This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft
File: 3053FFA7A0123B032FC9458281063C89F007FA98.mft (raw, json)
Hash identifier: h+CI8iDQ1prLu18wN9LJgXJAImdID0H3cTxwIkdR9k4=
Subject key identifier: 9A:31:47:0E:16:E6:0F:C1:DF:7C:FF:0C:07:2F:93:7F:7B:01:63:42
Authority key identifier: 30:53:FF:A7:A0:12:3B:03:2F:C9:45:82:81:06:3C:89:F0:07:FA:98
Certificate issuer: /CN=3053FFA7A0123B032FC9458281063C89F007FA98
Certificate serial: 1AC6833DA570F8153198D0DB91D9C95054682357
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3053FFA7A0123B032FC9458281063C89F007FA98.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft
Manifest number: 03C0
Signing time: Sat 24 Jan 2026 23:11:31 +0000
Manifest this update: Sat 24 Jan 2026 23:06:31 +0000
Manifest next update: Wed 28 Jan 2026 06:20:31 +0000
Files and hashes: 1: 3130332e3136382e3138382e302f32332d3234203d3e203137393935.roa (hash: X8fSVyl/ekaFc0qdxtX72tyLH/RXxnJtVkW2HtewxfI=)
2: 3053FFA7A0123B032FC9458281063C89F007FA98.crl (hash: NHEMqGwnIndouq2VSOFhcb/bXXhC+Sjx4gZLD0N+Evo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.crl
rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3053FFA7A0123B032FC9458281063C89F007FA98.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 06:20:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:c6:83:3d:a5:70:f8:15:31:98:d0:db:91:d9:c9:50:54:68:23:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3053FFA7A0123B032FC9458281063C89F007FA98
Validity
Not Before: Jan 24 23:06:31 2026 GMT
Not After : Jan 28 06:20:31 2026 GMT
Subject: CN=9A31470E16E60FC1DF7CFF0C072F937F7B016342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:58:3b:eb:f9:2a:d3:4e:02:b9:9a:64:55:77:
e3:ae:d7:35:8e:ad:46:0f:96:16:b4:a2:68:c5:c9:
8c:3a:be:b6:5e:d2:79:21:4f:64:d7:61:3c:12:8b:
7d:b4:2b:4d:3f:e7:cc:5d:4c:3e:e1:52:e4:cc:02:
4c:26:09:38:b7:01:92:42:44:15:9f:19:18:d7:0c:
04:f3:27:d6:45:75:fc:d4:50:11:01:68:b7:ca:6b:
01:d9:d1:1a:3b:92:09:9a:10:c1:a6:d1:a7:46:db:
0a:88:a6:d5:59:61:49:f9:36:9c:99:da:4c:48:27:
b9:1b:a2:88:a2:e5:f8:51:ae:4e:79:3b:ad:60:f0:
45:85:06:7f:f3:cb:d1:81:ed:36:36:f0:6a:44:b9:
54:58:92:75:5e:e9:8a:56:63:39:28:38:64:0e:ac:
d0:5d:20:88:ac:aa:cc:aa:98:1e:29:65:4e:71:b7:
6d:6b:40:a4:cc:3d:04:88:f2:0d:ff:d2:4d:9d:cc:
28:18:2b:57:44:e7:7c:0c:8e:cb:94:6a:94:f9:e1:
d2:c8:4d:f3:1c:09:cf:b2:6f:9e:f8:76:6f:d6:de:
fd:ed:ef:64:f0:a8:05:06:9a:ff:26:b7:ba:3f:23:
d4:01:9c:2d:c4:5e:e3:68:0a:9c:09:ff:2f:47:81:
fb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:31:47:0E:16:E6:0F:C1:DF:7C:FF:0C:07:2F:93:7F:7B:01:63:42
X509v3 Authority Key Identifier:
keyid:30:53:FF:A7:A0:12:3B:03:2F:C9:45:82:81:06:3C:89:F0:07:FA:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3053FFA7A0123B032FC9458281063C89F007FA98.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:58:04:15:6b:31:d3:61:da:5c:50:a2:1e:9d:6b:3e:03:d4:
3a:d7:34:1f:58:54:48:00:66:6f:05:ef:dc:9d:c6:93:82:78:
84:e7:f9:6e:cc:ce:fa:17:1c:4c:e2:7c:7f:bb:4e:bf:56:1c:
1d:ea:1e:35:14:9f:3f:ae:26:79:df:95:79:2b:5b:c0:e3:12:
9a:47:83:e8:2c:c9:b1:5f:5e:34:26:2d:bf:c2:68:52:10:f5:
1b:a0:36:04:a4:b6:14:7d:68:10:4a:a5:f5:25:b2:ac:19:08:
d6:78:62:a4:d2:6a:df:b1:96:f7:87:0a:84:aa:75:a0:9a:a5:
a7:d1:c1:25:28:9d:f1:46:fe:09:ea:80:26:d7:4c:6b:63:ce:
38:87:87:a7:c6:7d:c2:c0:2e:c0:24:1d:16:a8:b1:e8:99:1c:
4f:97:24:f3:2f:d5:9c:d3:b3:93:0d:b7:24:81:9e:6a:51:7e:
f7:37:f6:42:f7:79:30:69:82:a6:8f:5c:04:d7:9e:23:da:b4:
87:66:76:bd:27:f9:2e:69:7b:c8:3a:ee:df:06:de:48:22:d7:
4c:0d:71:c3:05:77:97:0f:7c:76:d8:27:a0:42:07:2a:dc:bc:
b9:3c:e1:58:2d:31:0e:a7:c4:8c:80:00:ed:d6:ba:b3:60:87:
27:c3:c2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:35:54 2026 by rpki-client