This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.mft
File: 1259FE91D21610D4BA487C60C804F66EB6591CA8.mft (raw, json)
Hash identifier: x4eOQ74GKkKBRZ54Pnr5vGfxdNqrdDj1BcwokEr4V8s=
Subject key identifier: F5:49:6D:87:D4:DD:70:49:04:15:84:89:23:7C:6B:55:32:F2:C1:4F
Authority key identifier: 12:59:FE:91:D2:16:10:D4:BA:48:7C:60:C8:04:F6:6E:B6:59:1C:A8
Certificate issuer: /CN=1259FE91D21610D4BA487C60C804F66EB6591CA8
Certificate serial: 068DC6775A9F8925CD3805812F49C5E6BF56146C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1259FE91D21610D4BA487C60C804F66EB6591CA8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.mft
Manifest number: 050B
Signing time: Sun 25 Jan 2026 11:21:40 +0000
Manifest this update: Sun 25 Jan 2026 11:16:40 +0000
Manifest next update: Wed 28 Jan 2026 14:20:40 +0000
Files and hashes: 1: 3130332e37382e34342e302f32332d3233203d3e20313336303536.roa (hash: ybooJJfuCLWJ6Wkr2xd+dtjVGbG8gCLcuXzjWzkx1V0=)
2: 1259FE91D21610D4BA487C60C804F66EB6591CA8.crl (hash: NRwSWWVTCsF4fZoPDx5RlbqneAhGyaUJa/CrZRv1Sog=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.crl
rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1259FE91D21610D4BA487C60C804F66EB6591CA8.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:8d:c6:77:5a:9f:89:25:cd:38:05:81:2f:49:c5:e6:bf:56:14:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1259FE91D21610D4BA487C60C804F66EB6591CA8
Validity
Not Before: Jan 25 11:16:40 2026 GMT
Not After : Jan 28 14:20:40 2026 GMT
Subject: CN=F5496D87D4DD704904158489237C6B5532F2C14F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5f:e6:d1:e4:13:d0:2b:82:3e:7d:56:88:92:
19:98:9e:2e:88:ab:19:4d:97:75:cd:6d:ba:ef:e8:
1d:c1:49:88:e1:65:cd:1a:4a:1f:4b:4d:23:91:9d:
77:04:5a:f3:84:e6:fe:42:7b:66:be:2d:fd:1f:91:
91:93:65:21:db:84:a4:53:fa:ee:ba:a8:d8:62:c9:
d2:c7:1b:6a:d3:7b:20:1e:9e:e6:06:1e:06:93:33:
1e:c2:10:d2:48:a7:e3:13:41:20:46:cc:1f:2d:67:
9c:78:26:11:be:05:e2:af:27:59:d4:5e:f2:4a:40:
2d:c4:b5:21:d8:9e:3c:69:7a:35:84:cf:f7:9f:0a:
ed:15:5d:9b:fa:2a:8a:49:bd:bb:2c:f0:d5:76:26:
a0:a2:b2:bc:90:6e:ca:dd:20:c1:11:79:21:b4:94:
64:25:54:8b:14:28:5e:31:54:a4:55:da:93:73:49:
a5:50:9d:e0:0f:fa:2b:f8:43:6a:95:38:43:bf:98:
66:ab:df:15:27:bb:54:80:b3:33:1e:c3:11:16:44:
20:59:77:f6:61:b0:ba:bb:ed:be:30:cf:d6:c0:1c:
6f:5b:ce:57:0b:8c:39:2b:9e:5d:e3:ee:c1:80:d0:
4a:4e:4f:6e:a8:fe:9a:ae:25:b4:51:b1:62:48:16:
80:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:49:6D:87:D4:DD:70:49:04:15:84:89:23:7C:6B:55:32:F2:C1:4F
X509v3 Authority Key Identifier:
keyid:12:59:FE:91:D2:16:10:D4:BA:48:7C:60:C8:04:F6:6E:B6:59:1C:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1259FE91D21610D4BA487C60C804F66EB6591CA8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:6b:d9:89:5b:28:96:92:f2:41:ff:d6:49:94:e7:1f:9d:73:
19:cb:0b:75:6e:94:5c:9a:d5:dc:f6:8c:90:a5:e3:20:19:3f:
8d:e0:f1:73:af:47:a4:74:50:27:b9:be:2e:3f:3b:c5:79:40:
e0:25:4d:7c:70:af:99:6e:fd:f1:94:7b:81:d9:6b:e7:56:30:
df:6a:72:ff:52:e0:6d:29:8a:9b:07:da:0a:52:95:a0:16:ce:
b9:d9:cf:2a:34:fa:72:14:5b:39:3f:cd:29:82:df:8c:df:59:
3d:3f:ca:6f:72:c4:84:aa:22:ed:1a:cc:78:8a:42:c6:0c:d8:
3c:15:66:87:2b:c5:3b:21:b2:10:e5:05:82:c8:9d:e0:8e:2f:
5d:aa:0d:f4:7b:30:d1:70:01:8f:cb:c4:59:1a:7d:73:91:2c:
47:24:63:43:ad:e7:ff:8b:58:ed:4d:0d:9b:8b:14:82:df:27:
bc:6e:51:65:d1:0f:7a:fa:05:2b:07:93:b8:54:d4:26:2b:35:
89:df:e5:cf:a4:0c:d5:a6:08:4d:b2:88:65:fe:c7:17:17:17:
fe:0d:f5:d3:fe:23:e0:4a:7b:52:92:9b:0d:9e:53:75:2b:52:
f7:fa:53:b0:bc:10:b8:44:cc:4c:fa:65:8f:50:76:d8:0a:51:
1f:03:66:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:26:08 2026 by rpki-client