This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft
File: 6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft (raw, json)
Hash identifier: YM2OVAuf6c8pHReK/osGT3PjCpFZWo/mZiIIuTlfmwo=
Subject key identifier: C4:FB:EF:6E:73:17:8D:05:10:9E:F5:4E:3D:57:2D:34:49:66:C8:90
Authority key identifier: 6E:12:35:C8:FC:3F:2E:F6:D9:D2:45:D0:60:7A:A6:D7:63:C5:D4:E7
Certificate issuer: /CN=6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7
Certificate serial: 79B35BB835CD97AB8CB27F21810CC30ECA482025
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft
Manifest number: 02AA
Signing time: Sat 24 Jan 2026 06:11:37 +0000
Manifest this update: Sat 24 Jan 2026 06:06:37 +0000
Manifest next update: Tue 27 Jan 2026 17:29:37 +0000
Files and hashes: 1: 323430363a386563303a3a2f33322d3332203d3e203435373031.roa (hash: MzuVDKjjbWuffKhWQ0E6XJFxJ4Xptq+EBiCyvozexRA=)
2: 3130332e3135362e3232362e302f32342d3234203d3e203435373031.roa (hash: OkMPQza0tirm+lkEvMo+wQnirw7z1P7FKUQAEdz/Gek=)
3: 6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.crl (hash: t1HiWHcyTdDzgiGmw0FaT1ZCUDKJCP+xJz0xuC5QE9o=)
4: 3130332e3135362e3232372e302f32342d3234203d3e203435373031.roa (hash: znHE6AD5Lm1YZC2YGdLN2BPXoosYaoUkOA2ryqU5ZV8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.crl
rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 17:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:b3:5b:b8:35:cd:97:ab:8c:b2:7f:21:81:0c:c3:0e:ca:48:20:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7
Validity
Not Before: Jan 24 06:06:37 2026 GMT
Not After : Jan 27 17:29:37 2026 GMT
Subject: CN=C4FBEF6E73178D05109EF54E3D572D344966C890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:66:aa:3e:6f:16:70:eb:b1:41:93:f4:d2:ef:
65:25:09:f8:eb:7d:f6:18:e1:69:0f:ae:13:20:25:
84:80:19:16:1a:f7:1f:fb:42:4d:ae:1a:de:cc:c8:
a2:36:b5:f1:85:fa:8a:b1:f4:b2:10:eb:ed:8d:10:
53:10:80:b5:c8:bc:ff:77:7a:6f:46:b4:f5:86:97:
11:21:c4:2d:03:7d:55:99:71:6b:b9:3c:58:61:d1:
5e:e0:0a:54:c8:d1:38:1b:64:da:85:74:38:c0:ca:
8a:56:aa:72:56:43:ef:1a:e3:f0:6b:7a:7a:3c:48:
b7:2f:4f:36:e2:0a:a4:51:86:5e:11:68:3b:4b:fb:
4b:9f:59:10:d5:4e:a3:a7:dd:35:b7:b3:5d:02:fc:
c3:c6:02:ce:18:53:73:fa:fb:8f:04:bc:ce:2c:28:
f5:bd:ed:89:61:84:ca:be:96:b6:d6:2d:ae:be:4a:
07:63:b9:d2:e2:06:d8:83:05:89:ae:0d:9b:9b:1b:
ac:3c:28:91:71:5b:86:d5:71:ee:6d:2d:45:dd:eb:
fb:f6:7f:e4:81:89:ab:39:9f:4d:98:3a:5f:c8:36:
28:46:35:2b:ee:9d:f3:8d:7a:84:d4:ec:a0:3e:1b:
d6:39:97:46:df:95:5c:42:b6:ab:2f:84:b4:e1:0f:
cf:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:FB:EF:6E:73:17:8D:05:10:9E:F5:4E:3D:57:2D:34:49:66:C8:90
X509v3 Authority Key Identifier:
keyid:6E:12:35:C8:FC:3F:2E:F6:D9:D2:45:D0:60:7A:A6:D7:63:C5:D4:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:5b:a4:75:dc:ad:f4:31:4b:bd:f5:88:9d:c9:05:a5:95:ef:
49:12:33:d8:2d:55:b4:5e:7a:f6:6f:0b:5d:5d:5c:0d:66:b4:
9a:fe:45:62:75:a5:17:74:ae:3f:7a:ee:a0:c6:ca:54:93:a6:
f8:33:1e:94:b6:45:8b:d4:1a:e1:c1:06:3e:c4:48:d1:fa:0e:
75:e7:72:c1:f2:ef:7a:bf:aa:3f:c4:59:39:d7:36:92:9e:c2:
56:a9:90:f3:86:84:88:94:0d:2a:3d:92:97:16:45:5f:d6:e1:
b5:83:00:d7:ed:17:9d:d1:3e:c5:9c:5d:61:7a:f0:61:fa:6d:
3b:57:57:a7:87:9c:32:90:c5:55:38:17:33:f4:66:c9:49:d9:
e8:ac:ee:1a:21:5b:94:fd:ce:8e:24:72:dc:30:a8:5a:7c:22:
14:8e:56:53:65:20:a6:80:8b:92:07:ac:75:77:d3:fa:db:f0:
f8:19:4d:6f:d5:b7:f4:53:d9:a2:9b:02:82:58:fa:f5:cf:59:
84:85:84:31:58:ca:03:60:be:38:b4:4b:91:b7:a5:a0:0e:5b:
d3:f2:7e:24:0d:7d:e4:94:50:97:f4:91:5e:fc:c1:5d:72:9e:
34:21:19:0e:31:02:21:04:1d:a1:a7:48:2e:af:01:10:98:af:
63:82:07:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:48:11 2026 by rpki-client