This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft
File: 977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft (raw, json)
Hash identifier: PoNLW6E5u0hY+vdPIpLv/x6Gz8G8/ykpxyPjRn+MXXA=
Subject key identifier: A8:47:49:1B:2A:E0:90:61:F4:3F:1D:69:4F:9C:FA:BD:78:BD:80:20
Authority key identifier: 97:7E:A5:11:85:51:E9:8A:EA:A8:BB:11:C9:D9:9D:71:96:D3:DE:BA
Certificate issuer: /CN=977EA5118551E98AEAA8BB11C9D99D7196D3DEBA
Certificate serial: 2A7A8161FCEF29FC08A6E722BDBED667FEC63CC5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft
Manifest number: 0544
Signing time: Sun 25 Jan 2026 06:41:15 +0000
Manifest this update: Sun 25 Jan 2026 06:36:15 +0000
Manifest next update: Wed 28 Jan 2026 10:08:15 +0000
Files and hashes: 1: 977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.crl (hash: VR0msfRSHy2D0HLA/VQW/aP+LQYtpnTYC59rKY1g5E8=)
2: 3130332e3132332e3130382e302f32342d3234203d3e20313338303636.roa (hash: q9pcjfkInqPcGghxGeh0wF/8x9n+wp0JshUKi76J40w=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.crl
rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 10:08:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:7a:81:61:fc:ef:29:fc:08:a6:e7:22:bd:be:d6:67:fe:c6:3c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977EA5118551E98AEAA8BB11C9D99D7196D3DEBA
Validity
Not Before: Jan 25 06:36:15 2026 GMT
Not After : Jan 28 10:08:15 2026 GMT
Subject: CN=A847491B2AE09061F43F1D694F9CFABD78BD8020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:79:74:f9:ca:a7:4d:82:06:74:5a:8c:ec:74:
37:b7:f3:f7:6b:16:1c:53:37:49:6b:71:3e:c1:e7:
eb:c0:f0:ec:36:83:86:59:7d:cc:5f:2a:b5:15:b4:
d9:ee:e2:67:4e:f7:63:ea:4f:52:09:3b:a3:23:72:
8a:94:41:37:18:42:0c:c5:52:e3:c9:c3:fa:b6:af:
76:2c:99:d3:c3:a0:61:91:a8:25:89:2f:47:b4:ee:
b9:e3:7a:6c:22:48:a7:62:6f:24:cf:73:cc:09:01:
3d:eb:c1:be:1a:5b:74:ed:e6:cf:fe:15:5e:c8:d4:
c9:0b:69:35:b0:97:c3:c7:ba:60:d6:ed:c8:37:94:
9b:b9:f4:dd:20:a7:35:d7:68:b6:88:e6:ab:b3:94:
6d:bc:cf:81:ca:63:88:d2:16:84:9a:73:66:6e:bf:
cb:3a:5b:d8:f0:17:f3:df:a3:ad:c7:3d:0d:29:c8:
39:fd:c8:de:af:9a:b7:9e:d9:33:28:d7:65:a6:a6:
06:73:78:a5:47:3b:20:c5:dc:98:f9:56:69:ff:6f:
f1:bd:a3:29:f5:3b:ea:3e:0b:6d:d1:58:8a:0c:84:
2d:bf:b0:6d:d4:93:91:da:a2:13:b7:79:c5:c2:6a:
48:b5:7c:c7:4f:a4:51:8b:29:5a:d1:8c:88:f0:78:
1f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:47:49:1B:2A:E0:90:61:F4:3F:1D:69:4F:9C:FA:BD:78:BD:80:20
X509v3 Authority Key Identifier:
keyid:97:7E:A5:11:85:51:E9:8A:EA:A8:BB:11:C9:D9:9D:71:96:D3:DE:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ee:ee:40:47:a0:ce:2d:c5:3b:b0:eb:eb:f7:42:52:12:88:c6:
c3:63:7f:ef:19:07:97:ba:b8:96:8f:cf:75:f9:ad:2b:47:46:
8c:07:5b:85:ff:87:00:99:e1:96:b0:27:60:d5:66:ab:c6:f5:
63:22:a3:c0:67:7d:e9:ad:57:5c:04:eb:7e:30:ea:53:7b:6b:
11:da:3b:d0:4c:80:b3:8d:7a:38:6a:01:bc:83:30:c6:8e:43:
57:97:ba:78:4b:c8:e4:d5:76:d3:ad:56:cb:bf:cf:ee:e4:a0:
f3:01:1e:16:5e:cb:fe:02:82:49:b8:c2:bc:14:fe:8b:cc:90:
94:dc:a0:ba:73:54:1a:2b:b1:e0:9c:6a:38:c9:55:97:9f:93:
c1:6a:33:0e:31:d0:73:1a:81:89:73:bd:c4:5d:23:d3:47:0c:
a9:62:fb:c6:24:d2:a4:0b:d0:3a:96:37:af:67:00:04:87:b6:
89:aa:82:68:1e:59:5c:8f:3e:e3:49:44:ce:ef:b2:61:5b:89:
35:86:f4:aa:0f:09:76:1e:84:e9:0d:28:ca:c8:a7:f8:30:df:
52:1d:a8:05:6c:b6:c7:3b:c5:fb:7e:c2:ad:e5:be:b9:48:83:
f0:f0:68:19:ce:c0:a9:8f:c9:57:75:87:9a:12:23:fa:65:6b:
69:b5:06:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:23:31 2026 by rpki-client