This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft
File: B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft (raw, json)
Hash identifier: FafiY9d/oDHifAvbWsZW55LDVUeef61CTP6rYpTdkhg=
Subject key identifier: E9:94:90:F3:2E:64:44:3A:87:F0:08:E1:28:05:EB:C5:A3:AB:31:56
Authority key identifier: B6:2E:44:2C:8D:2C:70:D0:F5:AB:5E:2A:3A:1F:11:B2:D0:B4:D8:BD
Certificate issuer: /CN=B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD
Certificate serial: 54003BE1E45E97F377AE2EE218E300056DE257C1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft
Manifest number: 0229
Signing time: Sat 24 Jan 2026 18:51:47 +0000
Manifest this update: Sat 24 Jan 2026 18:46:47 +0000
Manifest next update: Wed 28 Jan 2026 00:05:47 +0000
Files and hashes: 1: B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.crl (hash: gaZiCNccnDeef62+4Y3ybpaqb+XE5hfIIZx7sI+MV30=)
2: 3130332e3134392e3233392e302f32342d3234203d3e20313430333834.roa (hash: qwBhVFJ/29JkjYJBmiXis9vZ9dZgJ/dBqQTkQKD7IUk=)
3: 3130332e3134392e3233382e302f32332d3233203d3e20313430333834.roa (hash: n/ZxzBzZ2gRpYTiml4oQKNkriGvajLH2YwRAWcXMQ3M=)
4: 3130332e3134392e3233382e302f32342d3234203d3e20313430333834.roa (hash: nzGXD+WO9jNdAgLBDWw3XXsmMEFx1ERW+wySreu0Q7o=)
5: 323430353a663234303a3a2f33322d3332203d3e20313430333834.roa (hash: jCC55QoiailnQ1RFdBW81Arc7TozD6cSp8bDswcvT9g=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.crl
rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 00:05:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:00:3b:e1:e4:5e:97:f3:77:ae:2e:e2:18:e3:00:05:6d:e2:57:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD
Validity
Not Before: Jan 24 18:46:47 2026 GMT
Not After : Jan 28 00:05:47 2026 GMT
Subject: CN=E99490F32E64443A87F008E12805EBC5A3AB3156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:51:d6:3d:2c:10:14:89:ab:6b:72:8d:64:09:
1a:d9:de:05:31:72:3f:29:51:e2:db:ea:1b:c0:42:
17:90:ce:d1:66:9b:66:38:7c:35:fb:9b:03:51:82:
8e:d2:79:ef:b0:82:ef:58:bc:23:4a:ad:3c:92:6c:
c2:47:2e:da:90:8b:46:1c:0c:e6:62:b7:80:81:da:
9d:0a:8f:b2:36:de:fe:eb:05:e0:26:40:90:01:ac:
62:29:6c:fc:45:01:ed:86:7e:98:0f:68:ee:f0:35:
58:33:76:fc:31:ff:11:ea:63:b2:70:da:80:c9:f8:
72:3b:14:40:12:23:29:a9:f6:4b:cb:6f:12:84:d1:
e3:f3:8f:dc:16:f1:90:0f:b6:72:b5:d5:63:b3:80:
11:71:cc:ff:0f:74:29:b0:70:3d:60:cc:3f:24:e0:
89:87:6f:81:b5:2d:51:b7:bd:5e:e0:b2:e8:a3:28:
1c:23:42:3a:b5:a0:0e:81:22:86:ee:36:74:ce:0b:
ce:16:a0:12:15:d5:6d:3e:05:37:7b:29:9a:2f:8b:
dc:f2:f7:cd:80:ec:d8:71:b2:6e:82:6b:98:04:4c:
e6:18:bc:9d:ed:3b:f5:88:29:f4:62:44:f6:a9:ae:
39:89:89:d1:b6:c2:c6:0a:c1:40:7f:d2:64:63:fa:
03:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:94:90:F3:2E:64:44:3A:87:F0:08:E1:28:05:EB:C5:A3:AB:31:56
X509v3 Authority Key Identifier:
keyid:B6:2E:44:2C:8D:2C:70:D0:F5:AB:5E:2A:3A:1F:11:B2:D0:B4:D8:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:2f:ff:1e:18:ff:be:d7:a5:b1:0f:aa:ca:5e:5d:82:39:b3:
97:18:40:3e:b5:28:e8:cb:5c:66:4a:fe:54:65:57:ab:3e:22:
1c:08:35:c6:35:10:0e:ec:8f:c2:0d:e2:e2:99:59:b4:92:44:
49:53:17:52:52:c7:a1:79:00:87:0f:53:c0:17:1d:ba:44:50:
db:39:91:df:b7:62:9a:c6:ff:e3:fd:c1:eb:68:be:a4:35:6b:
bb:6a:40:cc:6d:84:d8:21:b7:7f:ab:ee:b5:e2:47:0e:b7:fc:
6c:64:7c:70:c8:1c:e8:02:ed:35:56:63:e8:bf:d1:be:8a:41:
d0:e4:85:5b:a6:7e:d4:79:98:11:ad:c1:0d:8f:6b:70:7a:dc:
01:99:6e:1d:8a:96:06:28:3e:d9:5f:6e:f1:90:14:f7:f9:15:
bc:b4:aa:2f:72:e1:01:3f:62:06:94:84:41:c8:b7:6f:ab:b6:
c4:cd:e5:bf:03:03:59:8b:5c:23:10:6a:b2:68:c2:c0:c8:10:
ef:41:cd:a3:51:42:05:c2:2b:45:19:61:a8:1d:20:f7:53:c3:
b8:a7:9d:24:3d:2f:a1:ab:4f:e2:5c:d8:27:37:88:57:a4:5c:
8d:7c:c6:64:05:85:e4:2b:0c:30:b4:c8:33:d0:06:a9:5e:b0:
a7:ae:38:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:36:39 2026 by rpki-client