This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft
File: B563D708A094B24FC361EDD11C91EE7979AB0471.mft (raw, json)
Hash identifier: J5eaezbvmGmLlVrhQlF5sYZ5DVcpgHTz5IQOU+GzkXE=
Subject key identifier: B0:39:C4:57:A7:65:DE:07:42:73:FC:AF:BC:73:A8:97:3D:CC:B8:ED
Authority key identifier: B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71
Certificate issuer: /CN=B563D708A094B24FC361EDD11C91EE7979AB0471
Certificate serial: 55379EF78A91A033808706B0FCB9F7773B46B646
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft
Manifest number: 04C6
Signing time: Sun 25 Jan 2026 11:11:14 +0000
Manifest this update: Sun 25 Jan 2026 11:06:14 +0000
Manifest next update: Wed 28 Jan 2026 16:44:14 +0000
Files and hashes: 1: B563D708A094B24FC361EDD11C91EE7979AB0471.crl (hash: R57sZEqI3y9BNZbrEDW/3yIkCnPGHFjHC7qugzgTfog=)
2: 3130332e3135382e3233342e302f32332d3233203d3e20313431313332.roa (hash: VerBshfKSbDiG4ilBKzo2++FEnDv7+7VU/P4UtUMaSI=)
3: 3130332e3135382e3233342e302f32332d3233203d3e20313431383938.roa (hash: Fqgr+r9WG3m7zmpO3rSwg44QNE4blwlf0zSotQ3DNUo=)
4: 3130332e3135382e3233352e302f32342d3234203d3e20313431383938.roa (hash: 1oRmxMWEmNWfiObwNq2iDBD7Utfj4IUiGgv5WjZ9wmA=)
5: 3130332e3135382e3233352e302f32342d3234203d3e20313431313332.roa (hash: kpMxQvSYLU76Gm9LQAAGgZvfd3otWzRiAJhO9y4zBsk=)
6: 3130332e3135382e3233342e302f32342d3234203d3e20313431383938.roa (hash: DC1WzlYzoLRsGjbVoxuqgztNqkwtiD8GKj7bCCztmOc=)
7: 3130332e3135382e3233342e302f32342d3234203d3e20313431313332.roa (hash: LFN1lWDxbZdPzNeB6sbVhDvJLLQcsJmGzjZZihSsn1w=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl
rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:37:9e:f7:8a:91:a0:33:80:87:06:b0:fc:b9:f7:77:3b:46:b6:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B563D708A094B24FC361EDD11C91EE7979AB0471
Validity
Not Before: Jan 25 11:06:14 2026 GMT
Not After : Jan 28 16:44:14 2026 GMT
Subject: CN=B039C457A765DE074273FCAFBC73A8973DCCB8ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7a:5c:fb:08:9e:3d:17:71:32:1e:97:46:32:
ea:6f:64:4f:79:93:2e:e7:9e:a4:35:e0:2f:2b:91:
1a:16:40:39:af:2d:47:6b:c1:24:c4:03:5d:42:f5:
31:c0:e9:bc:9f:c8:92:38:25:f6:94:30:05:fd:78:
fe:a5:9f:1c:16:41:e8:75:b8:e6:33:d8:b3:91:3c:
fd:98:70:89:4a:ae:ae:9f:18:db:22:85:5d:71:7e:
5c:f0:12:65:36:50:97:57:1a:34:d6:85:02:44:5b:
ba:a9:ca:d3:9d:68:e4:ba:26:da:60:26:54:a8:3a:
ff:9f:55:6b:e4:9a:30:89:af:e2:2a:c4:f0:fd:cd:
01:36:09:95:df:7d:ab:34:52:cb:d1:7b:7a:1e:d3:
92:7c:84:e7:b4:9a:3d:3f:15:a8:c7:8c:7f:1d:67:
40:1b:78:77:0e:20:02:8a:8f:9a:9e:c2:1e:0d:80:
05:ad:0f:e0:1f:4a:d4:30:1b:a5:1a:35:bf:e2:c9:
48:77:e4:3c:52:e8:57:e3:90:aa:d9:77:2c:b3:59:
6e:45:2f:67:ef:46:df:2a:ec:5a:cd:34:63:fb:d4:
04:9a:bb:99:cc:07:ce:ca:a1:ec:19:fb:3d:20:28:
fc:b6:a2:9f:e0:8d:cd:18:4a:2b:da:1f:54:88:f2:
b8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:39:C4:57:A7:65:DE:07:42:73:FC:AF:BC:73:A8:97:3D:CC:B8:ED
X509v3 Authority Key Identifier:
keyid:B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ee:64:c7:30:50:da:1d:5e:19:67:65:dd:9c:e1:49:67:49:
49:89:ba:a1:94:07:4f:57:cd:a3:0d:ac:2c:98:92:8c:70:71:
3c:28:47:7d:13:a7:6b:95:e9:df:c1:64:ed:e6:23:83:55:43:
29:63:14:15:dd:43:48:3c:5f:76:5c:c2:cb:21:54:9f:1b:78:
68:68:a7:27:1c:8f:79:aa:c9:e8:78:63:01:cc:b4:d6:9f:8d:
e1:90:f3:c1:c1:92:70:d6:cc:f9:40:44:3b:16:7f:dd:0f:7d:
fb:1f:10:ea:08:dc:95:4d:2d:d4:76:00:dc:65:eb:70:54:11:
c9:5a:67:a7:a2:ed:8a:91:60:ad:7a:9d:87:04:e5:94:44:86:
e4:9a:11:0c:94:cd:5b:1a:b3:ea:43:97:99:15:00:d1:53:68:
fd:e5:6b:1a:da:76:22:67:ce:a1:b9:52:cf:cd:5f:43:01:c0:
0b:0b:c7:98:12:b2:df:72:11:9b:20:b0:62:72:49:0f:81:46:
73:1f:ca:ae:33:a1:4b:2d:c1:17:b9:b6:7e:6c:8c:60:43:85:
af:4c:90:81:d0:1c:8b:62:59:b1:de:46:97:39:39:2f:d4:f9:
56:4b:06:0f:56:4c:43:65:91:8b:92:1b:3e:9c:87:f6:27:8f:
eb:7f:bf:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:58:36 2026 by rpki-client