This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ADB9C197352F8128F6DAA47A227D3869A4C238F4.mft
File: ADB9C197352F8128F6DAA47A227D3869A4C238F4.mft (raw, json)
Hash identifier: E4LjvuF1OY6uci3vfIfT8xFpGrKnlo4eV3wV3QJK/wI=
Subject key identifier: 31:21:E4:46:91:C1:47:72:C8:8D:46:28:01:3D:A8:B4:8C:99:4E:2A
Authority key identifier: AD:B9:C1:97:35:2F:81:28:F6:DA:A4:7A:22:7D:38:69:A4:C2:38:F4
Certificate issuer: /CN=ADB9C197352F8128F6DAA47A227D3869A4C238F4
Certificate serial: 58654B7D5DFDFF56DF55F6B9DCAD9232BE4FE511
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADB9C197352F8128F6DAA47A227D3869A4C238F4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ADB9C197352F8128F6DAA47A227D3869A4C238F4.mft
Manifest number: 026E
Signing time: Sat 24 Jan 2026 18:20:49 +0000
Manifest this update: Sat 24 Jan 2026 18:15:49 +0000
Manifest next update: Tue 27 Jan 2026 21:21:49 +0000
Files and hashes: 1: 3130332e3137372e3231342e302f32342d3234203d3e20313437313633.roa (hash: BQDZ7beKpSG5YJTRW/gbj7YmxhbuMugwzWVLa45Kdxg=)
2: ADB9C197352F8128F6DAA47A227D3869A4C238F4.crl (hash: iUBrCMKKp7Ju3CXTa2YXxjpjh9oGOHM12HT1tjHTSro=)
3: 3130332e3137372e3231352e302f32342d3234203d3e20313437313633.roa (hash: dUSjnFJULsQt0ZMfSuCJpifmDF9rtnb0yNIzE9XIOWo=)
4: 3130332e3137372e3231342e302f32332d3233203d3e20313437313633.roa (hash: 87iDHKDOT61940UCNUXAHSvFwBkKLRCDPPSdxU2koYI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ADB9C197352F8128F6DAA47A227D3869A4C238F4.crl
rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ADB9C197352F8128F6DAA47A227D3869A4C238F4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADB9C197352F8128F6DAA47A227D3869A4C238F4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 21:21:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:65:4b:7d:5d:fd:ff:56:df:55:f6:b9:dc:ad:92:32:be:4f:e5:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADB9C197352F8128F6DAA47A227D3869A4C238F4
Validity
Not Before: Jan 24 18:15:49 2026 GMT
Not After : Jan 27 21:21:49 2026 GMT
Subject: CN=3121E44691C14772C88D4628013DA8B48C994E2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:52:24:1a:e7:40:c9:3e:af:7a:03:20:6f:f4:
2d:9c:46:41:ee:ee:ff:f3:a2:f2:c7:0f:3c:91:12:
0c:c0:3f:57:3f:13:3a:95:f9:c1:a7:89:0a:19:d9:
dd:3b:63:ff:73:74:c8:2c:ae:d3:b8:20:8a:65:f3:
ce:1f:fd:91:10:68:05:1b:0d:82:83:fa:df:9b:56:
98:02:f1:01:77:41:79:f1:f6:3d:da:62:64:ab:bf:
bc:41:31:fc:6e:0e:1b:63:72:10:ca:99:d0:bf:e9:
ec:ab:90:74:12:e7:14:98:0d:08:37:9b:e6:7e:a0:
78:c8:d8:8d:6c:5b:e5:cf:dd:cf:47:0d:a9:f4:04:
07:04:50:26:e4:f0:d5:a9:d0:b8:7e:24:fe:87:22:
85:12:a6:14:33:13:df:b3:6d:ed:a8:6e:37:92:aa:
ea:51:cb:d5:38:28:2d:e5:95:0c:15:b3:be:eb:9b:
f5:45:00:85:86:7c:cf:cb:3c:b8:17:74:f8:4f:e3:
fd:a9:a8:08:7c:09:b3:54:ac:08:2a:c9:73:2b:94:
a8:8c:82:29:65:99:44:fd:d7:66:45:ec:22:a4:50:
b3:ac:50:f7:da:19:68:97:d0:b0:98:50:5f:80:ca:
a2:35:94:c3:ac:b3:1d:06:de:ac:d8:96:b2:6a:20:
f9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:21:E4:46:91:C1:47:72:C8:8D:46:28:01:3D:A8:B4:8C:99:4E:2A
X509v3 Authority Key Identifier:
keyid:AD:B9:C1:97:35:2F:81:28:F6:DA:A4:7A:22:7D:38:69:A4:C2:38:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ADB9C197352F8128F6DAA47A227D3869A4C238F4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADB9C197352F8128F6DAA47A227D3869A4C238F4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ADB9C197352F8128F6DAA47A227D3869A4C238F4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:63:92:1f:c3:ea:19:05:7a:be:1e:f1:99:0c:46:c7:69:22:
9e:ee:27:4c:a8:6b:c0:2a:a0:2b:98:d8:b0:18:0c:99:75:a2:
e8:4e:f6:21:e1:7e:0f:2d:af:06:03:78:92:3b:d1:b3:de:41:
d7:25:55:37:45:97:48:55:6b:f4:92:f1:ec:73:08:d5:c7:db:
3d:65:e5:2d:b3:46:bc:d1:3f:92:5b:df:5c:36:41:03:4c:b8:
00:10:d5:07:76:56:5c:2d:84:59:84:69:f2:04:c5:48:09:7d:
fd:88:b4:f8:c0:33:5d:16:c3:79:21:31:3a:52:b7:77:7f:ac:
c9:82:7f:5d:20:30:ea:ad:0e:db:eb:26:0a:1d:d2:68:3d:ef:
3c:e8:43:e9:2c:65:c1:71:e3:ff:2f:ac:12:56:42:c9:d7:ed:
1c:3e:16:3d:4a:8d:a4:cb:a6:79:9e:cc:52:a3:9a:78:2e:ee:
2c:4e:be:50:10:ac:64:36:a2:3d:5e:fb:6b:29:bc:5c:88:37:
ff:e0:14:6e:f7:91:99:0a:d4:6d:45:8f:08:22:09:a4:4c:5b:
41:09:20:71:71:f2:16:28:0a:09:31:49:25:c0:fd:df:61:64:
1d:fc:85:1a:94:5c:9d:61:f9:be:db:3d:6e:9b:c1:27:fd:4a:
46:35:13:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:32:58 2026 by rpki-client