This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft
File: A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft (raw, json)
Hash identifier: lxl91qZ0upE1CG3W5gHH+h4JZLt6rR5yQoqbPVoE5I4=
Subject key identifier: BB:5E:C8:4B:C6:29:79:1A:70:A4:9D:EB:03:40:C5:47:8C:81:AE:2A
Authority key identifier: A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64
Certificate issuer: /CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464
Certificate serial: 771A3CC4A25564795AFB3583D203F2ED2586A534
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft
Manifest number: 0257
Signing time: Sun 25 Jan 2026 18:22:26 +0000
Manifest this update: Sun 25 Jan 2026 18:17:26 +0000
Manifest next update: Wed 28 Jan 2026 19:56:26 +0000
Files and hashes: 1: 34322e36322e3137362e302f32342d3234203d3e203535363930.roa (hash: dHv2E74rvnbHn93zKNwQZCdDaqywUU0cyjyj8Kme6Kk=)
2: 34322e36322e3137372e302f32342d3234203d3e203535363930.roa (hash: wxamqcqZHFPZTXY3tFZjnjOjiDY+Ympi4Mw1SknW1jk=)
3: A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl (hash: 7voyPFsJyKb4BVouvrMsowRNupqgG93YgyZ7+AIBwzg=)
4: 34322e36322e3137382e302f32342d3234203d3e203535363930.roa (hash: pyuYjl7HJM3OX8EabIWp5/TJB6k8ueJKEta6KCZ5rHA=)
5: 34322e36322e3137392e302f32342d3234203d3e203535363930.roa (hash: cOnOzonkSjygqwY7wjbRR1C8zBB1AZouGk8x5uWWlJI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl
rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:1a:3c:c4:a2:55:64:79:5a:fb:35:83:d2:03:f2:ed:25:86:a5:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464
Validity
Not Before: Jan 25 18:17:26 2026 GMT
Not After : Jan 28 19:56:26 2026 GMT
Subject: CN=BB5EC84BC629791A70A49DEB0340C5478C81AE2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:08:35:88:d0:b7:5d:ee:d1:f3:9b:45:31:4d:
e3:72:17:ba:fc:1c:77:cf:23:b3:08:39:94:c3:ed:
28:42:c0:2e:1f:62:c1:11:24:5c:d2:37:62:53:91:
31:a5:65:58:78:7a:66:19:be:c1:55:15:1e:ef:6e:
b7:2c:fe:ff:49:66:d0:75:a9:ac:6f:4d:ea:6c:bd:
59:42:9a:21:8e:d5:4f:86:96:71:d7:75:4f:e9:a0:
a6:78:4c:27:a8:38:f0:75:45:47:e8:dc:90:8d:0d:
9d:0c:b6:ae:d5:3c:28:25:9d:80:8a:db:6d:9d:4d:
88:c0:30:a3:42:17:da:86:65:f9:dd:10:e0:92:c3:
60:6b:f5:0c:e7:6e:ea:86:d8:a1:08:2d:9f:56:7f:
1f:e7:06:31:03:fa:36:43:65:82:58:80:f1:1b:5e:
64:96:7a:bf:95:25:d6:01:ed:7c:c4:35:ae:98:60:
7a:21:b3:75:3f:98:70:02:b8:15:0f:9c:fa:73:cf:
ea:e5:f6:e1:ae:53:f5:6b:bc:73:10:f1:ad:2f:9f:
e7:80:db:55:66:d0:84:07:76:46:34:72:ca:f6:06:
90:7e:64:31:b7:07:dc:94:45:1f:06:1b:1e:61:f7:
77:51:e5:c5:35:a7:8c:13:49:64:1d:7f:8b:57:4c:
f9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5E:C8:4B:C6:29:79:1A:70:A4:9D:EB:03:40:C5:47:8C:81:AE:2A
X509v3 Authority Key Identifier:
keyid:A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ad:74:11:8f:e2:e3:1a:f0:b0:2d:13:e4:9f:f3:77:71:f8:
0e:1d:20:c8:20:42:75:06:68:ea:15:86:b6:45:cc:ab:f4:6b:
e2:a3:59:d0:15:c6:98:db:15:99:c7:4c:10:19:bd:34:9c:3d:
09:b2:39:a5:1a:9e:51:88:99:45:91:70:ad:f1:42:02:70:16:
8c:fa:be:85:af:84:a4:25:34:ad:a8:8b:90:00:ab:26:2a:2d:
5d:8f:42:40:aa:9a:eb:2d:a5:a4:92:ef:c1:a9:6a:21:d2:df:
21:9b:09:95:49:2a:31:1f:48:ab:15:08:85:33:d3:ac:0a:4d:
66:69:de:28:1b:6f:f6:07:51:f3:0f:ad:3b:c0:3d:b4:56:b9:
c0:91:4c:12:32:19:31:07:59:a2:43:7b:7a:f1:7b:f7:82:1f:
6b:d6:4b:ac:78:47:9e:b1:47:d8:6d:f0:06:be:00:32:d2:7d:
ac:ff:a4:c1:57:6f:fa:57:fc:f9:f3:d6:af:3d:96:89:d5:c9:
dc:3e:00:a6:ea:50:e8:1f:c9:74:a9:5a:f3:67:04:1d:9a:36:
bc:94:f7:31:fc:e7:0c:16:bc:6e:b9:cd:11:1c:d7:24:75:99:
b2:5e:19:12:f2:da:33:a9:0b:4c:12:6b:dd:6a:f3:91:5a:0f:
15:cf:64:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:05:17 2026 by rpki-client