This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft
File: D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft (raw, json)
Hash identifier: AjqMWgKhxMtXWi0NDMX8xwPKC14Hlmb4EOZ7eyOfdlk=
Subject key identifier: 7F:53:01:CA:F1:E3:EF:AB:AE:D9:50:17:35:F9:77:9E:46:A2:D2:9F
Authority key identifier: D2:5A:04:A0:E4:E5:2F:F4:22:D9:D8:FB:85:7D:23:DC:61:42:E5:FD
Certificate issuer: /CN=D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD
Certificate serial: 58FE846F5D205775C7116B657BA5A1DC6F9CDFD8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft
Manifest number: 0545
Signing time: Sat 24 Jan 2026 15:40:48 +0000
Manifest this update: Sat 24 Jan 2026 15:35:48 +0000
Manifest next update: Tue 27 Jan 2026 17:56:48 +0000
Files and hashes: 1: 3130332e32382e3131322e302f32322d3234203d3e203435333035.roa (hash: qTnm5CGA/RYtoBdoUqEMNKhCi+L95N248VCqrGjA3NM=)
2: 3132342e34302e3234382e302f32312d3234203d3e203435333035.roa (hash: VtiYvCa1bjH6ANhQ1ZiFk2JkSbje5+lBzE3EKLizBTk=)
3: 3132342e34302e3235332e302f32342d3234203d3e20313432333237.roa (hash: ZeQ/G35c/J7hJXCvQZ6ieAUy4NBWFOv66XK2TZxgUwU=)
4: 34332e3235322e3130342e302f32342d3234203d3e20313432333237.roa (hash: lR3gX6Bwr4ANHz1p/BofTqPyE1vSZC884k0IFEXkQqw=)
5: 3230322e35362e3136342e302f32322d3234203d3e203435333035.roa (hash: Ks6djmjYrG5U+knwJmAadX8Vs5do9/GjSatcKmwDXgM=)
6: D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.crl (hash: KWZv6DHHlJlwcEO8mt6ux5pKSCA3FK+IgPfadDfjsPk=)
7: 323030313a6466303a61333a3a2f34382d3438203d3e203435333035.roa (hash: hlUw25q5eNWFZZoKL6XJ7rDIzMv9Ha/qCoX1PFqE3P4=)
8: 3132342e34302e3234382e302f32342d3234203d3e20313432333237.roa (hash: C0CDuWEVU0SX0hds00E1HGuGHRio6g8DwzULftVgj6I=)
9: 34332e3235322e3130342e302f32322d3234203d3e203435333035.roa (hash: PKIt6KT96DVg2otgI4L6Lbo6X1IxxuQSsidS83qyqJk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.crl
rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 17:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:fe:84:6f:5d:20:57:75:c7:11:6b:65:7b:a5:a1:dc:6f:9c:df:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD
Validity
Not Before: Jan 24 15:35:48 2026 GMT
Not After : Jan 27 17:56:48 2026 GMT
Subject: CN=7F5301CAF1E3EFABAED9501735F9779E46A2D29F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:30:91:87:41:a5:01:0c:ff:54:d5:b7:e3:a3:
6d:00:53:79:ea:d2:31:61:b6:fa:50:63:ce:6b:ed:
17:16:e4:41:5c:6e:9e:9d:d3:2b:97:6b:48:29:59:
26:c3:28:b4:68:bc:c3:bd:33:91:56:97:c0:99:8c:
8b:96:c3:51:e4:5e:40:71:aa:e6:33:5d:4b:97:bb:
d3:e7:bf:53:da:53:f1:7c:bc:37:17:99:21:5e:e0:
35:03:ef:f0:c5:63:8f:0b:dc:5f:40:65:84:55:4e:
ae:19:82:73:6b:c3:1a:3e:85:f1:35:6b:b8:63:32:
af:e1:24:66:81:f1:ff:72:2d:77:e4:3d:e3:9c:b7:
1a:8d:1d:e7:75:98:b1:f7:ef:96:db:e8:85:58:8c:
6e:95:ea:2b:3b:b2:19:24:ce:dd:ea:24:7e:5e:1a:
c9:77:d8:80:7c:86:2f:e4:4a:c3:2b:cc:17:f7:ff:
ac:59:ed:41:2a:e2:46:1f:a6:95:44:72:50:9f:79:
4a:ce:4b:66:fd:6f:7d:91:7b:2d:a4:82:08:e1:5f:
74:6b:7a:a7:c6:4c:6a:38:d6:b8:74:de:5e:93:41:
15:88:9e:0c:77:68:f4:ed:cc:2a:fd:34:8b:db:7a:
fa:9d:40:9c:29:20:7e:10:93:3f:35:40:54:08:01:
27:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:53:01:CA:F1:E3:EF:AB:AE:D9:50:17:35:F9:77:9E:46:A2:D2:9F
X509v3 Authority Key Identifier:
keyid:D2:5A:04:A0:E4:E5:2F:F4:22:D9:D8:FB:85:7D:23:DC:61:42:E5:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:fd:ed:84:da:6e:09:4a:64:5a:eb:09:01:7c:ef:4f:02:a5:
df:c3:c1:20:0a:63:f3:dd:49:72:b8:36:2c:45:a3:ae:bc:47:
65:c0:51:9c:b9:7f:c3:89:09:23:47:7b:d8:94:0e:4a:70:3b:
39:68:9c:76:a1:5f:37:b7:61:74:a4:44:68:9f:07:d4:67:3a:
88:73:0a:eb:2a:ca:97:3a:f3:35:74:49:4d:6a:15:75:2d:b8:
e2:90:fe:81:03:4f:4b:22:c7:30:aa:f8:7b:7e:3c:76:35:24:
5f:4c:11:11:7a:4b:9a:e1:8a:0a:7f:fb:36:67:71:6d:8d:f6:
81:8f:c2:a6:ba:5f:3d:09:d5:c1:ee:6b:f9:83:00:7e:79:3a:
87:27:17:cc:1f:3b:b8:d9:b1:49:d2:22:37:23:08:6e:63:82:
dc:d2:7e:6a:5a:ab:f6:29:2f:f1:a2:f8:8b:0f:2f:dd:4b:2a:
28:62:62:84:e4:93:2e:fc:a5:9c:57:21:31:eb:5b:28:18:16:
cb:4e:00:9a:6f:15:68:dc:38:1e:1e:f0:cc:26:20:ce:43:5c:
ad:67:84:e7:51:7e:3c:f7:de:66:57:9e:87:ef:73:8a:c9:c4:
bf:08:c7:d8:3d:2d:6b:5f:66:eb:fd:77:72:3e:ce:8c:ba:47:
2e:c4:bd:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:13:15 2026 by rpki-client