This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/926C43E6DACC18978406A2C9C57272491FFF9536.mft
File: 926C43E6DACC18978406A2C9C57272491FFF9536.mft (raw, json)
Hash identifier: hMvvSVXikGxbFNk5y2AhrUJ20Pi7DXYbsBed7teVdAU=
Subject key identifier: 19:B8:33:D7:05:F9:1F:91:0C:91:30:1D:B8:F2:4E:09:89:BA:4A:7C
Authority key identifier: 92:6C:43:E6:DA:CC:18:97:84:06:A2:C9:C5:72:72:49:1F:FF:95:36
Certificate issuer: /CN=926C43E6DACC18978406A2C9C57272491FFF9536
Certificate serial: 040FA86795A7B3D52CF75FB1FF319B6573F6C6AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/926C43E6DACC18978406A2C9C57272491FFF9536.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/926C43E6DACC18978406A2C9C57272491FFF9536.mft
Manifest number: 0234
Signing time: Sat 24 Jan 2026 04:50:40 +0000
Manifest this update: Sat 24 Jan 2026 04:45:40 +0000
Manifest next update: Tue 27 Jan 2026 14:47:40 +0000
Files and hashes: 1: 3130332e3135352e3232342e302f32332d3234203d3e20313431303735.roa (hash: A/rwCvV0N2IIi5162rcSMrNXLOVO+p2IOyLdZ8Vkj6A=)
2: 926C43E6DACC18978406A2C9C57272491FFF9536.crl (hash: 5Om1uhBc9tuYQ95yRl+yn+xnIFdjghE7bgEZ5f5hMDU=)
3: 323030313a6466343a646138303a3a2f34382d3438203d3e20313431303735.roa (hash: lah3Lsyh/1yic09nG6WnhdTFrE8YdyloOKzD5mHdMZ4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/926C43E6DACC18978406A2C9C57272491FFF9536.crl
rsync://repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/926C43E6DACC18978406A2C9C57272491FFF9536.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/926C43E6DACC18978406A2C9C57272491FFF9536.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 14:47:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:0f:a8:67:95:a7:b3:d5:2c:f7:5f:b1:ff:31:9b:65:73:f6:c6:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926C43E6DACC18978406A2C9C57272491FFF9536
Validity
Not Before: Jan 24 04:45:40 2026 GMT
Not After : Jan 27 14:47:40 2026 GMT
Subject: CN=19B833D705F91F910C91301DB8F24E0989BA4A7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7b:a4:90:27:d5:be:44:c7:b6:81:b1:ec:f0:
a6:25:5f:31:49:29:f1:0c:a7:9d:95:a3:34:11:d4:
30:b5:ba:b8:a1:78:d5:08:a0:57:d7:0f:f5:66:6d:
16:36:81:9a:b8:e6:39:89:3c:48:1b:8c:98:d6:a1:
b7:fc:a0:8f:71:f5:dc:b0:11:bb:76:92:02:07:bc:
e0:73:cd:d6:6d:1a:f6:b7:8a:62:15:38:c0:b1:94:
18:7f:51:7a:36:59:52:ae:c0:0a:11:97:34:79:18:
f1:84:bf:2a:e8:1e:5e:b6:7d:66:78:4a:e1:b0:32:
d0:44:99:0c:6f:79:f3:55:cb:6e:8f:77:a0:5d:c0:
11:89:88:fe:ad:a2:ec:42:ae:4e:2f:ed:10:85:44:
a9:bc:ef:7c:01:b2:09:40:b3:70:d9:63:a0:0c:f0:
5f:e1:1d:d0:5c:15:dc:3f:58:92:f8:66:5b:ae:ae:
53:e4:4c:f6:48:53:c6:cb:c4:94:61:4e:a7:6c:8c:
70:28:bb:ab:cf:b4:d6:2f:19:87:44:39:b8:16:9d:
f3:36:05:b3:85:3c:7f:ac:da:6e:64:2b:83:64:eb:
ba:53:01:d9:42:65:ea:e5:e1:63:0f:5f:c1:61:c6:
75:ae:ae:b2:af:8d:18:b1:bb:c4:ba:fb:18:2a:d9:
98:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B8:33:D7:05:F9:1F:91:0C:91:30:1D:B8:F2:4E:09:89:BA:4A:7C
X509v3 Authority Key Identifier:
keyid:92:6C:43:E6:DA:CC:18:97:84:06:A2:C9:C5:72:72:49:1F:FF:95:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/926C43E6DACC18978406A2C9C57272491FFF9536.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/926C43E6DACC18978406A2C9C57272491FFF9536.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/926C43E6DACC18978406A2C9C57272491FFF9536.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:04:0c:7e:9e:b8:ca:c0:fd:ed:24:79:14:d8:22:f5:c7:c6:
4f:04:bd:1b:f5:f6:86:3b:a2:b0:05:50:e4:e4:21:b7:9f:36:
72:35:76:77:2f:90:da:26:34:1f:79:bb:40:70:77:7a:5d:80:
50:4f:ce:35:b3:9a:32:ea:f8:7d:e8:70:b7:cc:a4:7c:13:0c:
60:49:a8:fd:65:20:b6:40:5c:c3:91:0d:a6:15:dc:e4:54:e1:
d9:60:1a:08:fd:54:9d:c8:7f:69:71:d3:79:3a:24:3a:ee:16:
2e:ae:00:05:86:40:d4:65:c8:4b:bd:59:b8:9b:fe:9a:53:f7:
d9:07:65:93:aa:52:3c:5d:93:a7:4a:ff:ff:c6:df:ce:41:d5:
bf:80:7c:14:e4:1f:07:74:f1:cd:96:51:94:19:a0:0c:1f:6f:
9c:4c:32:fc:61:6c:9a:44:03:1a:28:42:f9:a7:92:87:1f:93:
f5:8d:ea:39:6e:7a:58:28:6c:ee:ba:d7:af:f5:09:34:06:06:
86:83:ec:61:a1:37:1e:9c:2e:6a:a2:12:ba:ec:16:0b:63:28:
38:fc:b8:66:92:68:df:bc:65:72:03:f8:f4:62:45:b3:82:f5:
e2:0a:58:bf:bc:ac:ff:5f:59:54:d2:86:a3:ee:8a:41:5f:56:
6e:a3:ff:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:36:39 2026 by rpki-client