This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft
File: B5A68ADE81322F194320BE4302C6897D29D13BDD.mft (raw, json)
Hash identifier: mqu5jBoIbEmb2fiPNnkvRfe4rAXEupiaYdo1Edz4q40=
Subject key identifier: 94:2C:47:E2:C1:3F:CC:92:5A:96:1A:88:4A:4B:7D:DF:8F:8B:85:3F
Authority key identifier: B5:A6:8A:DE:81:32:2F:19:43:20:BE:43:02:C6:89:7D:29:D1:3B:DD
Certificate issuer: /CN=B5A68ADE81322F194320BE4302C6897D29D13BDD
Certificate serial: 7FFECE0638436AF3258F91DBEC71D3A6431F9446
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft
Manifest number: EE
Signing time: Sat 24 Jan 2026 07:51:27 +0000
Manifest this update: Sat 24 Jan 2026 07:46:27 +0000
Manifest next update: Tue 27 Jan 2026 14:57:27 +0000
Files and hashes: 1: B5A68ADE81322F194320BE4302C6897D29D13BDD.crl (hash: ydyGey3ysbkREvETms3GpMxSFzOJebLyIclvoNT/Y80=)
2: 3130332e33382e3130362e302f32332d3234203d3e20313532303039.roa (hash: 5ddjKzEo7R2HXRPV5KVablgruigb2N4v7X9sDbCb8p8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.crl
rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 14:57:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:fe:ce:06:38:43:6a:f3:25:8f:91:db:ec:71:d3:a6:43:1f:94:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5A68ADE81322F194320BE4302C6897D29D13BDD
Validity
Not Before: Jan 24 07:46:27 2026 GMT
Not After : Jan 27 14:57:27 2026 GMT
Subject: CN=942C47E2C13FCC925A961A884A4B7DDF8F8B853F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b1:02:64:21:40:eb:34:14:77:1a:df:a4:15:
b1:58:43:79:40:fb:d0:54:b4:7e:b5:f6:0c:7b:de:
42:4a:84:cd:91:6c:50:9a:36:86:51:0c:cf:5b:e4:
f0:78:b6:d3:b8:dc:45:60:b1:6c:9f:f3:51:99:98:
99:10:5d:cf:84:35:ee:dd:3a:9a:92:72:4c:65:fe:
5e:48:79:bc:f7:05:3b:fd:ad:90:25:b3:24:3e:71:
61:31:4a:d0:50:b6:ca:af:41:4b:4f:3e:83:37:1c:
6b:36:ed:a5:9e:f0:a5:02:b5:f7:71:3a:5f:97:20:
7d:fa:ee:1d:ca:df:5e:61:3b:b8:fa:e6:b1:a4:76:
7d:a8:ac:b6:77:a5:8d:19:c5:4c:aa:a2:b8:c8:52:
46:b3:af:f5:4d:eb:6c:5b:90:fb:bb:38:94:3f:a0:
5a:18:4d:5e:10:7a:a7:59:b2:72:eb:8b:45:8e:de:
78:c9:4b:e1:e4:a2:ae:ee:31:ce:7c:51:43:93:56:
43:7a:6a:5f:ca:df:91:f1:96:4a:e3:2b:1c:58:5b:
2e:e7:de:7d:45:b6:24:f6:ef:e2:97:d3:96:fa:53:
0a:b3:cf:3a:9a:d9:36:d3:c9:2b:1a:12:83:74:8f:
cc:78:d5:b8:7f:37:6c:78:97:47:c7:7c:e4:01:73:
e4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2C:47:E2:C1:3F:CC:92:5A:96:1A:88:4A:4B:7D:DF:8F:8B:85:3F
X509v3 Authority Key Identifier:
keyid:B5:A6:8A:DE:81:32:2F:19:43:20:BE:43:02:C6:89:7D:29:D1:3B:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:85:76:92:31:bd:03:5f:bb:83:46:d9:7c:df:bf:be:59:37:
7d:5c:8b:1a:07:42:a4:7d:d6:a2:74:45:e7:55:19:46:58:20:
c4:36:37:3c:38:14:57:3a:9a:34:23:c1:6a:43:ef:f5:c5:34:
48:09:02:7c:37:d2:88:83:e7:3b:bf:1c:0f:0e:fa:9e:5f:11:
3f:ab:ba:ea:76:70:78:91:86:0b:31:9a:bd:f7:b2:1c:84:76:
5c:3b:6b:da:c1:36:15:e4:ab:a2:a5:b0:86:9c:b3:2c:a8:47:
e1:1b:23:49:28:01:06:6b:1f:e5:3e:8c:23:f1:47:10:f3:9f:
11:d0:ed:4e:71:68:36:02:2d:fe:b9:98:de:e9:99:d8:bb:f1:
35:b4:23:f3:c9:08:e7:ee:c3:a0:1e:3e:fd:fd:50:24:a7:90:
51:50:b3:1e:23:b9:62:41:3c:2a:a6:9b:8b:af:62:f0:6d:ed:
a1:0f:87:60:e9:f7:78:b4:4c:c4:99:86:d4:99:6a:a0:0f:e5:
c8:2e:c1:22:76:0e:cf:9b:87:3d:9f:7f:11:21:a0:55:dc:c7:
1d:98:48:89:eb:38:04:8a:38:f4:41:ca:a9:60:2c:59:26:82:
7e:84:18:47:c3:2f:4d:f8:12:fc:5d:2b:c1:65:ed:ae:c5:19:
d9:c9:7c:ff
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUf/7OBjhDavMlj5Hb7HHTpkMflEYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVBNjhBREU4MTMyMkYxOTQzMjBCRTQzMDJDNjg5N0Qy
OUQxM0JERDAeFw0yNjAxMjQwNzQ2MjdaFw0yNjAxMjcxNDU3MjdaMDMxMTAvBgNV
BAMTKDk0MkM0N0UyQzEzRkNDOTI1QTk2MUE4ODRBNEI3RERGOEY4Qjg1M0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWsQJkIUDrNBR3Gt+kFbFYQ3lA
+9BUtH619gx73kJKhM2RbFCaNoZRDM9b5PB4ttO43EVgsWyf81GZmJkQXc+ENe7d
OpqSckxl/l5Iebz3BTv9rZAlsyQ+cWExStBQtsqvQUtPPoM3HGs27aWe8KUCtfdx
Ol+XIH367h3K315hO7j65rGkdn2orLZ3pY0ZxUyqorjIUkazr/VN62xbkPu7OJQ/
oFoYTV4QeqdZsnLri0WO3njJS+Hkoq7uMc58UUOTVkN6al/K35HxlkrjKxxYWy7n
3n1FtiT27+KX05b6Uwqzzzqa2TbTySsaEoN0j8x41bh/N2x4l0fHfOQBc+RTAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUlCxH4sE/zJJalhqISkt934+LhT8wHwYDVR0j
BBgwFoAUtaaK3oEyLxlDIL5DAsaJfSnRO90wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
YjAxNjA4NS0yZjk0LTQwZmYtODBjZS1jZTIzZDM5ZTY1YTEvMC9CNUE2OEFERTgx
MzIyRjE5NDMyMEJFNDMwMkM2ODk3RDI5RDEzQkRELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjVBNjhBREU4MTMyMkYxOTQzMjBCRTQzMDJDNjg5N0QyOUQx
M0JERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGIwMTYwODUtMmY5NC00MGZmLTgw
Y2UtY2UyM2QzOWU2NWExLzAvQjVBNjhBREU4MTMyMkYxOTQzMjBCRTQzMDJDNjg5
N0QyOUQxM0JERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIOFdpIxvQNfu4NG2Xzfv75ZN31cixoHQqR9
1qJ0RedVGUZYIMQ2Nzw4FFc6mjQjwWpD7/XFNEgJAnw30oiD5zu/HA8O+p5fET+r
uup2cHiRhgsxmr33shyEdlw7a9rBNhXkq6KlsIacsyyoR+EbI0koAQZrH+U+jCPx
RxDznxHQ7U5xaDYCLf65mN7pmdi78TW0I/PJCOfuw6AePv39UCSnkFFQsx4juWJB
PCqmm4uvYvBt7aEPh2Dp93i0TMSZhtSZaqAP5cguwSJ2Ds+bhz2ffxEhoFXcxx2Y
SInrOASKOPRByqlgLFkmgn6EGEfDL034EvxdK8Fl7a7FGdnJfP8=
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:11:32 2026 by rpki-client