This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft
File: 065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft (raw, json)
Hash identifier: Gmm+KV2vgPtBMMapSiiP/ZAocvFulAC28Gn3wYTDX/E=
Subject key identifier: 86:83:0A:0B:71:84:B7:D0:A2:C5:43:09:62:42:5C:9E:B0:EA:BA:18
Authority key identifier: 06:5F:83:1F:0E:07:E2:88:D3:3E:CF:4D:FA:A1:8E:2C:93:64:4E:43
Certificate issuer: /CN=065F831F0E07E288D33ECF4DFAA18E2C93644E43
Certificate serial: 7ABB6913F073800E05EC9E42A814780DE01493BB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/065F831F0E07E288D33ECF4DFAA18E2C93644E43.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft
Manifest number: 01DA
Signing time: Sat 24 Jan 2026 11:32:07 +0000
Manifest this update: Sat 24 Jan 2026 11:27:07 +0000
Manifest next update: Tue 27 Jan 2026 11:40:07 +0000
Files and hashes: 1: 3130332e37372e3232362e302f32332d3233203d3e203634323938.roa (hash: 8bdcuP86nx1UFfxVnnh8wGJritVHJXJ+E76C/c7hdYk=)
2: 065F831F0E07E288D33ECF4DFAA18E2C93644E43.crl (hash: 8utpg1f6ocAZ39X92kfxYedLWWKZfHmkfIYkSdVz8bM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.crl
rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/065F831F0E07E288D33ECF4DFAA18E2C93644E43.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 11:40:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:bb:69:13:f0:73:80:0e:05:ec:9e:42:a8:14:78:0d:e0:14:93:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=065F831F0E07E288D33ECF4DFAA18E2C93644E43
Validity
Not Before: Jan 24 11:27:07 2026 GMT
Not After : Jan 27 11:40:07 2026 GMT
Subject: CN=86830A0B7184B7D0A2C5430962425C9EB0EABA18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a1:ea:8a:f3:3c:3a:e1:f6:9c:00:7a:ef:ed:
8b:40:77:21:fa:4c:31:dc:82:94:66:ee:f8:41:f5:
6a:f3:77:59:28:42:ef:36:ed:74:7e:8b:13:d0:ae:
ba:bb:9a:aa:86:be:c1:b7:a8:8c:35:75:09:c3:9f:
e2:d1:1c:59:01:27:4e:c0:48:07:e4:b8:be:ac:75:
7f:6c:2b:0e:e6:fd:2b:29:88:4b:1b:67:fc:4d:53:
a2:f6:73:71:9a:d7:c4:89:5e:30:a0:03:77:89:2b:
c8:eb:5b:86:3d:b2:1e:ca:5d:9a:31:ac:2d:99:64:
66:fc:62:e0:a9:72:25:93:9d:d2:db:50:ec:7e:96:
d9:0d:3e:4c:78:2f:1e:aa:33:94:c6:cc:9f:fd:d8:
25:23:ef:2f:99:50:b7:2f:b6:56:ff:27:1c:59:d5:
d5:0c:fa:45:1a:78:13:80:ec:2c:c7:8a:fb:e7:af:
ab:54:fb:29:83:92:1d:8b:cd:f1:28:dd:23:5f:b4:
f2:0e:18:c5:e6:d8:d0:43:8b:9c:f1:84:0b:3b:75:
6b:29:63:cf:16:db:d6:2b:39:8a:90:35:6a:6f:14:
b7:c1:6d:0e:04:97:0b:91:bc:ce:cc:02:47:47:b7:
7c:15:31:5f:b4:11:72:02:d5:af:80:ac:3a:fd:6f:
25:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:83:0A:0B:71:84:B7:D0:A2:C5:43:09:62:42:5C:9E:B0:EA:BA:18
X509v3 Authority Key Identifier:
keyid:06:5F:83:1F:0E:07:E2:88:D3:3E:CF:4D:FA:A1:8E:2C:93:64:4E:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/065F831F0E07E288D33ECF4DFAA18E2C93644E43.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:13:f0:ba:55:43:c9:8d:93:1f:45:40:e6:66:e5:03:91:13:
7d:1b:fb:d0:fa:92:39:ee:23:d0:a2:12:25:75:14:9d:77:9e:
c8:03:b4:93:aa:19:ed:87:e4:e3:28:14:38:e1:fb:73:11:83:
3b:3e:b3:93:d9:20:f3:16:01:29:1b:27:e7:f0:f3:10:e2:4e:
72:c6:23:3e:79:6a:a1:47:c6:9d:6c:26:03:96:38:a4:99:ad:
fb:d2:bb:d9:8a:7d:ce:13:d9:21:8d:b4:20:5b:65:40:b4:ed:
31:f4:68:99:07:6d:d7:22:7c:74:04:50:09:bb:81:6d:d6:65:
99:e6:b2:3f:96:65:3e:a7:57:fd:fe:c3:09:be:8d:5f:14:7a:
9b:c2:7b:76:3e:0d:eb:95:ac:ea:ed:07:af:c0:ee:5f:5f:80:
2a:33:83:0f:41:06:87:b5:dd:ab:cc:1d:3b:ca:4e:71:74:e7:
d2:c4:bc:bc:aa:6d:84:ce:9c:9b:ec:33:c0:68:87:1d:15:93:
a3:06:95:f5:f4:83:1c:25:3f:7e:65:20:07:5b:32:3e:c1:e4:
19:f6:66:78:44:d8:82:6c:57:b8:aa:36:03:14:36:00:e8:d6:
ca:b2:91:e0:a2:3d:78:a3:50:1e:27:96:d6:b2:fb:1e:9c:03:
7e:f8:8b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:01:33 2026 by rpki-client