This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/7CDEC0195C0619A2844735B38B762AB1C145318A.mft
File: 7CDEC0195C0619A2844735B38B762AB1C145318A.mft (raw, json)
Hash identifier: FuD5MYSedfV/ZA9rgAvxQ9+GJZBied47ji0Y7QMUKo0=
Subject key identifier: 43:2F:16:0D:AA:E0:99:91:56:F4:1B:06:44:7A:37:35:1F:DA:02:1E
Authority key identifier: 7C:DE:C0:19:5C:06:19:A2:84:47:35:B3:8B:76:2A:B1:C1:45:31:8A
Certificate issuer: /CN=7CDEC0195C0619A2844735B38B762AB1C145318A
Certificate serial: 3035BDC92A993897E44687C9B440CE59208C123C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CDEC0195C0619A2844735B38B762AB1C145318A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/7CDEC0195C0619A2844735B38B762AB1C145318A.mft
Manifest number: 020E
Signing time: Fri 23 Jan 2026 22:40:53 +0000
Manifest this update: Fri 23 Jan 2026 22:35:53 +0000
Manifest next update: Tue 27 Jan 2026 06:17:53 +0000
Files and hashes: 1: 7CDEC0195C0619A2844735B38B762AB1C145318A.crl (hash: nvEHOiMw97uL/52EQpRWzowH/YmhfwR8RCfI7Wz8TKg=)
2: 3130332e3136332e33362e302f32332d3234203d3e20313338383836.roa (hash: CtGkBvOXr+z5xeQBMHV9NThlZEDqDbWOP9wsaKhn80Y=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/7CDEC0195C0619A2844735B38B762AB1C145318A.crl
rsync://repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/7CDEC0195C0619A2844735B38B762AB1C145318A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CDEC0195C0619A2844735B38B762AB1C145318A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 06:17:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:35:bd:c9:2a:99:38:97:e4:46:87:c9:b4:40:ce:59:20:8c:12:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CDEC0195C0619A2844735B38B762AB1C145318A
Validity
Not Before: Jan 23 22:35:53 2026 GMT
Not After : Jan 27 06:17:53 2026 GMT
Subject: CN=432F160DAAE0999156F41B06447A37351FDA021E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:dd:20:e9:fe:25:58:94:ee:29:b7:cf:85:13:
1d:78:6d:51:e1:5a:3c:ab:60:b0:9b:c7:dc:60:0e:
92:34:6a:41:07:cc:0b:6d:ef:73:16:53:0a:2d:4c:
02:df:84:b6:b2:46:d5:31:0f:e5:48:22:86:60:e7:
9a:07:98:8a:1a:66:b3:73:41:3a:16:c7:4f:04:84:
64:71:5e:6a:a8:67:b4:1d:46:aa:8b:ae:0d:f9:3c:
65:95:fc:57:49:51:90:84:d8:e2:1d:53:41:5e:85:
d6:67:48:2b:ff:a5:69:a1:7a:e9:29:47:a0:c5:b4:
b4:73:ed:b3:6d:83:d9:d6:1a:67:75:f9:67:ce:0c:
97:f6:0b:60:a4:58:9a:ac:f6:d4:1f:0a:42:0f:9e:
71:52:6d:cf:44:8f:f3:5c:c9:70:9b:3e:e9:79:dc:
41:ff:82:6c:c4:30:2b:d8:6f:10:68:88:30:3b:ad:
19:96:a8:3c:8e:6d:ad:f9:e4:1b:2b:7f:c8:b4:58:
72:2f:a8:39:40:90:a9:97:f0:8f:77:b2:8b:7a:98:
b1:06:93:64:a9:4c:c3:59:51:a4:54:2f:b4:b0:75:
ba:66:4e:43:00:9b:7d:e8:46:75:33:2c:ef:7f:63:
cc:a4:ab:13:15:9a:5f:6c:74:a3:40:b3:96:d7:51:
d0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2F:16:0D:AA:E0:99:91:56:F4:1B:06:44:7A:37:35:1F:DA:02:1E
X509v3 Authority Key Identifier:
keyid:7C:DE:C0:19:5C:06:19:A2:84:47:35:B3:8B:76:2A:B1:C1:45:31:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/7CDEC0195C0619A2844735B38B762AB1C145318A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CDEC0195C0619A2844735B38B762AB1C145318A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/7CDEC0195C0619A2844735B38B762AB1C145318A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:7a:27:cc:d3:ca:ef:75:a9:d3:69:05:ea:74:f0:49:0a:15:
13:2b:ee:55:7d:76:2d:dc:da:b7:58:e9:d9:9f:e8:92:7c:dd:
42:a0:f7:e1:08:93:43:0d:54:19:e2:ca:c5:2e:8f:dd:df:ef:
67:5f:4c:66:63:9b:52:97:e5:76:ab:68:69:4f:55:3e:0e:76:
13:19:06:01:5b:9d:d2:cc:f7:74:b9:96:18:40:a9:5a:a0:9c:
10:4b:1f:67:33:f1:98:fc:f7:70:7e:94:30:f6:8d:f8:37:aa:
c7:c0:d8:48:d0:cb:2e:62:bc:01:49:ee:24:28:72:32:d9:e0:
82:a5:3f:ad:c6:d3:f9:43:29:83:84:78:d2:ba:78:22:5e:c0:
a7:3e:ab:27:99:d2:c8:a8:21:4a:fd:70:8e:47:5e:50:09:2a:
25:76:d6:8b:b5:a6:39:c5:2d:91:f5:9e:61:ad:d3:d4:78:03:
f9:ab:ca:e9:b4:06:c7:39:2f:41:48:ff:1a:9e:b3:5a:9c:36:
14:f8:dd:0c:39:21:e1:25:30:dd:f7:14:d0:b0:45:5f:51:45:
6a:f6:e2:1f:da:7f:70:c6:1f:24:64:c6:8d:94:d0:72:4f:a8:
7b:e1:77:fa:af:f4:b6:5e:25:c6:78:f5:9e:49:a5:4c:98:11:
03:5f:11:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:33:11 2026 by rpki-client