This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.mft
File: 1887AEA5A2D9DB479E618167B2FE47250ACFE79B.mft (raw, json)
Hash identifier: At9b5ZcJOLuK36koYblYdXzZx16I2T6tCABJK90jkxc=
Subject key identifier: 7C:C1:8D:E9:15:7E:C8:B7:75:60:30:EF:E8:16:2A:EC:63:4D:75:03
Authority key identifier: 18:87:AE:A5:A2:D9:DB:47:9E:61:81:67:B2:FE:47:25:0A:CF:E7:9B
Certificate issuer: /CN=1887AEA5A2D9DB479E618167B2FE47250ACFE79B
Certificate serial: 7B61B1D9A667EE462358DAF153146DB0337CF31B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.mft
Manifest number: 03AF
Signing time: Fri 23 Jan 2026 22:20:56 +0000
Manifest this update: Fri 23 Jan 2026 22:15:56 +0000
Manifest next update: Tue 27 Jan 2026 05:55:56 +0000
Files and hashes: 1: 1887AEA5A2D9DB479E618167B2FE47250ACFE79B.crl (hash: I8OkIOVc293ZF4Y8GuHSI8cjw5FF/DhnAXG9fOmgFts=)
2: 3130332e3137312e32322e302f32332d3234203d3e20313338383535.roa (hash: P8qheu64b1l5b4rB30UV/NbiZ7Eie1YYkFGoi6rHg2Y=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.crl
rsync://repo-rpki.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 05:55:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:61:b1:d9:a6:67:ee:46:23:58:da:f1:53:14:6d:b0:33:7c:f3:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1887AEA5A2D9DB479E618167B2FE47250ACFE79B
Validity
Not Before: Jan 23 22:15:56 2026 GMT
Not After : Jan 27 05:55:56 2026 GMT
Subject: CN=7CC18DE9157EC8B7756030EFE8162AEC634D7503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:36:0a:e8:92:ad:1b:57:eb:d0:09:5d:be:18:
24:5a:f9:e3:ab:92:b3:aa:66:54:c8:38:c1:0a:7f:
dc:e8:14:d6:10:89:ba:99:04:8b:4a:46:fe:4b:66:
2a:9f:e6:ed:a0:1e:91:98:46:17:55:f1:0c:ff:dc:
11:99:58:3b:3b:ad:4e:9c:c5:e4:9e:bf:ab:1d:bf:
7b:f9:08:ea:83:68:96:5c:29:5f:d3:d1:c4:12:df:
56:ca:3b:37:c6:d5:86:d8:bd:59:5c:33:36:67:5d:
28:41:8f:15:ef:c5:f3:41:0b:47:99:5f:e9:70:eb:
f6:06:f0:b2:49:d1:b3:b5:bb:27:0d:7e:9e:60:bc:
47:46:65:ae:ea:01:eb:cd:67:e5:e3:00:10:79:4a:
85:de:62:0f:32:f0:7d:4e:e9:05:d1:2c:f2:66:d1:
ab:3f:7b:07:c9:49:44:18:9c:77:63:e3:c2:17:6c:
dd:14:c5:ff:ad:06:ce:41:5d:36:3b:51:60:dd:e9:
26:dc:20:90:04:91:67:62:b9:c2:cc:61:04:63:fc:
2a:f0:e0:38:7b:52:72:51:13:60:12:01:f7:04:5d:
0d:c7:64:f3:5e:54:80:7c:3f:10:75:c6:d3:b2:53:
0f:9d:68:eb:80:23:a6:54:d0:76:d0:0a:35:3c:5c:
90:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C1:8D:E9:15:7E:C8:B7:75:60:30:EF:E8:16:2A:EC:63:4D:75:03
X509v3 Authority Key Identifier:
keyid:18:87:AE:A5:A2:D9:DB:47:9E:61:81:67:B2:FE:47:25:0A:CF:E7:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:a6:23:0e:79:81:d8:e1:0f:d0:31:d1:33:03:78:d6:81:4a:
87:8a:ed:e3:c9:8d:31:b5:84:5f:f2:c4:df:07:0d:ab:d0:2d:
cd:d6:73:ae:34:72:b2:cb:61:38:bd:5c:dc:38:c9:e2:d2:29:
eb:37:12:3f:96:95:26:2f:cb:80:76:74:9c:3f:a4:46:fa:7e:
d1:e6:0f:12:e0:f5:7f:02:b6:e7:4b:4b:ae:03:d0:74:a6:9a:
38:bb:68:0e:45:a7:b6:29:3e:0a:08:39:12:73:18:47:a4:9c:
81:e9:49:2d:8b:20:37:ee:16:34:55:ee:ec:5b:85:50:7b:ca:
96:53:39:78:9b:6d:39:53:e3:18:5c:63:23:63:47:d7:23:d9:
89:9b:b6:3d:7d:19:3e:ff:cf:60:a2:4f:1d:ed:71:86:da:bf:
dc:4d:53:27:70:1e:24:21:91:45:17:ba:c0:5a:1c:56:be:64:
ea:72:bc:1b:2c:44:1b:ce:c6:db:25:44:b1:47:da:97:42:a1:
73:67:d9:f4:d7:66:98:ea:e2:17:88:eb:9c:3f:fb:04:c3:29:
24:1c:06:a9:2c:83:63:12:eb:f2:90:0c:4c:f5:ca:0c:d3:3f:
fe:37:b5:64:6b:d6:eb:a2:2c:bd:da:7d:f2:fe:7c:4f:2e:79:
b7:30:a7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:00:47 2026 by rpki-client