This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft
File: B1F0A7585ED1882783C6AF802B826607ABB92671.mft (raw, json)
Hash identifier: uKqoA6uMsd54LYpYgZ0WQ0uANB0HcijR70yZKACLmLE=
Subject key identifier: 32:61:46:22:99:87:BA:D1:04:5C:61:84:32:EF:D1:C5:30:40:85:E9
Authority key identifier: B1:F0:A7:58:5E:D1:88:27:83:C6:AF:80:2B:82:66:07:AB:B9:26:71
Certificate issuer: /CN=B1F0A7585ED1882783C6AF802B826607ABB92671
Certificate serial: 1518D8524EFA4D91DF50C1161A74BD499071F20A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B1F0A7585ED1882783C6AF802B826607ABB92671.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft
Manifest number: E0
Signing time: Sat 24 Jan 2026 07:12:27 +0000
Manifest this update: Sat 24 Jan 2026 07:07:27 +0000
Manifest next update: Tue 27 Jan 2026 08:07:27 +0000
Files and hashes: 1: 3136302e3138372e33362e302f32342d3234203d3e20313533333237.roa (hash: W6x4NYRtAG+Mf6fIyPCm/XsF8bO9fqqOCjC78Il5Kyw=)
2: B1F0A7585ED1882783C6AF802B826607ABB92671.crl (hash: HSzwtSjNL0zIQeePuPIVgNqhPMP7bxZpXjCy5mUeCAw=)
3: 3136302e3138372e33372e302f32342d3234203d3e20313533333237.roa (hash: HwU0+K4pKIjqZ0rwzIAxU1cLuPfwooIJjDIs7VIOPKk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.crl
rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B1F0A7585ED1882783C6AF802B826607ABB92671.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 08:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:18:d8:52:4e:fa:4d:91:df:50:c1:16:1a:74:bd:49:90:71:f2:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1F0A7585ED1882783C6AF802B826607ABB92671
Validity
Not Before: Jan 24 07:07:27 2026 GMT
Not After : Jan 27 08:07:27 2026 GMT
Subject: CN=326146229987BAD1045C618432EFD1C5304085E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ce:22:59:0a:aa:c8:3d:90:ee:22:77:79:d1:
2c:bc:0d:b4:29:bd:1d:1e:92:9f:a0:a3:6f:82:32:
f8:ef:9e:2c:3d:55:cc:df:62:d5:39:a0:d2:04:59:
93:a7:5c:53:3c:a7:92:9c:52:e3:e8:8a:b3:e0:d9:
a4:8a:f9:49:27:58:f8:54:8c:55:ed:99:79:ac:1c:
bc:68:09:b6:00:4c:a1:be:39:78:7f:9f:d8:8b:20:
ed:bf:08:5b:5c:54:d8:e8:c0:6f:14:38:4f:cf:7d:
28:03:70:7c:b5:8e:51:7c:21:f1:90:44:01:7a:7f:
a6:55:18:3e:36:06:5e:35:c7:63:d9:ef:91:08:52:
44:9e:02:81:b7:be:c7:d0:36:f8:23:35:c2:40:b7:
f9:4e:9b:ff:f5:4b:1c:21:98:9b:a0:f2:c7:ec:aa:
a4:24:9f:b9:81:62:8f:0f:fb:57:c0:08:41:e2:5e:
07:97:84:4b:fb:7e:30:79:42:2e:e1:84:f4:ad:72:
72:03:4c:f1:5d:a2:8f:19:ce:dd:53:09:ee:1d:56:
b0:07:26:cf:23:6b:80:95:ca:84:84:4c:9f:3c:0d:
10:13:67:35:72:be:9e:a4:cd:dd:1f:1e:8d:f3:8e:
31:e2:97:08:c9:4d:5c:22:5d:b4:8e:66:d6:81:16:
a1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:61:46:22:99:87:BA:D1:04:5C:61:84:32:EF:D1:C5:30:40:85:E9
X509v3 Authority Key Identifier:
keyid:B1:F0:A7:58:5E:D1:88:27:83:C6:AF:80:2B:82:66:07:AB:B9:26:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B1F0A7585ED1882783C6AF802B826607ABB92671.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:57:df:e1:7f:6d:2d:09:46:3c:01:c8:6b:23:ea:ca:74:7a:
71:3c:37:33:77:ff:b9:2a:06:96:38:16:36:48:dc:59:a7:b0:
1c:bf:ec:a4:c8:b1:2a:24:4c:82:09:c9:a0:1f:51:43:3f:f5:
70:27:88:d1:a7:42:b5:3d:be:e8:10:f1:fe:9c:f6:63:db:6a:
4a:9e:5d:0d:e7:ad:da:69:c2:be:a4:e6:ee:02:f4:e2:0a:54:
36:c6:1b:48:80:81:86:c2:03:01:24:05:55:74:24:66:b1:6e:
fc:a5:5a:56:32:98:49:06:94:27:87:cf:80:fc:09:17:f1:2b:
67:19:1d:b8:58:3d:b6:4a:ae:cb:a3:4c:00:51:d0:f3:92:71:
2b:81:3d:64:d3:3d:df:13:04:ed:a4:9c:32:34:fb:d5:0a:b5:
b5:17:f2:c0:99:18:38:45:78:37:c0:3c:43:2f:d1:d3:d8:d5:
36:43:db:8d:26:02:ae:0d:68:e2:47:8c:16:e4:fa:30:8b:62:
38:31:13:50:d8:ec:54:e0:c3:c0:43:46:63:59:83:5b:09:d3:
ba:b0:3e:57:48:aa:f4:29:08:4a:06:77:30:4d:eb:43:88:02:
3d:7e:e9:a5:a3:ad:e8:89:48:b3:20:fe:bd:97:7d:94:e6:61:
3e:3b:26:b7
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUFRjYUk76TZHfUMEWGnS9SZBx8gowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFGMEE3NTg1RUQxODgyNzgzQzZBRjgwMkI4MjY2MDdB
QkI5MjY3MTAeFw0yNjAxMjQwNzA3MjdaFw0yNjAxMjcwODA3MjdaMDMxMTAvBgNV
BAMTKDMyNjE0NjIyOTk4N0JBRDEwNDVDNjE4NDMyRUZEMUM1MzA0MDg1RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkziJZCqrIPZDuInd50Sy8DbQp
vR0ekp+go2+CMvjvniw9VczfYtU5oNIEWZOnXFM8p5KcUuPoirPg2aSK+UknWPhU
jFXtmXmsHLxoCbYATKG+OXh/n9iLIO2/CFtcVNjowG8UOE/PfSgDcHy1jlF8IfGQ
RAF6f6ZVGD42Bl41x2PZ75EIUkSeAoG3vsfQNvgjNcJAt/lOm//1SxwhmJug8sfs
qqQkn7mBYo8P+1fACEHiXgeXhEv7fjB5Qi7hhPStcnIDTPFdoo8Zzt1TCe4dVrAH
Js8ja4CVyoSETJ88DRATZzVyvp6kzd0fHo3zjjHilwjJTVwiXbSOZtaBFqHTAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUMmFGIpmHutEEXGGEMu/RxTBAhekwHwYDVR0j
BBgwFoAUsfCnWF7RiCeDxq+AK4JmB6u5JnEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
ODkxMzg5My01ZjY0LTRhNWUtYThkMi01ZDUxZWJkZTQ3M2YvMC9CMUYwQTc1ODVF
RDE4ODI3ODNDNkFGODAyQjgyNjYwN0FCQjkyNjcxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvQjFGMEE3NTg1RUQxODgyNzgzQzZBRjgwMkI4MjY2MDdBQkI5
MjY3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzg5MTM4OTMtNWY2NC00YTVlLWE4
ZDItNWQ1MWViZGU0NzNmLzAvQjFGMEE3NTg1RUQxODgyNzgzQzZBRjgwMkI4MjY2
MDdBQkI5MjY3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAK9X3+F/bS0JRjwByGsj6sp0enE8NzN3/7kq
BpY4FjZI3FmnsBy/7KTIsSokTIIJyaAfUUM/9XAniNGnQrU9vugQ8f6c9mPbakqe
XQ3nrdppwr6k5u4C9OIKVDbGG0iAgYbCAwEkBVV0JGaxbvylWlYymEkGlCeHz4D8
CRfxK2cZHbhYPbZKrsujTABR0POScSuBPWTTPd8TBO2knDI0+9UKtbUX8sCZGDhF
eDfAPEMv0dPY1TZD240mAq4NaOJHjBbk+jCLYjgxE1DY7FTgw8BDRmNZg1sJ07qw
PldIqvQpCEoGdzBN60OIAj1+6aWjreiJSLMg/r2XfZTmYT47Jrc=
-----END CERTIFICATE-----
Generated at Mon Jan 26 03:47:31 2026 by rpki-client