This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.mft
File: 6862B9697E607C0C4861E56917A18D87AC33A721.mft (raw, json)
Hash identifier: iebMOAsGDXBf8V+ZT6UV0DEwEsSzV+3recimsyX2OJM=
Subject key identifier: AC:89:3E:76:B4:8D:F3:13:5E:21:19:38:0A:2F:EC:F1:97:9D:27:F4
Authority key identifier: 68:62:B9:69:7E:60:7C:0C:48:61:E5:69:17:A1:8D:87:AC:33:A7:21
Certificate issuer: /CN=6862B9697E607C0C4861E56917A18D87AC33A721
Certificate serial: 21AB8FE75200BBCFF37FD22983BCACA9E7AD22D6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6862B9697E607C0C4861E56917A18D87AC33A721.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.mft
Manifest number: 01F6
Signing time: Sat 24 Jan 2026 09:12:18 +0000
Manifest this update: Sat 24 Jan 2026 09:07:18 +0000
Manifest next update: Tue 27 Jan 2026 16:40:18 +0000
Files and hashes: 1: 3130332e36302e3233322e302f32342d3234203d3e20313530353034.roa (hash: Z9x86L9cvYXdwPWT7FHQP4GKwyxq3AVT2OalSxbymqQ=)
2: 3130332e36302e3233332e302f32342d3234203d3e20313530353034.roa (hash: IbLWzBm08AS4RfKW9sTYAdOcxbZNJ6mrAM/VuC4qUdw=)
3: 6862B9697E607C0C4861E56917A18D87AC33A721.crl (hash: monitD/RHzCt/ZnE3iQazvVHwjU6n6fZOnl4rMYmkgo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.crl
rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6862B9697E607C0C4861E56917A18D87AC33A721.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 16:40:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:ab:8f:e7:52:00:bb:cf:f3:7f:d2:29:83:bc:ac:a9:e7:ad:22:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6862B9697E607C0C4861E56917A18D87AC33A721
Validity
Not Before: Jan 24 09:07:18 2026 GMT
Not After : Jan 27 16:40:18 2026 GMT
Subject: CN=AC893E76B48DF3135E2119380A2FECF1979D27F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3e:80:56:6a:a2:dc:2b:a8:50:c3:46:9b:ce:
57:6b:9f:31:47:69:e7:43:2e:da:dc:cf:61:7a:98:
cc:7c:17:62:96:e8:8a:5e:6b:07:d4:fa:10:60:98:
11:f1:22:f2:9e:a1:48:f7:55:a6:df:e8:90:78:a8:
7e:ca:91:94:ba:b7:65:bf:5d:72:f1:fd:3e:d0:1f:
bb:35:06:4b:d5:12:69:18:f7:7a:1f:09:b8:cd:07:
3b:69:23:06:23:98:b9:11:62:f2:f1:88:86:85:fa:
fb:e6:4c:97:2f:15:4d:23:6d:f5:26:54:1f:d5:0b:
e9:ed:25:fb:0a:57:d8:32:f8:a7:28:0f:ed:d9:b1:
61:e1:fc:a6:3a:c0:7b:6c:8a:40:df:00:ad:47:db:
42:ca:2d:11:8a:27:07:35:68:1e:dc:55:5c:27:2b:
fb:c3:9a:d5:f8:bc:91:a8:84:bd:80:3d:85:0f:62:
17:97:71:87:4e:a2:82:83:80:52:4d:b8:d9:89:35:
5b:41:f3:d4:fb:ee:7b:e5:f3:47:7b:b6:09:4c:74:
e5:05:68:47:fa:85:7f:5e:5b:0c:83:13:ef:b3:83:
99:2e:62:63:63:15:ca:61:a7:f2:44:86:1c:27:c2:
1a:8e:d3:63:ae:a0:55:4d:dd:73:3b:76:19:77:36:
a2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:89:3E:76:B4:8D:F3:13:5E:21:19:38:0A:2F:EC:F1:97:9D:27:F4
X509v3 Authority Key Identifier:
keyid:68:62:B9:69:7E:60:7C:0C:48:61:E5:69:17:A1:8D:87:AC:33:A7:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6862B9697E607C0C4861E56917A18D87AC33A721.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:d1:65:84:a1:9a:c6:d5:19:db:41:92:33:35:1e:de:3c:d3:
a7:06:e2:44:56:70:ac:27:dc:97:2b:c2:23:b8:36:46:88:ef:
80:bf:0f:cd:dd:cf:ff:a3:65:14:f1:e2:48:5e:6b:6d:a7:d8:
74:b9:f6:f5:10:d3:ee:34:68:3d:11:66:4e:12:b8:bc:1a:a7:
fd:32:fe:6e:69:fa:be:e0:58:78:8a:d9:6f:b4:d6:53:32:68:
33:48:fe:1e:e0:9a:f1:80:93:a5:3a:e2:96:de:7b:28:bc:69:
3f:11:20:c0:34:8d:7e:ea:5c:e7:5d:bc:45:2b:67:20:45:33:
36:a6:26:9f:4f:6f:80:8b:3e:79:3d:5e:39:48:49:92:2c:db:
ff:c8:59:6a:c0:c9:8f:9f:6f:d0:de:d0:d2:af:8f:bb:49:e7:
a2:bc:13:4d:2b:ce:b5:a2:33:24:1f:d5:5c:4d:66:45:27:6d:
b6:94:a7:35:7d:51:b2:81:fc:c3:ed:4b:36:07:a4:ea:bd:36:
be:56:71:6a:0e:7d:1a:2f:8f:9d:8f:05:95:87:0e:e2:d5:80:
e8:bc:5b:15:c5:18:fe:ab:06:ef:89:4d:22:d0:fd:40:72:c8:
e0:16:ad:ac:14:a6:a0:ff:7e:96:85:30:cc:6a:03:58:a5:28:
d1:75:9f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:21:11 2026 by rpki-client