This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft
File: 6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft (raw, json)
Hash identifier: zgnQDmdouhABLglbF8aU+nAERzSOxscxigpvmtMurxs=
Subject key identifier: 82:9B:7C:90:AB:97:F1:25:8A:78:6D:E3:08:0B:F3:3C:08:58:44:DC
Authority key identifier: 69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E
Certificate issuer: /CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E
Certificate serial: 5E023D83AC58CD267D604F8276599BE052C11AB8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft
Manifest number: 0237
Signing time: Sat 24 Jan 2026 04:00:06 +0000
Manifest this update: Sat 24 Jan 2026 03:55:06 +0000
Manifest next update: Tue 27 Jan 2026 14:33:06 +0000
Files and hashes: 1: 3130312e302e342e302f32322d3234203d3e203438343635.roa (hash: 0Vbzbdds4DlTIQ/frtEsWuiBQ6OCjLTHiqaNJsXbu/0=)
2: 323430303a666230303a3a2f33322d3438203d3e203535363730.roa (hash: FVA48wGL4/cskX5JvDPv5QyssORBEsld3N+rmhCU4Gc=)
3: 3130312e302e342e302f32322d3234203d3e203535363730.roa (hash: 7ECSmeZAaiWw7xemuyw220yGHio1fDg8eukqs4CuhkU=)
4: 3130332e31322e32382e302f32322d3234203d3e203438343635.roa (hash: hq6fcTyLZ0Befnc7SCHGWV/VgoDOfnIfMb9/pRr7Usc=)
5: 6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl (hash: ol0/DudMWPXwjuSPKrL+UeqgFyK1g5r1Ej6NWZx+I/M=)
6: 3130332e31322e32382e302f32322d3234203d3e203535363730.roa (hash: 56/u0yMrkC94FdPOEf+mn1+2joJi+oVC5l6/K3alTgQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl
rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 14:33:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:02:3d:83:ac:58:cd:26:7d:60:4f:82:76:59:9b:e0:52:c1:1a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E
Validity
Not Before: Jan 24 03:55:06 2026 GMT
Not After : Jan 27 14:33:06 2026 GMT
Subject: CN=829B7C90AB97F1258A786DE3080BF33C085844DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:71:73:8c:1a:55:93:74:6a:b9:06:dd:68:ad:
16:0a:df:d4:89:0f:35:f8:15:0b:a5:f8:1c:5f:e2:
7a:3f:70:01:1e:7e:88:56:cf:21:4d:71:ba:3b:5b:
8e:78:f4:0b:ad:6a:72:30:83:07:20:68:fa:e4:77:
42:7a:fb:31:86:fc:2b:fd:ef:d1:fd:60:3f:75:7a:
04:78:4a:e1:bd:e9:cf:95:4f:aa:6d:39:ab:70:eb:
c1:65:6c:ca:d2:34:6f:c0:10:fd:ae:a6:8f:a5:3f:
94:b9:40:64:12:b6:96:2f:e1:24:7b:e6:e2:62:3d:
d5:7e:bb:29:d1:0c:bd:fa:e8:b8:8f:86:b1:d4:f3:
87:56:fa:10:42:2d:2b:e6:98:e9:64:b1:bb:bc:f1:
ca:f8:b9:f8:91:32:1d:03:82:ef:fc:03:62:25:a1:
f1:85:ce:de:e5:84:08:5d:70:3d:d6:5d:8a:8d:3c:
f6:5c:cd:19:ca:c7:24:c2:b2:7c:f0:e6:43:c9:d0:
25:34:65:ed:34:07:0c:02:06:33:ca:cb:ef:7e:f8:
41:03:a0:02:52:2c:aa:0a:3e:b6:8f:a5:93:df:aa:
a5:2c:d7:9d:5e:24:9f:51:ab:e8:10:09:42:21:26:
a1:c2:96:9d:3c:02:72:19:35:e3:26:34:7f:8b:46:
1c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9B:7C:90:AB:97:F1:25:8A:78:6D:E3:08:0B:F3:3C:08:58:44:DC
X509v3 Authority Key Identifier:
keyid:69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:0e:3f:1c:69:43:bd:ab:2d:87:d5:c2:66:6c:8e:81:a2:e5:
fd:77:32:70:15:01:9a:68:82:81:31:bd:ad:ff:8a:b8:76:ee:
32:37:19:d9:3c:33:96:2c:09:a8:56:f3:3c:63:f5:4e:72:b1:
7a:0e:dc:2c:c4:42:43:db:b6:34:8b:1a:a1:db:41:3d:6b:97:
6e:f1:23:d6:c3:2a:f3:6f:f5:8c:f7:26:26:b0:d9:22:cf:af:
2e:2a:d7:ef:a6:01:30:18:de:40:3a:db:58:1f:15:cf:a8:cf:
f7:1f:2b:56:73:de:5d:c5:a0:ce:32:2b:55:ff:89:7d:97:18:
b1:c5:b9:e3:e9:de:0b:cb:e7:94:63:9c:60:f3:33:8f:f8:c8:
2e:b9:72:ab:6f:7b:a0:ba:71:32:d2:64:c0:70:f3:c1:ea:f3:
96:b1:9c:09:c0:1a:19:a2:05:6e:60:b1:7f:18:bf:df:72:db:
de:b5:39:3b:51:c9:80:e1:7b:15:23:46:53:f9:4d:6d:9d:d9:
9e:e3:98:d6:a3:a9:7d:22:50:2a:cf:dd:c3:fd:ae:a0:11:37:
04:77:55:bb:4a:aa:7f:b1:70:4b:01:73:b5:85:72:3a:9d:fe:
ea:15:3b:2b:e8:47:34:23:e6:6e:d4:d8:bb:3c:b5:d4:a3:1d:
de:8b:74:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:25:45 2026 by rpki-client