This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft
File: B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft (raw, json)
Hash identifier: afmkvudOiU0vMtBl/vw+fltxPCKKmnX67A3PDMKnnFo=
Subject key identifier: 3C:E7:00:D9:EE:FD:A8:E8:6B:F7:28:85:6C:70:18:C5:C5:3B:4F:0E
Authority key identifier: B5:76:6E:F9:69:F5:BB:0A:7C:76:FA:A9:E5:3B:DE:82:74:E5:64:3E
Certificate issuer: /CN=B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E
Certificate serial: 49B0C4BA356FFCF3E1B2BAC15D63B62A1D031ACF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft
Manifest number: F1
Signing time: Sat 03 Jan 2026 17:41:41 +0000
Manifest this update: Sat 03 Jan 2026 17:36:41 +0000
Manifest next update: Wed 07 Jan 2026 05:03:41 +0000
Files and hashes: 1: B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.crl (hash: fWF5hEh3QdtbSaotbFID7gGkHr5qNy5G+AqZZKDsPXY=)
2: 3136302e32352e34382e302f32332d3233203d3e20313533303634.roa (hash: yPb8vzqBZ4SuTebiaZ2t1hQWOQT5EPzxImNlHmSkYG0=)
3: 3136302e32352e34382e302f32342d3234203d3e20313533303634.roa (hash: 5vrTiCPVa+g9uUAZqY7yIFrCeD1zTR9VGB0NveariYc=)
4: 3136302e32352e34392e302f32342d3234203d3e20313533303634.roa (hash: +r21VHJKiSG4g/R/zHmUKuYDBebHXXDRqabchwnAdGk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.crl
rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Jan 2026 05:03:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:b0:c4:ba:35:6f:fc:f3:e1:b2:ba:c1:5d:63:b6:2a:1d:03:1a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E
Validity
Not Before: Jan 3 17:36:41 2026 GMT
Not After : Jan 7 05:03:41 2026 GMT
Subject: CN=3CE700D9EEFDA8E86BF728856C7018C5C53B4F0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:30:d7:e4:e5:a0:4d:2f:b5:0c:72:87:9a:99:
44:8d:93:81:01:76:a9:6f:21:9a:c3:86:b3:7e:26:
b8:be:2f:c6:0b:6e:d6:ac:f5:35:ce:45:ab:73:18:
bf:f1:26:93:d1:10:1b:ac:2e:46:9f:5f:7d:5e:3e:
5d:03:a5:b0:29:dc:69:b3:8b:e4:f3:be:03:b5:6d:
ee:0a:9d:4d:41:75:f2:37:e8:cb:df:a9:5c:5b:24:
5a:24:cc:b8:fb:d7:5a:83:00:94:19:12:42:01:6f:
f4:2a:20:24:ab:78:a0:66:34:d6:d6:31:7f:7e:5d:
1b:26:5f:c4:93:31:20:45:31:d8:85:ca:b1:6c:41:
13:17:3f:ae:81:2f:0c:25:e8:d1:8c:b3:bd:9e:05:
25:88:b4:09:73:44:53:13:6b:63:b6:71:83:7a:5a:
89:61:4b:8d:3a:1a:9f:90:a5:a5:1a:ef:b6:f0:27:
a2:1a:f9:b8:53:4c:97:14:9f:7c:83:0d:4b:ff:b7:
59:09:f2:a6:a7:7a:d3:70:87:0e:cb:59:81:47:90:
e9:d5:d4:4c:4d:53:2a:90:a5:84:1a:d6:de:9f:6a:
ed:f6:bf:29:27:cc:bc:ac:05:93:b4:f4:d4:5e:16:
8f:ba:17:ef:93:1b:5b:d7:93:ba:20:62:49:d1:cc:
92:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E7:00:D9:EE:FD:A8:E8:6B:F7:28:85:6C:70:18:C5:C5:3B:4F:0E
X509v3 Authority Key Identifier:
keyid:B5:76:6E:F9:69:F5:BB:0A:7C:76:FA:A9:E5:3B:DE:82:74:E5:64:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:cf:76:62:29:2e:fe:25:2b:d2:9c:3b:b7:d1:76:ce:84:23:
0a:82:6f:4e:d9:b0:70:f3:ae:19:d4:c5:f8:5e:1c:38:5c:47:
42:da:a2:80:dd:8a:3a:b6:5f:19:30:73:68:87:a4:95:43:56:
30:6b:14:96:4c:ed:a7:f4:53:95:5b:0e:44:dd:35:10:ba:04:
a1:07:58:a8:81:39:37:10:c3:c8:de:4a:7e:f4:0e:39:26:0e:
61:a0:70:c2:65:5a:44:f5:a7:cd:20:b8:e0:d4:85:f3:e5:d9:
72:46:98:54:23:28:39:e4:7a:3a:46:3e:42:97:12:dc:cd:17:
02:80:f3:07:7d:6d:d0:72:61:f0:ea:a2:c2:cd:8c:aa:53:ff:
55:f5:c7:a2:a1:ae:17:eb:3a:f8:14:27:6f:c7:4d:54:f7:3c:
c5:13:ba:d7:94:ff:bf:3b:c4:a2:c2:2c:51:36:dd:f5:95:44:
15:66:3d:84:91:01:fe:81:0e:71:2b:11:ac:a9:7e:ca:20:3a:
40:d3:a0:5d:c3:cd:69:4c:fd:3e:d0:67:28:b1:d4:eb:5b:d1:
39:d1:19:6d:e5:c5:be:d8:b7:53:06:27:d2:00:f7:bc:42:25:
8b:8b:fe:82:d0:cd:31:2a:8f:ce:5c:49:47:8a:ff:6f:af:bd:
fb:e5:49:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 5 19:15:37 2026 by rpki-client