This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.mft
File: 104563E8068F3AE19631B1F43A5C9A47466100AC.mft (raw, json)
Hash identifier: J006otX/RS6K4elouXtKj+MgrmztG7a07AWMqQqUnhc=
Subject key identifier: 61:C7:76:06:DD:67:E8:D5:F3:80:59:0A:C3:12:EA:8F:E5:14:9A:EB
Authority key identifier: 10:45:63:E8:06:8F:3A:E1:96:31:B1:F4:3A:5C:9A:47:46:61:00:AC
Certificate issuer: /CN=104563E8068F3AE19631B1F43A5C9A47466100AC
Certificate serial: 6A9A8E5924D19EA7D1DA1E653209EBC39CDD5647
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.mft
Manifest number: 036A
Signing time: Sat 24 Jan 2026 10:21:25 +0000
Manifest this update: Sat 24 Jan 2026 10:16:25 +0000
Manifest next update: Tue 27 Jan 2026 11:49:25 +0000
Files and hashes: 1: 3130332e3130302e39392e302f32342d3234203d3e20313336383338.roa (hash: VcKH5MJv0PsbSw/ylAqkYnvN7oEA35OAIpUTZqe2tts=)
2: 3130332e3130302e39362e302f32322d3234203d3e20313336383338.roa (hash: VLkItKFaeejUHC1WgS1PSkZ19Q0bo3xj4xKJ0hQtCic=)
3: 3130332e3130302e39362e302f32342d3234203d3e20313336383338.roa (hash: FFItnTTMKt/KdS5iV3+5t51Nd97nxTmIPrWc7N6PUvw=)
4: 104563E8068F3AE19631B1F43A5C9A47466100AC.crl (hash: jij/Y+QcixPyrZo/6VmS4uHOgLnO0atb1qiQMqliDq0=)
5: 3130332e3130302e39382e302f32342d3234203d3e20313336383338.roa (hash: +SLRXlahaObHYrJgflPMiDjr0u2mDJrsOXf4SROIz+s=)
6: 3130332e3130302e39372e302f32342d3234203d3e20313336383338.roa (hash: mLstSys1ibyLiHgcMAosimwglWRWJ2SkAeeFcz0SnqE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.crl
rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 11:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:9a:8e:59:24:d1:9e:a7:d1:da:1e:65:32:09:eb:c3:9c:dd:56:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=104563E8068F3AE19631B1F43A5C9A47466100AC
Validity
Not Before: Jan 24 10:16:25 2026 GMT
Not After : Jan 27 11:49:25 2026 GMT
Subject: CN=61C77606DD67E8D5F380590AC312EA8FE5149AEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1c:b9:32:c8:bf:2f:83:3b:ff:6e:99:2b:4d:
25:72:29:9a:b6:b4:1c:98:e1:61:75:1f:1b:0e:aa:
a4:b2:bc:d5:ca:9c:30:96:11:0d:ef:0f:65:b4:b2:
74:e4:75:2e:ad:36:5a:37:5c:1a:9d:00:a3:a4:cd:
45:e7:1d:39:8d:fc:f9:99:16:be:9d:b5:df:65:85:
60:db:1c:83:bf:ab:52:ef:50:6d:a4:3c:80:ee:e6:
2b:7b:3e:f0:96:4d:db:c2:c3:77:01:19:10:0c:69:
1f:dd:2c:df:61:3b:9d:8d:14:59:ec:8c:c9:21:9c:
e2:d3:b5:03:11:ad:62:3e:98:57:59:0c:e0:63:0f:
7f:f5:8b:31:49:96:43:a1:51:72:4a:f0:85:ed:bc:
93:f4:bd:12:45:e7:f0:41:24:e8:17:29:b9:10:25:
e1:86:9d:79:da:bb:48:51:ab:24:e9:8f:9b:4d:74:
df:fe:ee:b0:66:ce:c3:b4:56:eb:44:a3:50:e4:3c:
a4:da:65:c8:69:4b:06:48:a3:e7:1c:9c:f5:00:52:
ec:34:7b:fb:2d:b4:09:fd:65:ed:58:81:cb:46:1b:
4d:bc:45:c2:86:65:ca:6e:55:c5:81:32:ca:8c:2b:
d1:7a:04:a1:53:40:9f:71:77:04:21:a1:3c:e4:b4:
fd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C7:76:06:DD:67:E8:D5:F3:80:59:0A:C3:12:EA:8F:E5:14:9A:EB
X509v3 Authority Key Identifier:
keyid:10:45:63:E8:06:8F:3A:E1:96:31:B1:F4:3A:5C:9A:47:46:61:00:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a1:46:b9:68:ba:4e:19:88:df:5d:98:1e:76:4b:f0:20:10:
5d:b6:45:46:fa:5c:ec:9c:c1:39:0c:4c:1f:8f:5c:b3:01:4e:
01:23:f5:cf:78:c2:25:e4:46:9f:14:d1:e6:07:c2:40:e7:48:
91:34:0c:45:43:3d:2b:54:10:42:1a:a5:80:20:00:a1:6d:92:
2c:c1:41:3a:14:5c:b9:1b:da:6d:3e:6e:4a:a0:7b:bb:7b:03:
97:4f:7e:33:9c:cb:f7:ec:58:23:a3:c0:75:b9:b2:46:75:a1:
96:cd:d3:61:55:15:3d:a7:ef:9d:4f:70:e1:f7:54:e5:c1:2a:
e4:b2:26:62:7a:41:d0:51:3f:be:ec:a2:80:37:a8:ff:6b:79:
e9:a5:64:81:cf:99:b0:69:74:73:35:09:82:a9:55:8f:8a:4f:
83:a4:80:75:a5:ca:4a:16:cb:09:0b:a9:e4:66:ed:70:71:ac:
2b:a1:7a:a5:13:5e:09:a4:90:a4:35:d4:6f:61:f7:2a:1b:8d:
34:7d:aa:ed:c5:3f:61:83:41:12:83:4d:8c:0f:68:56:93:be:
c9:9d:71:3f:dd:5b:2d:70:89:b5:d7:cf:b3:e8:af:c8:ed:fa:
fd:0a:0c:0b:a0:a5:ea:04:53:3e:df:d2:64:1b:09:ba:cd:3e:
c7:56:73:e9
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUapqOWSTRnqfR2h5lMgnrw5zdVkcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA0NTYzRTgwNjhGM0FFMTk2MzFCMUY0M0E1QzlBNDc0
NjYxMDBBQzAeFw0yNjAxMjQxMDE2MjVaFw0yNjAxMjcxMTQ5MjVaMDMxMTAvBgNV
BAMTKDYxQzc3NjA2REQ2N0U4RDVGMzgwNTkwQUMzMTJFQThGRTUxNDlBRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvHLkyyL8vgzv/bpkrTSVyKZq2
tByY4WF1HxsOqqSyvNXKnDCWEQ3vD2W0snTkdS6tNlo3XBqdAKOkzUXnHTmN/PmZ
Fr6dtd9lhWDbHIO/q1LvUG2kPIDu5it7PvCWTdvCw3cBGRAMaR/dLN9hO52NFFns
jMkhnOLTtQMRrWI+mFdZDOBjD3/1izFJlkOhUXJK8IXtvJP0vRJF5/BBJOgXKbkQ
JeGGnXnau0hRqyTpj5tNdN/+7rBmzsO0VutEo1DkPKTaZchpSwZIo+ccnPUAUuw0
e/sttAn9Ze1YgctGG028RcKGZcpuVcWBMsqMK9F6BKFTQJ9xdwQhoTzktP2RAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUYcd2Bt1n6NXzgFkKwxLqj+UUmuswHwYDVR0j
BBgwFoAUEEVj6AaPOuGWMbH0OlyaR0ZhAKwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
M2Q4MDY0My1kNWU5LTQxYWYtOTRkZi02ZDk0ZmJmNDY0ODcvMC8xMDQ1NjNFODA2
OEYzQUUxOTYzMUIxRjQzQTVDOUE0NzQ2NjEwMEFDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTA0NTYzRTgwNjhGM0FFMTk2MzFCMUY0M0E1QzlBNDc0NjYx
MDBBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTNkODA2NDMtZDVlOS00MWFmLTk0
ZGYtNmQ5NGZiZjQ2NDg3LzAvMTA0NTYzRTgwNjhGM0FFMTk2MzFCMUY0M0E1QzlB
NDc0NjYxMDBBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADyhRrlouk4ZiN9dmB52S/AgEF22RUb6XOyc
wTkMTB+PXLMBTgEj9c94wiXkRp8U0eYHwkDnSJE0DEVDPStUEEIapYAgAKFtkizB
QToUXLkb2m0+bkqge7t7A5dPfjOcy/fsWCOjwHW5skZ1oZbN02FVFT2n751PcOH3
VOXBKuSyJmJ6QdBRP77sooA3qP9reemlZIHPmbBpdHM1CYKpVY+KT4OkgHWlykoW
ywkLqeRm7XBxrCuheqUTXgmkkKQ11G9h9yobjTR9qu3FP2GDQRKDTYwPaFaTvsmd
cT/dWy1wibXXz7Por8jt+v0KDAugpeoEUz7f0mQbCbrNPsdWc+k=
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:36:47 2026 by rpki-client