This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft
File: 1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft (raw, json)
Hash identifier: Bi+/Nue6oB/jlVuzzv5cFn/1WtfCrNRuODx495Te3kI=
Subject key identifier: DF:5C:A4:39:60:60:BB:8F:D3:5E:28:B0:F0:D4:FF:D2:60:B9:95:FA
Authority key identifier: 1B:A1:44:74:14:07:FB:84:B2:7F:ED:FC:33:E8:6A:5D:5F:57:04:C5
Certificate issuer: /CN=1BA144741407FB84B27FEDFC33E86A5D5F5704C5
Certificate serial: 0CB681A751D230B6E11A5029C0D672AC5D4C51C3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft
Manifest number: 0548
Signing time: Sat 24 Jan 2026 09:51:01 +0000
Manifest this update: Sat 24 Jan 2026 09:46:01 +0000
Manifest next update: Tue 27 Jan 2026 17:40:01 +0000
Files and hashes: 1: 3130332e3135332e3138382e302f32332d3234203d3e20313531303030.roa (hash: swFGOhGRguY6xbHl+4Isnl0Fys0RcqGksCRObsxxYUI=)
2: 1BA144741407FB84B27FEDFC33E86A5D5F5704C5.crl (hash: /1zBE5G6AJgrJrCRnn8EFMYvp2hVL/qLSfiCeUBGBME=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.crl
rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 17:40:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:b6:81:a7:51:d2:30:b6:e1:1a:50:29:c0:d6:72:ac:5d:4c:51:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BA144741407FB84B27FEDFC33E86A5D5F5704C5
Validity
Not Before: Jan 24 09:46:01 2026 GMT
Not After : Jan 27 17:40:01 2026 GMT
Subject: CN=DF5CA4396060BB8FD35E28B0F0D4FFD260B995FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:62:3b:57:01:b3:8e:35:e5:67:b3:94:70:86:
20:8e:86:6b:42:8b:77:3a:93:c1:fb:98:fc:a0:be:
9e:d4:b2:8c:9a:13:93:af:7c:fb:61:2b:c2:ff:61:
ab:50:91:33:22:7a:e4:57:98:cd:b4:03:c1:c7:e1:
ac:b3:a2:47:ab:a5:bd:76:aa:b2:36:04:0c:f3:9b:
4f:11:0b:ed:79:9f:eb:a1:09:0f:b2:04:5f:0e:fd:
42:c5:57:18:18:47:b7:9e:d4:9a:70:82:bd:1c:ad:
ff:9f:76:d2:12:a0:2b:ef:05:5a:ec:5a:8b:e3:a2:
61:89:e2:75:58:2e:3c:41:08:9d:c3:c9:d3:a7:22:
0a:ec:f4:a6:90:fa:73:d5:f4:dd:91:2d:f1:8b:7d:
02:8d:a7:6d:65:c7:94:69:8d:ab:b7:fe:89:e5:b4:
cd:c0:ad:a5:51:ef:20:90:3b:44:ab:b5:7e:9f:bc:
bf:44:cb:b8:16:d3:d6:ff:4b:4b:0e:a7:cb:e2:9c:
1f:6a:54:ad:6a:c1:60:41:c2:8c:2c:74:fb:31:c2:
4e:fb:4b:ad:0e:08:a5:9b:f0:10:c6:8b:02:a0:f1:
6a:26:2c:20:3a:d4:2a:a3:6c:dd:04:cb:1e:d0:71:
4e:39:c8:b5:85:1a:16:c4:d9:26:87:1d:e9:79:a9:
bf:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5C:A4:39:60:60:BB:8F:D3:5E:28:B0:F0:D4:FF:D2:60:B9:95:FA
X509v3 Authority Key Identifier:
keyid:1B:A1:44:74:14:07:FB:84:B2:7F:ED:FC:33:E8:6A:5D:5F:57:04:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:89:a0:34:9f:9c:76:c1:54:2e:ed:89:fb:81:8f:03:03:60:
0a:af:f2:fa:a7:40:28:34:a2:d5:04:a1:04:02:c7:aa:ad:8a:
13:72:aa:eb:21:29:21:c5:d4:96:28:81:dd:15:f2:a1:92:bc:
bb:58:b4:e7:9e:9e:1a:f4:15:80:e8:97:a9:0e:0d:ac:8b:98:
b4:3b:7f:5e:25:1b:bc:8c:05:40:0f:fc:18:8f:a8:86:42:d2:
3a:d4:0e:e9:ee:49:09:09:11:6e:3a:51:47:ce:0d:11:f9:e6:
53:26:63:1a:8c:02:5d:bc:c5:01:72:21:0c:6b:5f:30:41:b2:
66:82:92:c9:31:ac:9f:ba:a3:a9:80:fb:6e:b6:da:1b:9f:ab:
e2:73:5d:19:e8:27:22:73:33:e4:f5:14:11:99:6b:99:2c:42:
42:2d:77:54:85:e0:82:25:4e:c0:eb:84:ca:a0:99:4f:c0:7d:
ae:af:8b:27:88:29:54:21:11:90:a2:1e:e6:73:d9:49:54:38:
f4:0c:1f:b9:28:6a:9f:10:db:0e:99:09:e9:1c:5a:64:0e:b2:
a7:2c:ba:e6:b6:f6:74:3b:c5:76:83:24:92:11:e3:41:1d:1c:
bc:97:d8:e4:21:d2:41:1f:ed:8f:31:8a:51:00:77:94:79:35:
d3:90:59:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:12:13 2026 by rpki-client