This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft
File: 715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft (raw, json)
Hash identifier: dEgy/YcqCcS7wsawE1tTIE4QGbKj1hEfi0vajULovrA=
Subject key identifier: 94:EA:CB:BD:87:4C:26:D5:0D:10:45:31:3D:3F:85:CA:06:17:85:D5
Authority key identifier: 71:5D:C6:DE:A8:0F:E5:D8:9F:DC:68:2C:19:C7:B3:0F:5C:77:E2:C1
Certificate issuer: /CN=715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1
Certificate serial: 41AFC9A103F27D90C2866C01ABBFCD53F20DCAD1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft
Manifest number: 0486
Signing time: Sun 25 Jan 2026 00:20:41 +0000
Manifest this update: Sun 25 Jan 2026 00:15:41 +0000
Manifest next update: Wed 28 Jan 2026 01:21:41 +0000
Files and hashes: 1: 3130332e3136312e3139302e302f32332d3233203d3e20313333383233.roa (hash: ghtilaMZ6RJAQvHOL9rJ7eLcuLTYk5ZeH+7mykIlzjM=)
2: 3130332e3136312e3139312e302f32342d3234203d3e20313333383233.roa (hash: KGskRiaq/+lRAEP6f41FobsVw96uMstK/fLzsAVB4eg=)
3: 3130332e3136312e3139302e302f32342d3234203d3e20313333383233.roa (hash: inNvDvxX4hbCC8+Dho69jFxrO3UdsZFxdsWq+NYPKcc=)
4: 715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl (hash: Yui/c3dK5G3X4NLFMO68JcBX1CKiRuH9WKBSIOXEZ4I=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl
rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 15:32:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:af:c9:a1:03:f2:7d:90:c2:86:6c:01:ab:bf:cd:53:f2:0d:ca:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1
Validity
Not Before: Jan 25 00:15:41 2026 GMT
Not After : Jan 28 01:21:41 2026 GMT
Subject: CN=94EACBBD874C26D50D1045313D3F85CA061785D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a3:0c:c1:c6:0a:2a:f8:00:1e:2e:db:89:db:
65:bd:51:83:b1:b3:c1:ef:b5:46:8c:13:3d:b2:fd:
4e:64:34:c9:b3:ed:82:f0:95:ac:25:eb:b4:f1:fa:
12:0d:87:15:3f:98:d5:8f:dd:a7:da:06:7b:0a:2d:
0e:59:94:0d:ff:8b:e8:e3:1c:15:52:f4:d8:2b:0d:
a7:52:96:24:be:86:23:42:d8:2e:b1:fb:b9:d2:46:
d8:6e:ad:85:86:00:aa:4b:ea:37:79:2f:5d:74:a3:
0b:e3:72:3c:b0:cb:18:00:e4:9a:0c:4e:40:28:b3:
34:65:da:be:9d:95:b8:52:92:78:0d:d1:87:57:8e:
8e:40:e2:f8:82:c0:f3:e0:80:5d:bd:a0:fd:bd:f3:
6f:2a:2b:46:59:dd:5b:e6:62:09:4d:78:b0:76:0b:
64:ab:14:d4:3b:cc:34:57:2a:b5:60:cc:a5:0b:19:
fe:69:84:61:1c:a7:59:62:dc:63:36:a8:46:ee:5a:
06:f3:58:10:f4:17:0b:ec:c0:ef:2d:31:3a:f4:a5:
32:a4:31:17:3d:65:24:b1:2d:8e:12:7e:9d:b2:0f:
2b:7b:db:dd:6d:54:e0:02:68:79:2b:0d:8d:ac:be:
f6:a1:20:e7:13:1b:ee:15:d7:0c:13:d1:fb:54:f5:
af:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:EA:CB:BD:87:4C:26:D5:0D:10:45:31:3D:3F:85:CA:06:17:85:D5
X509v3 Authority Key Identifier:
keyid:71:5D:C6:DE:A8:0F:E5:D8:9F:DC:68:2C:19:C7:B3:0F:5C:77:E2:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:df:c8:35:e8:ed:c3:2e:b1:e4:19:6e:e0:e1:49:57:d0:9a:
aa:ac:02:45:ca:b6:77:98:81:bb:32:8d:e8:83:59:cc:e7:d7:
08:b2:88:a2:8d:be:81:be:41:7d:e5:fe:57:8a:7e:dd:58:90:
34:3c:c1:67:ad:12:2d:96:08:35:05:ba:6c:cd:d5:89:d2:32:
15:1a:12:b7:2a:87:3d:0c:b1:c6:10:66:ad:39:47:55:7f:f0:
6c:bd:53:1f:11:d4:23:b3:e9:2f:d8:25:a8:1d:b8:09:90:55:
4b:94:96:aa:c4:b8:b1:f4:2c:28:51:cc:ea:2b:42:ae:3c:ab:
a8:65:1a:a6:f0:65:9c:e7:a7:e5:57:96:4e:6c:57:f0:b7:59:
e1:0f:cd:61:74:39:ea:b0:3d:6f:f4:72:50:db:d3:8b:47:56:
da:5a:87:50:2b:b5:73:65:00:05:71:4c:c9:db:53:0b:79:b5:
95:b8:7d:33:95:2a:ee:54:a0:9d:88:51:fe:34:a6:4f:0e:5b:
f0:3c:01:a3:be:1f:9e:2a:6d:19:62:26:be:f4:b6:94:70:fc:
38:3b:6b:eb:cf:2f:97:8a:80:97:eb:76:87:e7:2e:d1:93:10:
30:f5:5e:56:dc:bc:b0:e9:c2:d0:1d:dd:c2:9e:fc:55:5b:e2:
de:49:33:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:22:24 2026 by rpki-client