This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.mft
File: 6A6C813654E0C29339E6CAF522201F8E702FEAD3.mft (raw, json)
Hash identifier: u1H8xxnHnmIfJJ5DptQ0rP8XYZQznUd2XO7Ka+O61vo=
Subject key identifier: 74:7B:D1:14:F5:63:43:3F:61:D8:C6:FF:D2:DA:69:CD:F4:C6:5E:2C
Authority key identifier: 6A:6C:81:36:54:E0:C2:93:39:E6:CA:F5:22:20:1F:8E:70:2F:EA:D3
Certificate issuer: /CN=6A6C813654E0C29339E6CAF522201F8E702FEAD3
Certificate serial: 1BB038D03A8CFB2F5F448DD53E6CE65637B03FD2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A6C813654E0C29339E6CAF522201F8E702FEAD3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.mft
Manifest number: 04AA
Signing time: Sun 25 Jan 2026 05:32:12 +0000
Manifest this update: Sun 25 Jan 2026 05:27:12 +0000
Manifest next update: Wed 28 Jan 2026 10:22:12 +0000
Files and hashes: 1: 3130332e3136302e3138352e302f32342d3234203d3e20313339393532.roa (hash: fILGplhDIU4U8qE+HJJyt+4SNVKoBOrgk1ZojWa+PYM=)
2: 3130332e3136302e3138342e302f32342d3234203d3e20313339393532.roa (hash: lM92Y8NAq84+9u66XJy1rtkUnS0gYFJFy14ToZCCjs0=)
3: 6A6C813654E0C29339E6CAF522201F8E702FEAD3.crl (hash: kd87WJVZpruikOnP6bA3WiOVH1TWUAGxhHKtTCJpBGQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.crl
rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A6C813654E0C29339E6CAF522201F8E702FEAD3.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 10:22:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:b0:38:d0:3a:8c:fb:2f:5f:44:8d:d5:3e:6c:e6:56:37:b0:3f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A6C813654E0C29339E6CAF522201F8E702FEAD3
Validity
Not Before: Jan 25 05:27:12 2026 GMT
Not After : Jan 28 10:22:12 2026 GMT
Subject: CN=747BD114F563433F61D8C6FFD2DA69CDF4C65E2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b6:d5:66:ed:b7:b8:05:d7:2c:ab:e3:d9:15:
cc:be:a8:e1:a8:69:b1:5f:c7:1e:50:d6:08:bb:20:
b5:f1:bc:41:3c:11:5d:65:0f:32:26:e9:b9:17:b1:
44:e9:1f:7d:2b:dc:df:67:5a:af:60:66:df:be:bf:
19:84:17:c3:ca:b8:a4:d1:8d:0c:e6:43:09:ba:56:
e6:d7:34:b1:a0:66:f4:be:8a:9a:8b:b5:54:28:13:
56:d7:fd:1f:06:3e:d4:0b:0c:51:d5:e6:ae:e4:59:
03:d8:e8:a6:e0:b7:c0:0e:83:8b:90:6e:c4:d3:82:
9b:2c:e3:1a:7d:4e:14:1d:dd:67:73:cb:50:1b:5a:
a6:b4:28:34:3e:ac:c1:61:29:a1:ec:1c:b8:7b:2e:
3a:f4:a3:5f:9c:2e:06:d8:b1:82:55:16:2a:e4:48:
9f:49:4e:e6:db:7b:9b:5e:1f:25:85:66:9d:fd:33:
da:aa:18:09:04:62:0d:e9:fe:40:cc:68:fb:e2:14:
d3:7a:c8:9e:b0:23:d4:58:46:ee:c6:7c:fc:02:93:
6c:69:80:fb:0f:f5:d3:8b:9e:38:27:87:32:32:99:
d0:a7:1b:f4:4c:33:b7:db:b6:1d:fd:73:0f:7d:9c:
51:fa:de:50:39:3f:64:9a:a3:07:1c:60:72:6e:00:
eb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:7B:D1:14:F5:63:43:3F:61:D8:C6:FF:D2:DA:69:CD:F4:C6:5E:2C
X509v3 Authority Key Identifier:
keyid:6A:6C:81:36:54:E0:C2:93:39:E6:CA:F5:22:20:1F:8E:70:2F:EA:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A6C813654E0C29339E6CAF522201F8E702FEAD3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:20:25:38:69:30:91:2b:e1:38:e5:1b:a1:01:23:12:ca:56:
5d:11:c0:5d:ed:03:1f:14:80:8e:0b:3a:37:82:d2:f4:ae:e8:
38:de:60:7d:26:12:77:f9:09:fb:a0:c8:8d:56:f0:9d:7c:0c:
c4:f2:94:61:00:83:a0:5e:9d:d9:97:a8:12:24:f9:b9:ff:d9:
1c:28:1b:85:13:2a:85:f7:0d:94:d4:1f:f5:63:16:e1:6d:45:
a4:ec:6a:b8:1b:f6:e5:25:1b:b0:ff:be:38:b3:ec:48:5b:98:
89:33:5f:67:0f:dd:ad:8b:ba:f3:b1:d5:83:75:1b:33:53:23:
25:c6:86:67:db:65:91:74:a8:6a:b4:db:1e:fe:3a:ef:b7:71:
6c:e8:4d:f3:17:b0:9c:25:c3:eb:ad:ce:d0:80:cb:d1:9c:11:
ac:30:ec:b5:2a:0a:d3:25:6e:c0:92:2f:aa:f1:51:de:b0:36:
12:fb:8b:99:6f:b1:dc:3f:d2:71:e2:67:b0:12:ed:27:62:1e:
a5:16:06:7b:00:f9:8d:1b:10:0a:c8:4e:26:f0:54:91:e9:04:
6b:2d:1d:2c:70:ac:4c:6d:9b:26:9f:4e:35:1f:fb:01:93:fc:
f6:22:73:ed:5e:4c:97:e4:1e:8e:ef:7a:1e:23:76:bd:22:ab:
69:84:ec:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:44:26 2026 by rpki-client