This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft
File: DB03D7B542C60D3D72565734C86589420DF070A0.mft (raw, json)
Hash identifier: b/B/f7hFzPPFkiVZJDG3DfoTOzjZk1yeL/Zx91zBvYM=
Subject key identifier: E0:75:A3:DF:0E:86:C0:65:C0:61:B5:09:0C:23:6C:28:E1:41:B7:58
Authority key identifier: DB:03:D7:B5:42:C6:0D:3D:72:56:57:34:C8:65:89:42:0D:F0:70:A0
Certificate issuer: /CN=DB03D7B542C60D3D72565734C86589420DF070A0
Certificate serial: 4101B14749F736A959A1B5E5296B10C3F6DE39F6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB03D7B542C60D3D72565734C86589420DF070A0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft
Manifest number: 025C
Signing time: Sat 24 Jan 2026 03:32:15 +0000
Manifest this update: Sat 24 Jan 2026 03:27:15 +0000
Manifest next update: Tue 27 Jan 2026 08:53:15 +0000
Files and hashes: 1: 3130332e3138362e3231322e302f32332d3234203d3e20313439373134.roa (hash: J4k4RdB2cM1E1T6rzDg02YfTq6FIMpH6pD8r2mvujP4=)
2: DB03D7B542C60D3D72565734C86589420DF070A0.crl (hash: /PPFTYiE7efgwOL16dYZP1m6Je2uHzPSpKZ12H0cC5U=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.crl
rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB03D7B542C60D3D72565734C86589420DF070A0.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 08:53:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:01:b1:47:49:f7:36:a9:59:a1:b5:e5:29:6b:10:c3:f6:de:39:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB03D7B542C60D3D72565734C86589420DF070A0
Validity
Not Before: Jan 24 03:27:15 2026 GMT
Not After : Jan 27 08:53:15 2026 GMT
Subject: CN=E075A3DF0E86C065C061B5090C236C28E141B758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5c:d5:8f:9b:c8:21:19:66:db:aa:ad:0f:ff:
9e:56:5d:12:ee:0a:75:1e:c2:1d:4c:b0:e8:08:d4:
c9:7c:f9:e9:7e:6c:b4:8b:a4:0a:62:83:99:2d:ae:
e4:91:ca:b5:72:56:a1:88:74:b4:0b:b3:28:30:b0:
ca:ab:b6:b6:ac:8f:25:29:7d:da:a9:aa:84:ed:ef:
01:e1:3f:10:72:f7:5f:de:6b:fe:56:7e:17:20:6b:
0f:46:6d:90:45:cc:34:d8:a3:85:f1:50:5c:ae:7c:
ec:d6:a7:8b:79:16:9c:9b:f8:fa:95:53:d2:71:e8:
98:a0:41:3a:d6:34:84:d4:18:47:05:87:8f:11:b4:
4c:14:0e:c1:06:98:70:3c:98:a9:fb:12:b0:d6:24:
2a:68:7d:74:75:c7:48:d1:73:c4:04:ad:0f:1e:21:
da:f2:88:e7:84:03:8f:f7:a3:fb:5d:7c:11:af:44:
84:cc:f8:e0:a3:46:be:44:af:e1:e8:07:3e:ef:ca:
e1:86:3b:3a:0a:c9:58:d5:8d:7c:3e:c1:a4:46:1c:
2d:4a:0c:13:3b:08:45:3a:44:20:09:3a:9f:19:a1:
f7:75:70:fa:6c:96:e1:21:c0:ca:a5:97:31:f2:ad:
a8:8f:dd:f8:b0:5e:a9:5a:c7:79:71:29:35:74:b1:
ee:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:75:A3:DF:0E:86:C0:65:C0:61:B5:09:0C:23:6C:28:E1:41:B7:58
X509v3 Authority Key Identifier:
keyid:DB:03:D7:B5:42:C6:0D:3D:72:56:57:34:C8:65:89:42:0D:F0:70:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB03D7B542C60D3D72565734C86589420DF070A0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:a1:ec:0f:af:d0:c1:6d:5f:bb:ab:37:ee:7b:00:3f:06:fa:
8a:cf:1c:98:64:76:48:88:cb:a2:0a:36:47:3a:8c:d8:df:bd:
ab:33:3a:ce:91:7e:51:35:8e:58:e3:6d:19:95:2d:6c:3f:36:
d6:f0:4e:46:64:65:95:b4:e1:c7:29:d4:49:3e:62:8d:9d:97:
5a:85:dc:1d:cd:09:57:f3:85:8e:a9:a3:ff:10:b9:6b:93:d1:
ea:53:ad:f0:0f:2b:46:04:9d:0f:8c:f2:8c:3b:9e:b1:ff:11:
b9:56:9f:83:c1:32:a9:a9:56:b4:b6:c7:4b:25:a2:0b:f9:36:
68:42:f2:b9:66:bf:cb:10:6d:e8:f5:7b:48:2f:eb:fc:ed:ac:
5b:a7:30:c8:5f:42:0d:1f:85:b0:73:3a:a0:4d:6f:28:ee:3c:
ca:ef:3f:9a:fb:66:da:fe:f4:4a:4d:97:19:62:e7:91:34:8b:
17:03:67:58:9f:a8:03:bb:c6:13:43:08:7c:9f:65:5c:fb:9e:
08:15:57:9b:bc:26:c4:05:4b:f6:66:05:df:51:71:4a:a2:1d:
33:a0:c3:14:3f:1b:01:ce:91:a4:15:d7:38:3d:af:bc:64:c1:
aa:78:7c:ce:bb:37:26:26:c3:d4:65:f0:77:fb:05:7f:38:36:
13:8b:32:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:37:36 2026 by rpki-client