This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft
File: 69FEA3D523BC4635AE385A6D91412834159FF34B.mft (raw, json)
Hash identifier: m1RYgVt0x1KrQS5yK+NVjUq89CQ4EFoGd5UEkOMWaBo=
Subject key identifier: B1:E9:69:8D:5E:08:83:A2:ED:C3:62:6F:BB:ED:32:AF:B1:92:55:19
Authority key identifier: 69:FE:A3:D5:23:BC:46:35:AE:38:5A:6D:91:41:28:34:15:9F:F3:4B
Certificate issuer: /CN=69FEA3D523BC4635AE385A6D91412834159FF34B
Certificate serial: 25A7EA020AB285658C8602E4232CD347BBE72533
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/69FEA3D523BC4635AE385A6D91412834159FF34B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft
Manifest number: F4
Signing time: Sat 24 Jan 2026 19:22:07 +0000
Manifest this update: Sat 24 Jan 2026 19:17:07 +0000
Manifest next update: Wed 28 Jan 2026 06:38:07 +0000
Files and hashes: 1: 3136302e32322e3231372e302f32342d3234203d3e20313532383431.roa (hash: 2H9ugvO1mqNF5HVzGPvvJyo9xLTxDYsuZlPEZxpIFQg=)
2: 69FEA3D523BC4635AE385A6D91412834159FF34B.crl (hash: e4G1Z0oWLRkRtLu41wKssc0rr1qJ2K6NDc1/kJ5EFxM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.crl
rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/69FEA3D523BC4635AE385A6D91412834159FF34B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 06:38:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:a7:ea:02:0a:b2:85:65:8c:86:02:e4:23:2c:d3:47:bb:e7:25:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69FEA3D523BC4635AE385A6D91412834159FF34B
Validity
Not Before: Jan 24 19:17:07 2026 GMT
Not After : Jan 28 06:38:07 2026 GMT
Subject: CN=B1E9698D5E0883A2EDC3626FBBED32AFB1925519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:98:a7:10:b0:5d:58:a3:74:07:0a:8c:1c:48:
46:da:03:e4:14:3f:ee:71:6a:c0:57:b4:9b:84:b6:
3a:f2:fe:21:29:49:ce:85:6e:b5:44:e8:98:7f:ac:
61:24:9c:f6:15:6d:a3:84:c8:e8:eb:53:5e:ea:c2:
d4:f7:7b:2d:84:a3:31:1d:51:3b:6a:cc:b8:a3:a5:
5a:09:49:14:43:38:84:c5:50:d6:0d:f5:15:b8:6f:
27:49:d0:19:7e:51:0c:ff:1f:57:ec:1d:92:7b:ed:
2f:f2:a5:6a:9d:6c:e2:2a:22:7c:f5:39:48:02:2d:
94:1d:09:ae:2b:23:ad:b5:0e:3c:92:d4:5d:ae:25:
7f:62:b2:ba:55:d5:bd:80:ff:0e:2b:67:60:c0:81:
79:c9:6b:94:7b:c0:59:aa:74:2a:16:89:d1:cf:f1:
ac:15:4a:a6:37:a1:1c:8e:fa:0f:03:b3:0a:bd:3a:
5b:5d:8c:06:86:6a:22:0c:18:3f:41:4a:af:79:e6:
20:32:d7:fb:6c:b9:7f:fc:ed:ec:07:a2:33:06:6d:
ee:87:97:9d:c4:9e:2e:15:fe:79:f8:5a:8f:37:ca:
7a:1c:ef:e2:ef:64:db:e9:32:fd:55:1f:74:72:e5:
5c:f0:f9:48:dd:bf:f0:96:e6:c2:0f:58:42:e4:c5:
04:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E9:69:8D:5E:08:83:A2:ED:C3:62:6F:BB:ED:32:AF:B1:92:55:19
X509v3 Authority Key Identifier:
keyid:69:FE:A3:D5:23:BC:46:35:AE:38:5A:6D:91:41:28:34:15:9F:F3:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/69FEA3D523BC4635AE385A6D91412834159FF34B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:12:4e:78:4e:84:56:03:b6:67:4a:8a:7e:78:16:76:cb:f8:
7c:68:89:2d:1e:54:65:7d:54:48:96:ed:4e:ec:85:cf:9a:3a:
b0:37:5e:87:1a:33:b3:39:44:bb:7d:0d:b9:2c:ee:1f:2d:24:
84:68:50:56:1f:b3:fd:7e:34:92:b3:b0:bd:59:5e:df:ba:03:
80:76:df:68:bb:6a:17:21:e3:86:7e:04:19:02:47:9c:c6:3e:
49:c2:a2:d8:a1:40:a6:57:7a:04:c2:6d:72:86:5b:06:8a:db:
8b:6f:d8:3d:56:b0:bc:b5:9c:a2:8a:40:b7:b0:08:9e:0d:a1:
f2:02:2d:cb:94:88:75:cc:04:9f:50:8e:8c:c8:cb:81:f1:c4:
fd:64:9c:81:9a:0d:cc:1d:62:7b:36:9b:94:a1:48:27:2c:91:
a5:54:67:27:0c:31:14:8a:aa:fc:97:6a:8f:ef:43:10:76:e3:
eb:91:e0:8a:a3:9f:cd:a7:15:32:36:a1:d2:cf:31:8d:dd:a4:
75:97:69:d1:6b:94:ee:fc:f3:79:ce:7d:d1:32:34:f9:00:d3:
96:7c:9b:71:db:d8:ee:f5:82:48:ec:62:df:d1:f2:53:0e:91:
0c:b9:51:38:3f:86:eb:13:b5:b8:05:bc:e1:36:10:66:e8:0b:
14:c6:53:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:18:42 2026 by rpki-client