This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft
File: A0098405BC0A535E6E4D613793C362C743319143.mft (raw, json)
Hash identifier: 9wsIcj/PQgP0eesf5Z7rmi36X/E3rvzhx34Q7uJ1d6Y=
Subject key identifier: CD:70:2D:44:E2:E3:CC:B3:CC:F9:77:75:E6:97:1E:FA:F0:45:EA:B0
Authority key identifier: A0:09:84:05:BC:0A:53:5E:6E:4D:61:37:93:C3:62:C7:43:31:91:43
Certificate issuer: /CN=A0098405BC0A535E6E4D613793C362C743319143
Certificate serial: 172C1F6E3E61085C07C78700E76CF688383980C1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft
Manifest number: 0102
Signing time: Sat 24 Jan 2026 09:21:07 +0000
Manifest this update: Sat 24 Jan 2026 09:16:07 +0000
Manifest next update: Tue 27 Jan 2026 18:34:07 +0000
Files and hashes: 1: 3130332e3135372e38302e302f32342d3234203d3e20313431313133.roa (hash: Q6e0e1mxnvq7Z9cyA+57spYXR6whshtcuglsUxuXceY=)
2: A0098405BC0A535E6E4D613793C362C743319143.crl (hash: rST11BeafBlm4AgaFGdP2Aly5dd3O6vjTeI54hNJN7M=)
3: 323030313a6466353a313738303a3a2f34382d3438203d3e20313431313133.roa (hash: ULILjGfRQgoXvgl0tXvCQV4c2a3dPck8tfEpBWTuXWg=)
4: 3130332e3135372e38312e302f32342d3234203d3e20313431313133.roa (hash: 7E801eHzByrlpX824SF5Bv9nBKvFuISx0tzFKJn/f5I=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.crl
rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 18:34:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:2c:1f:6e:3e:61:08:5c:07:c7:87:00:e7:6c:f6:88:38:39:80:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0098405BC0A535E6E4D613793C362C743319143
Validity
Not Before: Jan 24 09:16:07 2026 GMT
Not After : Jan 27 18:34:07 2026 GMT
Subject: CN=CD702D44E2E3CCB3CCF97775E6971EFAF045EAB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a6:f5:ea:21:3a:e4:da:26:c5:c3:49:51:ce:
11:5f:8c:99:c1:22:c3:8b:3f:2b:f3:64:a8:c6:1a:
0e:3f:14:f1:5f:ce:27:67:15:79:a0:dd:ed:3f:68:
30:01:cb:98:b0:ed:56:77:3a:24:ee:b6:33:a4:82:
09:7d:15:83:9c:97:05:3b:98:51:1e:26:e9:a7:cf:
d3:47:30:2d:32:d9:72:51:77:6b:0c:dc:8e:d6:bf:
a3:c9:f6:8f:d2:ab:9d:f6:3e:0e:e6:29:42:19:44:
80:09:6a:15:3d:fe:f6:97:79:a3:d3:2c:de:13:27:
f5:0d:6e:29:94:61:7c:c9:1b:32:02:cf:ed:cd:ca:
fe:41:bd:9f:f8:5d:6e:e7:5b:ed:1e:65:18:93:17:
37:41:24:8a:42:c3:07:2a:71:4d:61:af:42:54:e9:
d8:2a:e4:2f:72:10:9f:3c:2e:90:f0:db:b0:db:3a:
ed:4a:e6:6a:64:3c:cd:5a:ec:e6:0c:62:26:47:d3:
3b:ab:f4:23:1c:7e:f8:d6:a5:7e:c4:5e:4d:e4:09:
d0:7e:b5:74:96:32:2d:be:13:ee:bc:c9:61:6b:6c:
a7:bd:05:a4:6f:52:17:a6:eb:0f:a8:70:9f:0d:76:
d0:fe:11:6d:45:98:6a:67:fa:d1:8b:44:fa:93:8e:
f5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:70:2D:44:E2:E3:CC:B3:CC:F9:77:75:E6:97:1E:FA:F0:45:EA:B0
X509v3 Authority Key Identifier:
keyid:A0:09:84:05:BC:0A:53:5E:6E:4D:61:37:93:C3:62:C7:43:31:91:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c1:9a:5d:25:fb:f1:bb:f4:b8:70:47:06:77:e0:21:29:56:
0f:7d:b8:d7:28:d1:7f:fb:a3:56:cf:a7:a8:87:12:30:b5:6f:
a3:56:06:d1:3e:f6:6d:bc:2a:1d:35:d9:d1:f1:05:64:be:c9:
4d:d1:39:de:b0:20:9b:1e:21:ee:3b:8d:7e:8e:c9:14:15:af:
27:16:5f:fe:7d:d6:7b:d7:a8:5b:7b:ae:71:7c:c9:91:9a:7b:
a9:f6:3b:e3:a2:06:f6:48:17:72:53:03:20:97:8c:3a:20:30:
69:df:6d:80:ad:3c:8c:ed:10:94:cd:15:b2:61:3b:e3:59:b5:
20:3f:3e:ad:dd:92:8b:57:be:0b:96:9e:c7:dd:07:23:b8:56:
39:27:52:4e:5f:27:cc:11:f2:71:79:f5:11:da:e2:49:5b:62:
64:7e:7f:6a:2b:b5:77:b2:20:d5:27:81:4a:ae:ad:62:68:02:
81:42:ab:cd:d5:ee:fe:9d:76:d0:21:6e:1b:4e:58:d4:cb:43:
e6:cd:bc:3d:4b:e6:ef:55:0b:be:c5:a9:2c:93:a0:8a:cc:00:
f4:cf:1a:b3:62:ea:71:af:2c:75:5c:24:67:75:ea:4b:1c:60:
3e:93:ef:d9:0f:86:ca:14:df:41:ef:3e:28:4d:63:07:7a:69:
2f:8f:9d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:00:22 2026 by rpki-client