29:c0:1d:97:9c:55:07:b8:18:
57:29:bc:ae:f4:91:20:eb:37:02:3c:a0:9e:78:26:5f:78:a3:
f5:b2:b2:03:b6:d5:1d:05:42:48:27:10:47:00:2f:28:eb:8e:
9f:a4:42:d0:b0:da:49:d0:57:8e:19:d2:5e:cb:32:8f:29:63:
82:71:d3:a2:2a:b4:f3:85:bf:aa:b1:5b:96:49:38:ec:0f:34:
ba:eb:36:1e:88:74:01:65:85:2c:c5:20:11:cc:41:37:be:b8:
40:08:60:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:11:36 2026 by rpki-client