This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft
File: B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft (raw, json)
Hash identifier: cAQK/ThM1beZbyC7lZALlBl2kpxkAqqIq9+21XHwj5w=
Subject key identifier: 1D:B3:83:62:74:42:89:E1:A8:A3:A9:DD:23:D9:3E:1B:3A:65:8C:F6
Authority key identifier: B8:B4:7D:E5:74:D4:4D:4C:C9:A3:E4:E2:E1:F7:AC:9C:B0:AE:A0:B5
Certificate issuer: /CN=B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5
Certificate serial: 28B85F038F34ACD2C7F8653A3785D37AAA4EA09B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft
Manifest number: 01CF
Signing time: Fri 23 Jan 2026 22:32:19 +0000
Manifest this update: Fri 23 Jan 2026 22:27:19 +0000
Manifest next update: Mon 26 Jan 2026 22:50:19 +0000
Files and hashes: 1: B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl (hash: adCYEmxl12DGoR14i3RzWLjcRZVGICTlijPvlNkXWEI=)
2: 3130332e3131372e35362e302f32332d3234203d3e20313336303532.roa (hash: hTMhFpyCQFUqahvHac3PbyQvEBFh/2YhQZ3DB9bPPjE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl
rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 22:50:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:b8:5f:03:8f:34:ac:d2:c7:f8:65:3a:37:85:d3:7a:aa:4e:a0:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5
Validity
Not Before: Jan 23 22:27:19 2026 GMT
Not After : Jan 26 22:50:19 2026 GMT
Subject: CN=1DB38362744289E1A8A3A9DD23D93E1B3A658CF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b3:e9:e7:72:70:6f:ee:b4:51:2d:5f:63:11:
fe:81:85:6e:b1:5c:8b:4b:0e:5f:7b:6d:70:6e:17:
37:b3:f9:41:4c:d9:fc:e3:21:14:01:d8:4e:ca:fc:
89:d3:0d:c5:c4:1b:69:31:fc:1e:8b:98:40:90:e7:
77:76:c3:0b:7d:5f:99:50:ca:84:be:5c:31:a3:f6:
55:95:4c:8b:a8:aa:70:33:92:f4:7f:5a:37:be:d7:
a2:ac:99:4d:f1:64:b0:05:b2:ad:aa:58:33:ef:d5:
a2:02:a3:29:f9:37:82:43:6b:59:d1:d9:5d:4b:54:
e3:86:d9:ec:0b:cd:12:11:0e:5c:22:e9:03:50:87:
39:2f:89:c4:96:24:d9:01:7b:03:b0:bd:f7:f8:95:
e6:ed:bf:7f:df:d3:4d:bd:35:48:28:02:24:50:d3:
c2:fa:fa:a8:44:46:77:27:c7:a0:b5:03:11:ea:fb:
c5:6b:f1:58:de:87:b8:d5:c3:41:86:c2:91:10:19:
9c:4b:b9:33:ac:9b:53:09:57:04:00:ef:dd:8c:eb:
1e:8d:36:8a:97:8b:0d:13:fb:86:d9:f5:e2:be:ac:
fc:4a:8d:44:a0:89:f2:c2:9f:98:dc:de:80:d5:e3:
cc:54:db:f0:ca:7e:d6:db:7a:f0:76:03:68:c0:63:
a5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B3:83:62:74:42:89:E1:A8:A3:A9:DD:23:D9:3E:1B:3A:65:8C:F6
X509v3 Authority Key Identifier:
keyid:B8:B4:7D:E5:74:D4:4D:4C:C9:A3:E4:E2:E1:F7:AC:9C:B0:AE:A0:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b4:3e:40:96:88:90:4a:1c:c9:dc:da:48:79:a4:d7:64:9f:
1f:bd:dc:a0:18:bb:e6:2f:90:76:80:5a:39:1e:72:2e:0e:6a:
6a:b1:52:a0:95:68:f9:d1:15:fd:33:b8:3e:69:e4:96:0e:01:
d3:04:e3:16:e5:1f:97:ae:24:8e:a7:32:01:ea:cc:ba:4f:49:
1d:93:db:c2:90:10:e6:d6:ed:a5:35:bc:d0:fc:f0:16:2f:38:
14:16:92:1e:3e:18:91:86:c8:13:c2:47:a7:07:60:b0:c5:a1:
2a:f5:7e:e5:a5:63:13:96:f9:2b:65:dd:17:4d:df:dc:85:ac:
2f:aa:ab:a1:a9:7c:0a:55:8c:69:ad:70:e6:51:59:6a:b5:74:
17:aa:c2:4f:3e:c7:61:27:eb:ac:58:69:fc:70:ae:22:88:23:
03:fc:fb:c7:ee:55:b1:aa:cb:6e:9b:1e:59:9b:6e:60:3b:38:
82:7a:9c:aa:97:7d:78:66:e1:05:33:b8:2f:1f:45:7e:c3:0d:
10:71:60:d4:c5:d2:be:ec:07:9f:be:f2:e0:e4:3b:5f:09:a9:
c1:78:2f:c9:ae:50:e6:a4:96:0d:cc:a4:90:0b:54:1a:07:33:
2e:fb:9a:a1:b8:4e:e5:31:3e:50:68:b8:ad:60:38:78:d5:d7:
b2:41:2d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:23:38 2026 by rpki-client