This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft
File: 067116F928280AE09336BC39D005AAC13695F63C.mft (raw, json)
Hash identifier: J0EYuLjDx72pnSBY0Cr8rA6mr3tEBwG+sqzDwKjzH4M=
Subject key identifier: FF:33:B5:A2:95:D9:33:68:F0:C4:00:71:E8:E4:06:16:9B:F7:92:63
Authority key identifier: 06:71:16:F9:28:28:0A:E0:93:36:BC:39:D0:05:AA:C1:36:95:F6:3C
Certificate issuer: /CN=067116F928280AE09336BC39D005AAC13695F63C
Certificate serial: 24693999CC618F1889094AB08B2BA597C29872E6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/067116F928280AE09336BC39D005AAC13695F63C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft
Manifest number: 020E
Signing time: Sat 24 Jan 2026 04:01:44 +0000
Manifest this update: Sat 24 Jan 2026 03:56:44 +0000
Manifest next update: Tue 27 Jan 2026 12:05:44 +0000
Files and hashes: 1: 3130332e38322e3234362e302f32342d3234203d3e20313432333730.roa (hash: vY8WV98Jcmzb4ODBeT1hqvxozKSfqOYtlfGMabwL6vk=)
2: 067116F928280AE09336BC39D005AAC13695F63C.crl (hash: krOv9PTlYmMqemonRAN7CHTOiBoGMjzGG0m3o358T4M=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.crl
rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/067116F928280AE09336BC39D005AAC13695F63C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 12:05:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:69:39:99:cc:61:8f:18:89:09:4a:b0:8b:2b:a5:97:c2:98:72:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=067116F928280AE09336BC39D005AAC13695F63C
Validity
Not Before: Jan 24 03:56:44 2026 GMT
Not After : Jan 27 12:05:44 2026 GMT
Subject: CN=FF33B5A295D93368F0C40071E8E406169BF79263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3e:bb:d9:d0:f7:75:e4:41:b8:8a:fe:62:1e:
b9:13:01:c7:6a:4d:6c:ae:b2:9a:aa:9c:00:22:9b:
2e:11:89:ef:34:ed:05:f5:1c:61:0b:6d:d7:5f:94:
dc:9f:4a:a9:07:7f:79:59:de:2a:ae:cf:b4:4a:e3:
fa:cd:c1:93:b6:a8:ad:0f:0d:60:7e:a7:07:02:01:
d8:6e:23:45:4a:06:8b:93:c5:38:cf:35:c9:51:e4:
ed:a5:e2:b5:a3:fe:ec:8c:b3:2d:70:20:3a:a0:35:
dc:82:ce:b3:6c:22:8e:fd:b1:41:fe:0b:56:d1:4e:
a7:a5:e9:e4:a3:f9:78:97:1e:e2:b4:4d:b5:fa:66:
49:2e:aa:d0:dd:0b:33:e4:48:00:90:63:78:93:e7:
9b:3c:73:52:c4:20:a1:79:a9:56:68:ab:4b:b9:fd:
8f:80:6d:5c:83:e1:81:f7:29:13:dd:a7:13:98:fa:
45:ac:e2:53:47:03:fa:51:ea:42:17:a2:d4:ad:ee:
f7:b9:b0:56:fd:fe:99:10:c1:de:ae:31:fc:5e:ef:
15:2d:eb:98:f3:06:fb:8a:c8:33:d0:61:57:81:32:
be:75:2d:d4:8e:9d:71:1f:80:4d:ff:5a:a4:c6:f3:
d1:ab:90:57:9d:63:6a:2f:fc:db:8f:8a:46:85:44:
95:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:33:B5:A2:95:D9:33:68:F0:C4:00:71:E8:E4:06:16:9B:F7:92:63
X509v3 Authority Key Identifier:
keyid:06:71:16:F9:28:28:0A:E0:93:36:BC:39:D0:05:AA:C1:36:95:F6:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/067116F928280AE09336BC39D005AAC13695F63C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:59:0a:8c:82:2b:5f:5f:74:d1:a6:85:12:80:e9:32:4a:73:
92:87:23:69:87:87:db:fc:08:ff:40:bc:91:b5:7e:c3:32:cf:
51:60:f2:0b:e2:ce:0e:62:dc:62:44:76:c7:f4:1c:eb:93:f0:
fc:c6:a2:e0:d4:ab:57:2f:10:84:7f:41:b8:26:47:df:b4:f5:
28:d5:85:c4:b4:ff:2d:a9:79:bb:90:ac:91:f3:1e:5f:99:1e:
63:ae:2e:d2:c3:16:81:e1:94:e9:16:95:52:32:ca:e7:9a:ae:
f8:c5:4a:6a:b3:d5:c1:b4:2b:68:c5:54:3a:53:38:5d:03:9e:
f7:27:90:6c:fe:dd:cc:60:c3:5c:48:1f:80:b5:61:1e:c6:7f:
00:25:64:0a:59:e5:00:d6:26:80:d0:7f:01:8e:7d:0f:c1:6c:
88:11:3a:07:11:b9:6f:9a:0c:b2:5b:21:2d:4f:8d:8c:88:60:
9a:b7:3e:ee:08:db:6a:f4:c2:cf:83:f4:31:0f:ff:c6:31:1c:
46:7f:36:c1:55:b2:4e:c7:9f:05:14:18:e7:f6:7b:a6:8d:8a:
73:14:e9:89:e5:7e:d0:e7:79:59:2d:e0:f0:ea:7d:c5:e5:79:
08:49:63:aa:08:c1:af:db:30:86:fd:1c:09:e1:f4:92:cb:f8:
b5:bd:1f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:17:32 2026 by rpki-client