This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft
File: F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft (raw, json)
Hash identifier: mYY8DNeX4VpVUc34JR6HGIfcHYLbn8BwncQ6bwGTTG4=
Subject key identifier: FF:16:5E:4B:62:6F:3E:2F:66:72:D9:46:E8:C5:E2:63:7B:2B:BD:C4
Authority key identifier: F7:00:7F:FD:A6:6A:99:D7:58:8D:A9:3F:FA:F2:6B:DE:57:B3:CA:64
Certificate issuer: /CN=F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64
Certificate serial: 199A31B62EE9A97C9698099E9675F6D5968B509E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft
Manifest number: 0261
Signing time: Sun 25 Jan 2026 05:01:22 +0000
Manifest this update: Sun 25 Jan 2026 04:56:22 +0000
Manifest next update: Wed 28 Jan 2026 07:03:22 +0000
Files and hashes: 1: 3130332e3138362e3230382e302f32342d3234203d3e20313337333331.roa (hash: 7ko0bxN2Z7aHh5HxpPGcoXd3wiTgQprx370mdkriXlU=)
2: 3130332e3138362e3230392e302f32342d3234203d3e20313336383733.roa (hash: LoEOvDkV9bQaYXTmNRoMjCJnrRw7dRDwtZgFA/xt/mM=)
3: F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.crl (hash: f6TXZDqQL0GbUJkEE3k+OLf2CF573wy2F0wazx958vI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.crl
rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 07:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:9a:31:b6:2e:e9:a9:7c:96:98:09:9e:96:75:f6:d5:96:8b:50:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64
Validity
Not Before: Jan 25 04:56:22 2026 GMT
Not After : Jan 28 07:03:22 2026 GMT
Subject: CN=FF165E4B626F3E2F6672D946E8C5E2637B2BBDC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:58:12:a2:c8:cc:a6:f3:7d:10:98:64:32:37:
3d:01:5b:4e:6f:8d:95:20:92:cc:16:8f:b4:0a:66:
87:e1:55:4b:0a:dc:5b:78:e4:ff:f9:a0:8a:ec:46:
ed:fd:33:3d:5c:9b:63:05:09:34:de:55:3d:24:d3:
e6:97:2b:3b:11:fe:57:68:a3:70:c6:b6:96:e9:8c:
6c:5b:6d:15:41:4b:09:69:82:a7:a7:31:51:1c:f8:
3e:86:9f:31:f2:b9:29:dd:55:38:38:bc:56:cb:26:
dc:9f:a1:af:26:f8:80:48:bb:9d:00:f0:fe:67:91:
12:d6:c3:eb:d3:f3:f1:a7:66:ca:35:8f:09:28:68:
22:d7:10:71:d7:a7:7c:75:68:c3:ed:a1:3f:97:60:
77:a9:af:2b:f3:32:12:0c:b6:b4:85:95:44:3e:cf:
af:f8:7e:50:09:4d:74:2f:c2:25:c6:a4:01:d9:97:
54:0c:a7:11:f4:2e:27:81:60:33:71:28:4e:43:59:
98:04:62:20:71:ca:3c:bf:1d:9d:7c:6b:5e:3a:72:
6d:6b:dd:20:84:e0:df:2c:98:70:c5:77:7a:07:2f:
aa:a2:28:53:b8:88:72:e6:03:66:ee:6c:56:05:63:
f6:c8:f5:be:ad:f7:ca:92:26:42:a4:87:04:80:2a:
1a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:16:5E:4B:62:6F:3E:2F:66:72:D9:46:E8:C5:E2:63:7B:2B:BD:C4
X509v3 Authority Key Identifier:
keyid:F7:00:7F:FD:A6:6A:99:D7:58:8D:A9:3F:FA:F2:6B:DE:57:B3:CA:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:a1:2e:69:87:70:13:bd:af:f4:51:97:0a:64:c9:ac:e7:5f:
fa:f6:db:ad:20:7f:fe:56:ee:a0:7a:d5:88:1f:4a:9e:57:0f:
17:05:76:5b:f4:6c:8c:68:bc:da:bb:44:8b:4e:9e:db:bf:88:
ee:4c:47:28:c3:f3:56:ae:1c:d8:4d:db:61:57:0d:63:db:10:
5b:61:7c:39:e7:39:ee:cb:0c:9b:89:ba:f1:f7:44:0d:47:db:
7d:2c:cf:3b:83:f7:5d:9f:77:c6:cf:53:f8:cf:8f:e7:cf:a0:
51:64:0c:3d:5c:4c:cf:b7:75:25:0a:3b:0e:54:52:38:9f:bf:
39:59:94:a9:9d:e9:d5:0e:8d:6d:3d:84:6f:aa:fa:f4:e4:91:
ce:f8:f2:55:32:2b:ef:1f:c4:9d:a0:b3:0f:13:ec:65:27:07:
49:57:1e:71:e7:05:0c:76:f2:4d:52:84:1f:d5:a6:ee:a7:57:
14:05:3c:1a:b1:e4:bc:0e:f1:ed:75:d9:57:08:68:b5:85:c6:
dc:4c:e5:81:a2:eb:5e:fd:d3:f6:7e:fa:d2:07:0a:44:39:c4:
1c:b5:16:3b:bd:06:db:2c:95:16:98:b7:3d:23:da:46:3e:0e:
c6:52:dc:af:a9:dc:f7:9f:bf:f2:5d:b5:bf:09:ec:f2:86:5b:
59:ad:a6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:58:37 2026 by rpki-client