This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft
File: 665ACFA171591B851B0550143E7029498F238AF0.mft (raw, json)
Hash identifier: UYX92exJIyGXmr8BN9AdRGGTvUBw39WWrhshyUO/qbw=
Subject key identifier: F0:4B:84:77:BE:69:2A:84:67:5D:4F:C8:64:B3:1D:25:F9:DA:FA:48
Authority key identifier: 66:5A:CF:A1:71:59:1B:85:1B:05:50:14:3E:70:29:49:8F:23:8A:F0
Certificate issuer: /CN=665ACFA171591B851B0550143E7029498F238AF0
Certificate serial: 14DE1ADAE5D9444A7AE17B3CB2CA504F6D217D14
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft
Manifest number: 0243
Signing time: Sat 24 Jan 2026 01:20:55 +0000
Manifest this update: Sat 24 Jan 2026 01:15:55 +0000
Manifest next update: Tue 27 Jan 2026 07:55:55 +0000
Files and hashes: 1: 665ACFA171591B851B0550143E7029498F238AF0.crl (hash: WsHnqBJFHwzKmBiZzdcNHEJcpwm8G3DiB8gJXN7MH6s=)
2: 3130332e3139302e33322e302f32342d3234203d3e20313439393032.roa (hash: UBuoyTn3HReKwfW6PcrJhW8k5cydXbUfq85IfE8g+KM=)
3: 3130332e3139302e33332e302f32342d3234203d3e20313439393032.roa (hash: bU3jkKmrVDzxoMBizldCAf9o0i6XJVz0mcRCkl8jgAE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.crl
rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 07:55:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:de:1a:da:e5:d9:44:4a:7a:e1:7b:3c:b2:ca:50:4f:6d:21:7d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665ACFA171591B851B0550143E7029498F238AF0
Validity
Not Before: Jan 24 01:15:55 2026 GMT
Not After : Jan 27 07:55:55 2026 GMT
Subject: CN=F04B8477BE692A84675D4FC864B31D25F9DAFA48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:83:c0:50:96:9f:a8:7f:c7:d0:ee:52:fe:82:
9a:72:3b:5d:34:24:27:4a:8b:eb:ef:f7:5a:22:2a:
3a:77:93:52:cf:b3:7b:cf:28:0b:b4:c6:95:54:3e:
cd:d9:b5:a8:4a:a5:c0:5f:e8:5b:b7:32:82:d1:49:
57:f6:61:b5:42:de:e9:a7:17:ef:92:d7:cb:58:02:
ee:81:4f:82:cc:3e:0a:39:2c:d8:12:b7:ad:97:bc:
f5:f5:01:93:63:e8:ee:88:a0:e7:c6:70:36:37:e0:
27:00:0e:10:d7:33:7b:8d:0c:8a:2c:4e:f3:1c:c7:
e3:65:6f:5f:ef:a0:8f:1c:59:d2:c3:55:4d:6c:55:
49:74:30:a3:c1:2b:26:67:53:06:90:ce:50:1b:7c:
87:02:31:58:d6:83:02:72:55:d5:5c:ce:19:36:44:
74:40:c6:41:05:43:10:db:95:2b:27:e1:0f:d5:37:
06:27:8c:69:e9:4f:c8:c5:0c:5d:ae:00:61:f5:de:
7a:49:a9:e7:a0:e7:80:95:f6:4a:0e:35:ce:1a:ca:
79:d2:26:cd:33:42:67:bb:60:4f:4d:9b:e5:ab:4e:
7e:13:e4:93:c2:1e:10:84:4c:50:56:91:b1:34:cb:
01:05:91:ad:1e:f1:69:eb:b9:19:2d:f3:47:38:ef:
54:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:4B:84:77:BE:69:2A:84:67:5D:4F:C8:64:B3:1D:25:F9:DA:FA:48
X509v3 Authority Key Identifier:
keyid:66:5A:CF:A1:71:59:1B:85:1B:05:50:14:3E:70:29:49:8F:23:8A:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:cc:85:82:55:23:9d:63:ac:d7:3e:34:53:1f:61:d7:03:cb:
ea:2c:85:c2:8c:8b:1f:da:2c:64:ff:b3:2e:d4:12:58:3a:62:
14:1e:10:18:b9:5a:ff:49:34:a4:de:25:fc:cc:24:2a:43:ab:
2a:fd:0b:c9:67:50:20:a6:e5:11:67:ba:09:3e:2c:94:42:de:
fc:49:18:b7:b9:64:06:63:c2:58:f1:9a:ac:3a:b1:35:f7:79:
3f:aa:c7:c1:af:ad:97:87:ad:b1:69:a4:37:9a:6a:54:3b:0f:
f3:d9:c2:80:f5:28:05:96:24:9a:bb:bd:d3:f3:32:6c:95:29:
4d:76:60:ee:7e:aa:69:d6:22:be:87:f1:95:01:42:e7:88:82:
43:dd:9a:b6:c9:5b:d4:db:27:81:80:f8:2c:5c:eb:1f:60:7d:
00:f8:a3:9f:e1:82:dd:70:84:ff:1d:fa:d6:fa:0e:24:22:fc:
29:33:7d:12:95:05:22:59:e6:e2:f6:ad:46:61:58:97:e4:21:
6a:b0:91:f0:02:8d:5d:c8:bb:16:14:40:95:a2:30:d7:b0:c8:
32:55:5d:1c:7e:89:3e:9f:9a:d2:e9:53:49:71:4c:28:24:b5:
ed:be:1a:29:e2:b1:04:97:2f:c3:f1:66:52:d0:d4:17:3e:6a:
f8:4c:47:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:41:04 2026 by rpki-client