This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft
File: 2253C6371953B026517446858EB433A938FA4B06.mft (raw, json)
Hash identifier: SRA3bFVuie+aS813++vKKmx7WsVlKZdRaDoPs/ZG5PQ=
Subject key identifier: FD:EB:CF:3D:2E:3B:A9:DF:F3:35:AB:1B:57:5A:CA:69:71:CD:DD:07
Authority key identifier: 22:53:C6:37:19:53:B0:26:51:74:46:85:8E:B4:33:A9:38:FA:4B:06
Certificate issuer: /CN=2253C6371953B026517446858EB433A938FA4B06
Certificate serial: 47EDD0DE4876743A0202DC73AA163DF0CE4FED49
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2253C6371953B026517446858EB433A938FA4B06.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft
Manifest number: E7
Signing time: Sat 24 Jan 2026 19:22:26 +0000
Manifest this update: Sat 24 Jan 2026 19:17:26 +0000
Manifest next update: Wed 28 Jan 2026 02:52:26 +0000
Files and hashes: 1: 2253C6371953B026517446858EB433A938FA4B06.crl (hash: d+4q7MmdTWaRiDz94WCak5mebLbl8T8suSYN5YjePig=)
2: 3130332e3232372e32342e302f32342d3234203d3e203536323436.roa (hash: p2JbTeALyG9aK8WKnnAwuAWEvzJMkTyQIFNlD05DkyQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.crl
rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2253C6371953B026517446858EB433A938FA4B06.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 02:52:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:ed:d0:de:48:76:74:3a:02:02:dc:73:aa:16:3d:f0:ce:4f:ed:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2253C6371953B026517446858EB433A938FA4B06
Validity
Not Before: Jan 24 19:17:26 2026 GMT
Not After : Jan 28 02:52:26 2026 GMT
Subject: CN=FDEBCF3D2E3BA9DFF335AB1B575ACA6971CDDD07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:87:5d:fb:04:62:08:d4:73:6d:df:f1:02:2c:
24:2a:d8:e3:51:de:48:e5:a9:f0:b7:2f:33:79:66:
a8:b5:56:ce:b8:68:c7:75:66:cc:84:25:f5:39:db:
7a:2e:da:d8:fd:80:e4:88:56:3e:46:78:79:a9:ec:
16:91:f6:14:06:fe:cd:a5:cc:ac:f0:62:ef:a1:0e:
58:82:3f:08:55:b8:e3:d9:b7:f6:fb:79:77:be:34:
1f:22:de:4d:4b:de:77:64:a0:83:ab:19:f9:e0:ae:
ae:57:95:2e:52:31:0d:3e:eb:18:2d:97:bf:50:8d:
77:9b:44:f9:3b:4b:bc:56:18:1f:5e:58:69:21:76:
54:b4:f4:33:31:91:af:ca:06:61:55:77:96:d2:d6:
af:04:18:33:af:8f:7b:be:82:4f:f8:34:a0:a5:9c:
04:1f:08:4a:ae:f6:9e:e6:82:14:02:d6:70:76:ee:
ee:11:be:e1:c9:c6:fe:71:6e:d6:69:e0:ec:fb:9b:
7b:0c:1c:23:c4:7b:2c:71:b6:22:1f:41:95:10:db:
26:06:4c:64:4b:b5:ad:89:cf:fd:01:bb:77:c0:56:
03:e6:e0:39:19:dc:c8:6e:be:e7:38:fe:1f:3b:ee:
95:f8:ec:68:e8:59:e5:29:41:ce:b4:1d:b9:23:c7:
88:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:EB:CF:3D:2E:3B:A9:DF:F3:35:AB:1B:57:5A:CA:69:71:CD:DD:07
X509v3 Authority Key Identifier:
keyid:22:53:C6:37:19:53:B0:26:51:74:46:85:8E:B4:33:A9:38:FA:4B:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2253C6371953B026517446858EB433A938FA4B06.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:e7:77:da:fc:83:97:09:7c:63:64:d5:14:19:fe:0b:4d:f5:
a4:be:f9:5c:12:ad:f1:58:9f:9f:b5:13:5d:b0:70:58:4d:8b:
d4:ee:5f:e3:85:6c:cf:65:e9:3c:15:0e:60:4d:14:83:50:56:
d9:e7:f0:c9:b6:1c:21:ef:c9:9a:cd:56:77:8d:e5:ab:94:03:
6d:42:25:8f:27:8d:34:d6:a4:8e:85:7c:f6:1d:55:10:28:0b:
84:91:21:28:a0:a0:7c:ec:66:10:0d:6e:06:c3:6d:1b:55:df:
52:9f:45:a4:f0:37:31:47:d6:47:c0:01:75:be:68:f5:40:38:
5f:46:dc:7d:57:e0:6b:ed:69:2a:1b:26:3a:23:08:6c:6d:a1:
e6:c8:b9:3a:0a:65:36:b3:44:50:0c:6c:07:1e:ff:6c:90:f6:
fa:ed:f1:3f:fe:33:1f:18:95:e3:25:00:85:db:4f:ab:e0:51:
80:68:67:ba:19:c1:d7:e3:7c:45:1f:57:8f:d4:e6:e5:f6:2e:
e8:78:6b:0c:df:b6:e9:87:fa:86:53:60:81:0e:a9:03:4e:bb:
de:30:a6:da:38:75:42:a9:2e:2f:e8:4a:36:dc:8d:fc:14:67:
8b:44:e1:05:4c:2a:39:7f:0f:18:8d:b0:07:74:b1:b5:e5:98:
00:59:a0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:17:01 2026 by rpki-client