This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.mft
File: 4515472806DD01B59715410103D51C05E4F28B96.mft (raw, json)
Hash identifier: oGuYNrG2XteaEARNbl01svVhGglCaQateUPYeCCF1K8=
Subject key identifier: C7:65:07:97:86:BA:01:35:6B:43:19:C2:56:F2:8E:EA:AE:EB:3F:1F
Authority key identifier: 45:15:47:28:06:DD:01:B5:97:15:41:01:03:D5:1C:05:E4:F2:8B:96
Certificate issuer: /CN=4515472806DD01B59715410103D51C05E4F28B96
Certificate serial: 621BB4B2832A6E262E8863AB0B03CDB1F4F3CDDC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4515472806DD01B59715410103D51C05E4F28B96.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.mft
Manifest number: 0270
Signing time: Sun 25 Jan 2026 05:42:00 +0000
Manifest this update: Sun 25 Jan 2026 05:37:00 +0000
Manifest next update: Wed 28 Jan 2026 11:52:00 +0000
Files and hashes: 1: 4515472806DD01B59715410103D51C05E4F28B96.crl (hash: jf4/F3kxRLVg/azE9FWS988r7ncyv03xRJMCUAN/TLQ=)
2: 3130332e3137332e3134322e302f32332d3233203d3e20313437303930.roa (hash: B1GpwqVmx/ho+gLDfNNDsbyOOI8aLnzd82hh+EFezgY=)
3: 3130332e3137332e3134322e302f32342d3234203d3e20313437303930.roa (hash: BhcjiBOzkEndpU3BCQBdyWS42pT8Sn5ebga69zofOx4=)
4: 3130332e3137332e3134332e302f32342d3234203d3e20313437303930.roa (hash: FB2w9FFq9iyYkttvd+v5WHr2UrftQkkwfLGbohLA45o=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.crl
rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4515472806DD01B59715410103D51C05E4F28B96.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 11:52:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:1b:b4:b2:83:2a:6e:26:2e:88:63:ab:0b:03:cd:b1:f4:f3:cd:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4515472806DD01B59715410103D51C05E4F28B96
Validity
Not Before: Jan 25 05:37:00 2026 GMT
Not After : Jan 28 11:52:00 2026 GMT
Subject: CN=C765079786BA01356B4319C256F28EEAAEEB3F1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:93:ee:cc:16:7a:d3:e0:08:b2:88:bf:cc:88:
c9:e8:33:7b:8e:fe:61:e1:2c:2d:d8:09:36:21:cc:
f5:c0:b9:04:6b:a5:c3:5a:cc:9d:17:07:ec:d6:cf:
05:6f:37:0d:ee:ce:3d:ed:df:c4:db:67:d0:48:1d:
46:7a:e5:f5:73:4d:12:dd:88:91:cd:d8:51:80:c9:
c4:9d:7f:cf:2f:bd:40:0e:83:90:9d:31:89:b9:8f:
23:2f:96:ab:4e:fd:21:04:98:2f:31:43:53:73:3e:
42:37:05:ff:ab:87:8b:4b:8a:40:b1:3c:a9:e1:3c:
b3:9e:38:c3:39:0f:5f:b3:f8:6a:6d:37:b1:bb:87:
5a:75:58:b6:bd:e7:2c:e1:db:a0:63:82:79:1c:fc:
9b:89:8a:9e:eb:de:d3:56:bb:00:8a:f6:f9:29:eb:
3e:17:f6:c1:7a:38:a1:86:c7:29:3f:ca:d2:3f:a3:
a8:cc:58:f4:21:61:5f:72:d7:f2:f8:68:18:cb:8b:
ca:e3:04:4a:96:e7:98:d3:36:1b:81:7a:0f:f2:ab:
01:6d:fe:af:7a:dc:9c:4d:e5:07:0e:47:e2:0b:4c:
10:27:d3:49:36:74:78:9c:e0:c4:60:87:bd:ff:fd:
df:1e:65:96:4a:10:8e:e6:34:1a:9f:ed:43:74:dd:
d7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:65:07:97:86:BA:01:35:6B:43:19:C2:56:F2:8E:EA:AE:EB:3F:1F
X509v3 Authority Key Identifier:
keyid:45:15:47:28:06:DD:01:B5:97:15:41:01:03:D5:1C:05:E4:F2:8B:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4515472806DD01B59715410103D51C05E4F28B96.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c3:c6:65:3a:1f:9a:93:58:8a:3f:ff:ba:43:64:6a:4c:e2:
c7:db:cd:f6:69:9c:a6:d0:e5:c1:7f:bf:55:bb:2f:30:c0:09:
a4:57:46:e9:f1:7d:c4:60:c1:d9:33:60:4d:28:8c:80:8f:0e:
50:2d:73:27:c9:50:01:82:9c:09:1c:99:d0:90:52:b2:2c:de:
93:81:cc:6e:be:4b:09:c2:7a:4e:47:fe:d7:d8:0e:1c:92:5f:
8e:fe:22:87:9c:79:39:79:23:6a:f4:79:6b:9f:45:59:53:4e:
c5:2d:f6:2b:e4:61:fc:da:20:13:a8:e1:aa:1b:dc:1a:07:3e:
96:a8:fd:f0:54:c9:ae:48:e4:f4:18:74:88:51:10:1c:3e:30:
61:af:2a:4c:6f:55:27:e4:74:20:e6:82:56:0e:67:e3:f3:f9:
93:0a:f7:43:7d:71:04:00:a5:92:db:70:bf:5c:b6:67:49:a6:
7e:dd:fd:7e:f2:49:81:43:98:46:b4:30:6b:3d:25:a5:85:1b:
40:f2:aa:ac:0d:7f:16:a6:bc:d7:9f:54:49:92:a9:2b:06:31:
2f:b7:4e:c0:83:32:42:12:c3:ac:12:91:c9:9b:3b:b7:14:d5:
1e:cb:1d:97:50:8a:78:11:cc:5d:23:1d:ce:e3:e2:5f:77:7d:
d3:dd:88:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:49:37 2026 by rpki-client