This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft
File: 6D2120D281865021E16D49A2451DC53A851B5BBD.mft (raw, json)
Hash identifier: 1HVjSdkjM5PE6dsFyr8cXyRvT5Z4jRBipqNjThChf2E=
Subject key identifier: 45:94:B7:46:C4:4F:D8:53:6D:FF:C3:40:DE:9C:82:8C:8C:8D:D8:81
Authority key identifier: 6D:21:20:D2:81:86:50:21:E1:6D:49:A2:45:1D:C5:3A:85:1B:5B:BD
Certificate issuer: /CN=6D2120D281865021E16D49A2451DC53A851B5BBD
Certificate serial: 736E443C391026EE75CEA6AA8C21F9697D31F1C1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft
Manifest number: C9
Signing time: Sat 24 Jan 2026 01:51:49 +0000
Manifest this update: Sat 24 Jan 2026 01:46:49 +0000
Manifest next update: Tue 27 Jan 2026 11:49:49 +0000
Files and hashes: 1: 3130332e3234352e31392e302f32342d3234203d3e203436303233.roa (hash: OP9t4BATr719tJwNacPpBjZgjvtQIUgiKYybPvtxo7U=)
2: 3130332e3234352e31382e302f32342d3234203d3e203436303233.roa (hash: Fc0MX+JArFKhMRFuhW8MKgfQ8zyeDdlWFyn08XsgRD0=)
3: 3130332e3234352e31382e302f32332d3234203d3e203436303233.roa (hash: td0OSINBGBuv5HEsFIZ58nSKSttNzeWBzHe87KLyw90=)
4: 3130332e3234352e31372e302f32342d3234203d3e203436303233.roa (hash: SznPKhQPKlumNSdukCt0jZbfcUX8DE7OHpbeCdn75DM=)
5: 3130332e3234352e31362e302f32332d3234203d3e203436303233.roa (hash: 0APaiG4EPBJHGaX3y0J+GecXQsnJ2nU7GWM7XyiSeBU=)
6: 3130332e3234352e31362e302f32342d3234203d3e203436303233.roa (hash: BohmVCdqXlKZG+sKe25j9jAyDRmpT+hYiOTt1ls3vLA=)
7: 3130332e3234352e31362e302f32322d3234203d3e203436303233.roa (hash: MByiWqioSG0bs5FrR2S5ZWO/VS/KpKaL9p/BlUB5wIY=)
8: 6D2120D281865021E16D49A2451DC53A851B5BBD.crl (hash: Mv0480Tw7H3Vj3TGVmZNeLAC65Venh1x/vDXKL179C8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.crl
rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 11:49:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:6e:44:3c:39:10:26:ee:75:ce:a6:aa:8c:21:f9:69:7d:31:f1:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D2120D281865021E16D49A2451DC53A851B5BBD
Validity
Not Before: Jan 24 01:46:49 2026 GMT
Not After : Jan 27 11:49:49 2026 GMT
Subject: CN=4594B746C44FD8536DFFC340DE9C828C8C8DD881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:72:f2:13:6a:8a:ca:53:ee:d9:c2:e4:67:dd:
4e:07:09:d5:58:15:e6:58:43:f7:be:d8:a8:82:c8:
28:b8:be:38:a8:f4:5c:82:84:b9:ea:e3:e1:43:c4:
a3:00:a2:9c:85:a1:2a:a5:d5:71:54:b5:d2:43:64:
8d:6a:b7:d7:4a:b2:51:0d:5c:ee:9a:aa:1f:d2:a3:
bd:98:d8:59:e3:b9:d5:b5:d2:6d:75:62:82:22:19:
72:36:44:d5:3a:6e:6b:c6:21:cf:1d:ea:40:c3:b9:
c0:e9:95:66:3c:13:4a:26:5d:92:73:8d:67:d5:8b:
7d:a1:68:a8:0e:cc:b0:6b:90:34:17:59:fb:20:19:
ef:fc:31:f0:88:b1:5e:b8:35:fa:83:9a:c3:d8:c5:
91:72:9e:bd:14:36:be:0d:8f:5c:ff:68:7a:bd:fc:
9f:81:96:5d:6b:1d:2e:86:03:fc:69:62:3e:db:5c:
4b:4f:93:3b:a7:79:5a:fd:7a:61:0b:57:33:b4:12:
49:b0:44:d2:5f:ef:e1:cb:87:c2:7c:9d:dc:35:7d:
fd:c6:7c:84:e4:34:09:80:f5:3e:a0:c7:7b:aa:e8:
62:d0:93:b0:0a:67:24:10:da:ed:b3:0b:15:1d:4f:
3b:d7:e4:a1:4f:e1:24:33:67:a0:71:74:1d:2c:c8:
ca:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:94:B7:46:C4:4F:D8:53:6D:FF:C3:40:DE:9C:82:8C:8C:8D:D8:81
X509v3 Authority Key Identifier:
keyid:6D:21:20:D2:81:86:50:21:E1:6D:49:A2:45:1D:C5:3A:85:1B:5B:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:d7:b7:29:a6:b0:7d:0f:09:df:64:b2:e2:ed:03:dc:88:a6:
83:f5:74:81:3d:ae:62:3e:85:d7:ae:34:a6:9a:1d:e8:02:ae:
f6:a7:db:95:5f:4f:45:83:bf:87:a3:2b:d8:57:b4:30:81:c5:
fa:30:cb:4f:dd:55:fe:5a:6e:1c:cf:f2:2f:29:4c:4c:1e:e1:
28:92:f3:a6:ce:64:bd:79:10:1c:e3:c3:09:2b:9c:a1:d2:03:
2f:08:52:7e:b4:20:b0:df:14:80:f1:45:59:3e:49:72:e1:46:
5f:6a:00:5d:38:69:97:80:10:38:d7:40:11:e6:98:57:55:73:
5f:94:16:95:f4:95:ce:28:a6:1e:0e:49:0e:c2:bb:b5:b5:95:
83:cf:ba:11:c0:4c:97:3b:77:df:19:1f:fd:82:2f:63:bb:69:
c0:9a:76:58:44:f1:f1:66:e3:53:1b:a8:5d:18:4f:6a:01:30:
93:e6:f5:9b:05:f9:96:11:88:ad:e0:1c:f0:31:e3:37:06:4c:
28:73:1b:ee:45:a3:96:64:28:20:b9:76:64:11:90:19:f4:21:
2b:fb:ff:15:48:60:4d:03:ca:5f:b0:e1:e3:dd:82:70:17:3e:
31:f5:25:4b:e3:8d:c6:8c:da:50:b4:8a:07:e7:f0:b8:72:17:
55:0c:8b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:58:38 2026 by rpki-client