This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft
File: F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft (raw, json)
Hash identifier: ZH8KExl/N6lheGu7I4VpBWltvJBtoOQuS4lW+IPiCpY=
Subject key identifier: C6:A0:B4:96:B3:90:EF:A5:40:42:3A:86:11:3D:14:35:86:84:53:1F
Authority key identifier: F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B
Certificate issuer: /CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B
Certificate serial: 388F21445F59E81F13B9736DAB2306760A36F09B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft
Manifest number: 0221
Signing time: Sat 24 Jan 2026 05:51:25 +0000
Manifest this update: Sat 24 Jan 2026 05:46:25 +0000
Manifest next update: Tue 27 Jan 2026 14:46:25 +0000
Files and hashes: 1: 3130332e31332e3230352e302f32342d3234203d3e20313532333636.roa (hash: bNck8LpKpp26kW2UN16eMZ1fOvjILY8XEu10GDGQj+I=)
2: 3130332e31332e3230342e302f32332d3233203d3e203634333030.roa (hash: 2AxkviF5pv7j1kTQ3v8XjI6k7pg1zXnW3iJ2qwjQWV0=)
3: 3130332e31332e3230342e302f32342d3234203d3e203634333030.roa (hash: aoGZEwGfwxorrH0vm0ZUZnYbhYMMuOl+o+RcX6GAvoE=)
4: F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl (hash: EvFJuM+ugJJdKKvWsrHBq45sQIupOsfcdGbw3e4iUoo=)
5: 3130332e31332e3230342e302f32342d3234203d3e203438343635.roa (hash: WBg+Oj5FDShLbz1I5ijbkQnlP4hqNRkJwhL0ngYl8bg=)
6: 3130332e31332e3230352e302f32342d3234203d3e203438343635.roa (hash: /BkZhdhHuWpr0COSSqEa5xQ/tUEnJqvOpL9FKXE/Mm4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl
rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 14:46:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:8f:21:44:5f:59:e8:1f:13:b9:73:6d:ab:23:06:76:0a:36:f0:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B
Validity
Not Before: Jan 24 05:46:25 2026 GMT
Not After : Jan 27 14:46:25 2026 GMT
Subject: CN=C6A0B496B390EFA540423A86113D14358684531F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:88:7e:b1:1b:cb:e7:af:e2:70:47:56:1d:a9:
30:07:ab:53:38:c8:00:30:7c:3c:2e:b9:bb:02:21:
9f:89:b8:99:af:9f:74:00:0b:3b:cd:50:11:27:ce:
fc:d9:5b:4a:01:30:f5:f0:39:49:f7:9d:6c:c1:eb:
ac:0d:28:1c:01:53:6b:f0:79:45:d4:4d:21:a6:b4:
26:b1:db:12:9d:3c:3f:1a:0a:74:f4:9e:22:bf:5d:
27:37:42:b4:98:44:4e:05:ac:13:37:f3:63:81:4f:
13:e1:b3:e5:9d:7b:37:39:d4:66:95:65:08:fb:93:
88:1a:4c:19:f1:71:b7:0e:a3:46:f8:c8:78:6c:00:
38:32:9a:6b:ae:6c:39:ac:c9:ff:49:28:1b:bd:fe:
8f:dc:2c:ce:b4:b1:31:74:f2:9e:d9:16:6d:37:35:
7b:ff:bc:a1:eb:cd:44:2e:4d:b8:15:72:95:c8:9c:
ac:7f:88:86:64:43:aa:bf:b7:46:43:1b:1c:0e:6e:
f5:9f:58:a5:e9:de:38:4a:bb:e0:f4:c8:5d:c4:ed:
2e:c0:5a:72:56:3a:48:05:c5:40:e3:3c:fb:f1:31:
ef:ab:96:21:b2:73:bf:e7:69:47:fd:a7:00:47:24:
40:00:89:08:a1:3b:e6:ed:da:73:e8:3c:93:d5:77:
c6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A0:B4:96:B3:90:EF:A5:40:42:3A:86:11:3D:14:35:86:84:53:1F
X509v3 Authority Key Identifier:
keyid:F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:be:f5:e3:55:34:58:1c:3d:84:a7:64:44:00:b7:91:03:72:
d8:f6:ce:92:c4:6f:91:7c:e2:0a:cf:9d:12:0b:1e:84:c6:3a:
b6:7b:62:9c:4a:8e:12:9c:7f:3e:f5:69:be:0e:86:29:8e:f3:
9b:3f:b6:67:74:ce:88:ab:29:f8:32:54:e9:2c:80:e3:5d:8c:
cd:f5:f0:55:14:23:26:8f:16:a4:44:c0:b8:cd:9d:f3:f1:61:
e3:ca:12:20:1d:7c:fd:2d:b3:7b:0e:25:b4:3d:9f:a1:94:e7:
42:e0:55:cc:8f:d8:ee:3e:f5:59:88:2f:0c:48:68:d9:49:0d:
cc:f5:87:46:5a:d5:80:3d:af:a7:54:30:d7:b5:21:65:22:20:
b8:a7:d8:0a:54:5b:0b:e3:dd:eb:49:b2:67:66:8e:0c:7d:e3:
ef:83:44:61:d8:0b:4a:38:6f:c5:38:1b:41:93:60:86:7f:85:
d8:53:99:e0:63:a2:a3:b5:5d:99:f6:f7:04:8b:29:16:a8:e3:
a6:f8:18:48:91:ac:ed:f5:e3:5a:5a:ce:9f:18:3b:51:ee:4e:
79:89:6c:4d:8c:3f:5c:14:87:aa:fd:fe:8d:b1:1f:5e:8e:d1:
d1:56:a6:df:8d:7d:db:9f:7b:6c:77:23:b4:f8:83:62:03:d8:
c9:82:60:7f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUOI8hRF9Z6B8TuXNtqyMGdgo28JswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjdEODlBRjRBNkI0OTU1OUI5MEJEMUExMUQyMjYyNjky
QzQwNkQ5QjAeFw0yNjAxMjQwNTQ2MjVaFw0yNjAxMjcxNDQ2MjVaMDMxMTAvBgNV
BAMTKEM2QTBCNDk2QjM5MEVGQTU0MDQyM0E4NjExM0QxNDM1ODY4NDUzMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZiH6xG8vnr+JwR1YdqTAHq1M4
yAAwfDwuubsCIZ+JuJmvn3QACzvNUBEnzvzZW0oBMPXwOUn3nWzB66wNKBwBU2vw
eUXUTSGmtCax2xKdPD8aCnT0niK/XSc3QrSYRE4FrBM382OBTxPhs+Wdezc51GaV
ZQj7k4gaTBnxcbcOo0b4yHhsADgymmuubDmsyf9JKBu9/o/cLM60sTF08p7ZFm03
NXv/vKHrzUQuTbgVcpXInKx/iIZkQ6q/t0ZDGxwObvWfWKXp3jhKu+D0yF3E7S7A
WnJWOkgFxUDjPPvxMe+rliGyc7/naUf9pwBHJEAAiQihO+bt2nPoPJPVd8ajAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUxqC0lrOQ76VAQjqGET0UNYaEUx8wHwYDVR0j
BBgwFoAU99ia9Ka0lVm5C9GhHSJiaSxAbZswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
ZmM5MDk2Yy0yOGRjLTQ0ZTQtYjRjZi05NmQ2MzFiNzNhYzAvMC9GN0Q4OUFGNEE2
QjQ5NTU5QjkwQkQxQTExRDIyNjI2OTJDNDA2RDlCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjdEODlBRjRBNkI0OTU1OUI5MEJEMUExMUQyMjYyNjkyQzQw
NkQ5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmZjOTA5NmMtMjhkYy00NGU0LWI0
Y2YtOTZkNjMxYjczYWMwLzAvRjdEODlBRjRBNkI0OTU1OUI5MEJEMUExMUQyMjYy
NjkyQzQwNkQ5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHW+9eNVNFgcPYSnZEQAt5EDctj2zpLEb5F8
4grPnRILHoTGOrZ7YpxKjhKcfz71ab4OhimO85s/tmd0zoirKfgyVOksgONdjM31
8FUUIyaPFqREwLjNnfPxYePKEiAdfP0ts3sOJbQ9n6GU50LgVcyP2O4+9VmILwxI
aNlJDcz1h0Za1YA9r6dUMNe1IWUiILin2ApUWwvj3etJsmdmjgx94++DRGHYC0o4
b8U4G0GTYIZ/hdhTmeBjoqO1XZn29wSLKRao46b4GEiRrO3141pazp8YO1HuTnmJ
bE2MP1wUh6r9/o2xH16O0dFWpt+Nfdufe2x3I7T4g2ID2MmCYH8=
-----END CERTIFICATE-----
Generated at Mon Jan 26 05:38:42 2026 by rpki-client