This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft
File: D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft (raw, json)
Hash identifier: FOIAcxR1ZBHRqb7oq3r0Pqfe/050OCYotfMvJfUU+m8=
Subject key identifier: B9:AC:6A:00:71:39:E9:2F:8F:CC:0C:D7:B0:89:1E:55:97:B6:3F:8C
Authority key identifier: D5:5B:E8:21:7A:22:21:2F:97:7B:D9:5B:41:F7:C9:EE:9D:E3:20:1B
Certificate issuer: /CN=D55BE8217A22212F977BD95B41F7C9EE9DE3201B
Certificate serial: 494BBAF77862E3E6CFEA80517A2FA51F3B35643A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft
Manifest number: 01D6
Signing time: Fri 23 Jan 2026 16:41:57 +0000
Manifest this update: Fri 23 Jan 2026 16:36:57 +0000
Manifest next update: Mon 26 Jan 2026 23:19:57 +0000
Files and hashes: 1: 3230322e3137392e3139302e302f32342d3234203d3e203338373530.roa (hash: IlfpZnqN0u5jMQ+MMy/Uh2Q/ScrlgNhJWft3oBH8Ovo=)
2: D55BE8217A22212F977BD95B41F7C9EE9DE3201B.crl (hash: Kml5P3m7tatZ18DEh5S2xvzsvW9olUeDBfzobT0h/2Y=)
3: 3130332e3231332e3131382e302f32342d3234203d3e203338373530.roa (hash: WKBxmJwVLzCYBVgxt4LMTfwAcTtnh7yu4VGARK2zxgY=)
4: 3130332e3231332e3131392e302f32342d3234203d3e203338373530.roa (hash: s4bQxfKSzhThJnV2s35QtgCBE4otyhr6xeMzoqnFm8Y=)
5: 3230322e3137392e3138352e302f32342d3234203d3e203338373530.roa (hash: Y4Wi8qAYZ81rv46ZtcXhKaHsjEBVaOJAYBhmKDi8JTE=)
6: 3230322e3137392e3138342e302f32342d3234203d3e203338373530.roa (hash: 9Eop7Wi9KDAgTJcnqm4m9VblRXdXAgnSYGkJE3U1uCo=)
7: 3130332e3231332e3131362e302f32342d3234203d3e203338373530.roa (hash: bk766NBayeqzl2TpClpr9IhYx+ApKL2x4uzDJCxWkIk=)
8: 3230322e3137392e3138392e302f32342d3234203d3e203338373530.roa (hash: cN4silcvuPV22OI3IsNy5UveikGt8GvqnC8R2u5vZmI=)
9: 3230322e3137392e3139312e302f32342d3234203d3e203338373530.roa (hash: L4h2Wp4fQdhUrMD0z3Ssoa6P+p1dDNjkEiybK+QQebs=)
10: 3230322e3137392e3138382e302f32342d3234203d3e203338373530.roa (hash: DZYxEEoedEoh7hUvK00A3sjPaarHyHkFwFSubpvLa90=)
11: 3130332e3231332e3131372e302f32342d3234203d3e203338373530.roa (hash: XubVHR1uW/U3u8JfLGlOr8aeDpjn5EspQIPSeyKbXv4=)
12: 3230322e3137392e3138372e302f32342d3234203d3e203338373530.roa (hash: B48tlPMvOf7K7HzDvvhN+csuCxhTxi2XsZzldYqsXqU=)
13: 3230322e3137392e3138362e302f32342d3234203d3e203338373530.roa (hash: zofQAGzRLVSbQfa8x1HxlEvAC2rTzuC4QEGkc7xHMvw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.crl
rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 23:19:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:4b:ba:f7:78:62:e3:e6:cf:ea:80:51:7a:2f:a5:1f:3b:35:64:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D55BE8217A22212F977BD95B41F7C9EE9DE3201B
Validity
Not Before: Jan 23 16:36:57 2026 GMT
Not After : Jan 26 23:19:57 2026 GMT
Subject: CN=B9AC6A007139E92F8FCC0CD7B0891E5597B63F8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f2:92:9a:b5:06:7f:5d:ce:b0:e6:b9:75:c8:
ba:10:e9:86:7c:ee:8e:a0:6c:04:f6:a7:c4:63:b4:
4e:14:ae:60:7c:cd:83:c8:c9:66:1e:71:41:20:90:
af:9b:5e:f4:ef:f7:1d:12:3a:1f:bb:0a:7e:8a:b0:
ef:b4:df:a7:ae:cd:c4:db:a4:52:81:05:e2:33:2d:
59:a0:ae:0e:b3:07:24:d4:2b:dc:8d:0a:73:82:54:
af:81:a1:03:5b:92:de:ba:45:ca:bd:76:9d:b8:22:
7d:b4:0b:5e:a7:00:15:71:75:6c:ca:2a:c7:ce:4a:
f9:6b:0d:0f:88:6a:ed:e5:31:77:c2:0b:16:52:b8:
b1:5e:2e:b2:da:5d:db:36:34:f9:76:2b:1f:5b:0e:
a7:60:c1:52:01:9e:4f:ae:1f:2b:3f:46:bf:d6:58:
34:b2:fa:fc:c1:bc:e8:00:76:3f:bc:e7:02:5b:26:
6f:81:69:92:c3:df:8e:6b:78:70:9d:a0:ff:c2:40:
1f:99:27:6d:38:03:ae:ed:84:be:d8:d3:ee:2a:17:
de:ed:f3:d2:3d:c1:9e:b7:90:20:c0:be:43:6b:c4:
7d:e4:a9:90:00:f3:71:13:fc:2f:1c:02:26:30:7d:
d4:4b:9c:fd:35:95:c0:07:b2:d0:cd:bc:1c:64:99:
04:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:AC:6A:00:71:39:E9:2F:8F:CC:0C:D7:B0:89:1E:55:97:B6:3F:8C
X509v3 Authority Key Identifier:
keyid:D5:5B:E8:21:7A:22:21:2F:97:7B:D9:5B:41:F7:C9:EE:9D:E3:20:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:25:43:9e:af:55:d0:63:0e:a8:40:e7:b5:f1:dc:24:c2:c4:
35:bb:e5:73:85:3d:cf:3f:f4:3e:81:c6:17:6f:28:a3:5a:37:
e7:66:a2:67:17:50:59:9f:03:5a:52:cf:1e:b3:74:f4:78:05:
7c:dc:b2:60:b4:5c:df:be:1c:86:2c:28:34:79:bc:18:9a:81:
5a:eb:1b:8d:d3:f0:43:ff:fa:d0:2c:ab:9b:fe:a3:2c:6c:30:
9c:9e:95:2f:c8:d4:58:38:71:09:10:de:35:53:d8:bb:2a:0b:
a3:13:a2:7c:fe:f8:8a:4d:76:c8:f7:a2:94:18:59:28:41:d2:
62:68:99:f2:e7:bd:2b:53:af:18:54:17:ce:f0:df:33:f4:87:
e7:e5:c4:52:6f:88:f1:45:5b:ae:dc:f9:06:e0:8f:d9:a4:45:
03:ce:82:4e:88:f9:13:fd:80:66:65:c7:94:b4:cb:42:80:10:
af:0f:78:b1:dd:97:58:6a:06:24:7f:ac:07:56:60:1b:2d:99:
14:78:65:b1:50:6a:a5:69:42:0a:fa:b8:e9:44:8c:12:08:f2:
90:6b:46:06:1d:bd:49:20:58:d5:c1:4d:37:ee:1e:7e:ee:04:
8e:24:0d:49:a5:36:ec:ca:6d:80:28:06:3c:96:bf:6b:d1:3d:
65:1a:e7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:40:20 2026 by rpki-client