This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft
File: AC555447BA62C39107F16BF572F82A417F728DBF.mft (raw, json)
Hash identifier: EQq40o5Dsxffn+Zcbd+Q5YP1CsFN7nN0Ow0zrDV3G90=
Subject key identifier: 6D:7F:09:F4:FA:6F:7C:65:A0:4B:51:97:47:F5:A4:A7:C0:E3:44:CF
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Certificate issuer: /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial: 58B161E23946E657D8006A120B1C9D43E4DE3FDE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft
Manifest number: 0687
Signing time: Sun 25 Jan 2026 18:41:56 +0000
Manifest this update: Sun 25 Jan 2026 18:36:56 +0000
Manifest next update: Wed 28 Jan 2026 19:40:56 +0000
Files and hashes: 1: AS38482.roa (hash: Xa228m03cC6BjrhAdtpooAsrClvDAQOyI7goiNY4/r4=)
2: AS45493.roa (hash: rZ+bNzJQC/viqI5H1YlJtVUU+yt/vWuH3IoVopKxF0M=)
3: AS17451.roa (hash: gfkG2b1RdId9QfIc61bAbxF+GVRLF+QcRQ/dO1jIpRU=)
4: AC555447BA62C39107F16BF572F82A417F728DBF.crl (hash: 61QXATd4zdFJrYgxKBDOYQW4dQMqmOLZvsaslyHhBfg=)
5: AS38060.roa (hash: OqAfMLCFfDQG+XhPjtqCPjbRL5lJ6IyCjhq4YPM/MQ8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl
rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:b1:61:e2:39:46:e6:57:d8:00:6a:12:0b:1c:9d:43:e4:de:3f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
Validity
Not Before: Jan 25 18:36:56 2026 GMT
Not After : Jan 28 19:40:56 2026 GMT
Subject: CN=6D7F09F4FA6F7C65A04B519747F5A4A7C0E344CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:34:6d:01:9d:17:00:92:7f:5a:f9:bd:83:b8:
9f:a9:b3:1c:86:b7:d7:b3:d8:eb:52:8b:4a:85:40:
47:3e:78:fe:a4:ca:18:bb:9a:85:f3:c5:4d:ac:62:
38:19:77:c7:7c:64:98:4c:2a:38:1e:b3:57:cf:ce:
3d:de:e9:34:08:71:6f:b5:03:a5:a6:1f:a3:ad:b6:
d3:a3:a1:74:35:6d:ac:b7:14:15:44:be:23:a5:5b:
7a:9e:f5:e4:d5:e0:04:13:9c:3a:51:eb:24:3d:6c:
e0:74:f4:3e:f0:f3:df:cc:0e:c2:f9:0f:08:dc:00:
ac:8f:f4:76:d5:f8:cf:73:e6:09:28:9e:f3:97:a2:
b4:51:59:41:0b:b5:0f:3a:c5:19:0f:2b:1c:4e:90:
ca:34:f8:1c:93:b9:aa:2c:a7:96:ea:4b:bf:1c:10:
ff:46:b1:2b:e8:70:ae:fe:88:b6:a2:15:02:0e:f1:
18:45:20:b1:82:a9:64:e9:57:59:b5:7a:cc:54:7e:
8f:d7:5b:b8:3c:3f:e5:40:1c:5e:51:2e:07:fb:13:
18:cd:24:53:ca:01:27:70:d3:2a:1a:88:4c:bc:04:
6d:91:f5:0e:88:4d:6f:72:b4:c2:e7:f5:9b:cd:2b:
9c:ba:e4:c2:0f:5f:2c:51:be:18:f8:e5:26:cc:1f:
f6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:7F:09:F4:FA:6F:7C:65:A0:4B:51:97:47:F5:A4:A7:C0:E3:44:CF
X509v3 Authority Key Identifier:
keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:70:73:24:8b:e8:61:b5:45:c4:20:a4:06:23:29:6e:19:c5:
55:45:21:3c:94:17:1f:23:42:64:7c:2f:71:d6:27:7c:23:59:
d7:85:d6:93:87:a7:99:2b:07:93:0a:66:eb:fb:24:29:c5:df:
9a:64:ff:e7:e7:38:7f:2f:a8:24:8c:6c:e7:f7:08:65:bf:0c:
b0:b7:37:fb:49:35:ce:9c:dd:62:7f:4b:e0:be:b7:cd:b7:b7:
64:57:c8:de:c9:84:30:b7:52:8e:6c:e0:9d:80:fa:b3:f6:7f:
37:da:1a:37:a9:18:2c:bb:e9:48:4c:22:a5:15:6e:31:3a:c8:
9c:36:63:9c:7c:27:b6:22:36:52:4b:b0:df:6a:30:47:b2:5f:
05:53:10:55:41:b1:e9:9f:1e:4d:dd:16:3e:2f:80:43:99:e4:
f3:57:29:44:ca:25:b5:3f:05:97:d6:82:ff:3c:0b:f8:2a:f1:
2f:4b:ca:71:dc:37:7d:3e:ce:54:53:3b:12:5a:bd:94:fd:d2:
3c:ea:b0:6a:69:ac:73:3e:44:2e:57:47:7f:33:4c:3b:d6:86:
bb:1c:6c:ca:06:ac:cf:da:68:a2:09:89:fb:b8:19:6a:d7:ea:
85:c7:19:82:2f:e0:bb:be:cc:17:ac:94:08:2c:f1:ab:80:50:
78:fd:93:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:12:57 2026 by rpki-client