This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft
File: 923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft (raw, json)
Hash identifier: vMe5o3eGf7blMvGsAB83/xQnhzg6l1QpqO/T0J4yPww=
Subject key identifier: 74:7D:12:E9:2A:0E:99:69:D4:49:57:F9:47:7A:DF:DE:48:3F:83:D6
Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03
Certificate issuer: /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003
Certificate serial: 4319CB6728B220EFA87A3BAA98A406353E84CDFD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft
Manifest number: 0562
Signing time: Sun 25 Jan 2026 00:02:25 +0000
Manifest this update: Sat 24 Jan 2026 23:57:25 +0000
Manifest next update: Wed 28 Jan 2026 08:57:25 +0000
Files and hashes: 1: 323430323a616134303a31313a3a2f34382d3438203d3e20313337333330.roa (hash: BBYTiuzRjYx15TfoXkETOVppXlE7UGzNaI5UpnCSg40=)
2: 323430323a616134303a393a3a2f34382d3438203d3e20313337333330.roa (hash: SFCF3eZAfaB4k234A4Mal+M9wtz6OMi0W08cO5CL2c4=)
3: 323430323a616134303a3a2f33322d3332203d3e20313337333330.roa (hash: vtCuldzUtylI5t9/fCW+s++nz3SUBB8oSaeAOGcN8rI=)
4: 323430323a616134303a313a3a2f34382d3438203d3e20313337333330.roa (hash: sfX//sKOJiEuG3MX815fs00hBV5qvYrVSNOlry6c+5c=)
5: 323430323a616134303a31343a3a2f34382d3438203d3e20313337333330.roa (hash: ra0Qf+ys3TjTOOjzu7G6xBCVp6PgE8NBjiFHNgjZfy0=)
6: 323430323a616134303a373a3a2f34382d3438203d3e20313337333330.roa (hash: Z1axM0kuScQ1wsgtnc4QX9GvMZLuIsV8v/ScHLgFtiU=)
7: 323430323a616134303a31323a3a2f34382d3438203d3e20313337333330.roa (hash: QFubIhbbL6UEYuVrgh+b+Oy9CvlVLee6F9ADT2A6kec=)
8: 3130332e3131322e3133362e302f32342d3234203d3e20313337333330.roa (hash: 22kUuK/GVBrAxrLqaG0j6+V0+LsPCWDPGnPRWi0ZTZE=)
9: 323430323a616134303a31303a3a2f34382d3438203d3e20313337333330.roa (hash: JdwC9cZZayLXOr62V5QKdUDNIE+2Jw/cXMDWMiK/ID0=)
10: 3130332e3131322e3133372e302f32342d3234203d3e20313337333330.roa (hash: 1ez+krjsqhXyqvxYrqewG2OuJMmETdewfUDWdsil76A=)
11: 323430323a616134303a383a3a2f34382d3438203d3e20313337333330.roa (hash: vAnV4g431JCqkwtUthm0ie5OhAW6+m/w0zGsqm8XSOo=)
12: 323430323a616134303a31353a3a2f34382d3438203d3e20313337333330.roa (hash: cplcGCMTKNbyST3IWkDxcP/n/AeMzarnQF1LNyGc5EY=)
13: 323430323a616134303a363a3a2f34382d3438203d3e20313337333330.roa (hash: tQTDeuCAhgIHqT4JvN+SYFcrP542mVZbW7Uy9er1rk4=)
14: 323430323a616134303a343a3a2f34382d3438203d3e20313337333330.roa (hash: 1oWczp9RZm7lezuDVU+ofnA0tfj2lVP+IvFgjT0dOg4=)
15: 3130332e3131322e3133382e302f32342d3234203d3e20313531303433.roa (hash: zh95BFBdCbv/H0EiAO2kNQNsmpUEe+0QlQtPZIBdZcE=)
16: 323430323a616134303a323a3a2f34382d3438203d3e20313337333330.roa (hash: vTpYTNK2Iedt3x6MQB/Xrh13AhkarFJV4HWTUjcGM/Y=)
17: 323430323a616134303a31333a3a2f34382d3438203d3e20313337333330.roa (hash: w4rnLSoK9Ogry5Be/7bEeNtK/st8upmlmof3uHLSQS4=)
18: 3130332e3131322e3133392e302f32342d3234203d3e20313337333330.roa (hash: JpAZjX8/swngpxlxVVVajwCNKWAQXON4Zao07dX/5sA=)
19: 323430323a616134303a353a3a2f34382d3438203d3e20313337333330.roa (hash: Pt4kHivj/+/IoSa7PGPfSPyAlm/DgqrXfAGO9WlCDqE=)
20: 323430323a616134303a333a3a2f34382d3438203d3e20313337333330.roa (hash: EtS1eZLUTwWRZJ7Ml0izUQhw9pv4Am/WahNfvxjKTrc=)
21: 923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl (hash: VoQyAtI2JgfFq/rdidEpo824HVnjks3jkIWsSjSga8E=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl
rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 08:57:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:19:cb:67:28:b2:20:ef:a8:7a:3b:aa:98:a4:06:35:3e:84:cd:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003
Validity
Not Before: Jan 24 23:57:25 2026 GMT
Not After : Jan 28 08:57:25 2026 GMT
Subject: CN=747D12E92A0E9969D44957F9477ADFDE483F83D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:35:2f:e2:cd:11:b9:69:61:75:64:8d:e1:00:
83:85:53:02:47:84:41:e1:bf:20:4a:14:e3:c5:7c:
b5:ca:74:d6:98:0b:a4:a1:14:b2:9f:f6:9d:90:bd:
a1:d8:cb:c5:d6:ce:6b:67:43:36:3a:93:22:ca:1f:
c2:97:38:95:1e:4a:39:1e:e0:da:1f:ce:cd:c0:31:
9f:ad:f4:a3:77:67:55:81:f9:17:11:64:e5:cb:59:
af:18:42:ed:f9:a9:79:ae:02:38:3d:a0:1a:43:c0:
79:6f:12:da:5f:1c:84:2f:ae:d7:84:31:b5:ea:c7:
72:c1:b1:4f:42:8e:10:f8:53:bf:fa:fa:53:2d:23:
96:6d:21:fd:cc:52:c0:6f:ae:4b:03:e1:f2:6c:bd:
a7:a2:94:b0:cd:d4:dc:12:17:57:28:62:1a:7b:bc:
48:61:f1:1f:d6:28:4b:e5:0b:a9:fa:56:ee:7c:e1:
b4:a1:db:81:64:90:3f:a8:a3:af:66:9b:57:a4:42:
04:94:c8:d1:f0:44:25:e8:03:41:b4:6a:0a:4b:b0:
4a:6e:05:5a:10:81:8c:97:71:b0:68:02:4e:db:69:
33:53:e4:0b:70:71:9d:1e:25:1a:da:7e:79:71:b9:
07:db:79:ed:aa:39:77:fe:56:76:2f:8c:bf:fc:23:
f9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:7D:12:E9:2A:0E:99:69:D4:49:57:F9:47:7A:DF:DE:48:3F:83:D6
X509v3 Authority Key Identifier:
keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f5:aa:b4:97:67:12:2d:e9:30:3f:4a:c1:c3:d4:fb:f3:fd:
3f:cf:64:76:89:d9:7a:94:15:d5:7e:d2:5f:10:ca:8c:e1:22:
e1:05:7c:6b:c5:7f:43:66:75:80:2f:ad:a0:d2:b1:58:1f:5f:
c5:2c:0d:7f:89:5d:5e:86:5c:d2:1c:d5:e6:f7:8e:a9:c9:a2:
de:78:dc:e9:ce:41:7a:b0:0a:b2:71:c6:09:ee:c8:b4:38:c2:
05:6a:9d:89:ca:7d:c0:09:40:d9:83:b0:6b:13:18:6e:f7:d8:
e2:d5:d0:2d:a4:e1:a0:4b:72:95:2b:bc:31:7d:cb:b0:ad:23:
39:b2:bb:99:1e:f7:82:42:e6:f4:44:9d:47:1e:33:84:f6:6d:
15:09:71:7f:a9:82:ba:aa:31:ef:0d:9a:e9:16:f1:b9:cb:a7:
e3:c3:86:da:15:8e:fc:1e:d7:3d:02:93:b2:d4:de:43:43:59:
87:d3:fb:81:55:e0:45:c5:07:d8:e5:17:64:3f:e2:79:87:7d:
79:8c:1a:da:c8:ad:0c:c0:dd:85:2f:ad:59:98:06:cb:a5:d8:
b6:74:d1:31:98:dd:de:1d:e1:49:a5:c3:d6:60:49:d1:c2:c7:
32:15:f5:a8:ff:9a:1a:3f:b0:d1:a4:53:7d:ee:00:55:ee:22:
c4:c8:15:53
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUQxnLZyiyIO+oejuqmKQGNT6Ezf0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZF
NEMxRDAwMzAeFw0yNjAxMjQyMzU3MjVaFw0yNjAxMjgwODU3MjVaMDMxMTAvBgNV
BAMTKDc0N0QxMkU5MkEwRTk5NjlENDQ5NTdGOTQ3N0FERkRFNDgzRjgzRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+NS/izRG5aWF1ZI3hAIOFUwJH
hEHhvyBKFOPFfLXKdNaYC6ShFLKf9p2QvaHYy8XWzmtnQzY6kyLKH8KXOJUeSjke
4Nofzs3AMZ+t9KN3Z1WB+RcRZOXLWa8YQu35qXmuAjg9oBpDwHlvEtpfHIQvrteE
MbXqx3LBsU9CjhD4U7/6+lMtI5ZtIf3MUsBvrksD4fJsvaeilLDN1NwSF1coYhp7
vEhh8R/WKEvlC6n6Vu584bSh24FkkD+oo69mm1ekQgSUyNHwRCXoA0G0agpLsEpu
BVoQgYyXcbBoAk7baTNT5AtwcZ0eJRrafnlxuQfbee2qOXf+VnYvjL/8I/mTAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUdH0S6SoOmWnUSVf5R3rf3kg/g9YwHwYDVR0j
BBgwFoAUkj1KEOHbv2knGDvzQZ9RL+TB0AMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
YzM0ZmYwOC1kMjFmLTQyMGItODdkZi01MzEwM2I2ZGMyNTMvMC85MjNENEExMEUx
REJCRjY5MjcxODNCRjM0MTlGNTEyRkU0QzFEMDAzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZFNEMx
RDAwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGMzNGZmMDgtZDIxZi00MjBiLTg3
ZGYtNTMxMDNiNmRjMjUzLzAvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUx
MkZFNEMxRDAwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAA31qrSXZxIt6TA/SsHD1Pvz/T/PZHaJ2XqU
FdV+0l8QyozhIuEFfGvFf0NmdYAvraDSsVgfX8UsDX+JXV6GXNIc1eb3jqnJot54
3OnOQXqwCrJxxgnuyLQ4wgVqnYnKfcAJQNmDsGsTGG732OLV0C2k4aBLcpUrvDF9
y7CtIzmyu5ke94JC5vREnUceM4T2bRUJcX+pgrqqMe8NmukW8bnLp+PDhtoVjvwe
1z0Ck7LU3kNDWYfT+4FV4EXFB9jlF2Q/4nmHfXmMGtrIrQzA3YUvrVmYBsul2LZ0
0TGY3d4d4Umlw9ZgSdHCxzIV9aj/mho/sNGkU33uAFXuIsTIFVM=
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:36:46 2026 by rpki-client