This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft
File: A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft (raw, json)
Hash identifier: eJljRyi4pqrmEV+jO/SgMTFCosIbB7ZLExGhYtDH0lc=
Subject key identifier: 32:23:EB:C0:94:70:18:31:F3:AC:61:2F:6E:92:09:BF:8E:FD:A2:1F
Authority key identifier: A6:3C:CE:63:66:E3:FC:B7:A2:66:6A:90:90:F2:A0:57:5A:74:DC:F4
Certificate issuer: /CN=A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4
Certificate serial: 66BD255873E37EC08624E5423783CA1B434151BE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft
Manifest number: 02B1
Signing time: Sun 25 Jan 2026 21:32:32 +0000
Manifest this update: Sun 25 Jan 2026 21:27:32 +0000
Manifest next update: Thu 29 Jan 2026 08:44:32 +0000
Files and hashes: 1: 3230322e3134362e3137362e302f32312d3234203d3e203234353336.roa (hash: ILoC7SZWlYY8tT8nCMj2qTfJpiM1Y89EAaEhPrCEnXY=)
2: A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.crl (hash: VhL+KkdyA6GgN71OPFA6yHeSnmV0/WnnSyplfKq8MXM=)
3: 323430343a343230303a3a2f33322d3438203d3e203234353336.roa (hash: Hub7rZ2q+AdvyEruoWB8nsArXPAxnFiXXAQjsmifcPA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.crl
rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:bd:25:58:73:e3:7e:c0:86:24:e5:42:37:83:ca:1b:43:41:51:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4
Validity
Not Before: Jan 25 21:27:32 2026 GMT
Not After : Jan 29 08:44:32 2026 GMT
Subject: CN=3223EBC094701831F3AC612F6E9209BF8EFDA21F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:37:10:25:cf:54:55:54:32:bb:50:b1:e9:98:
06:74:5d:06:1e:05:45:75:98:6a:fc:26:f4:3f:d6:
1a:67:5b:8f:1b:ce:fd:e8:03:4a:19:95:81:ec:05:
42:e2:4a:0f:ea:c1:08:87:c2:92:4f:b1:3a:43:1a:
a7:53:28:86:4d:25:4b:97:fe:31:6d:09:bf:75:b3:
e3:81:4c:68:91:61:f7:1f:85:c7:c4:7b:f1:f2:fb:
53:5f:0a:30:bc:bd:f1:1f:69:f9:51:14:c7:d4:67:
bd:03:67:72:99:77:11:5f:d0:cb:a2:9b:29:5d:a0:
05:37:d2:60:eb:1b:73:a7:dd:16:f4:2c:25:4c:b5:
33:f0:17:48:ae:b8:2f:a9:c4:86:73:f0:00:61:98:
03:02:f4:e5:47:c6:32:14:41:5f:3c:96:f1:14:35:
55:2b:1b:47:f7:aa:1e:7a:a9:f1:2c:8b:3b:0c:52:
24:56:1a:e3:bb:4c:14:e0:e0:81:a0:f0:63:bd:a2:
ff:b8:25:0d:41:d5:30:02:f8:63:52:bb:bd:3b:a6:
17:ca:16:55:64:10:ae:50:ad:13:f0:ec:6e:6f:90:
7a:73:9e:f8:62:ac:4b:2c:f5:36:54:bc:ae:32:b9:
2e:55:83:ec:39:8e:8a:1c:73:53:a7:ae:54:3e:59:
52:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:23:EB:C0:94:70:18:31:F3:AC:61:2F:6E:92:09:BF:8E:FD:A2:1F
X509v3 Authority Key Identifier:
keyid:A6:3C:CE:63:66:E3:FC:B7:A2:66:6A:90:90:F2:A0:57:5A:74:DC:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c6:f1:19:67:f4:75:67:6a:af:a9:20:b2:d4:97:7f:a5:30:
a0:db:e6:52:b2:34:44:96:22:09:5b:ec:9d:0c:3d:30:47:ae:
a6:73:ba:bd:69:64:22:4a:10:a1:11:46:fe:03:18:00:d2:6d:
16:df:89:e9:38:b1:5c:cd:bb:ab:a6:45:d1:0c:77:f7:5f:15:
d7:a5:b3:b0:02:7b:88:3d:95:0b:62:42:bd:ba:c9:dc:6e:c3:
b7:6d:b7:38:9a:00:e1:1d:64:78:0e:c5:7a:af:2d:74:55:61:
cc:bb:19:12:6b:1d:93:06:b1:fb:2f:0b:25:0a:2c:4c:da:cd:
0f:c5:2d:2d:5d:7e:f1:c0:b0:d5:50:44:58:d3:12:b3:83:0d:
ba:d4:69:5d:09:d9:f9:70:fa:20:be:c1:29:43:6b:e4:64:70:
0b:12:b1:16:ca:08:43:d6:6d:33:28:46:71:54:aa:63:d2:cc:
59:26:9a:c5:74:60:ee:77:15:30:93:ef:4f:3c:b5:50:14:13:
65:3a:88:67:28:a7:97:6f:d5:aa:45:41:df:1a:f8:b6:8c:32:
ba:f5:c0:40:2d:98:8b:9f:6d:4d:a9:16:98:24:2b:09:93:96:
01:dd:2a:ed:d5:20:bc:45:46:7e:82:ad:9c:ba:25:91:29:da:
91:6e:13:33
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZr0lWHPjfsCGJOVCN4PKG0NBUb4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYzQ0NFNjM2NkUzRkNCN0EyNjY2QTkwOTBGMkEwNTc1
QTc0RENGNDAeFw0yNjAxMjUyMTI3MzJaFw0yNjAxMjkwODQ0MzJaMDMxMTAvBgNV
BAMTKDMyMjNFQkMwOTQ3MDE4MzFGM0FDNjEyRjZFOTIwOUJGOEVGREEyMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzNxAlz1RVVDK7ULHpmAZ0XQYe
BUV1mGr8JvQ/1hpnW48bzv3oA0oZlYHsBULiSg/qwQiHwpJPsTpDGqdTKIZNJUuX
/jFtCb91s+OBTGiRYfcfhcfEe/Hy+1NfCjC8vfEfaflRFMfUZ70DZ3KZdxFf0Mui
myldoAU30mDrG3On3Rb0LCVMtTPwF0iuuC+pxIZz8ABhmAMC9OVHxjIUQV88lvEU
NVUrG0f3qh56qfEsizsMUiRWGuO7TBTg4IGg8GO9ov+4JQ1B1TAC+GNSu707phfK
FlVkEK5QrRPw7G5vkHpznvhirEss9TZUvK4yuS5Vg+w5joocc1OnrlQ+WVLnAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUMiPrwJRwGDHzrGEvbpIJv479oh8wHwYDVR0j
BBgwFoAUpjzOY2bj/LeiZmqQkPKgV1p03PQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
Nzc3NWRjZi0yODNmLTQzYzUtYWY2MC0wOWUwZGViYTAxYTIvMC9BNjNDQ0U2MzY2
RTNGQ0I3QTI2NjZBOTA5MEYyQTA1NzVBNzREQ0Y0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTYzQ0NFNjM2NkUzRkNCN0EyNjY2QTkwOTBGMkEwNTc1QTc0
RENGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc3NzVkY2YtMjgzZi00M2M1LWFm
NjAtMDllMGRlYmEwMWEyLzAvQTYzQ0NFNjM2NkUzRkNCN0EyNjY2QTkwOTBGMkEw
NTc1QTc0RENGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEbG8Rln9HVnaq+pILLUl3+lMKDb5lKyNESW
Iglb7J0MPTBHrqZzur1pZCJKEKERRv4DGADSbRbfiek4sVzNu6umRdEMd/dfFdel
s7ACe4g9lQtiQr26ydxuw7dttziaAOEdZHgOxXqvLXRVYcy7GRJrHZMGsfsvCyUK
LEzazQ/FLS1dfvHAsNVQRFjTErODDbrUaV0J2flw+iC+wSlDa+RkcAsSsRbKCEPW
bTMoRnFUqmPSzFkmmsV0YO53FTCT7088tVAUE2U6iGcop5dv1apFQd8a+LaMMrr1
wEAtmIufbU2pFpgkKwmTlgHdKu3VILxFRn6CrZy6JZEp2pFuEzM=
-----END CERTIFICATE-----
Generated at Mon Jan 26 05:37:20 2026 by rpki-client