This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.mft
File: 41ABF792D14122AAA67E42BD42EBB8E02A096620.mft (raw, json)
Hash identifier: LjssSaTDMmNPikl8AnA2AvHuFM8PdqHXYQ8m3iI8hZc=
Subject key identifier: DB:7B:7B:4E:97:70:C2:CD:E1:B9:0D:5A:70:E7:40:75:77:CC:15:18
Authority key identifier: 41:AB:F7:92:D1:41:22:AA:A6:7E:42:BD:42:EB:B8:E0:2A:09:66:20
Certificate issuer: /CN=41ABF792D14122AAA67E42BD42EBB8E02A096620
Certificate serial: 2951526C69F90B6F17AA4ABCF1F97F75DAB89C60
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41ABF792D14122AAA67E42BD42EBB8E02A096620.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.mft
Manifest number: 0543
Signing time: Sun 25 Jan 2026 09:02:29 +0000
Manifest this update: Sun 25 Jan 2026 08:57:29 +0000
Manifest next update: Wed 28 Jan 2026 12:38:29 +0000
Files and hashes: 1: 3130332e39352e34302e302f32322d3234203d3e203538343935.roa (hash: 4Nmw1fLmOShLUzPpmEzdZOQ+qEZBBauKqV3+7mgcSNw=)
2: 41ABF792D14122AAA67E42BD42EBB8E02A096620.crl (hash: nQzYzoq5q1xj6r/ni/enKmGkgUg4aHrs8DD/DR1Tz6M=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.crl
rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41ABF792D14122AAA67E42BD42EBB8E02A096620.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 12:38:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:51:52:6c:69:f9:0b:6f:17:aa:4a:bc:f1:f9:7f:75:da:b8:9c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ABF792D14122AAA67E42BD42EBB8E02A096620
Validity
Not Before: Jan 25 08:57:29 2026 GMT
Not After : Jan 28 12:38:29 2026 GMT
Subject: CN=DB7B7B4E9770C2CDE1B90D5A70E7407577CC1518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ad:c2:48:8f:e9:09:56:ec:d1:2d:82:67:a7:
72:2a:78:dc:19:e0:0b:c1:bf:a4:59:a4:4a:81:7a:
d3:9b:a4:c1:69:2a:eb:f3:03:a4:a6:b8:de:b3:84:
2b:4c:7e:43:fb:28:42:48:5a:2a:d4:b1:4b:e2:2c:
66:0b:cd:7c:9c:48:60:c2:e7:74:d3:06:a6:4a:34:
09:d9:8f:81:3f:80:b3:56:d6:5e:ce:92:16:a8:3f:
12:e2:92:38:a2:4b:fb:8c:43:86:be:00:23:60:0c:
c2:84:17:8c:16:f5:f3:fb:10:64:1e:06:d6:54:da:
4f:64:08:64:6f:14:62:c5:63:5a:d1:74:af:ae:00:
1c:82:3d:42:d2:6a:f5:b4:83:63:30:4b:ba:24:cc:
82:2f:dd:98:8e:2d:64:24:ef:d6:77:3e:38:fd:f6:
49:31:65:7c:8a:f3:d5:1a:4a:8f:7a:30:e9:59:8d:
7c:e0:ba:e8:55:f0:1a:d7:e9:17:d1:f1:1e:f9:ff:
be:48:0e:cb:db:26:a6:f3:a6:04:c6:a2:0a:81:59:
2f:97:ba:54:49:7e:f3:e6:0f:8d:97:fa:b5:71:3e:
4f:7e:d8:56:4f:22:73:b4:15:ef:ff:6f:87:05:4e:
b5:7c:7b:96:19:19:4d:5b:20:55:11:af:7c:dc:d6:
d9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7B:7B:4E:97:70:C2:CD:E1:B9:0D:5A:70:E7:40:75:77:CC:15:18
X509v3 Authority Key Identifier:
keyid:41:AB:F7:92:D1:41:22:AA:A6:7E:42:BD:42:EB:B8:E0:2A:09:66:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41ABF792D14122AAA67E42BD42EBB8E02A096620.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:5f:a2:65:e6:58:c7:73:07:f0:df:e0:ed:62:94:f2:14:32:
57:c8:ab:16:a0:c0:bd:2d:ba:74:ed:02:04:73:f7:ec:63:f7:
14:ec:a2:0c:13:13:26:7f:b0:7f:82:a7:7a:e1:a8:ab:81:58:
5b:18:b0:0f:51:10:7b:bf:49:63:3f:ab:9f:b0:97:0f:0c:20:
e2:1f:00:43:8e:45:a4:84:f2:cd:5c:0c:41:4d:4d:b6:ec:0d:
14:03:b5:78:1b:30:92:ba:c4:f7:7c:53:4e:80:53:8d:de:46:
6c:d8:b9:8e:9b:6f:60:bb:c1:4e:be:d4:69:27:6f:18:19:ec:
4e:8c:3f:ed:34:8d:13:b2:fc:f8:00:17:ac:4d:a6:24:86:07:
d9:92:d4:ef:c3:23:2f:38:ea:ca:24:69:e2:79:7d:41:ed:51:
3c:56:0e:5a:46:5a:0b:32:aa:01:af:6e:8f:95:a8:9c:e2:1a:
f8:87:78:46:10:46:8e:46:27:f9:84:b9:83:df:eb:d8:7c:86:
7b:83:a1:2a:7a:12:3b:65:1f:97:d8:65:43:a5:49:94:68:10:
46:48:b5:91:b1:4a:6b:80:61:0d:87:d2:9b:a5:b0:85:1e:d2:
29:e5:44:b3:b7:89:da:12:9f:f9:a2:5b:90:8b:97:6a:98:2a:
72:97:fc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:13:20 2026 by rpki-client