This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft
File: A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft (raw, json)
Hash identifier: ydNv3fU3r6/pstFYwF0Ui+osYyI5pe/i15q4gLoysig=
Subject key identifier: ED:0B:25:00:1B:F1:62:34:F2:F2:3A:F7:74:FC:17:CF:87:13:C0:FC
Authority key identifier: A0:B5:1B:C5:AC:7C:95:73:7A:24:BD:6A:28:D8:24:9E:7A:80:CF:4B
Certificate issuer: /CN=A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B
Certificate serial: 5B0965D700C36E387DEBCB8D6606A6F29E8677C6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft
Manifest number: 026B
Signing time: Sat 24 Jan 2026 10:30:50 +0000
Manifest this update: Sat 24 Jan 2026 10:25:50 +0000
Manifest next update: Tue 27 Jan 2026 14:00:50 +0000
Files and hashes: 1: 3130332e3137342e3132302e302f32342d3234203d3e20313437303937.roa (hash: kR7f+QbSDQGljWadtB58fQP67/nBgODo/KtERDIkT4I=)
2: A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.crl (hash: FvnxpzOes9zt17V28vjl/lujg5qQHUS8n4A+Hgj9/jM=)
3: 3130332e3137342e3132312e302f32342d3234203d3e20313437303937.roa (hash: 28RcdR62e/0q0exyVrMmIGMIyDeFlL8Q29Mx92Z7M14=)
4: 3130332e3137342e3132302e302f32332d3234203d3e20313437303937.roa (hash: bOWlKzk6RopDMtmA3RBA1BFwLCsnVG+rkva/NTG1vjQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.crl
rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:09:65:d7:00:c3:6e:38:7d:eb:cb:8d:66:06:a6:f2:9e:86:77:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B
Validity
Not Before: Jan 24 10:25:50 2026 GMT
Not After : Jan 27 14:00:50 2026 GMT
Subject: CN=ED0B25001BF16234F2F23AF774FC17CF8713C0FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0f:b2:06:6d:27:02:05:c3:5f:a0:18:7a:26:
d9:ea:f7:3c:83:ca:09:a0:74:9c:65:e2:90:be:52:
7c:8e:6c:3c:bc:d5:a9:91:82:ab:b1:6c:a1:3a:27:
fe:44:cf:15:dc:36:2b:15:9c:f0:fc:81:f9:80:39:
7a:51:cf:c7:b5:a3:9d:13:55:76:af:1b:6c:b6:e5:
00:5c:9f:35:28:35:9c:48:4b:d3:49:2b:c8:17:25:
f3:a4:ba:eb:68:1a:0f:d7:37:35:77:f2:86:0d:e2:
00:51:78:6f:71:16:11:4d:14:26:5c:f9:00:a1:32:
09:7b:14:ce:9c:e5:09:05:02:3b:ae:f8:06:cf:41:
26:25:49:c4:7e:a2:9b:56:44:98:f9:0e:32:58:55:
21:ef:fb:e9:3a:26:e4:38:6d:79:db:88:0e:ef:aa:
7c:ac:a4:3a:fa:9b:ae:50:d2:15:14:36:98:d5:08:
16:4b:81:ab:40:be:10:0c:08:0f:c3:15:05:c9:02:
9e:4c:52:56:5b:e2:22:36:9f:07:70:e5:d1:b6:1b:
b6:23:7a:16:26:69:58:4f:2a:5b:a7:7b:7c:0d:d5:
9e:90:9b:11:cc:bb:17:9e:a1:4a:24:fd:38:46:b2:
5b:e8:fe:14:2a:9b:18:49:50:5b:1b:c7:24:3f:77:
ca:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:0B:25:00:1B:F1:62:34:F2:F2:3A:F7:74:FC:17:CF:87:13:C0:FC
X509v3 Authority Key Identifier:
keyid:A0:B5:1B:C5:AC:7C:95:73:7A:24:BD:6A:28:D8:24:9E:7A:80:CF:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b6:54:ea:6e:d6:63:10:90:c1:8e:da:b0:76:95:c9:58:ab:
c6:8f:2b:36:7a:02:1b:9f:6b:18:f2:c9:d8:23:d7:13:55:c4:
8e:97:9f:87:fd:e6:82:c5:46:ff:3b:1a:98:94:13:b5:31:43:
cc:cf:0d:b7:65:c9:1c:e9:91:1f:ad:ce:59:fa:22:7b:87:ec:
54:8c:80:6f:e5:25:4e:36:dd:a6:3c:91:5e:fd:d2:97:1d:67:
e2:a2:e5:ea:02:87:d4:77:39:e6:3f:5c:18:41:9b:70:35:b8:
d2:72:15:39:6c:02:75:40:2f:bd:73:e1:31:b7:e1:35:15:82:
72:e9:4d:9b:0c:0d:35:00:94:69:11:64:56:93:10:02:42:57:
ec:a3:f8:c9:38:e6:85:c6:bd:4e:d3:94:3d:1e:77:03:31:ce:
59:84:71:da:43:22:da:ff:9e:fc:89:24:df:89:21:7e:9c:c8:
be:65:7f:f7:7e:c5:1f:db:1c:1d:80:6a:32:1a:5c:4c:40:8c:
60:74:8c:1c:9e:45:42:76:95:71:13:6b:86:69:38:62:94:1f:
c2:19:41:cf:ee:5f:15:76:d1:29:cf:63:13:6b:c4:0d:a0:45:
d2:8c:d0:59:1f:e4:d1:a2:49:4f:52:c4:0d:84:1a:c0:89:83:
fb:d0:dc:8a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUWwll1wDDbjh968uNZgam8p6Gd8YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTBCNTFCQzVBQzdDOTU3MzdBMjRCRDZBMjhEODI0OUU3
QTgwQ0Y0QjAeFw0yNjAxMjQxMDI1NTBaFw0yNjAxMjcxNDAwNTBaMDMxMTAvBgNV
BAMTKEVEMEIyNTAwMUJGMTYyMzRGMkYyM0FGNzc0RkMxN0NGODcxM0MwRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVD7IGbScCBcNfoBh6Jtnq9zyD
ygmgdJxl4pC+UnyObDy81amRgquxbKE6J/5EzxXcNisVnPD8gfmAOXpRz8e1o50T
VXavG2y25QBcnzUoNZxIS9NJK8gXJfOkuutoGg/XNzV38oYN4gBReG9xFhFNFCZc
+QChMgl7FM6c5QkFAjuu+AbPQSYlScR+optWRJj5DjJYVSHv++k6JuQ4bXnbiA7v
qnyspDr6m65Q0hUUNpjVCBZLgatAvhAMCA/DFQXJAp5MUlZb4iI2nwdw5dG2G7Yj
ehYmaVhPKlune3wN1Z6QmxHMuxeeoUok/ThGslvo/hQqmxhJUFsbxyQ/d8rjAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU7QslABvxYjTy8jr3dPwXz4cTwPwwHwYDVR0j
BBgwFoAUoLUbxax8lXN6JL1qKNgknnqAz0swDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
NmIyMDUxNS04ZDdjLTQ0NWMtYmZmNy1iYWJkNTI2NTc4MGYvMC9BMEI1MUJDNUFD
N0M5NTczN0EyNEJENkEyOEQ4MjQ5RTdBODBDRjRCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTBCNTFCQzVBQzdDOTU3MzdBMjRCRDZBMjhEODI0OUU3QTgw
Q0Y0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZiMjA1MTUtOGQ3Yy00NDVjLWJm
ZjctYmFiZDUyNjU3ODBmLzAvQTBCNTFCQzVBQzdDOTU3MzdBMjRCRDZBMjhEODI0
OUU3QTgwQ0Y0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABu2VOpu1mMQkMGO2rB2lclYq8aPKzZ6Ahuf
axjyydgj1xNVxI6Xn4f95oLFRv87GpiUE7UxQ8zPDbdlyRzpkR+tzln6InuH7FSM
gG/lJU423aY8kV790pcdZ+Ki5eoCh9R3OeY/XBhBm3A1uNJyFTlsAnVAL71z4TG3
4TUVgnLpTZsMDTUAlGkRZFaTEAJCV+yj+Mk45oXGvU7TlD0edwMxzlmEcdpDItr/
nvyJJN+JIX6cyL5lf/d+xR/bHB2AajIaXExAjGB0jByeRUJ2lXETa4ZpOGKUH8IZ
Qc/uXxV20SnPYxNrxA2gRdKM0Fkf5NGiSU9SxA2EGsCJg/vQ3Io=
-----END CERTIFICATE-----
Generated at Mon Jan 26 05:38:12 2026 by rpki-client