This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft
File: 510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft (raw, json)
Hash identifier: arLxTvKXr+60D6wYQSEoqn9cg7BQyJdUEfOdrxbLSgM=
Subject key identifier: 6F:72:98:E1:06:3B:85:B7:7B:9E:1F:F9:F1:5C:B7:19:45:E5:EB:68
Authority key identifier: 51:0F:D9:14:35:B7:E9:30:52:B3:86:D2:A1:AB:B0:12:5A:05:B1:B7
Certificate issuer: /CN=510FD91435B7E93052B386D2A1ABB0125A05B1B7
Certificate serial: 02E98E1E40FE3281244D2D9A1B17BDB49DB82AEC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510FD91435B7E93052B386D2A1ABB0125A05B1B7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft
Manifest number: 0329
Signing time: Sat 24 Jan 2026 17:40:02 +0000
Manifest this update: Sat 24 Jan 2026 17:35:02 +0000
Manifest next update: Wed 28 Jan 2026 04:30:02 +0000
Files and hashes: 1: 3130332e3137352e34342e302f32332d3234203d3e20313331313131.roa (hash: TY8TkomaykZ0zGgKDRDg1fDMn5MYQ0XJuAyZNqy9elE=)
2: 510FD91435B7E93052B386D2A1ABB0125A05B1B7.crl (hash: PKpxENK2IFPb8bL1Pcy/K+N3rp8DR6YC/Wz71TPq+XI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.crl
rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510FD91435B7E93052B386D2A1ABB0125A05B1B7.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 04:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:e9:8e:1e:40:fe:32:81:24:4d:2d:9a:1b:17:bd:b4:9d:b8:2a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=510FD91435B7E93052B386D2A1ABB0125A05B1B7
Validity
Not Before: Jan 24 17:35:02 2026 GMT
Not After : Jan 28 04:30:02 2026 GMT
Subject: CN=6F7298E1063B85B77B9E1FF9F15CB71945E5EB68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c0:5e:8c:d3:be:cd:22:02:26:22:21:c1:35:
ee:2b:9a:72:9a:23:3c:d0:39:ab:d4:2e:84:d3:bc:
eb:e8:6a:83:39:39:5b:f2:41:70:6f:93:b2:2a:ff:
0b:56:2c:3b:11:e6:33:0b:ee:be:d8:54:9d:5c:40:
fc:25:a9:42:2f:7e:64:fe:5f:f0:97:ad:71:05:e0:
49:af:c4:0d:d3:e6:56:27:30:6c:4c:74:ae:e2:95:
8a:98:ad:0d:95:25:df:da:70:f4:ba:07:e1:30:78:
dc:87:fc:b9:53:db:86:7c:9f:85:78:36:55:0f:4f:
c2:b0:17:50:14:a9:5a:23:dd:d2:71:0f:1b:7c:76:
f4:7c:3b:cc:5d:5f:80:7f:b5:21:fa:e3:65:32:c4:
1c:0b:d1:4e:52:95:92:b6:e2:b8:d2:54:d2:7b:3d:
82:81:a2:58:4f:cd:e7:3f:92:e1:1c:f0:8e:89:cd:
3b:c6:fd:c4:cc:bb:0a:91:24:65:36:e4:b2:62:19:
6f:62:db:4c:2b:e8:67:a1:a2:25:b3:56:72:03:d1:
3b:f5:30:bb:a6:28:cd:00:e7:4f:9e:30:8a:86:a5:
8d:19:ed:dd:0e:5e:da:6f:fe:05:5b:dd:3e:7a:38:
33:68:76:a6:99:3a:dd:47:06:9f:a0:f3:c0:0b:e1:
f5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:72:98:E1:06:3B:85:B7:7B:9E:1F:F9:F1:5C:B7:19:45:E5:EB:68
X509v3 Authority Key Identifier:
keyid:51:0F:D9:14:35:B7:E9:30:52:B3:86:D2:A1:AB:B0:12:5A:05:B1:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510FD91435B7E93052B386D2A1ABB0125A05B1B7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:07:ae:b1:93:72:ac:18:c2:7a:62:81:95:99:82:79:92:ce:
bf:60:7a:3e:29:2a:5d:fd:8d:a1:e9:8e:d3:cf:58:49:3f:6c:
cf:44:a9:08:fa:a5:7c:96:82:0a:05:dc:18:81:90:2b:e2:58:
39:bd:37:4d:8d:2c:10:7c:cb:df:45:bc:20:c9:a5:96:00:1b:
30:d5:2e:b5:7b:f7:6f:9d:1b:24:c6:4a:0d:dc:e2:21:6e:1e:
09:46:b9:dd:45:7b:0e:08:96:50:49:69:23:dc:21:52:45:f9:
90:01:59:9a:4e:fb:76:21:d4:43:d5:0e:08:48:88:17:b1:7d:
b4:a0:3c:2c:05:12:86:93:a5:48:09:64:2a:52:66:7c:79:72:
3b:fe:17:c9:e1:f4:19:56:b6:0d:e0:66:b0:26:30:2e:51:f3:
28:dd:da:47:c4:bb:cf:55:c1:f2:7d:68:93:da:9f:69:76:45:
4d:42:b5:e6:fd:14:cc:59:29:a9:dd:ad:e8:da:e6:8d:63:9d:
a8:68:3f:ee:38:0e:8f:13:ae:ae:ee:eb:aa:86:ec:18:6d:8c:
e5:4a:f3:e8:92:82:e0:a6:2c:89:77:40:55:d2:9b:7c:20:85:
2d:4e:2a:b6:37:aa:9e:80:4a:e1:61:9d:5b:94:c5:a6:3b:59:
89:35:c5:3e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUAumOHkD+MoEkTS2aGxe9tJ24KuwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTEwRkQ5MTQzNUI3RTkzMDUyQjM4NkQyQTFBQkIwMTI1
QTA1QjFCNzAeFw0yNjAxMjQxNzM1MDJaFw0yNjAxMjgwNDMwMDJaMDMxMTAvBgNV
BAMTKDZGNzI5OEUxMDYzQjg1Qjc3QjlFMUZGOUYxNUNCNzE5NDVFNUVCNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbwF6M077NIgImIiHBNe4rmnKa
IzzQOavULoTTvOvoaoM5OVvyQXBvk7Iq/wtWLDsR5jML7r7YVJ1cQPwlqUIvfmT+
X/CXrXEF4EmvxA3T5lYnMGxMdK7ilYqYrQ2VJd/acPS6B+EweNyH/LlT24Z8n4V4
NlUPT8KwF1AUqVoj3dJxDxt8dvR8O8xdX4B/tSH642UyxBwL0U5SlZK24rjSVNJ7
PYKBolhPzec/kuEc8I6JzTvG/cTMuwqRJGU25LJiGW9i20wr6GehoiWzVnID0Tv1
MLumKM0A50+eMIqGpY0Z7d0OXtpv/gVb3T56ODNodqaZOt1HBp+g88AL4fVFAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUb3KY4QY7hbd7nh/58Vy3GUXl62gwHwYDVR0j
BBgwFoAUUQ/ZFDW36TBSs4bSoauwEloFsbcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
NjMwNTRmNi04ZDA5LTRkMTItYjE5Yi01MDBkNmQ5MjFmYzEvMC81MTBGRDkxNDM1
QjdFOTMwNTJCMzg2RDJBMUFCQjAxMjVBMDVCMUI3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTEwRkQ5MTQzNUI3RTkzMDUyQjM4NkQyQTFBQkIwMTI1QTA1
QjFCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYzMDU0ZjYtOGQwOS00ZDEyLWIx
OWItNTAwZDZkOTIxZmMxLzAvNTEwRkQ5MTQzNUI3RTkzMDUyQjM4NkQyQTFBQkIw
MTI1QTA1QjFCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIgHrrGTcqwYwnpigZWZgnmSzr9gej4pKl39
jaHpjtPPWEk/bM9EqQj6pXyWggoF3BiBkCviWDm9N02NLBB8y99FvCDJpZYAGzDV
LrV792+dGyTGSg3c4iFuHglGud1Few4IllBJaSPcIVJF+ZABWZpO+3Yh1EPVDghI
iBexfbSgPCwFEoaTpUgJZCpSZnx5cjv+F8nh9BlWtg3gZrAmMC5R8yjd2kfEu89V
wfJ9aJPan2l2RU1Cteb9FMxZKandreja5o1jnahoP+44Do8Trq7u66qG7BhtjOVK
8+iSguCmLIl3QFXSm3wghS1OKrY3qp6ASuFhnVuUxaY7WYk1xT4=
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:56:52 2026 by rpki-client