This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/B6F29F770F5B30B5F7B738F4524506F1A235DABC.mft
File: B6F29F770F5B30B5F7B738F4524506F1A235DABC.mft (raw, json)
Hash identifier: cXEnWOYhUR+PndMCeEkO9mfRrzqjCudlRDLrDqKwloc=
Subject key identifier: C5:3E:76:48:60:F8:99:4C:90:46:6F:2D:76:31:5D:3C:13:F3:1A:BA
Authority key identifier: B6:F2:9F:77:0F:5B:30:B5:F7:B7:38:F4:52:45:06:F1:A2:35:DA:BC
Certificate issuer: /CN=B6F29F770F5B30B5F7B738F4524506F1A235DABC
Certificate serial: 36C6B7C2D5DC0F416581A8D0A74C5D5DF7FA60CD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F29F770F5B30B5F7B738F4524506F1A235DABC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/B6F29F770F5B30B5F7B738F4524506F1A235DABC.mft
Manifest number: 50
Signing time: Sat 24 Jan 2026 01:11:53 +0000
Manifest this update: Sat 24 Jan 2026 01:06:53 +0000
Manifest next update: Tue 27 Jan 2026 08:19:53 +0000
Files and hashes: 1: 3130332e3232342e36342e302f32342d3234203d3e203539313538.roa (hash: DZ++EX33vrVv29PriPGZOi+tkuRnHbRvl+nMO8/2+oI=)
2: 3130332e3232342e36362e302f32342d3234203d3e203539313538.roa (hash: pZ8/jlcW67uo3RV+YVwV6BROA/FZ969qlSyF5c20C4w=)
3: B6F29F770F5B30B5F7B738F4524506F1A235DABC.crl (hash: kXHqN6oTMLx4PhYDHwzmXMotvJSh9T5o9kfkV9A7ICE=)
4: 3130332e3232342e36352e302f32342d3234203d3e203539313538.roa (hash: KdcszIzsjtlFTy1TnrOq7FG5XAfFe/aLCqLEjewq8yE=)
5: 3130332e3232342e36372e302f32342d3234203d3e203539313538.roa (hash: 63tfpqlJCEzr1F8+1HAkrMYkUUC5brVRNqbAmx9Yovs=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/B6F29F770F5B30B5F7B738F4524506F1A235DABC.crl
rsync://repo-rpki.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/B6F29F770F5B30B5F7B738F4524506F1A235DABC.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F29F770F5B30B5F7B738F4524506F1A235DABC.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 08:19:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:c6:b7:c2:d5:dc:0f:41:65:81:a8:d0:a7:4c:5d:5d:f7:fa:60:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6F29F770F5B30B5F7B738F4524506F1A235DABC
Validity
Not Before: Jan 24 01:06:53 2026 GMT
Not After : Jan 27 08:19:53 2026 GMT
Subject: CN=C53E764860F8994C90466F2D76315D3C13F31ABA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:92:b3:b8:c9:b6:6e:07:f2:3d:9a:31:b1:cb:
2d:c2:5e:3f:53:aa:25:e6:ee:4c:c4:3a:27:9c:f7:
b4:78:fc:64:c6:98:65:f0:91:3e:0b:d5:3d:76:17:
2e:d7:f7:28:75:77:48:19:2e:07:3b:14:ab:94:5a:
89:c2:ef:7e:ca:e5:c0:7f:be:a0:40:c7:e4:62:0f:
10:19:24:7a:e0:ca:36:d2:ea:fc:f4:d5:30:58:60:
0d:8f:aa:00:0f:f1:ca:a5:17:d8:94:d1:3b:dd:bf:
ea:8f:39:d1:ff:46:26:de:65:be:1d:e4:31:0e:fa:
0b:63:bf:d4:6c:01:de:b0:4a:24:60:dc:98:b3:71:
07:af:95:e4:df:7c:a3:cf:4e:79:d6:69:ba:1a:f6:
dd:84:80:27:19:ae:19:ae:74:46:87:5c:8f:ac:3f:
5f:ec:d4:22:01:47:0c:0a:9c:65:e3:11:e8:a0:30:
7e:fe:2e:21:12:ef:ca:30:3d:f4:81:c9:57:49:38:
b3:68:2f:9f:a0:da:67:0b:29:02:88:b7:cf:e6:40:
9d:b1:cd:b4:b1:86:f7:7b:d6:4a:14:b6:3a:8b:50:
8c:da:2d:34:e0:5e:f3:da:d6:53:e6:34:39:f2:09:
b2:8c:51:4c:6c:a6:5d:92:2a:7c:33:3e:52:6a:14:
2f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:3E:76:48:60:F8:99:4C:90:46:6F:2D:76:31:5D:3C:13:F3:1A:BA
X509v3 Authority Key Identifier:
keyid:B6:F2:9F:77:0F:5B:30:B5:F7:B7:38:F4:52:45:06:F1:A2:35:DA:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/B6F29F770F5B30B5F7B738F4524506F1A235DABC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F29F770F5B30B5F7B738F4524506F1A235DABC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/B6F29F770F5B30B5F7B738F4524506F1A235DABC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:c2:46:02:7d:6e:35:79:a5:42:ef:a6:f6:78:d1:03:a9:10:
97:dc:c7:03:40:e6:19:6c:a2:7d:39:58:14:ff:fb:93:be:a4:
0b:e5:2f:02:d2:0a:60:36:80:dc:5e:5b:79:0e:ea:65:b5:3a:
68:e0:6e:b7:f2:e8:ab:34:f2:a5:ad:0d:69:ae:e8:60:3e:90:
d1:b9:81:c2:b2:81:e0:b2:96:bf:de:22:d1:ba:17:87:56:63:
f9:d2:d2:04:a2:5f:5a:61:65:52:e8:25:3b:28:6a:6c:a4:47:
ae:39:25:c9:47:91:d6:77:c0:73:36:3c:99:08:06:07:f5:fb:
d5:61:5b:43:09:10:32:e9:df:8e:93:6e:fe:62:7e:b6:3b:6f:
71:01:fe:9c:2b:53:9b:dc:92:bc:9c:31:e0:03:37:96:1d:61:
ac:7a:89:25:0a:45:49:d0:da:db:cd:43:0f:ea:aa:be:c4:ab:
3c:89:1b:d5:42:ee:16:24:66:89:20:dc:4e:50:ba:e7:3e:6c:
41:06:81:12:6a:ef:69:81:33:04:13:a0:e8:a4:5f:5a:a9:bf:
84:97:41:86:09:34:18:31:48:36:c1:67:d8:89:2c:4c:d6:46:
1a:54:b4:e6:4d:77:73:36:63:c6:b4:74:f5:70:e7:5e:f1:a8:
ca:60:76:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:59:35 2026 by rpki-client