This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft
File: A61585874729C58BB62740692BA8FA6ED286FDC9.mft (raw, json)
Hash identifier: ZPt7WsOqjX9DTolOwYbKzsZkw1oXu2X8hyGssNGek48=
Subject key identifier: C1:17:24:B6:0A:0B:AF:14:A0:B3:0D:C3:05:21:C6:B2:EE:C8:7E:CE
Authority key identifier: A6:15:85:87:47:29:C5:8B:B6:27:40:69:2B:A8:FA:6E:D2:86:FD:C9
Certificate issuer: /CN=A61585874729C58BB62740692BA8FA6ED286FDC9
Certificate serial: 0199580A342481CEBC660CD215C08390A5520294
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft
Manifest number: 0226
Signing time: Sun 25 Jan 2026 03:02:05 +0000
Manifest this update: Sun 25 Jan 2026 02:57:05 +0000
Manifest next update: Wed 28 Jan 2026 14:30:05 +0000
Files and hashes: 1: 3130332e3234352e3137382e302f32332d3233203d3e2039333431.roa (hash: 3t8POxW2mcQ/nvjJPU9gXim41a5qa0GKDf3HQqW/V6Y=)
2: A61585874729C58BB62740692BA8FA6ED286FDC9.crl (hash: Ha8dAKJ3uhfpcApPPakgC1tnCyGZnCsvFEbtOB05TJE=)
3: 3130332e3234352e3137392e302f32342d3234203d3e2039333431.roa (hash: e1O7IFU9uCaYA+jMLBiE2GdFukypRRniAf+RRVQm+So=)
4: 3130332e3234352e3137382e302f32342d3234203d3e2039333431.roa (hash: OVp41P8XiusORgDYjhyG3tIoN5ypPHdHjH6RGxbqADk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.crl
rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:58:0a:34:24:81:ce:bc:66:0c:d2:15:c0:83:90:a5:52:02:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A61585874729C58BB62740692BA8FA6ED286FDC9
Validity
Not Before: Jan 25 02:57:05 2026 GMT
Not After : Jan 28 14:30:05 2026 GMT
Subject: CN=C11724B60A0BAF14A0B30DC30521C6B2EEC87ECE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8f:fa:9c:cf:a2:1b:f5:6b:5e:3a:89:b6:c0:
19:99:ae:e0:58:93:d8:7e:a9:f7:69:72:ff:dc:3a:
87:23:20:95:30:68:1b:9f:76:56:44:e3:f9:c0:7a:
ad:69:1c:71:a7:24:86:73:12:1d:04:cd:6c:c2:31:
a6:86:32:9e:f0:1a:fb:45:ca:17:9f:76:eb:91:4a:
7c:64:a7:97:5c:01:ed:5b:49:98:fa:72:0e:81:d5:
a6:72:10:a9:33:1f:7e:b3:76:22:b1:ff:80:57:29:
df:dd:ea:47:d9:11:d0:a8:2e:98:57:fe:24:49:c4:
56:47:20:08:51:5b:56:b5:b5:50:6e:e5:22:bb:83:
96:98:79:7a:ad:bc:99:85:4c:c0:be:30:e5:52:47:
d7:2d:21:e7:cf:a6:aa:56:88:17:cd:14:f8:2c:46:
29:10:e9:b6:09:49:0b:e0:8f:db:63:50:00:cf:e1:
22:d6:4b:ac:22:4e:20:89:a7:d5:3f:1f:1e:f7:6e:
70:39:e1:63:fc:13:df:32:8c:46:b4:79:09:72:1c:
2e:d6:1d:2f:40:a5:27:05:82:c7:17:53:01:77:9f:
25:68:2c:6b:86:d2:d7:6e:09:50:9a:ad:c7:ef:f1:
b3:89:a3:25:1c:d3:17:9d:2f:b4:70:8e:a9:41:63:
e0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:17:24:B6:0A:0B:AF:14:A0:B3:0D:C3:05:21:C6:B2:EE:C8:7E:CE
X509v3 Authority Key Identifier:
keyid:A6:15:85:87:47:29:C5:8B:B6:27:40:69:2B:A8:FA:6E:D2:86:FD:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:74:d1:79:1d:64:63:97:17:1e:fd:83:4a:a6:41:0c:2b:f9:
dd:8c:0a:77:6e:45:34:d7:49:21:25:df:fd:fb:8b:ae:d5:1d:
e0:e3:2e:cd:74:09:aa:55:db:f0:36:2a:99:93:f9:e6:70:d3:
07:5f:e6:ef:30:2b:9d:8b:35:82:c2:a3:16:eb:63:2f:ab:23:
d7:91:25:f8:2a:48:52:c5:df:d9:81:19:4a:41:fd:c9:26:dd:
19:2b:0f:90:5d:36:3d:ec:d1:24:16:9d:c3:03:d6:d8:8b:57:
69:ea:b7:b7:fe:b5:3e:3f:ff:99:c0:9e:87:8a:bc:86:df:5c:
a3:ed:6f:14:df:62:1d:8a:8d:32:30:99:21:67:62:c4:19:d4:
19:09:ab:ac:1e:f5:81:ef:e0:a6:e8:11:42:fb:8e:28:cb:f2:
14:91:fd:fa:a2:f5:95:9e:fc:c8:20:e9:ff:98:fe:74:94:03:
6b:48:5c:6c:34:97:36:23:33:d1:a2:2a:d6:a8:c8:ef:5f:a3:
b4:56:72:3a:53:f4:41:df:fc:76:e8:bb:4e:f3:8f:9a:04:af:
b5:9e:a4:b4:6c:03:aa:c3:66:a8:6c:29:af:ad:7d:98:1a:b2:
00:23:e2:e1:43:44:d1:e7:79:78:7e:c9:d8:cb:5b:7d:0d:10:
69:c9:6f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:09:30 2026 by rpki-client