This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/C42304B7D0E216E2F73305D25EBA185E1A321586.mft
File: C42304B7D0E216E2F73305D25EBA185E1A321586.mft (raw, json)
Hash identifier: a9YfgjCCMcsSoTIl55SPBvLUaNQIURyGrK184aX15Rs=
Subject key identifier: 03:13:79:DA:1A:8B:A9:45:CF:CD:93:D4:F8:B4:31:EA:D5:20:4E:0E
Authority key identifier: C4:23:04:B7:D0:E2:16:E2:F7:33:05:D2:5E:BA:18:5E:1A:32:15:86
Certificate issuer: /CN=C42304B7D0E216E2F73305D25EBA185E1A321586
Certificate serial: 134A0A7930DEC5929589E658436D656426BBD8A6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C42304B7D0E216E2F73305D25EBA185E1A321586.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/C42304B7D0E216E2F73305D25EBA185E1A321586.mft
Manifest number: 06
Signing time: Sun 25 Jan 2026 13:02:20 +0000
Manifest this update: Sun 25 Jan 2026 12:57:20 +0000
Manifest next update: Wed 28 Jan 2026 19:38:20 +0000
Files and hashes: 1: C42304B7D0E216E2F73305D25EBA185E1A321586.crl (hash: Ri7SimogPPbczKpjrONoZmSCDi52jTrrNalqGOVWULc=)
2: 3131342e3134312e35362e302f32342d3234203d3e20313339393937.roa (hash: /XfV+lJcb9X56N7rlaHL4tfgC5CfK4dQVit65blaNYo=)
3: 3131342e3134312e35372e302f32342d3234203d3e20313339393937.roa (hash: XWuaYLYmlK9hExFjkzInUKqGyFC8YbxMTIf12TewHWo=)
4: 3131342e3134312e35392e302f32342d3234203d3e20313432333632.roa (hash: huqt9zp4ZaM/ehHcf/q79Imf4OzuK2ijijHg2TgEeMU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/C42304B7D0E216E2F73305D25EBA185E1A321586.crl
rsync://repo-rpki.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/C42304B7D0E216E2F73305D25EBA185E1A321586.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C42304B7D0E216E2F73305D25EBA185E1A321586.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:4a:0a:79:30:de:c5:92:95:89:e6:58:43:6d:65:64:26:bb:d8:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C42304B7D0E216E2F73305D25EBA185E1A321586
Validity
Not Before: Jan 25 12:57:20 2026 GMT
Not After : Jan 28 19:38:20 2026 GMT
Subject: CN=031379DA1A8BA945CFCD93D4F8B431EAD5204E0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:78:d4:58:9a:21:f6:0f:c6:a8:99:19:3d:73:
05:bd:df:a9:0b:cb:9a:b2:f9:2a:9b:01:4e:4f:e1:
6e:b7:a7:eb:ca:62:f9:8c:21:ee:78:95:7d:d6:3d:
1a:f7:ad:51:f1:0c:c6:45:67:4e:6e:fe:52:00:88:
a6:20:f2:b0:85:59:b5:9a:b0:51:93:0e:8f:db:b4:
4a:1f:d8:56:1f:91:aa:49:f1:74:65:46:44:13:7c:
11:fc:95:5c:c5:e7:a4:33:02:f1:5b:c7:f0:05:fa:
18:1c:29:31:65:95:2f:8c:0e:2f:d2:1a:8d:0d:af:
3f:91:4d:a2:0e:50:c7:c4:df:d1:54:d9:6c:2b:60:
94:b4:3a:a1:6f:e4:3b:e1:00:e8:ae:0a:97:7f:46:
8a:b0:94:f1:d6:0f:f9:ea:83:b0:6a:23:7f:57:a9:
20:41:95:80:c1:f4:e9:65:ef:59:f4:fd:a0:2f:21:
d6:94:61:ff:6d:60:7b:24:cd:65:82:a5:68:5f:e7:
f5:b4:6a:38:e2:0a:28:9a:c1:25:e2:5c:0d:f3:26:
99:14:e3:bc:9b:b8:6d:24:46:09:68:66:9b:bc:b2:
ad:06:b6:90:09:43:a6:df:8d:86:78:e3:4b:93:21:
ca:e1:72:56:59:06:fe:ce:76:6f:0c:0c:ec:4d:20:
78:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:13:79:DA:1A:8B:A9:45:CF:CD:93:D4:F8:B4:31:EA:D5:20:4E:0E
X509v3 Authority Key Identifier:
keyid:C4:23:04:B7:D0:E2:16:E2:F7:33:05:D2:5E:BA:18:5E:1A:32:15:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/C42304B7D0E216E2F73305D25EBA185E1A321586.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C42304B7D0E216E2F73305D25EBA185E1A321586.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/C42304B7D0E216E2F73305D25EBA185E1A321586.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:1a:71:e8:51:89:8c:8a:f6:01:e1:4a:f2:61:3a:cb:a7:d8:
f5:63:a2:c3:d2:33:4b:f8:76:dc:2a:91:75:76:e2:7d:61:a9:
05:37:9c:19:af:b5:f6:99:0a:8a:47:1e:a1:63:91:2e:be:2e:
dd:d4:50:27:7a:c6:65:39:7e:13:04:48:c7:0b:f3:c1:ce:ac:
57:c0:86:a9:16:18:63:ab:03:74:63:72:8b:15:ad:40:e2:bc:
6d:15:a1:fa:5b:f5:f6:84:a8:50:b9:d5:c9:af:31:76:ac:94:
7e:36:1b:d0:aa:12:88:0c:97:79:66:97:fc:9b:b7:a8:9f:45:
ee:76:d6:2e:c1:b0:dd:4a:c6:96:51:da:8f:19:48:85:c2:18:
94:30:28:ac:df:f0:92:33:8c:a5:21:2c:bd:a9:a0:de:c5:66:
fd:8e:74:b0:fd:ed:f8:a5:10:52:af:1b:dd:d3:e7:03:d5:82:
bf:0b:40:e5:de:8f:9f:2e:17:35:b1:73:a5:80:53:af:ba:a8:
23:cd:91:83:07:a1:32:dd:83:3e:ad:64:01:a5:e8:bc:63:1c:
e2:e0:ae:95:b8:ad:82:8b:ca:fb:da:70:47:08:1a:b1:52:22:
13:ca:ab:aa:63:7a:96:fc:18:d7:08:e5:e3:d4:97:7f:69:60:
61:62:82:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:02:39 2026 by rpki-client