This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft
File: 03F45A130990D1072FE172E1EF64AAFAEC347834.mft (raw, json)
Hash identifier: 3oHMjcgqI26GZeurWJSGQ1Nbnq4YFpH/38w12rtCLI4=
Subject key identifier: 37:EB:22:EF:8C:48:6A:F3:F0:EB:60:D6:EF:B5:39:1A:5C:39:16:D1
Authority key identifier: 03:F4:5A:13:09:90:D1:07:2F:E1:72:E1:EF:64:AA:FA:EC:34:78:34
Certificate issuer: /CN=03F45A130990D1072FE172E1EF64AAFAEC347834
Certificate serial: 7EF6EFEC31C63D21D0E6C524C1E3F56272FC0555
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03F45A130990D1072FE172E1EF64AAFAEC347834.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft
Manifest number: 0429
Signing time: Sat 24 Jan 2026 22:51:06 +0000
Manifest this update: Sat 24 Jan 2026 22:46:06 +0000
Manifest next update: Wed 28 Jan 2026 08:54:06 +0000
Files and hashes: 1: 3130332e3134332e342e302f32332d3233203d3e20313339343034.roa (hash: 2HuZv4Ja6YvRs50s/AvvVTs4SzEqz98r1HP9GJBz7UE=)
2: 3130332e3134332e352e302f32342d3234203d3e20313339343034.roa (hash: q2zoM+wvljCJma+BNVrs4roku1rpn2bEEOd2FS2g3aQ=)
3: 03F45A130990D1072FE172E1EF64AAFAEC347834.crl (hash: sakY6ltGHJQNTtzuwblcoszJVF1tF7+AGHPcPgu0/90=)
4: 3130332e3134332e342e302f32342d3234203d3e20313339343034.roa (hash: g83O77cuv/czxZuSd3skhM6J6984QBC8vJgtKHDY3UY=)
5: 323430353a343634303a3a2f33322d3332203d3e20313339343034.roa (hash: zm5n3GOGREs/7wstc0BHEn5R1puxQvUBN1+zTBkXQdk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.crl
rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03F45A130990D1072FE172E1EF64AAFAEC347834.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 08:54:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:f6:ef:ec:31:c6:3d:21:d0:e6:c5:24:c1:e3:f5:62:72:fc:05:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03F45A130990D1072FE172E1EF64AAFAEC347834
Validity
Not Before: Jan 24 22:46:06 2026 GMT
Not After : Jan 28 08:54:06 2026 GMT
Subject: CN=37EB22EF8C486AF3F0EB60D6EFB5391A5C3916D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e1:8c:82:15:d9:3a:c2:ee:91:e1:cc:31:20:
41:18:ac:72:16:68:1c:91:d3:a7:39:0e:c5:dd:1e:
a1:92:e0:6e:01:f4:05:1c:29:b2:a9:2b:4f:19:74:
9c:27:50:b0:9a:ce:8a:b8:5f:56:39:8b:c9:9e:13:
64:f6:35:8e:d4:00:1f:05:cd:50:a0:ca:24:79:0a:
ab:c7:05:15:f2:89:40:b6:80:8a:40:02:fa:ff:84:
61:22:b8:69:78:a5:2f:87:28:bb:ac:b0:11:2c:2f:
e5:59:dc:ae:49:4e:b8:1f:dd:94:d8:59:7d:b6:62:
2c:94:f3:2f:20:31:c5:24:73:8e:5c:d4:58:19:82:
81:75:22:45:24:4a:90:e6:c4:5a:22:fd:6c:20:59:
3a:83:1d:b7:05:62:33:2b:85:9a:d7:c4:aa:bc:fa:
83:a3:6e:40:14:2f:f0:9e:aa:70:b1:d6:2c:d6:79:
4b:be:e3:80:eb:45:85:9c:69:ca:6e:be:31:5b:48:
2f:b6:fa:37:52:40:71:96:c2:26:2d:ba:c3:6e:f7:
d8:94:c2:c5:1e:97:f4:47:7c:32:07:10:6e:17:3a:
df:d2:c3:3c:4b:97:34:ef:36:12:4f:9c:e2:ab:31:
01:a7:b8:c2:e9:ea:1d:f2:2b:3e:ec:3c:25:59:6c:
92:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:EB:22:EF:8C:48:6A:F3:F0:EB:60:D6:EF:B5:39:1A:5C:39:16:D1
X509v3 Authority Key Identifier:
keyid:03:F4:5A:13:09:90:D1:07:2F:E1:72:E1:EF:64:AA:FA:EC:34:78:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03F45A130990D1072FE172E1EF64AAFAEC347834.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:5a:52:3e:5e:b8:b5:73:f7:c8:99:ca:2d:9c:03:55:1a:a0:
32:87:2a:9b:03:f4:52:d4:7a:99:38:e5:cf:d7:53:06:25:1b:
2b:2b:df:85:a9:c4:6a:ac:dc:ad:22:21:76:1a:75:f4:01:15:
97:ae:96:98:9c:f4:95:3f:07:ac:d2:0f:e6:e2:d5:5b:fe:76:
eb:4c:b3:f4:7d:7b:72:9c:65:29:c0:df:a4:23:75:a3:aa:59:
aa:89:de:0c:76:18:cf:80:29:22:28:a7:d7:26:97:4f:27:9d:
ee:f8:71:66:b7:79:af:1c:95:53:a1:aa:b1:b2:e4:b6:e7:7f:
55:5f:00:10:37:5c:09:c5:7c:31:21:dd:6a:34:19:49:0e:b0:
40:1b:d2:a9:a8:ce:91:2a:2c:9b:8f:24:32:7a:37:32:28:23:
b5:ec:81:1c:d0:45:d2:41:1e:52:bd:a7:db:12:94:20:27:4b:
c4:ab:4c:75:4d:d4:c3:97:44:08:9e:42:31:cf:99:37:b5:aa:
c7:24:e9:1e:06:cb:e1:6f:58:27:b5:a6:6e:d5:cc:fb:98:b0:
6e:ea:af:cc:14:42:3a:7e:bd:9c:71:9c:9d:09:8e:aa:52:e3:
1e:05:d0:c1:40:35:6a:b9:7e:48:e0:12:95:b5:dc:1a:30:2d:
ce:1c:7f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:43:01 2026 by rpki-client