This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft
File: D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft (raw, json)
Hash identifier: hVZpkA8nmMbuONDIMzcstdHE4VG2t7bDpb135taUPEE=
Subject key identifier: 84:30:18:14:6B:AD:E9:88:26:42:A8:87:3A:86:5E:03:42:13:64:02
Authority key identifier: D7:D9:8B:5F:7B:CA:37:41:F0:19:11:48:83:72:E8:55:D9:1D:BF:9C
Certificate issuer: /CN=D7D98B5F7BCA3741F01911488372E855D91DBF9C
Certificate serial: 14A123B162F70821D47FC988703A0AC5D791C1B4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7D98B5F7BCA3741F01911488372E855D91DBF9C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft
Manifest number: 0213
Signing time: Sat 24 Jan 2026 08:31:45 +0000
Manifest this update: Sat 24 Jan 2026 08:26:45 +0000
Manifest next update: Tue 27 Jan 2026 12:46:45 +0000
Files and hashes: 1: 3130332e3138312e38302e302f32342d3234203d3e20313439373032.roa (hash: 4tLHfUAaxrKkU1/ID8Cs3rzd8UlebdYrCEqhL3fN6eQ=)
2: D7D98B5F7BCA3741F01911488372E855D91DBF9C.crl (hash: d7OCioX4k0mJ7FGQlCQLa0+QVRFt2XpT5Qrb6FNOQ1o=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.crl
rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7D98B5F7BCA3741F01911488372E855D91DBF9C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 12:46:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:a1:23:b1:62:f7:08:21:d4:7f:c9:88:70:3a:0a:c5:d7:91:c1:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D7D98B5F7BCA3741F01911488372E855D91DBF9C
Validity
Not Before: Jan 24 08:26:45 2026 GMT
Not After : Jan 27 12:46:45 2026 GMT
Subject: CN=843018146BADE9882642A8873A865E0342136402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:23:21:53:5f:7e:75:44:0e:1c:d6:ab:fc:0f:
0f:22:68:6b:cb:a5:14:1b:cf:01:b8:7e:98:c8:fa:
64:d7:0d:58:da:8c:76:15:19:68:b3:79:2c:b5:43:
b1:cf:b9:25:6f:43:74:7f:6c:ea:e3:48:09:1e:cb:
c6:70:21:e3:4a:61:9c:1d:17:ab:65:bf:eb:fb:80:
d0:31:d6:fa:d5:06:67:5a:3c:cc:e1:0f:18:39:ea:
a3:73:80:0c:2a:cf:04:74:3a:8e:85:7a:9c:f5:8c:
e2:5c:f6:c3:ab:6a:04:6f:77:db:8b:31:75:10:71:
a1:ef:b0:53:bf:35:49:95:13:41:53:2d:95:72:82:
c8:e1:38:63:36:21:81:78:e5:3f:d8:34:81:30:64:
30:60:7c:5c:93:65:eb:da:c8:f8:60:78:96:3e:4f:
ed:2e:ad:78:e5:52:76:11:e3:ad:59:f6:12:39:92:
78:c5:86:7f:e9:a8:a0:35:c9:ad:64:b4:de:cc:b5:
3f:24:68:73:53:05:92:85:6a:f3:22:05:5a:84:8c:
b0:63:6a:6d:ed:82:11:3e:32:79:a5:86:af:a6:a1:
66:e3:68:38:50:d4:d0:6d:4d:d9:bf:d2:11:2d:f3:
36:7c:89:ed:e5:ab:44:06:89:51:e6:b1:49:5b:c1:
76:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:30:18:14:6B:AD:E9:88:26:42:A8:87:3A:86:5E:03:42:13:64:02
X509v3 Authority Key Identifier:
keyid:D7:D9:8B:5F:7B:CA:37:41:F0:19:11:48:83:72:E8:55:D9:1D:BF:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7D98B5F7BCA3741F01911488372E855D91DBF9C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c5:6b:e0:98:08:ed:5a:d0:b3:04:ec:a5:1c:fc:c9:50:03:
0a:b6:68:09:1c:10:bd:1e:59:5e:bd:1e:2f:36:6c:b8:99:37:
a2:b4:ec:2b:5f:60:4e:32:42:22:d8:46:92:d2:40:af:6c:c3:
5f:dd:0b:0f:ea:4e:e6:3f:ce:ac:0b:06:77:37:83:03:22:5b:
71:fb:98:ca:ba:99:49:a4:bf:91:fc:8e:97:e6:20:3b:39:c9:
ea:68:5a:cf:28:96:33:62:4b:56:86:81:f6:7e:94:a8:81:08:
ea:31:9e:ef:00:21:a6:25:4e:ee:f2:ca:0e:5a:6d:4c:1d:af:
a3:1d:0c:47:11:9d:61:a9:12:df:b9:a2:36:5c:d7:24:88:af:
5b:2b:fd:72:67:eb:4d:b4:ab:7b:27:c9:1e:67:a4:16:ca:56:
c2:90:29:c8:54:9a:b1:1f:59:c3:73:c2:a1:71:72:0a:13:3e:
b6:62:4d:80:61:61:65:31:30:91:31:2a:9a:9e:be:72:8e:32:
ca:f3:79:03:34:18:15:37:3f:04:d7:a3:2c:e5:93:ee:e9:8c:
4c:6c:d3:77:6d:0c:f3:6c:f7:e7:fe:4e:02:fc:0f:3f:c6:e7:
01:4c:fb:28:2c:32:da:15:c1:43:79:4e:16:3b:6b:cc:68:88:
84:e9:a9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:59:32 2026 by rpki-client