This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft
File: 368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft (raw, json)
Hash identifier: 4fvIglvan1H5S+w2Eua2zb2vJ3kdFNjYGjFqfcspeng=
Subject key identifier: 39:ED:90:3C:4E:74:42:59:79:03:F7:2B:72:20:42:FE:01:3D:18:28
Authority key identifier: 36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4
Certificate issuer: /CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4
Certificate serial: 09CCAB2727D7C2CCDBA154EB2BB6E84CC03FE01D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft
Manifest number: 0544
Signing time: Sun 25 Jan 2026 11:31:44 +0000
Manifest this update: Sun 25 Jan 2026 11:26:44 +0000
Manifest next update: Wed 28 Jan 2026 13:09:44 +0000
Files and hashes: 1: 3130332e3134382e34342e302f32332d3234203d3e20313339393832.roa (hash: HfUy1Uhb3h99FOMvLMDprgyPmVmWuM8DW9xncpfi5EY=)
2: 368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl (hash: 1V8PJJSTA6u4rvuvZM+b35FRQ5jhiFrTnS/2Qodd+SQ=)
3: 3130332e3134382e34352e302f32342d3234203d3e20313339393832.roa (hash: NIprOafL/FkfE+7MXVPnJMsMOXtIi5Oz7VSZiSJ3HkA=)
4: 3130332e3134382e34342e302f32342d3234203d3e20313339393832.roa (hash: V9ZamZCw6D4mYhUfCXfPGFZw7f/kJlQ2HuBrz1q+Cyg=)
5: 323430353a636163303a3a2f33322d3332203d3e20313339393832.roa (hash: 8XDzxw0TaLUeJDSAqwkpcBgLpYWoQ6KOKlrexsJYJlI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl
rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 13:09:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:cc:ab:27:27:d7:c2:cc:db:a1:54:eb:2b:b6:e8:4c:c0:3f:e0:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4
Validity
Not Before: Jan 25 11:26:44 2026 GMT
Not After : Jan 28 13:09:44 2026 GMT
Subject: CN=39ED903C4E7442597903F72B722042FE013D1828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:65:be:f5:aa:47:d3:27:b0:29:91:34:6e:47:
9a:35:61:39:11:eb:8e:8a:79:46:c3:80:7a:31:1c:
c6:88:35:e3:c5:eb:6f:9b:d8:2d:1b:76:28:d6:59:
f7:3c:9a:c3:27:4a:56:cf:0e:9e:00:8c:42:dd:70:
ff:04:c2:81:c2:2d:f6:5a:4b:31:2f:7f:d8:18:d9:
50:7d:35:a5:82:3a:2c:15:4c:47:cb:5d:7f:dd:e3:
9a:34:bd:dd:6a:84:1a:48:b6:5a:7c:71:00:41:eb:
71:9d:bc:a0:66:cc:dc:ff:45:58:b0:e7:90:87:c6:
fe:f9:aa:97:10:10:91:52:28:32:e0:d0:42:26:ff:
60:fb:69:9d:83:90:84:46:42:c5:e0:2d:4b:fb:86:
c1:19:0f:eb:0d:28:4e:ba:8f:5a:f6:c1:2a:54:34:
43:35:f3:11:ef:4e:18:d4:98:d8:98:31:60:25:0e:
5f:cb:0f:08:e0:34:70:dc:8a:f0:21:5a:1f:6b:3d:
9d:21:84:b9:b9:2b:cf:fc:74:4d:3a:87:8d:e9:6f:
b3:1e:93:3b:e5:7e:25:6a:84:e7:c1:38:32:1f:fa:
85:8a:16:2c:5e:c4:28:e9:65:e0:70:f2:dc:94:f2:
f0:e7:55:74:32:d9:b5:8a:f5:b6:c4:fe:b4:85:d8:
b4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:ED:90:3C:4E:74:42:59:79:03:F7:2B:72:20:42:FE:01:3D:18:28
X509v3 Authority Key Identifier:
keyid:36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:90:a3:3e:f1:34:56:db:c1:fe:97:0c:22:72:d3:ea:72:50:
5e:11:eb:94:49:6d:8c:96:60:00:67:02:64:1a:75:27:32:65:
99:3f:bd:41:b7:58:34:33:65:38:36:66:eb:c2:8e:e9:e4:c7:
7d:58:7b:b8:02:a1:9c:ef:7d:06:2c:d2:23:85:30:a2:8f:8f:
35:35:0e:5b:d5:b5:5c:10:65:2c:7f:66:e3:b2:4c:c9:ac:67:
a9:17:1b:36:df:ad:1f:1f:98:96:a5:27:fa:a8:36:e6:e2:81:
2d:89:b3:e8:a2:f6:5b:66:dd:ec:da:ed:36:fc:8b:20:20:88:
20:27:70:c4:05:86:99:54:2d:76:1f:79:65:fa:86:bb:f8:b8:
71:00:76:ee:05:fe:ad:ff:76:e2:28:7c:f3:f5:1f:21:6a:ea:
67:04:46:95:03:be:37:a7:36:ca:2c:47:6b:9b:cd:6a:83:a7:
31:14:1a:01:80:2f:05:ed:8b:5a:a4:dc:88:5c:b9:73:f5:21:
8a:90:d3:28:e5:df:eb:1d:25:0f:69:e6:1f:62:80:9e:80:b5:
44:6d:1b:34:e3:04:9f:a8:d2:19:5c:4e:c0:79:81:17:2b:c8:
fa:c0:aa:3f:22:58:1c:6f:e3:ab:86:fa:b3:fc:13:cc:8e:fb:
de:1a:d9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:36:40 2026 by rpki-client