This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft
File: 65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft (raw, json)
Hash identifier: zldCzZvskf2l/IKoNSYnDL5hZ1HJ4e087bFDxYPpur4=
Subject key identifier: 09:9F:CE:A1:47:54:DB:EE:8D:01:1A:78:25:54:F8:EC:00:CA:62:D2
Authority key identifier: 65:AE:76:52:88:A0:8C:93:01:DB:21:B4:DD:DD:96:6B:2F:23:A7:EB
Certificate issuer: /CN=65AE765288A08C9301DB21B4DDDD966B2F23A7EB
Certificate serial: 2282B90C40E3823AED7386920D784864C199BE71
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft
Manifest number: 0541
Signing time: Sat 24 Jan 2026 23:31:36 +0000
Manifest this update: Sat 24 Jan 2026 23:26:36 +0000
Manifest next update: Wed 28 Jan 2026 01:45:36 +0000
Files and hashes: 1: 65AE765288A08C9301DB21B4DDDD966B2F23A7EB.crl (hash: BgOVaIvaZWSDdKcdUD71Opk5UdMu1Sd5orHo/jEBG/s=)
2: 323030313a6466363a353930303a3a2f34382d3438203d3e20313338303536.roa (hash: LgOYiZeIIYet155UBAg0l2uIirVSZ4M3B9DiKsyKUTo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.crl
rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 01:45:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:82:b9:0c:40:e3:82:3a:ed:73:86:92:0d:78:48:64:c1:99:be:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65AE765288A08C9301DB21B4DDDD966B2F23A7EB
Validity
Not Before: Jan 24 23:26:36 2026 GMT
Not After : Jan 28 01:45:36 2026 GMT
Subject: CN=099FCEA14754DBEE8D011A782554F8EC00CA62D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e6:91:ec:e5:e3:76:9d:5f:d9:0c:08:84:3c:
e9:95:66:dd:e2:74:57:77:64:99:72:90:86:2f:75:
67:20:93:c5:9f:b4:af:6d:e0:1a:02:c2:8d:9b:9a:
29:bd:c7:c4:71:db:b3:88:97:db:4a:19:30:89:fa:
52:23:9c:70:5c:87:e9:0a:56:a8:fa:db:30:14:b0:
c3:35:64:f8:9a:c0:ad:9f:93:d8:09:f8:89:1f:85:
3d:09:79:5a:7f:7c:0f:ca:3f:f0:b3:df:95:35:38:
1c:7b:4e:8c:21:05:05:33:fe:b0:6e:59:41:8f:c0:
bb:9c:52:f0:79:4c:29:59:eb:2e:79:e8:c1:42:80:
86:cd:8d:3c:cc:76:f7:39:e0:56:91:68:4f:e9:57:
ee:7e:a8:99:0c:75:62:83:59:69:8c:ad:83:60:fc:
22:21:76:4b:96:18:c6:bf:cc:c9:38:3f:9d:56:af:
85:e3:1d:6a:14:86:47:2c:32:05:f6:f5:d4:49:b2:
62:a5:15:ae:89:6e:05:14:c0:aa:72:9f:b1:58:cf:
01:cd:da:27:7d:47:15:f9:b2:db:3e:5e:73:81:f9:
f2:a1:d6:b6:9a:33:d5:d2:f0:5e:dc:9b:d6:2f:60:
77:bb:d8:1a:1e:ec:69:b4:0c:41:86:c6:a5:50:4e:
ac:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:9F:CE:A1:47:54:DB:EE:8D:01:1A:78:25:54:F8:EC:00:CA:62:D2
X509v3 Authority Key Identifier:
keyid:65:AE:76:52:88:A0:8C:93:01:DB:21:B4:DD:DD:96:6B:2F:23:A7:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b3:7b:ca:aa:54:07:b0:b5:f6:48:2c:77:4a:3b:0a:c6:e0:
8a:68:a1:90:5e:26:4b:a8:c2:9a:f0:40:c8:b4:a5:73:64:cd:
fd:41:8e:dd:a0:2b:aa:f0:17:25:52:ef:6b:a0:68:b9:58:97:
23:6c:94:71:81:73:fc:cd:a3:de:0e:bb:52:33:61:73:1d:03:
7d:90:41:ff:5d:ee:4f:3c:fc:09:50:d0:af:fd:af:26:31:a4:
f6:94:2e:b8:d8:07:97:2b:1f:61:5b:fa:22:ad:1b:e6:37:80:
f8:30:d2:05:1f:4c:16:7f:21:58:a5:c6:6c:dc:1b:64:19:68:
1c:45:e4:57:bb:7b:3f:53:dd:41:e2:4d:a4:da:4a:e2:52:a7:
e1:f2:aa:eb:93:5a:d3:fb:74:67:82:a8:a6:6e:ef:91:82:23:
27:5b:d9:1f:85:9e:fd:d1:75:6e:c9:0d:dc:b0:f7:aa:ca:75:
fb:21:8e:ce:fb:e9:ba:f8:2c:34:63:05:96:cd:27:46:4e:18:
34:aa:db:6f:a1:56:47:84:f1:ee:5d:f2:7b:61:2f:9d:93:1d:
65:09:85:38:41:66:4f:28:bf:dc:a4:48:5c:4e:b6:02:68:3b:
5d:5f:f0:94:9c:8f:89:82:40:a1:7d:d3:78:ac:16:28:c3:fa:
6e:1a:d1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:33:25 2026 by rpki-client