This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/56369FDBBCDE685B4440429A22B7967BBC3C5E36.mft
File: 56369FDBBCDE685B4440429A22B7967BBC3C5E36.mft (raw, json)
Hash identifier: R2aLQhERtjDf0cpzEFSp4gU2uz3UZVm8W4I+CavU+5Q=
Subject key identifier: A7:80:92:BF:42:91:B1:74:C8:DD:D3:4F:DF:3D:E7:45:88:6C:1B:7E
Authority key identifier: 56:36:9F:DB:BC:DE:68:5B:44:40:42:9A:22:B7:96:7B:BC:3C:5E:36
Certificate issuer: /CN=56369FDBBCDE685B4440429A22B7967BBC3C5E36
Certificate serial: 15C593A64897ADED5C7B94D7139D2326E547CBFE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56369FDBBCDE685B4440429A22B7967BBC3C5E36.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/56369FDBBCDE685B4440429A22B7967BBC3C5E36.mft
Manifest number: 03B3
Signing time: Sun 25 Jan 2026 13:21:59 +0000
Manifest this update: Sun 25 Jan 2026 13:16:59 +0000
Manifest next update: Wed 28 Jan 2026 17:49:59 +0000
Files and hashes: 1: 323030313a6466313a653430303a3a2f34382d3438203d3e20313333383034.roa (hash: bKELrvkygew/puVSCxFVERwd18KUv2pchNnSXhErods=)
2: 56369FDBBCDE685B4440429A22B7967BBC3C5E36.crl (hash: 2AfcODIbzyQwjl//KQTzWOoi+wyCbrywt5N1NpFK658=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/56369FDBBCDE685B4440429A22B7967BBC3C5E36.crl
rsync://repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/56369FDBBCDE685B4440429A22B7967BBC3C5E36.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56369FDBBCDE685B4440429A22B7967BBC3C5E36.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:c5:93:a6:48:97:ad:ed:5c:7b:94:d7:13:9d:23:26:e5:47:cb:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56369FDBBCDE685B4440429A22B7967BBC3C5E36
Validity
Not Before: Jan 25 13:16:59 2026 GMT
Not After : Jan 28 17:49:59 2026 GMT
Subject: CN=A78092BF4291B174C8DDD34FDF3DE745886C1B7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cf:f2:a5:c7:3e:11:a2:30:1c:ba:b5:fa:3b:
cd:ce:0b:e7:8c:84:19:68:58:11:43:5a:f6:ca:e6:
ef:01:6f:a0:9c:20:e2:31:c5:f1:7c:27:5d:83:bc:
f0:59:eb:cc:c8:55:75:32:c6:58:76:75:e4:4a:66:
b8:74:af:a5:32:dc:47:20:24:65:43:23:0f:64:fb:
a5:83:c5:ea:b3:ed:22:61:a0:c6:a9:82:85:39:78:
9c:a9:93:28:ec:f1:80:8a:b0:38:6a:6d:a7:c3:e1:
87:b1:77:d0:0a:c4:48:17:04:f1:bb:fc:a2:7f:8a:
0d:d6:bb:a7:65:d3:a8:8d:a2:14:a4:c7:84:28:31:
ad:c5:84:9b:4a:03:67:72:15:43:ac:c0:c8:fe:4f:
c9:99:cb:f9:1c:a7:f1:65:b2:f7:15:16:18:18:8e:
89:5f:7c:74:fd:bc:f6:dd:87:14:7d:63:0b:a1:a4:
65:1b:09:9e:f5:f3:55:1b:c7:fa:45:85:31:63:38:
cb:f3:fa:98:98:86:f7:0c:37:b0:65:e9:57:26:a0:
44:c0:82:83:8b:f4:4c:f9:c2:cc:c3:d6:5a:60:46:
66:16:6f:06:33:55:8c:a5:ff:a1:ed:bb:12:af:05:
3e:0b:38:c1:38:ba:88:c0:6d:50:89:b5:91:6c:9a:
82:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:80:92:BF:42:91:B1:74:C8:DD:D3:4F:DF:3D:E7:45:88:6C:1B:7E
X509v3 Authority Key Identifier:
keyid:56:36:9F:DB:BC:DE:68:5B:44:40:42:9A:22:B7:96:7B:BC:3C:5E:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/56369FDBBCDE685B4440429A22B7967BBC3C5E36.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56369FDBBCDE685B4440429A22B7967BBC3C5E36.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/56369FDBBCDE685B4440429A22B7967BBC3C5E36.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:ba:d8:a5:ed:bd:63:39:29:dd:38:65:90:1f:61:b4:8c:e1:
40:01:49:79:72:98:56:ce:d5:ef:1f:5d:a6:11:26:f2:c8:ba:
0a:12:e7:1f:32:ef:dc:08:ba:92:67:eb:67:86:e8:28:74:66:
6f:86:ce:09:5d:18:61:e8:c7:95:41:d0:38:fe:5d:d4:c8:6e:
37:dc:89:c3:e1:8e:cb:7a:bd:c8:83:4a:bd:a5:51:c8:8c:84:
f7:9a:5c:d9:de:f9:6e:00:13:ef:ea:bd:47:2c:24:bc:a1:02:
bf:ff:7e:21:22:a1:ed:c5:88:80:5a:76:f8:91:75:82:12:ce:
34:ff:6a:40:ad:b6:7b:89:e3:ed:03:62:bb:f9:13:4f:fb:b7:
4d:90:a1:87:54:cc:01:65:41:5e:6a:fe:c4:6e:72:78:48:d7:
d4:82:79:9f:b6:b2:1f:41:d1:cb:bc:39:2e:ce:e2:e9:a2:be:
b9:aa:93:9c:de:4c:9f:74:17:07:c9:25:83:86:53:ad:a6:a6:
8b:28:43:ff:cb:7a:b9:be:47:04:93:ee:70:e9:97:03:a7:21:
6b:1e:72:48:75:7e:7c:fa:2f:25:83:30:1a:46:a2:0e:bb:e0:
f3:8e:83:5f:03:b6:49:77:e4:6a:64:43:95:3d:1e:d9:ca:00:
db:0b:b1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:36:38 2026 by rpki-client