This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/B94F48BCAB6D8B0A28B3955504975C159FAC076A.mft
File: B94F48BCAB6D8B0A28B3955504975C159FAC076A.mft (raw, json)
Hash identifier: SoswOap3UamPwtamXsOnRr3TJo9hwXSfW25kxyrP20Y=
Subject key identifier: 94:EE:EB:EC:06:90:58:02:53:A6:3B:FB:2C:43:BB:95:8E:95:26:E8
Authority key identifier: B9:4F:48:BC:AB:6D:8B:0A:28:B3:95:55:04:97:5C:15:9F:AC:07:6A
Certificate issuer: /CN=B94F48BCAB6D8B0A28B3955504975C159FAC076A
Certificate serial: 7DA5DF6E1FF43C2ADFB8210AEB71F311F12A1A5B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B94F48BCAB6D8B0A28B3955504975C159FAC076A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/B94F48BCAB6D8B0A28B3955504975C159FAC076A.mft
Manifest number: 0541
Signing time: Sat 24 Jan 2026 10:31:19 +0000
Manifest this update: Sat 24 Jan 2026 10:26:19 +0000
Manifest next update: Tue 27 Jan 2026 21:57:19 +0000
Files and hashes: 1: 3130332e3131392e3133392e302f32342d3234203d3e20313337333831.roa (hash: NXiX7VHYL2V/PG5eFGBukXkPCYGw4lMLoRT1ir2CDOE=)
2: B94F48BCAB6D8B0A28B3955504975C159FAC076A.crl (hash: prHiIFyOoXLYTaqvT4HVLawmeUsV154Q4KUqs/XLvm0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/B94F48BCAB6D8B0A28B3955504975C159FAC076A.crl
rsync://repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/B94F48BCAB6D8B0A28B3955504975C159FAC076A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B94F48BCAB6D8B0A28B3955504975C159FAC076A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 21:57:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:a5:df:6e:1f:f4:3c:2a:df:b8:21:0a:eb:71:f3:11:f1:2a:1a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B94F48BCAB6D8B0A28B3955504975C159FAC076A
Validity
Not Before: Jan 24 10:26:19 2026 GMT
Not After : Jan 27 21:57:19 2026 GMT
Subject: CN=94EEEBEC0690580253A63BFB2C43BB958E9526E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:85:88:61:ce:98:53:ed:2a:3e:da:ff:79:dd:
d9:0d:a0:32:48:e0:cc:ad:c8:57:dc:ab:f6:75:59:
46:40:ba:fb:b6:0c:cb:6e:50:b6:07:7a:57:eb:43:
7a:66:b4:1f:91:bf:73:3a:50:b0:c0:44:c7:92:5f:
9b:49:73:27:8b:63:f2:30:ba:a1:34:4d:c0:9b:6e:
ec:69:25:88:5b:3c:b9:0b:cd:09:ca:41:b2:cc:61:
fd:ab:0f:08:07:ee:6f:91:b4:66:d7:f9:de:c2:16:
ea:2f:9a:14:e6:6a:6e:ab:3c:68:36:c8:67:83:7f:
ab:74:49:89:80:54:d9:46:7b:e5:e2:3e:bb:16:e8:
ae:04:2d:94:a8:fe:c3:82:b4:e5:65:09:36:f7:ed:
41:9b:af:5d:ac:2f:86:fb:c3:a2:87:a4:71:a6:7d:
6a:50:0a:90:23:f1:3b:ef:70:61:32:b2:e1:b0:a2:
bf:b2:bc:0e:2b:75:71:38:23:c0:ba:c9:4b:86:17:
e6:51:47:28:fa:3a:e7:ea:cd:d4:51:44:60:cf:bc:
a5:78:af:3b:33:cf:85:e4:89:f3:ca:72:6a:fc:35:
82:37:ec:b3:97:c0:27:60:39:73:d0:df:bc:d6:d6:
d0:22:00:84:2e:b9:f0:16:e9:96:d5:58:d7:29:03:
79:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:EE:EB:EC:06:90:58:02:53:A6:3B:FB:2C:43:BB:95:8E:95:26:E8
X509v3 Authority Key Identifier:
keyid:B9:4F:48:BC:AB:6D:8B:0A:28:B3:95:55:04:97:5C:15:9F:AC:07:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/B94F48BCAB6D8B0A28B3955504975C159FAC076A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B94F48BCAB6D8B0A28B3955504975C159FAC076A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/B94F48BCAB6D8B0A28B3955504975C159FAC076A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d2:95:f4:50:45:78:c2:17:22:3a:99:4a:d7:69:38:86:9d:
60:1a:31:00:25:9f:73:f2:1f:91:20:43:78:e0:9f:bb:9e:7d:
93:34:fa:3c:28:e1:0f:47:9b:a2:9f:a0:25:4a:33:10:e0:34:
82:b2:8f:3e:a2:0c:8d:17:52:b0:7c:84:39:13:fe:8e:1f:dc:
e2:e8:00:62:d1:b3:03:42:97:11:ab:17:b0:e5:7c:6e:d2:ef:
95:8f:4d:25:c2:4a:2a:ad:10:ba:50:4c:54:23:6c:93:64:ef:
94:2e:40:7c:b9:7d:89:fa:18:bc:3e:ba:f7:25:04:80:ff:2e:
d5:a3:ee:98:6e:28:57:dc:a9:6e:c9:d3:9a:9d:9c:2d:3d:cb:
a8:fd:c3:cc:ea:fa:3f:53:79:67:f5:3a:27:52:33:84:3a:0f:
3d:d9:3a:73:9c:59:8a:da:60:84:84:68:d8:2f:d1:ea:d9:0b:
e6:92:30:32:5f:15:5b:8b:d6:c1:96:12:24:21:e0:18:36:3c:
f3:86:b7:96:bb:9b:c8:42:a3:47:fc:29:27:f7:9a:2c:0e:8a:
76:47:86:fd:21:97:b2:ae:1c:2d:85:29:98:b7:5c:e2:d0:ff:
15:d4:23:4b:b2:4f:b6:97:16:12:9e:b1:09:5f:a3:90:eb:8c:
1b:b2:8f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:48:13 2026 by rpki-client