This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft
File: B59504F478A4226C16D97004A6F98153CD19D2E0.mft (raw, json)
Hash identifier: ZLD5ky4X1oO8iBDVn0jxwbUhabYWb0u93JS3v3vWmDg=
Subject key identifier: FC:A2:C4:3B:19:8B:AA:2A:40:22:86:46:69:6A:EE:BA:E1:05:FD:1C
Authority key identifier: B5:95:04:F4:78:A4:22:6C:16:D9:70:04:A6:F9:81:53:CD:19:D2:E0
Certificate issuer: /CN=B59504F478A4226C16D97004A6F98153CD19D2E0
Certificate serial: 424DBC3552062DE89F286DEA252012491E4D9FDB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft
Manifest number: 98
Signing time: Sat 24 Jan 2026 22:22:28 +0000
Manifest this update: Sat 24 Jan 2026 22:17:28 +0000
Manifest next update: Wed 28 Jan 2026 06:04:28 +0000
Files and hashes: 1: 3130332e3132322e352e302f32342d3234203d3e20313338303530.roa (hash: 3JVZnoM38MMLZt8EaIuKj3KzjzbuiEZaBDfLeCAseRs=)
2: B59504F478A4226C16D97004A6F98153CD19D2E0.crl (hash: R/HO6bE5Ul2+miLVFn2sQoe7OKVktf77VkYnOLZITYM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.crl
rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 06:04:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:4d:bc:35:52:06:2d:e8:9f:28:6d:ea:25:20:12:49:1e:4d:9f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B59504F478A4226C16D97004A6F98153CD19D2E0
Validity
Not Before: Jan 24 22:17:28 2026 GMT
Not After : Jan 28 06:04:28 2026 GMT
Subject: CN=FCA2C43B198BAA2A40228646696AEEBAE105FD1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c1:8a:da:30:8b:75:a3:65:62:42:fa:c7:a7:
d3:64:99:78:f3:9f:3d:c3:0a:a0:df:99:36:d1:02:
82:72:c4:9c:11:53:ff:63:34:7c:0a:9a:9e:c8:6d:
18:21:10:a0:f7:e8:ef:ce:74:ad:72:e7:e1:2e:09:
39:4f:56:79:8b:e0:c2:32:9c:1d:37:e7:a0:15:a6:
7f:5b:d5:37:df:9c:e6:13:62:cd:ef:88:7c:12:4c:
fa:fe:40:43:d9:e9:ae:1e:58:cb:10:f5:fa:7c:69:
ab:06:c0:29:bf:b6:1d:9a:9c:0d:73:e7:3a:4f:01:
04:98:df:e0:46:24:f6:4d:78:68:a8:32:7e:06:1a:
06:3c:c6:57:94:2a:9c:b3:2d:0e:ba:f1:ff:2c:fc:
8d:4e:d5:b6:d7:12:49:90:14:06:b0:1e:5f:21:23:
d6:76:b7:fe:e3:35:3b:ab:8b:33:1d:8d:35:b4:ab:
fb:38:09:92:a0:77:44:f9:5f:f6:8d:c6:7e:82:d2:
0f:7f:52:ba:28:e5:59:57:9e:1a:81:df:ae:a5:f5:
13:7f:1b:00:b0:1e:bd:58:c6:56:2d:da:99:8d:2d:
20:e9:d4:c6:84:67:7e:1e:68:8f:36:af:5a:66:63:
ed:f5:7f:8a:85:1d:cf:c8:7a:c8:1a:dd:3f:cf:07:
38:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A2:C4:3B:19:8B:AA:2A:40:22:86:46:69:6A:EE:BA:E1:05:FD:1C
X509v3 Authority Key Identifier:
keyid:B5:95:04:F4:78:A4:22:6C:16:D9:70:04:A6:F9:81:53:CD:19:D2:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:cd:b3:90:de:34:15:c3:22:00:44:eb:e7:20:84:7c:d6:42:
1e:a5:9a:97:0f:00:fa:b0:7c:65:e3:6e:3f:7a:9b:8d:a1:fe:
38:bb:71:f6:c8:c3:fa:3d:4c:43:f4:9b:5e:b3:4a:98:b8:5e:
d2:68:c5:a1:70:31:f0:61:c0:8c:48:62:9f:7b:81:9c:b8:65:
08:bb:e9:7c:ec:2e:70:08:10:73:2e:19:69:b5:72:fa:78:3b:
d2:cb:41:60:d8:cd:b0:74:e6:e0:e4:36:b9:15:84:42:28:22:
52:eb:a6:7b:61:83:82:cd:c7:32:5a:56:a4:42:30:a7:00:55:
50:52:65:10:28:de:17:68:58:15:84:cb:25:01:3c:d6:6e:78:
6b:54:ae:19:3a:27:f6:b7:4c:fa:64:1d:64:44:69:ac:f4:2f:
22:b7:05:7a:85:1b:7d:61:bd:da:76:8f:1d:fb:83:8d:5f:92:
96:58:18:2d:2a:82:01:27:5f:a7:e0:ab:22:59:24:6f:fa:14:
7c:ed:50:04:dd:15:98:1d:f9:f8:82:1b:3b:ff:b0:a6:34:e3:
2a:d0:c9:19:f3:15:bb:69:b9:25:92:84:30:45:c7:f8:3a:cf:
9a:4f:86:ea:f6:a4:a4:00:e7:9b:4f:e1:32:87:54:be:fa:e0:
03:d6:37:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:43:06 2026 by rpki-client