This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/454DBC52C30315358534B20532037D549238F4C9.mft
File: 454DBC52C30315358534B20532037D549238F4C9.mft (raw, json)
Hash identifier: CmP1bhxcmdEKgi014qAuWfOuWei92sNuAASGgcZ0cx0=
Subject key identifier: 0F:ED:20:92:B2:A1:80:1D:F0:56:04:A5:DB:F1:7D:99:E3:D2:E2:D7
Authority key identifier: 45:4D:BC:52:C3:03:15:35:85:34:B2:05:32:03:7D:54:92:38:F4:C9
Certificate issuer: /CN=454DBC52C30315358534B20532037D549238F4C9
Certificate serial: 5D90C027EEF140ED96320E5090C4F640BE7E571A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/454DBC52C30315358534B20532037D549238F4C9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/454DBC52C30315358534B20532037D549238F4C9.mft
Manifest number: 97
Signing time: Sat 24 Jan 2026 08:02:34 +0000
Manifest this update: Sat 24 Jan 2026 07:57:34 +0000
Manifest next update: Tue 27 Jan 2026 19:47:34 +0000
Files and hashes: 1: 454DBC52C30315358534B20532037D549238F4C9.crl (hash: X97pjjdm63HSBkIHE/FZW/Ph2yvikIFXfhrkgKxr7g0=)
2: 3130332e3137372e3134342e302f32332d3234203d3e20313437313535.roa (hash: cRyxMvmFtzFnzkX6p3+m20AP50Q1pUuPcCw+HlXCJgU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/454DBC52C30315358534B20532037D549238F4C9.crl
rsync://repo-rpki.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/454DBC52C30315358534B20532037D549238F4C9.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/454DBC52C30315358534B20532037D549238F4C9.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 19:47:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:90:c0:27:ee:f1:40:ed:96:32:0e:50:90:c4:f6:40:be:7e:57:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=454DBC52C30315358534B20532037D549238F4C9
Validity
Not Before: Jan 24 07:57:34 2026 GMT
Not After : Jan 27 19:47:34 2026 GMT
Subject: CN=0FED2092B2A1801DF05604A5DBF17D99E3D2E2D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:08:f1:1d:79:4c:49:03:6e:80:9c:99:c9:41:
63:d3:ca:c9:38:50:d6:5c:fd:f2:d9:7a:be:48:76:
87:b7:83:31:90:18:29:7c:8a:66:47:e9:9d:d8:db:
d1:08:45:c9:7e:a8:8b:c6:65:04:df:48:94:4b:46:
9c:c6:9c:f5:21:9f:9a:8f:7c:dc:e9:4a:b7:29:54:
bc:92:a0:05:6d:04:ba:1f:78:b1:ed:10:4c:1f:65:
c5:28:c6:de:70:02:e9:37:4a:f3:ea:f2:8e:30:1c:
07:6e:c9:0c:c9:23:f2:0c:15:22:f4:c8:1c:5e:f2:
d8:93:67:69:5c:42:3d:d0:2d:e0:14:31:12:de:2f:
ee:79:8a:a2:88:12:5c:c8:1e:fe:53:96:4d:17:55:
c0:d3:0c:f0:8e:55:06:25:d2:fa:34:d2:80:38:ef:
aa:e0:a2:65:b0:20:80:3a:75:f8:6a:50:ef:6a:67:
44:f9:a3:f3:6a:b4:f5:96:6a:98:5d:42:f3:09:ed:
2b:a7:f4:f6:f3:00:19:31:46:3a:74:c8:b4:92:af:
56:61:b8:ee:f5:db:d9:98:60:6d:6a:04:98:44:eb:
a9:47:bb:db:64:6b:ba:6e:b4:88:ba:5a:49:4f:cb:
20:c1:a5:ee:ff:51:f9:8d:bf:35:71:c3:13:4e:32:
03:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:ED:20:92:B2:A1:80:1D:F0:56:04:A5:DB:F1:7D:99:E3:D2:E2:D7
X509v3 Authority Key Identifier:
keyid:45:4D:BC:52:C3:03:15:35:85:34:B2:05:32:03:7D:54:92:38:F4:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/454DBC52C30315358534B20532037D549238F4C9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/454DBC52C30315358534B20532037D549238F4C9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/454DBC52C30315358534B20532037D549238F4C9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:71:45:03:10:b4:66:82:c6:16:80:94:40:48:cf:04:8e:35:
02:c9:36:7e:fc:4b:df:28:5a:aa:11:a7:0a:77:bb:43:8f:5b:
18:8b:66:8e:ff:78:11:5e:33:df:9e:0e:eb:52:b0:2c:cd:df:
e2:e6:dd:48:21:6d:bc:09:0b:8a:d7:86:5f:ba:a2:76:5e:e4:
dd:5d:e1:26:59:cc:28:ea:a9:c6:8b:a0:96:8c:ca:37:f0:b3:
a2:d4:2d:63:46:b4:29:cd:48:36:ce:65:10:4d:ff:97:8b:0b:
be:70:4c:61:ac:0b:5f:18:57:3d:37:d1:bf:82:a5:d1:64:69:
6e:88:f5:e3:92:e2:9d:a4:55:52:02:eb:d3:5e:bc:cc:63:f0:
32:77:91:11:0b:d4:ef:b4:0b:78:5d:00:14:39:53:25:cb:09:
a9:94:66:f1:19:65:55:14:f9:59:31:4f:db:e7:f5:e8:88:40:
33:4f:de:d6:67:4b:bc:29:b5:6e:aa:cd:ce:7d:55:d6:42:f0:
15:01:8f:18:7f:b1:8e:f9:09:42:48:61:4c:84:2e:6e:41:a1:
5a:b8:bf:8b:9f:56:9b:79:99:3d:52:96:d5:0b:bd:eb:6b:c9:
4f:1e:c5:58:0d:47:20:48:64:16:fa:ee:29:35:6f:77:e7:7e:
70:38:51:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:23:15 2026 by rpki-client