This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft
File: 91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft (raw, json)
Hash identifier: e2vu7s3g/Vofvn4z7aZznFuRvM9eaY0oS9TvgYZDNEw=
Subject key identifier: 43:6F:A2:BA:E2:46:7D:59:89:12:E3:C1:65:4C:64:B7:A3:53:F8:C9
Authority key identifier: 91:E7:E2:83:42:2E:38:A6:A6:ED:B3:85:93:EE:07:4D:F8:FA:29:C6
Certificate issuer: /CN=91E7E283422E38A6A6EDB38593EE074DF8FA29C6
Certificate serial: 7B38F11169BD5F8BE033E6FE276869BB6376242B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft
Manifest number: 0540
Signing time: Fri 23 Jan 2026 12:41:23 +0000
Manifest this update: Fri 23 Jan 2026 12:36:23 +0000
Manifest next update: Mon 26 Jan 2026 20:24:23 +0000
Files and hashes: 1: 91E7E283422E38A6A6EDB38593EE074DF8FA29C6.crl (hash: 4QuS2R7BrHL67h+PQQzUTR2E/0xMnqo5RBhBfXMQFFM=)
2: 3130332e3134322e31342e302f32332d3234203d3e20313339333735.roa (hash: Grgdt8iRUAIyZ2qFHWZrH4g5ALyIzB9vEqddBLCgUpI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.crl
rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 20:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:38:f1:11:69:bd:5f:8b:e0:33:e6:fe:27:68:69:bb:63:76:24:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91E7E283422E38A6A6EDB38593EE074DF8FA29C6
Validity
Not Before: Jan 23 12:36:23 2026 GMT
Not After : Jan 26 20:24:23 2026 GMT
Subject: CN=436FA2BAE2467D598912E3C1654C64B7A353F8C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:00:6c:38:00:59:11:70:3d:3a:6b:95:cd:89:
3f:fd:1e:d2:48:8e:c5:48:b0:11:de:b8:f9:da:88:
87:15:5e:ca:40:c0:d1:71:b4:a9:c2:f0:54:10:e8:
3b:a5:1f:4a:cb:80:e7:dd:29:22:1d:23:7c:ae:65:
81:10:5e:11:41:70:39:37:27:9d:d7:1e:b8:7a:04:
dd:f0:15:77:6a:21:5f:b4:41:7c:8e:a8:38:12:2a:
61:fa:e8:e2:d6:3e:d8:fd:13:df:ea:97:ab:6d:07:
99:dc:13:bb:e4:55:f1:aa:dd:c4:1b:06:c8:1b:76:
12:b1:1c:a7:96:98:dc:ce:a4:2d:a7:71:68:97:1b:
85:0a:55:2d:91:01:e2:18:61:c3:01:a9:bd:e7:12:
c2:b2:da:33:e8:8a:4d:e3:97:6a:65:33:eb:8b:01:
65:06:57:66:63:1e:73:c1:ac:8a:71:72:f8:20:ca:
53:b5:83:2e:ad:06:4b:4a:84:e7:90:6e:91:0a:7c:
0b:05:8a:25:2f:34:85:62:94:33:6f:78:ea:58:58:
bf:e8:e1:1c:68:9f:7e:67:18:ca:d2:2e:d8:d1:40:
68:af:59:8e:96:19:08:e2:a3:87:d3:59:f7:be:4c:
00:0c:80:53:44:e2:a8:cb:a4:ec:9f:06:89:1e:b3:
f5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:6F:A2:BA:E2:46:7D:59:89:12:E3:C1:65:4C:64:B7:A3:53:F8:C9
X509v3 Authority Key Identifier:
keyid:91:E7:E2:83:42:2E:38:A6:A6:ED:B3:85:93:EE:07:4D:F8:FA:29:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:00:bb:0b:52:cf:7b:1a:98:10:40:ca:f6:d6:e0:db:0a:6f:
24:3b:5b:d5:ef:c0:5a:d0:48:d3:47:33:b7:82:45:a1:cc:62:
e5:61:1e:34:2c:e2:2e:1a:40:9a:53:0e:49:8f:96:f7:ef:53:
a2:fc:2a:cb:db:1c:e9:58:3f:ac:a6:6b:97:a6:5d:90:b2:f2:
94:3e:c3:9f:4e:c2:ed:4f:b3:c7:41:37:dc:24:5f:7d:00:77:
09:eb:84:8b:00:3e:66:b2:41:b1:1c:d9:52:c0:a0:74:fb:b5:
6e:52:75:e3:fa:70:78:fc:4c:36:4a:90:ba:05:79:b7:d2:ea:
0c:5b:51:c2:3e:e6:70:29:5b:b9:e5:c5:ca:96:a7:d0:bf:77:
70:05:bc:9e:9a:4a:bb:5f:43:36:49:6b:d0:a7:49:62:f6:0e:
ef:c9:ae:8b:1b:e9:b3:78:03:57:38:91:f4:6d:a1:98:09:f9:
16:3c:26:42:1a:d1:91:d2:ff:b2:3b:6c:97:13:df:58:9d:b8:
24:fc:02:5c:02:cf:9d:bd:f9:ae:83:d8:02:3e:5a:d8:6e:fd:
aa:ba:09:aa:87:4a:59:69:f5:6c:d0:6b:16:31:37:d1:61:1b:
a2:15:24:43:30:be:28:01:04:e9:a6:ab:b5:7a:bb:d9:07:cc:
47:b1:e9:26
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUezjxEWm9X4vgM+b+J2hpu2N2JCswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTFFN0UyODM0MjJFMzhBNkE2RURCMzg1OTNFRTA3NERG
OEZBMjlDNjAeFw0yNjAxMjMxMjM2MjNaFw0yNjAxMjYyMDI0MjNaMDMxMTAvBgNV
BAMTKDQzNkZBMkJBRTI0NjdENTk4OTEyRTNDMTY1NEM2NEI3QTM1M0Y4QzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCAGw4AFkRcD06a5XNiT/9HtJI
jsVIsBHeuPnaiIcVXspAwNFxtKnC8FQQ6DulH0rLgOfdKSIdI3yuZYEQXhFBcDk3
J53XHrh6BN3wFXdqIV+0QXyOqDgSKmH66OLWPtj9E9/ql6ttB5ncE7vkVfGq3cQb
BsgbdhKxHKeWmNzOpC2ncWiXG4UKVS2RAeIYYcMBqb3nEsKy2jPoik3jl2plM+uL
AWUGV2ZjHnPBrIpxcvggylO1gy6tBktKhOeQbpEKfAsFiiUvNIVilDNveOpYWL/o
4Rxon35nGMrSLtjRQGivWY6WGQjio4fTWfe+TAAMgFNE4qjLpOyfBokes/W1AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUQ2+iuuJGfVmJEuPBZUxkt6NT+MkwHwYDVR0j
BBgwFoAUkefig0IuOKam7bOFk+4HTfj6KcYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
MWNiYzkyNy1mNGUyLTQxNTMtYjY2Yi1jZTFlYzAyZDc0MTAvMC85MUU3RTI4MzQy
MkUzOEE2QTZFREIzODU5M0VFMDc0REY4RkEyOUM2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTFFN0UyODM0MjJFMzhBNkE2RURCMzg1OTNFRTA3NERGOEZB
MjlDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjFjYmM5MjctZjRlMi00MTUzLWI2
NmItY2UxZWMwMmQ3NDEwLzAvOTFFN0UyODM0MjJFMzhBNkE2RURCMzg1OTNFRTA3
NERGOEZBMjlDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGwAuwtSz3samBBAyvbW4NsKbyQ7W9XvwFrQ
SNNHM7eCRaHMYuVhHjQs4i4aQJpTDkmPlvfvU6L8KsvbHOlYP6yma5emXZCy8pQ+
w59Owu1Ps8dBN9wkX30AdwnrhIsAPmayQbEc2VLAoHT7tW5SdeP6cHj8TDZKkLoF
ebfS6gxbUcI+5nApW7nlxcqWp9C/d3AFvJ6aSrtfQzZJa9CnSWL2Du/Jrosb6bN4
A1c4kfRtoZgJ+RY8JkIa0ZHS/7I7bJcT31iduCT8AlwCz529+a6D2AI+Wthu/aq6
CaqHSllp9WzQaxYxN9FhG6IVJEMwvigBBOmmq7V6u9kHzEex6SY=
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:59:22 2026 by rpki-client