This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft
File: A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft (raw, json)
Hash identifier: 71xzifjEenwLJClOvonHnpjzR5g9afJ3zmjI24BIX0I=
Subject key identifier: 22:51:0E:4D:AD:B1:73:FA:92:2C:F0:DC:EC:60:42:6B:F5:0D:4A:82
Authority key identifier: A5:95:9C:75:F8:AC:19:0D:C2:2C:7C:32:76:CF:95:83:4D:5C:A6:87
Certificate issuer: /CN=A5959C75F8AC190DC22C7C3276CF95834D5CA687
Certificate serial: 2F496AD52BC99F9B53178C1C51C5F9BB6B7DB229
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5959C75F8AC190DC22C7C3276CF95834D5CA687.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft
Manifest number: 015D
Signing time: Sun 25 Jan 2026 14:50:49 +0000
Manifest this update: Sun 25 Jan 2026 14:45:49 +0000
Manifest next update: Wed 28 Jan 2026 15:48:49 +0000
Files and hashes: 1: 3130332e37362e33312e302f32342d3234203d3e20313530343732.roa (hash: HX5hc0JVA/bL3q1k/7p9S2Z5pWHfKNcOFGhiGTLHR6E=)
2: A5959C75F8AC190DC22C7C3276CF95834D5CA687.crl (hash: HZEt3CFFWCEkHU3CPoRUEmwXP24G5lN4NFDrAQeZsZI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.crl
rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5959C75F8AC190DC22C7C3276CF95834D5CA687.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:49:6a:d5:2b:c9:9f:9b:53:17:8c:1c:51:c5:f9:bb:6b:7d:b2:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5959C75F8AC190DC22C7C3276CF95834D5CA687
Validity
Not Before: Jan 25 14:45:49 2026 GMT
Not After : Jan 28 15:48:49 2026 GMT
Subject: CN=22510E4DADB173FA922CF0DCEC60426BF50D4A82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6a:e9:3b:8c:57:5b:48:10:8c:6b:93:76:81:
e8:e5:93:e4:0f:49:62:9b:71:6d:4f:9f:14:4b:17:
23:b5:75:3d:66:13:c1:69:02:71:a7:a3:71:0d:09:
a6:79:ea:ed:e5:99:c1:26:9a:75:80:c2:f9:ff:52:
95:00:08:09:9f:96:9e:31:ca:48:05:a4:2e:cf:b2:
3b:d0:a1:2e:04:c1:c1:c8:53:04:e8:69:5f:86:fd:
ff:6d:49:fe:9c:87:ee:ea:bf:8c:db:45:37:5c:2f:
13:18:91:de:e1:08:ac:44:53:eb:40:87:84:99:26:
84:2d:f4:66:5a:0b:2c:00:58:e8:16:69:9a:04:ed:
9b:70:ac:d8:76:fe:44:3b:b4:7f:75:51:0a:47:70:
92:6d:67:26:01:fd:07:ec:8a:11:40:8a:9f:46:db:
22:78:d6:78:05:56:01:cc:e1:f1:1a:95:6d:84:99:
7d:9a:3d:b3:20:2c:60:6b:8d:8e:ea:9c:ca:a2:da:
8e:db:36:0e:25:a9:8a:99:51:08:6e:e9:ad:28:56:
59:3c:ec:14:87:9c:5e:ed:de:da:bd:af:73:6f:dd:
f7:8c:c5:59:d0:e4:6c:7f:ef:aa:23:34:45:2e:44:
b8:20:1b:2e:4c:28:b4:5c:41:bb:6f:ec:b6:77:61:
e8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:51:0E:4D:AD:B1:73:FA:92:2C:F0:DC:EC:60:42:6B:F5:0D:4A:82
X509v3 Authority Key Identifier:
keyid:A5:95:9C:75:F8:AC:19:0D:C2:2C:7C:32:76:CF:95:83:4D:5C:A6:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5959C75F8AC190DC22C7C3276CF95834D5CA687.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c0:c2:76:9a:9b:ea:94:19:e5:b0:58:e0:10:2f:ef:af:3e:
60:33:a5:c0:d6:e5:a2:a3:da:ae:75:7d:9b:64:1f:04:d7:bb:
94:01:7e:de:4a:fe:25:f7:41:08:1a:88:8a:ff:03:35:e1:a0:
50:78:3e:1b:10:d3:05:b6:37:25:0c:37:27:27:10:d7:f2:0f:
43:cd:ec:9b:38:31:4c:36:eb:0e:27:84:8e:de:02:d8:2c:b3:
05:28:f2:ea:2f:e7:54:94:c1:f5:1f:0c:36:20:9e:4b:e9:15:
b0:33:6b:c1:70:f1:1e:56:2d:f6:e6:0e:d3:0a:44:74:31:a8:
79:74:a8:45:5c:8f:2f:e6:66:cb:df:8d:cc:af:c8:5b:43:5e:
50:01:5e:de:55:5c:ec:26:f1:1a:ac:83:c5:0b:f2:b7:53:ea:
5b:24:8a:ea:85:d9:e6:b3:23:3c:2a:70:47:c1:4e:5c:40:20:
24:fa:5f:a2:75:55:da:9d:dd:50:83:15:53:f3:1c:9b:84:ef:
30:27:6b:74:5f:01:41:2e:ce:d6:a0:de:31:ad:96:94:d5:11:
cf:a0:f3:ae:6c:24:88:b6:e5:05:b0:9e:f6:80:38:3e:1b:a4:
42:d8:c0:ee:e5:73:56:c5:a8:3a:fc:e0:a3:f8:32:5a:d6:74:
d3:6b:c5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:59:29 2026 by rpki-client