This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft
File: D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft (raw, json)
Hash identifier: j6MLmVPlV23qUwt6auJdaQjiK1seoQmAbJmZY1XYSIc=
Subject key identifier: FB:38:7F:D9:7A:1A:A3:7F:74:9D:70:A8:C5:CF:8E:B0:71:FA:41:15
Authority key identifier: D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28
Certificate issuer: /CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428
Certificate serial: 4E84D986462179D8E3A02383BCC39394F72BE260
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft
Manifest number: 0382
Signing time: Sat 24 Jan 2026 08:51:02 +0000
Manifest this update: Sat 24 Jan 2026 08:46:02 +0000
Manifest next update: Tue 27 Jan 2026 14:47:02 +0000
Files and hashes: 1: 3130332e38322e3138332e302f32342d3234203d3e20313336303631.roa (hash: jcnGTwMxragJZygMI7x8GrOzTkyTrpwEdMq5rorWZ5w=)
2: 3130332e38322e3138302e302f32332d3233203d3e20313336303631.roa (hash: aFm1cy3NmwA8t2HY8uThbjC+zS/PKRo7I8s9/bpxDts=)
3: 3130332e38322e3138322e302f32342d3234203d3e20313336303631.roa (hash: WjIjT3NjVVlR5hMapPhqI5pb0J0MFGcIoHXnqSGNGKM=)
4: 3130332e38322e3138302e302f32342d3234203d3e20313336303631.roa (hash: J0EZhqosWRvlsFynFqUSuIzOBFwrUDGcW8i8aa6gdz0=)
5: 3130332e38322e3138302e302f32332d3233203d3e203535303032.roa (hash: +FTF4nfRYC5wsN7EuNxSdS7IKhjhi49gS7F0z0AapdE=)
6: D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl (hash: OXiQBWe+kJVQz6k5mqb/LOtfifMHZKNuNPgBVVEAjxU=)
7: 3130332e38322e3138312e302f32342d3234203d3e20313336303631.roa (hash: JBTT95tgZh/X/QugtDrHY7+xX4nEcgcpicxDVZKVxRA=)
8: 3130332e38322e3138322e302f32342d3234203d3e203535303032.roa (hash: TOlmToT6ArG31254ugnepFlJm7GRal9sFalZQtBB9ZU=)
9: 3130332e38322e3138332e302f32342d3234203d3e203535303032.roa (hash: fgpsoyfDzLyMcnx59ChelAzY0mutvwsLTeGKdYegbvA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl
rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 14:47:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:84:d9:86:46:21:79:d8:e3:a0:23:83:bc:c3:93:94:f7:2b:e2:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428
Validity
Not Before: Jan 24 08:46:02 2026 GMT
Not After : Jan 27 14:47:02 2026 GMT
Subject: CN=FB387FD97A1AA37F749D70A8C5CF8EB071FA4115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d3:6f:d0:05:85:c8:15:fa:9d:99:cf:a1:8b:
8e:d3:4e:d8:d9:19:59:b2:0b:8b:67:cf:2b:41:c0:
84:05:1a:ee:14:dc:11:95:38:da:3e:03:41:ec:f0:
ae:35:7e:86:49:11:3f:8c:1e:6d:c8:27:8a:71:37:
84:f0:60:a3:78:63:93:1a:8c:39:78:4d:ae:9a:77:
26:ea:aa:52:97:db:23:18:e0:81:50:dc:f7:b3:c8:
7c:27:c6:d0:f3:85:87:71:5d:1b:89:7e:66:cd:36:
de:f2:27:fb:a5:c3:6c:51:89:40:75:6d:20:95:9f:
cb:ff:b4:94:2a:ed:a1:0e:d1:75:34:27:5e:d5:a3:
b7:ec:9b:93:c6:88:00:21:ac:4e:99:f2:bf:f6:6b:
1a:d1:8e:8a:3b:da:80:32:9b:7b:a9:76:70:a6:d2:
95:03:64:31:0a:7d:3d:d2:65:ff:f0:2a:81:74:52:
f2:6a:9a:74:be:c6:83:c0:ea:ad:b8:43:45:7c:95:
c0:06:1d:92:43:ac:54:8b:9c:f7:4c:07:b2:a1:af:
97:71:b4:5c:a9:94:e7:11:04:b1:e2:c1:73:7e:09:
9e:1f:54:cd:ee:9d:a2:07:63:ae:3d:f0:0d:3a:d2:
f1:9f:4d:c5:34:79:aa:07:50:ec:e5:3d:96:ab:3f:
22:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:38:7F:D9:7A:1A:A3:7F:74:9D:70:A8:C5:CF:8E:B0:71:FA:41:15
X509v3 Authority Key Identifier:
keyid:D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a6:83:f9:4f:d9:91:2e:5d:ce:44:a0:4e:00:6f:95:47:95:
98:9b:36:5e:a0:1a:34:19:ff:01:00:bf:1f:45:d2:e6:7b:a5:
cc:eb:42:dd:62:6d:de:9d:32:e1:7a:df:43:59:c9:78:32:21:
9c:59:04:e6:26:53:a2:d7:b9:68:36:86:18:3b:77:af:f2:d0:
83:7d:8a:ad:4b:4a:cd:74:d0:06:fb:33:0b:8f:e6:ba:5d:87:
01:6f:ab:4d:ed:67:47:ca:d9:f4:ba:89:d8:34:50:1f:13:cc:
1c:01:1d:b5:45:c6:7c:e2:7f:58:4c:90:c0:06:56:87:91:b9:
1f:c2:c1:ac:da:f3:b4:49:67:90:9c:e2:45:69:3b:67:01:0e:
c4:90:59:eb:6d:9a:ab:17:37:57:95:97:59:e4:55:66:b0:bd:
f2:1f:4f:27:0e:f3:a7:83:c0:1e:47:a5:4d:1a:e9:0c:ee:b8:
cc:90:ec:f4:97:6c:fd:a8:c6:14:9b:89:30:12:be:44:ce:8a:
60:18:a7:0d:bf:d9:76:99:14:e0:30:ea:31:03:77:7e:a8:e5:
e3:ee:9b:d5:77:dd:84:1d:8a:48:e7:b2:7a:d7:1a:6b:37:55:
af:39:aa:37:83:1b:a3:4e:df:f7:78:1c:ad:e7:b3:f9:ab:b5:
a3:2e:78:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:10:29 2026 by rpki-client