This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/07D6388316655597AEA703AEBFDD2869F80A8984.mft
File: 07D6388316655597AEA703AEBFDD2869F80A8984.mft (raw, json)
Hash identifier: ji3tRhrEvE1ikZl30GDts7RDhu68mP1LTZHDejbPbuo=
Subject key identifier: 12:83:A9:7D:2C:72:4B:6A:B4:36:0C:4E:1E:B7:45:B2:BB:A6:32:33
Authority key identifier: 07:D6:38:83:16:65:55:97:AE:A7:03:AE:BF:DD:28:69:F8:0A:89:84
Certificate issuer: /CN=07D6388316655597AEA703AEBFDD2869F80A8984
Certificate serial: 68F19ACC9D3C4EACD79C50A0AC320886D64F1CA9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07D6388316655597AEA703AEBFDD2869F80A8984.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/07D6388316655597AEA703AEBFDD2869F80A8984.mft
Manifest number: 032C
Signing time: Sat 24 Jan 2026 03:42:00 +0000
Manifest this update: Sat 24 Jan 2026 03:37:00 +0000
Manifest next update: Tue 27 Jan 2026 10:09:00 +0000
Files and hashes: 1: 3130332e3134372e3233362e302f32332d3234203d3e20313339393731.roa (hash: Dk+kadZF8jy8Jr2gvM5PjhVeLC3W+zlB4SeDi9Hh4BA=)
2: 07D6388316655597AEA703AEBFDD2869F80A8984.crl (hash: w7bDigNx0C8h47beA7/RXLs1+h+AFMxhwPwE4klsdvk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/07D6388316655597AEA703AEBFDD2869F80A8984.crl
rsync://repo-rpki.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/07D6388316655597AEA703AEBFDD2869F80A8984.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07D6388316655597AEA703AEBFDD2869F80A8984.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 10:09:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:f1:9a:cc:9d:3c:4e:ac:d7:9c:50:a0:ac:32:08:86:d6:4f:1c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07D6388316655597AEA703AEBFDD2869F80A8984
Validity
Not Before: Jan 24 03:37:00 2026 GMT
Not After : Jan 27 10:09:00 2026 GMT
Subject: CN=1283A97D2C724B6AB4360C4E1EB745B2BBA63233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e4:5f:59:ab:b3:16:4d:2f:6f:29:bc:52:4c:
78:d5:c4:e2:d5:ee:8d:ef:d5:a9:02:87:d7:13:f0:
7b:03:8a:bb:65:fd:54:bc:d7:c2:24:44:b1:d0:28:
f7:1c:a0:41:68:05:a6:5d:18:b7:bd:09:60:9c:68:
21:9d:72:a0:b0:54:ae:c4:29:d2:03:1d:29:00:7f:
fb:8c:01:f4:33:3a:74:50:c1:34:4a:a1:39:e3:ac:
e6:78:13:e5:7d:bd:19:fb:76:66:b2:56:b1:41:75:
7d:80:92:f5:fc:bd:23:ed:ab:3e:cf:c4:44:49:ae:
ed:04:a3:05:b0:ab:42:01:11:c2:42:82:76:9a:d3:
5b:1b:5b:37:6f:7b:44:73:e1:0b:e8:23:53:a2:25:
01:81:34:c0:7e:e0:38:0a:57:52:3d:23:e8:83:66:
d0:c2:c7:70:02:0e:a5:3c:b9:ee:85:c0:bd:ab:84:
e2:22:09:e8:77:10:e1:7a:14:ac:00:39:c2:6b:46:
06:e5:de:d2:32:08:38:83:9f:02:11:81:40:b9:cb:
13:92:84:1c:97:be:e8:3f:67:5b:6d:5a:fb:92:69:
a5:3b:c1:e9:37:96:a5:0b:e9:54:bf:42:fe:06:30:
50:54:c8:de:4d:19:72:d3:68:77:1b:82:8c:20:0a:
5c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:83:A9:7D:2C:72:4B:6A:B4:36:0C:4E:1E:B7:45:B2:BB:A6:32:33
X509v3 Authority Key Identifier:
keyid:07:D6:38:83:16:65:55:97:AE:A7:03:AE:BF:DD:28:69:F8:0A:89:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/07D6388316655597AEA703AEBFDD2869F80A8984.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07D6388316655597AEA703AEBFDD2869F80A8984.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/07D6388316655597AEA703AEBFDD2869F80A8984.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:dc:a5:26:5d:b4:4b:d5:97:52:ff:23:85:66:ab:64:96:81:
51:e1:99:2b:69:de:37:87:be:59:ef:d4:3c:52:dd:71:4e:2f:
94:61:8f:e5:2b:e8:09:bc:96:4d:0f:63:f4:74:34:9f:7c:9e:
d1:93:8e:5a:da:61:b1:42:14:9c:24:cc:ba:b4:64:2c:de:b1:
9b:af:88:58:96:64:69:e5:b2:97:96:7e:d6:c0:57:fd:73:a0:
2f:72:40:28:fd:30:0f:09:8b:53:02:86:08:2d:11:f3:43:30:
d0:1f:86:e7:a0:1b:c4:b8:25:29:c4:6e:61:0f:de:e6:26:b2:
27:76:7e:05:de:fe:17:61:c0:17:7d:e7:9d:2d:7a:91:18:d2:
98:a3:a7:ab:f4:47:54:9a:0b:08:38:91:e1:4e:bc:fa:99:e8:
07:96:f1:a7:f7:10:36:bd:44:01:87:20:af:d9:c5:5f:79:09:
4d:0a:fe:f4:2f:ae:12:a2:43:1b:39:8c:22:61:a2:7a:6c:15:
0e:08:53:66:a8:68:35:6d:f7:80:c2:c7:f3:e0:1f:b4:61:ee:
fb:17:e5:0d:b4:ec:7d:e5:ce:6f:7f:22:be:d1:0f:3c:92:35:
9f:c6:7e:fb:d1:a4:3b:f2:41:9f:51:8c:a8:74:40:27:6a:9c:
d6:22:43:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:06:08 2026 by rpki-client