This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft
File: 940E05E54E6B685EFBC6114D1E913804318364AB.mft (raw, json)
Hash identifier: lhZR2+oYdzUcQZiHWe5FwxFVwTL0hNFZyHVszs7Ok3Q=
Subject key identifier: FF:66:DE:18:91:AE:BF:6A:08:74:F6:67:F7:4E:26:F2:C6:40:6E:22
Authority key identifier: 94:0E:05:E5:4E:6B:68:5E:FB:C6:11:4D:1E:91:38:04:31:83:64:AB
Certificate issuer: /CN=940E05E54E6B685EFBC6114D1E913804318364AB
Certificate serial: 15E0F26F9B3E8FD39CD2CCA1E22AF41C920B90DE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft
Manifest number: 01D6
Signing time: Fri 23 Jan 2026 20:30:49 +0000
Manifest this update: Fri 23 Jan 2026 20:25:49 +0000
Manifest next update: Tue 27 Jan 2026 02:06:49 +0000
Files and hashes: 1: 940E05E54E6B685EFBC6114D1E913804318364AB.crl (hash: xmukUP6um8bin9eaDwvNwc/2Sm3K+7mgs3rc4MnM8hU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.crl
rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 02:06:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:e0:f2:6f:9b:3e:8f:d3:9c:d2:cc:a1:e2:2a:f4:1c:92:0b:90:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940E05E54E6B685EFBC6114D1E913804318364AB
Validity
Not Before: Jan 23 20:25:49 2026 GMT
Not After : Jan 27 02:06:49 2026 GMT
Subject: CN=FF66DE1891AEBF6A0874F667F74E26F2C6406E22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:22:ce:d8:07:9c:ad:ba:a2:70:fa:f3:a0:f3:
91:7b:ec:f8:8a:2c:e5:a7:06:ff:8b:42:89:48:70:
94:e9:e5:f1:1a:76:c9:86:b9:c5:1a:fe:0c:1e:c3:
d5:94:b6:47:39:73:3b:6d:85:79:c1:c1:19:18:05:
9c:76:23:fe:87:54:11:ba:d2:ac:b3:69:80:f5:e5:
ea:15:66:92:d7:14:20:c8:df:65:b1:fd:d3:fa:04:
c5:f0:34:c8:33:9c:c9:01:d6:54:e8:71:1d:8a:b7:
b5:cf:85:fc:79:6f:d0:ec:33:ed:e1:d3:19:52:f6:
66:c5:68:3e:fc:af:3b:ad:e0:17:77:e4:ab:fa:e5:
44:a7:ec:73:8d:cc:db:a9:68:6f:65:c8:8d:5c:eb:
8e:5a:d6:fe:53:ef:c4:bd:ae:79:bf:47:af:4a:7d:
4c:b5:dd:fe:55:4b:64:ed:d3:bb:b6:50:be:26:f5:
5b:6c:b3:15:19:a0:a4:42:9d:7a:b9:96:ee:50:14:
2e:69:cb:03:60:db:d5:16:a3:3f:95:6f:f7:64:c4:
6e:ec:15:ea:0c:91:8c:4f:04:4c:24:94:6f:ea:80:
36:0e:68:db:fa:35:9d:70:06:05:2c:22:a8:1b:e1:
b4:05:b9:78:c6:67:88:e4:d6:87:42:85:a4:aa:e2:
12:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:66:DE:18:91:AE:BF:6A:08:74:F6:67:F7:4E:26:F2:C6:40:6E:22
X509v3 Authority Key Identifier:
keyid:94:0E:05:E5:4E:6B:68:5E:FB:C6:11:4D:1E:91:38:04:31:83:64:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:4f:47:86:9d:b3:c2:6c:00:20:f1:12:b7:bb:96:41:72:68:
c4:9a:e0:02:53:5f:df:e2:b1:54:bd:90:16:7f:44:b6:b5:18:
7a:8f:98:b6:31:a8:84:37:18:36:e5:61:6d:69:78:48:92:85:
6a:14:cb:9f:d2:11:e3:77:8a:c9:72:58:27:a2:c8:93:0b:54:
fe:1b:4c:9a:c1:a5:6d:ad:e0:7a:dc:8d:bf:9d:19:45:b2:0e:
9d:cb:82:d6:95:b5:ca:4d:d8:33:ad:8e:c1:16:1f:a3:60:c1:
8a:e2:a6:de:88:b8:ef:d4:55:c6:0e:e4:83:a9:18:3f:aa:a2:
c8:63:8c:61:d8:0b:bf:54:21:29:fd:40:b7:1b:57:f9:c8:5d:
77:52:7a:c3:31:fb:ca:df:af:a8:23:be:f0:32:ca:1d:30:7e:
e1:11:e5:15:61:e2:23:d2:76:63:26:19:8c:c9:f0:2e:46:7a:
87:83:fd:44:bc:6f:d7:dc:19:56:6d:7e:51:8e:73:7b:49:c7:
5e:b2:a9:d7:22:dc:a7:ca:af:27:1f:fa:9b:f7:6d:d7:75:ab:
41:b3:3c:7e:dd:c1:e8:7f:22:48:7d:59:f7:1f:68:19:09:c8:
70:00:1d:11:cb:44:c3:2d:a9:b8:0c:0b:13:36:d6:ed:ab:07:
00:5c:b8:84
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUFeDyb5s+j9Oc0syh4ir0HJILkN4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4MDQz
MTgzNjRBQjAeFw0yNjAxMjMyMDI1NDlaFw0yNjAxMjcwMjA2NDlaMDMxMTAvBgNV
BAMTKEZGNjZERTE4OTFBRUJGNkEwODc0RjY2N0Y3NEUyNkYyQzY0MDZFMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOIs7YB5ytuqJw+vOg85F77PiK
LOWnBv+LQolIcJTp5fEadsmGucUa/gwew9WUtkc5cztthXnBwRkYBZx2I/6HVBG6
0qyzaYD15eoVZpLXFCDI32Wx/dP6BMXwNMgznMkB1lTocR2Kt7XPhfx5b9DsM+3h
0xlS9mbFaD78rzut4Bd35Kv65USn7HONzNupaG9lyI1c645a1v5T78S9rnm/R69K
fUy13f5VS2Tt07u2UL4m9VtssxUZoKRCnXq5lu5QFC5pywNg29UWoz+Vb/dkxG7s
FeoMkYxPBEwklG/qgDYOaNv6NZ1wBgUsIqgb4bQFuXjGZ4jk1odChaSq4hJjAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU/2beGJGuv2oIdPZn904m8sZAbiIwHwYDVR0j
BBgwFoAUlA4F5U5raF77xhFNHpE4BDGDZKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
YjIwNDFmMS00Y2U2LTQ5YjQtODNhNS0zMTVmMjBlNGUyYzMvMC85NDBFMDVFNTRF
NkI2ODVFRkJDNjExNEQxRTkxMzgwNDMxODM2NEFCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4MDQzMTgz
NjRBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmIyMDQxZjEtNGNlNi00OWI0LTgz
YTUtMzE1ZjIwZTRlMmMzLzAvOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4
MDQzMTgzNjRBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBALdPR4ads8JsACDxEre7lkFyaMSa4AJTX9/i
sVS9kBZ/RLa1GHqPmLYxqIQ3GDblYW1peEiShWoUy5/SEeN3islyWCeiyJMLVP4b
TJrBpW2t4Hrcjb+dGUWyDp3LgtaVtcpN2DOtjsEWH6NgwYript6IuO/UVcYO5IOp
GD+qoshjjGHYC79UISn9QLcbV/nIXXdSesMx+8rfr6gjvvAyyh0wfuER5RVh4iPS
dmMmGYzJ8C5GeoeD/US8b9fcGVZtflGOc3tJx16yqdci3KfKrycf+pv3bdd1q0Gz
PH7dweh/Ikh9WfcfaBkJyHAAHRHLRMMtqbgMCxM21u2rBwBcuIQ=
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:47:45 2026 by rpki-client