This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft
File: A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft (raw, json)
Hash identifier: AWGaxdc4tkURSkbTw5hi91nSZ8jA4jCNv0TVn/46uuo=
Subject key identifier: F4:2F:82:C5:0A:3E:EB:FD:76:1F:B0:A6:FA:E5:AC:78:DE:BC:43:56
Authority key identifier: A7:D8:3E:E8:70:3B:BD:59:CD:CA:A5:62:2A:DB:35:C3:F9:72:27:28
Certificate issuer: /CN=A7D83EE8703BBD59CDCAA5622ADB35C3F9722728
Certificate serial: 19F4F0CBC159D0D6CAAC700C4C4D6A27AE5DE31E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft
Manifest number: 01E7
Signing time: Sat 24 Jan 2026 10:51:40 +0000
Manifest this update: Sat 24 Jan 2026 10:46:40 +0000
Manifest next update: Tue 27 Jan 2026 19:09:40 +0000
Files and hashes: 1: A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.crl (hash: QeP1SK66HKIgqLp5NpBn7YkjBseabfWeqY8r4GOl+K0=)
2: 3130332e36332e32362e302f32342d3234203d3e20313338303839.roa (hash: iiGr+PopU6Hz3cnQVhQvXlHgSkixhRPRwZ/ZW4Nmfrw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.crl
rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 19:09:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:f4:f0:cb:c1:59:d0:d6:ca:ac:70:0c:4c:4d:6a:27:ae:5d:e3:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A7D83EE8703BBD59CDCAA5622ADB35C3F9722728
Validity
Not Before: Jan 24 10:46:40 2026 GMT
Not After : Jan 27 19:09:40 2026 GMT
Subject: CN=F42F82C50A3EEBFD761FB0A6FAE5AC78DEBC4356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:dc:65:03:ca:fe:eb:fe:6e:bc:d2:db:bb:82:
e3:bd:75:a5:0a:e8:15:5b:05:8d:50:74:81:a1:aa:
89:b1:e8:e0:9a:f1:4e:d1:bc:50:74:f1:00:73:f6:
c3:ff:3d:37:49:f8:75:e6:56:39:3b:dd:2e:96:ea:
c6:d2:46:4b:4a:64:ac:43:b9:ac:76:80:51:a0:11:
80:f1:78:21:0c:43:05:e2:d5:35:3d:62:3f:15:3a:
fb:6f:6a:cb:b9:89:e4:df:46:5f:dc:a3:fc:13:3f:
1e:23:80:34:6e:5c:7c:1f:82:fc:5b:cf:1e:19:b1:
bc:81:da:f5:4e:ed:24:e3:6f:b2:20:90:d0:56:bb:
1b:c2:2e:76:15:85:60:99:2b:ce:ab:f5:5c:42:1d:
64:96:45:52:1e:57:b8:59:3a:b1:49:01:08:e8:ab:
03:b7:75:df:eb:1e:0f:08:54:01:c4:19:ea:e7:93:
05:43:b3:d0:05:ba:d5:ad:57:62:b5:4e:e9:e0:c7:
fe:b6:ec:b0:9f:aa:32:10:96:1e:d1:26:c9:6e:c3:
97:fc:11:61:bc:3b:6a:ad:b9:46:91:43:55:db:76:
20:00:44:20:ba:09:8b:cd:68:1f:ca:8e:18:b0:c5:
0a:ce:df:6a:f8:8e:19:a8:c4:1f:0b:d6:42:df:cb:
09:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2F:82:C5:0A:3E:EB:FD:76:1F:B0:A6:FA:E5:AC:78:DE:BC:43:56
X509v3 Authority Key Identifier:
keyid:A7:D8:3E:E8:70:3B:BD:59:CD:CA:A5:62:2A:DB:35:C3:F9:72:27:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:26:95:c9:16:10:f1:e2:6b:d5:af:63:db:48:4b:d7:38:62:
06:c2:22:5e:11:01:1e:18:e5:45:59:a0:32:7f:1a:c0:9c:45:
ac:29:02:4b:bc:e6:9b:30:6d:c9:4c:9d:73:15:02:4d:e4:de:
be:31:f0:4c:33:a8:25:b8:fd:25:bb:e4:85:21:10:d4:2b:30:
31:c6:2c:e3:91:5a:cd:1a:86:3a:43:36:34:13:ac:50:7c:f0:
a7:84:57:f6:b8:43:d6:cc:80:5a:f9:ec:eb:fa:6a:07:cc:77:
bd:9f:e2:1e:66:01:f8:68:db:4f:a9:67:56:58:9d:4a:93:a9:
73:aa:d4:d2:d9:f7:4d:0f:5b:43:78:9b:cf:99:75:e1:7d:f8:
ce:23:52:29:dc:1c:77:5f:2d:e0:ae:08:09:ef:e1:8c:a6:67:
83:61:ae:01:85:38:63:da:a0:f1:4a:9e:8d:66:d5:f5:84:c3:
74:5f:c8:1a:1b:fd:2a:b5:69:21:71:33:8b:37:3f:58:7a:e8:
9a:ef:75:86:33:9e:ea:c4:02:f1:00:15:72:2b:8b:b1:71:08:
c6:da:17:c6:07:70:c5:06:4f:fa:fc:08:fb:ce:fd:17:bf:02:
9a:bc:93:89:df:02:56:eb:aa:06:8b:7d:0a:c1:e3:ef:f8:c3:
a3:f9:f5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:52:34 2026 by rpki-client