This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft
File: 73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft (raw, json)
Hash identifier: LCxCj7sd/XFWP0JqIR6fmoVuippQtAGXECZ6ZAW+wqQ=
Subject key identifier: 1C:91:D7:7E:C6:1B:98:AD:23:23:71:CD:0E:31:FA:B5:BE:80:22:9B
Authority key identifier: 73:A2:C0:69:A3:B2:EB:AC:75:EC:B3:73:F3:98:B5:60:2B:55:A6:FD
Certificate issuer: /CN=73A2C069A3B2EBAC75ECB373F398B5602B55A6FD
Certificate serial: 612BC2FAB7FE0E593291C0BCC5697C33111B1D03
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft
Manifest number: 02BC
Signing time: Sun 25 Jan 2026 05:51:15 +0000
Manifest this update: Sun 25 Jan 2026 05:46:15 +0000
Manifest next update: Wed 28 Jan 2026 15:50:15 +0000
Files and hashes: 1: 3130332e3137392e38392e302f32342d3234203d3e20313439333432.roa (hash: ZLFPPPuherxliEdNrwnbiAo9KOCnKvgNjSLpmHcBAG0=)
2: 73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl (hash: kzwrg66H+U6WX00mm6c5vuBtYhejo9jqQBxHLtNCJEY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl
rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:2b:c2:fa:b7:fe:0e:59:32:91:c0:bc:c5:69:7c:33:11:1b:1d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73A2C069A3B2EBAC75ECB373F398B5602B55A6FD
Validity
Not Before: Jan 25 05:46:15 2026 GMT
Not After : Jan 28 15:50:15 2026 GMT
Subject: CN=1C91D77EC61B98AD232371CD0E31FAB5BE80229B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2f:e0:12:01:d4:9e:80:ff:91:31:d7:3a:e1:
de:d6:36:4e:80:6b:dd:d5:e1:30:5e:42:80:65:5f:
86:73:79:53:fc:48:02:bb:cf:74:05:27:e4:77:7d:
35:ef:8b:78:60:da:58:36:77:5b:75:a5:a3:9d:b5:
0d:9d:dc:d4:4d:80:e3:35:47:ac:66:ac:01:bd:e0:
8c:c8:82:20:0f:63:16:a0:41:7a:a3:d9:50:96:01:
fc:7f:15:2c:a3:ff:86:db:a3:76:7c:45:95:b4:89:
e2:f6:21:30:a0:75:3d:fd:b5:1c:27:ed:98:17:cd:
e0:70:32:c6:74:f0:67:d8:94:66:14:12:c8:23:78:
81:17:75:6b:0c:18:fc:4b:c6:a8:13:9f:6b:b9:d6:
36:3f:4c:af:92:c3:8d:55:3a:23:da:a1:b2:81:22:
31:9d:08:cd:95:d4:0c:77:ce:80:ac:1e:13:34:ee:
81:c3:db:fd:86:aa:98:44:fe:2b:e9:85:5b:7b:9f:
a4:c6:f1:10:2b:a9:e7:ff:78:27:63:60:24:c7:cc:
60:07:11:44:c5:20:d1:e1:79:83:a2:d1:9f:dd:62:
29:51:f6:2f:54:ff:eb:28:07:84:b1:c4:09:a3:aa:
6b:24:c9:81:41:2f:99:2d:6a:f0:29:c3:03:28:8b:
fc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:91:D7:7E:C6:1B:98:AD:23:23:71:CD:0E:31:FA:B5:BE:80:22:9B
X509v3 Authority Key Identifier:
keyid:73:A2:C0:69:A3:B2:EB:AC:75:EC:B3:73:F3:98:B5:60:2B:55:A6:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:76:24:ef:a4:68:2a:d9:c1:f5:6f:c6:4b:c1:4a:97:dc:f2:
ce:49:d3:99:9b:bd:ce:d7:3d:ef:06:1f:d6:03:2a:16:93:b0:
02:72:ed:40:f2:7c:03:bd:8a:b4:11:96:32:50:fc:1e:13:f8:
4a:68:96:08:fd:f1:6b:f3:f4:b1:d4:d5:5d:ad:e9:85:f8:20:
0d:5e:ca:1d:6a:c8:37:a4:c1:33:c2:c7:e5:a4:2b:96:59:e2:
2f:44:06:b8:5d:25:d1:6f:81:03:c8:19:97:76:b5:16:74:74:
8e:89:b6:d8:5b:f2:69:72:91:7f:80:f2:39:a2:34:3c:23:99:
5b:75:81:9f:3e:b6:cf:6e:e9:2e:83:48:25:01:cc:e5:cc:27:
60:8a:3d:ac:79:28:d9:53:cf:8d:99:16:72:ff:b9:bb:c3:18:
3f:68:41:10:fc:b6:a5:f4:5d:d2:83:0f:d8:b3:35:32:c2:b9:
d7:29:59:89:2e:80:ef:47:d2:7d:f2:c6:a4:19:d6:02:f6:a7:
47:4a:d2:1a:c7:f9:1f:bf:bf:b7:cc:1f:ea:c4:00:81:67:a7:
f0:f7:0c:e7:47:77:52:16:0b:ed:1a:c8:ce:1c:a9:4e:90:1e:
7c:b8:2e:83:c8:9b:dc:9a:c9:74:3c:3b:0c:e4:53:26:1a:dc:
5c:e7:90:6e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUYSvC+rf+DlkykcC8xWl8MxEbHQMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzNBMkMwNjlBM0IyRUJBQzc1RUNCMzczRjM5OEI1NjAy
QjU1QTZGRDAeFw0yNjAxMjUwNTQ2MTVaFw0yNjAxMjgxNTUwMTVaMDMxMTAvBgNV
BAMTKDFDOTFENzdFQzYxQjk4QUQyMzIzNzFDRDBFMzFGQUI1QkU4MDIyOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoL+ASAdSegP+RMdc64d7WNk6A
a93V4TBeQoBlX4ZzeVP8SAK7z3QFJ+R3fTXvi3hg2lg2d1t1paOdtQ2d3NRNgOM1
R6xmrAG94IzIgiAPYxagQXqj2VCWAfx/FSyj/4bbo3Z8RZW0ieL2ITCgdT39tRwn
7ZgXzeBwMsZ08GfYlGYUEsgjeIEXdWsMGPxLxqgTn2u51jY/TK+Sw41VOiPaobKB
IjGdCM2V1Ax3zoCsHhM07oHD2/2GqphE/ivphVt7n6TG8RArqef/eCdjYCTHzGAH
EUTFINHheYOi0Z/dYilR9i9U/+soB4SxxAmjqmskyYFBL5ktavApwwMoi/ylAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUHJHXfsYbmK0jI3HNDjH6tb6AIpswHwYDVR0j
BBgwFoAUc6LAaaOy66x17LNz85i1YCtVpv0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
OWMyNzYyMS1lMjk3LTQxMDAtOTcxYS0xYzY5NjdjNTJiMWIvMC83M0EyQzA2OUEz
QjJFQkFDNzVFQ0IzNzNGMzk4QjU2MDJCNTVBNkZELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzNBMkMwNjlBM0IyRUJBQzc1RUNCMzczRjM5OEI1NjAyQjU1
QTZGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTljMjc2MjEtZTI5Ny00MTAwLTk3
MWEtMWM2OTY3YzUyYjFiLzAvNzNBMkMwNjlBM0IyRUJBQzc1RUNCMzczRjM5OEI1
NjAyQjU1QTZGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABh2JO+kaCrZwfVvxkvBSpfc8s5J05mbvc7X
Pe8GH9YDKhaTsAJy7UDyfAO9irQRljJQ/B4T+Epolgj98Wvz9LHU1V2t6YX4IA1e
yh1qyDekwTPCx+WkK5ZZ4i9EBrhdJdFvgQPIGZd2tRZ0dI6Jtthb8mlykX+A8jmi
NDwjmVt1gZ8+ts9u6S6DSCUBzOXMJ2CKPax5KNlTz42ZFnL/ubvDGD9oQRD8tqX0
XdKDD9izNTLCudcpWYkugO9H0n3yxqQZ1gL2p0dK0hrH+R+/v7fMH+rEAIFnp/D3
DOdHd1IWC+0ayM4cqU6QHny4LoPIm9yayXQ8OwzkUyYa3FznkG4=
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:33:00 2026 by rpki-client