This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft
File: B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft (raw, json)
Hash identifier: DvBwxjzLOzvn3zMaSk3aum0YgSZJc79HVAMss4VSquE=
Subject key identifier: 85:89:72:91:86:A8:C7:0D:F4:DC:DB:D5:D7:D4:26:51:DF:8F:76:29
Authority key identifier: B6:84:7B:92:8C:30:80:02:82:D7:BA:8E:33:74:82:DF:F4:DE:C8:A5
Certificate issuer: /CN=B6847B928C30800282D7BA8E337482DFF4DEC8A5
Certificate serial: 05E8D1F9E81D9FD5778BC330E533C9D8EED07869
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft
Manifest number: 0544
Signing time: Sat 24 Jan 2026 05:01:29 +0000
Manifest this update: Sat 24 Jan 2026 04:56:29 +0000
Manifest next update: Tue 27 Jan 2026 07:49:29 +0000
Files and hashes: 1: 323030313a6466363a343530303a3a2f34382d3438203d3e20313338303539.roa (hash: IoCq5Fr7ucJSiJXgyl0hLajgLtZdo657+jXfL09lCzQ=)
2: B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl (hash: YMjDF1fDdfbYxhoz4cRCbE4SZMd1BxyR1FiTsf8dIZw=)
3: 3130332e3132312e3132332e302f32342d3234203d3e20313338303539.roa (hash: Zl03XVx57nbxitWYw7MeSszUElsg5oZ5jVn5EskWk+g=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl
rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 07:49:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:e8:d1:f9:e8:1d:9f:d5:77:8b:c3:30:e5:33:c9:d8:ee:d0:78:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6847B928C30800282D7BA8E337482DFF4DEC8A5
Validity
Not Before: Jan 24 04:56:29 2026 GMT
Not After : Jan 27 07:49:29 2026 GMT
Subject: CN=8589729186A8C70DF4DCDBD5D7D42651DF8F7629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6c:d6:81:2b:1e:0c:34:55:b3:0f:20:ee:51:
f5:10:74:be:5b:62:07:d7:d1:9a:2e:66:63:9d:18:
b2:5e:e1:1b:d0:da:4a:93:a0:da:a5:c1:d8:51:ac:
11:7e:dc:53:f4:39:bc:ad:90:b4:69:5f:ea:53:2f:
1c:c7:21:a0:bb:bd:71:be:08:84:e3:52:95:d0:2e:
4e:55:1c:1d:bc:77:f1:8e:11:e6:bc:a8:2d:13:e7:
95:4d:70:72:cf:f9:c8:c6:6c:5a:5e:fd:72:7a:6b:
11:8d:22:81:69:9f:7a:bf:09:06:23:38:fa:7d:49:
dd:e2:36:10:68:01:1a:a4:87:43:4a:07:0b:26:e1:
3a:4c:5e:8e:fb:e5:30:a3:a5:7c:17:55:5a:b9:18:
db:8a:d4:8b:2a:35:a6:7c:82:ce:50:29:6a:1a:29:
0f:49:5e:15:da:e3:ad:13:9b:85:e5:3a:e5:9e:13:
d3:d7:b1:21:4a:e9:db:63:9a:2e:f8:ea:11:ae:0f:
9d:cb:8e:db:d8:15:69:52:6a:06:a4:9c:b0:66:da:
a0:39:9a:a5:9e:9f:d0:c9:05:c9:f7:b8:11:32:9d:
9e:2b:06:75:f9:a6:bc:24:2f:ef:bc:fe:b0:81:2c:
d6:3f:db:51:bb:4b:4d:67:f8:91:c5:f3:44:8d:05:
58:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:89:72:91:86:A8:C7:0D:F4:DC:DB:D5:D7:D4:26:51:DF:8F:76:29
X509v3 Authority Key Identifier:
keyid:B6:84:7B:92:8C:30:80:02:82:D7:BA:8E:33:74:82:DF:F4:DE:C8:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:b5:77:59:39:22:55:f5:8d:20:98:d0:65:0a:70:a5:49:b9:
2d:a0:a9:30:99:a2:31:7b:13:a7:35:0c:eb:ca:77:22:2d:73:
0b:09:c4:f3:f4:96:51:c3:f6:47:99:a3:2d:f2:08:d8:13:1d:
87:9e:fb:14:0d:da:a6:be:d8:15:04:53:40:f0:92:2f:6f:f2:
21:94:bc:3e:34:09:8e:5b:a1:45:54:df:f4:5a:94:2a:e2:d5:
e7:37:76:48:b6:a7:9b:26:e9:f6:a0:78:17:5e:9d:30:2d:d1:
eb:95:11:4f:61:e4:0d:f3:2f:7a:45:e3:d3:8f:b5:a2:a7:51:
b6:6f:4f:09:a5:95:0e:a0:35:73:13:09:dd:8d:1d:e5:69:6b:
65:4c:79:1a:5b:51:30:f6:b1:45:8c:77:d6:50:f8:2c:1f:7b:
26:46:15:ce:e4:63:9d:fb:f2:17:d2:d1:dc:2b:38:5c:17:ad:
7c:71:83:66:07:57:60:9e:27:a5:a2:48:c7:f3:f8:3d:12:8e:
f8:95:09:db:3b:e9:77:23:b1:f2:19:8e:da:cd:0f:cf:c1:9c:
f8:b6:08:59:69:19:f2:2a:c9:89:6d:da:1b:56:9c:e0:bc:22:
83:9d:d7:5d:93:6c:7f:a4:e5:2a:45:be:62:ea:33:59:58:e8:
7a:b9:d2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:55:38 2026 by rpki-client