This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft
File: 7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft (raw, json)
Hash identifier: HJa8vE+7Yt/fokoUf33s81ebFksIfmXZkiZRKvXYCYY=
Subject key identifier: 61:95:B7:1D:8D:35:72:74:58:26:E1:1A:40:DD:D7:EC:9E:71:99:F6
Authority key identifier: 7F:EF:6B:F5:3F:A3:12:2A:0F:09:CE:F4:B4:08:E1:37:92:A1:45:45
Certificate issuer: /CN=7FEF6BF53FA3122A0F09CEF4B408E13792A14545
Certificate serial: 2A982F6DB7B9040456B9C98929E9E0360708315A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft
Manifest number: 0246
Signing time: Sun 25 Jan 2026 13:41:39 +0000
Manifest this update: Sun 25 Jan 2026 13:36:39 +0000
Manifest next update: Wed 28 Jan 2026 16:56:39 +0000
Files and hashes: 1: 7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl (hash: 9uQDgoy8hIfGPM2lDyyWi2V5nwN3hwXliHIp3Pi69Gg=)
2: 3130332e3136372e3130352e302f32342d3234203d3e203338333230.roa (hash: ruqE2F34CZN/5KqJhiyDZO8euZHnYhKqfwBiaFPn2lc=)
3: 3130332e3136372e3130342e302f32342d3234203d3e20313339343130.roa (hash: SapOMMIVothLtXId44y92PXYWgqYBrvZdRlhJ/EEALc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl
rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:98:2f:6d:b7:b9:04:04:56:b9:c9:89:29:e9:e0:36:07:08:31:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7FEF6BF53FA3122A0F09CEF4B408E13792A14545
Validity
Not Before: Jan 25 13:36:39 2026 GMT
Not After : Jan 28 16:56:39 2026 GMT
Subject: CN=6195B71D8D3572745826E11A40DDD7EC9E7199F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:af:2d:4f:4e:52:69:d9:ef:97:22:07:bc:f2:
f3:c9:a6:72:48:31:2e:5d:63:1b:cd:73:38:84:a2:
b2:27:ed:84:70:17:5a:12:c2:ec:1c:f0:7c:39:09:
6d:3b:28:66:1a:df:ba:bb:5f:df:5e:eb:41:5e:3a:
e8:7d:9c:91:9f:e0:cc:a7:5b:7b:12:d7:7c:04:00:
81:cd:ac:cc:9a:0d:ba:51:3c:3b:57:15:49:a5:17:
f0:a8:8b:f2:06:a4:c9:af:35:c5:ef:f5:81:3e:ed:
05:7e:f3:75:b3:6e:00:48:fc:7f:e7:6a:a0:55:b9:
6d:3d:9a:39:3e:c2:af:64:c9:5b:00:b6:0d:74:14:
ec:36:12:a7:ec:f6:34:9b:65:0c:a3:d2:7f:e1:39:
2b:bd:19:b6:9b:3a:ee:53:ff:83:b1:6e:bc:e2:2b:
37:f8:d8:c3:f7:fb:2a:b1:eb:25:c3:af:8e:fb:d3:
72:ea:0d:73:44:f3:4a:22:68:3e:16:90:f4:3d:93:
34:65:35:6f:4a:bb:e9:51:d2:0c:94:3c:96:30:34:
18:fa:ed:c0:cf:d3:98:93:6a:3f:c4:21:fc:81:63:
4e:5b:d4:63:91:99:69:a4:48:83:3e:43:e1:85:a3:
14:f3:32:d4:94:9c:58:d0:d7:17:25:00:0f:15:ab:
37:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:95:B7:1D:8D:35:72:74:58:26:E1:1A:40:DD:D7:EC:9E:71:99:F6
X509v3 Authority Key Identifier:
keyid:7F:EF:6B:F5:3F:A3:12:2A:0F:09:CE:F4:B4:08:E1:37:92:A1:45:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:b4:3b:4b:ab:37:99:cb:56:eb:f7:29:30:26:fc:4a:6e:50:
50:56:40:49:21:7d:65:53:0c:c2:f2:1f:09:1a:ed:51:0e:94:
c2:2f:f7:43:05:84:bf:a1:7b:38:a0:2f:d6:68:99:3f:2a:b6:
d1:ff:79:89:bf:0e:f1:92:f0:2e:69:b2:fa:b3:87:53:7d:a8:
b7:59:74:b2:55:4e:4a:61:fb:97:aa:dc:5d:fd:b2:34:0f:da:
34:31:66:98:81:c3:7f:8f:30:ce:05:57:ab:42:60:58:74:c7:
8b:55:e0:12:b9:25:c0:db:cd:b6:5f:a7:1b:2a:34:a2:02:21:
ab:02:5c:2c:bb:5c:6f:23:d4:fd:c8:d4:1f:96:7c:5b:8e:b0:
6d:81:44:fc:95:b4:a1:c6:f4:95:c5:13:e2:01:5e:c7:54:e9:
c4:6d:6f:6b:31:0f:4d:6d:ae:ea:ed:a2:e4:57:b6:f4:4e:40:
14:60:dd:5f:6d:3d:6c:5d:cf:cd:c1:88:a6:3e:c9:b7:91:89:
48:fb:ac:67:ce:e8:17:bc:f8:84:df:6d:66:5e:b7:c0:de:c0:
e1:a0:7d:81:84:33:2b:22:ac:15:62:ef:ce:ff:b0:e8:8b:7f:
e6:94:72:ea:e1:3c:17:b0:82:f4:4f:92:b6:1b:2b:b2:69:34:
d6:9f:98:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:58:38 2026 by rpki-client