This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/79204255412F26FC4519CA94E35B93EF4E47BC73.mft
File: 79204255412F26FC4519CA94E35B93EF4E47BC73.mft (raw, json)
Hash identifier: 48O8lX5AO32AtBQZe26klKz0EFS+H3tiId/f/T8QGoQ=
Subject key identifier: 0C:75:97:4D:0B:BA:D6:4B:CF:B7:A0:57:A0:4E:B3:C1:A7:91:A6:32
Authority key identifier: 79:20:42:55:41:2F:26:FC:45:19:CA:94:E3:5B:93:EF:4E:47:BC:73
Certificate issuer: /CN=79204255412F26FC4519CA94E35B93EF4E47BC73
Certificate serial: 2A40FDFEB30331CEF0C4400E03229FBD70C7AD3C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79204255412F26FC4519CA94E35B93EF4E47BC73.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/79204255412F26FC4519CA94E35B93EF4E47BC73.mft
Manifest number: 03C2
Signing time: Sun 25 Jan 2026 10:51:13 +0000
Manifest this update: Sun 25 Jan 2026 10:46:13 +0000
Manifest next update: Wed 28 Jan 2026 20:12:13 +0000
Files and hashes: 1: 79204255412F26FC4519CA94E35B93EF4E47BC73.crl (hash: EzVxvFNFxTFprBLIpDVeehfvFPfBupfYIblqWGq7L5A=)
2: 3130332e3136342e32322e302f32332d3234203d3e203137393935.roa (hash: sTN/8QbT7vMBdY4lWuaimWErVYuLZoinw920451use8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/79204255412F26FC4519CA94E35B93EF4E47BC73.crl
rsync://repo-rpki.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/79204255412F26FC4519CA94E35B93EF4E47BC73.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79204255412F26FC4519CA94E35B93EF4E47BC73.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:40:fd:fe:b3:03:31:ce:f0:c4:40:0e:03:22:9f:bd:70:c7:ad:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79204255412F26FC4519CA94E35B93EF4E47BC73
Validity
Not Before: Jan 25 10:46:13 2026 GMT
Not After : Jan 28 20:12:13 2026 GMT
Subject: CN=0C75974D0BBAD64BCFB7A057A04EB3C1A791A632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6d:2d:1f:d0:f2:7d:8f:2a:e0:fa:d3:90:4a:
10:7a:2a:90:b7:b5:af:68:63:26:cd:ba:60:e2:b5:
75:7d:55:16:b6:8a:e6:fb:9b:ff:bb:ed:1b:3b:a9:
7c:99:02:15:d3:33:fd:51:a9:2c:4d:55:f2:80:a9:
64:31:2f:b7:b2:3a:83:dc:22:c4:73:3f:08:57:d4:
cd:88:1b:f9:f1:3b:2c:47:f8:de:41:96:f8:35:7a:
27:20:42:54:9a:89:5b:81:59:41:e5:cc:c4:04:f1:
12:65:98:87:84:60:a9:a5:d5:43:2f:2c:1f:1b:34:
e5:49:e0:d4:dc:fe:47:1e:a0:27:6a:a4:2b:80:66:
26:46:c1:0d:28:03:f1:6f:9b:13:7c:82:d0:76:5d:
a6:d0:62:97:4e:ba:62:c8:b4:31:af:a1:a5:81:9f:
c8:5c:8a:ee:1c:85:e1:a3:3f:30:ca:fb:51:04:30:
28:72:94:4f:5f:e6:e5:82:07:45:99:f1:79:41:5b:
4e:ad:07:df:e4:33:08:29:9a:4e:be:bd:7b:28:9d:
da:9d:0a:8e:0f:ec:64:21:40:eb:c5:90:e0:c4:0d:
01:c8:ce:54:d5:84:1b:ab:06:76:19:16:e0:6b:8d:
49:3d:fa:95:1a:60:69:1c:5f:7b:92:b6:db:1a:45:
f6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:75:97:4D:0B:BA:D6:4B:CF:B7:A0:57:A0:4E:B3:C1:A7:91:A6:32
X509v3 Authority Key Identifier:
keyid:79:20:42:55:41:2F:26:FC:45:19:CA:94:E3:5B:93:EF:4E:47:BC:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/79204255412F26FC4519CA94E35B93EF4E47BC73.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79204255412F26FC4519CA94E35B93EF4E47BC73.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/79204255412F26FC4519CA94E35B93EF4E47BC73.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:75:fd:85:35:4b:c9:dd:50:c8:7d:c6:8d:2e:0b:d0:dd:dc:
6b:eb:87:c5:ab:df:d0:6b:30:29:d1:58:4b:c9:d5:32:e6:fa:
fd:5f:fd:0a:47:74:a7:b8:41:2d:3f:aa:23:b6:1c:d0:04:dc:
6a:2a:cd:47:2c:9c:b9:3e:ac:f8:d8:fc:ca:13:30:7d:c7:79:
14:b2:83:d6:c1:3b:96:47:dd:c4:01:cb:a1:00:f0:b8:06:da:
8f:8d:83:4b:bd:70:fc:a4:d5:56:6e:b2:b3:ea:7f:d3:00:6b:
73:70:a4:bd:de:71:f1:5e:c2:a4:5d:e5:68:5d:91:d5:9d:f5:
87:86:11:cb:ae:2c:cf:3b:55:05:80:64:57:4e:07:b6:78:d4:
17:21:a1:9f:1f:b3:0c:05:f4:ac:50:d9:0c:88:a4:63:11:23:
e7:3f:95:a3:76:a8:a6:09:51:c7:4a:30:6d:fc:11:e4:52:ec:
47:74:2f:1f:b8:dc:bf:38:02:db:bf:dd:f0:96:ef:f2:5f:d6:
88:43:12:72:54:34:21:3f:d3:6d:b5:7e:a3:5f:79:60:1e:0b:
c3:ba:0d:72:bb:bc:72:92:af:65:04:a5:e0:3a:9b:f7:92:1f:
ea:04:e2:55:7d:48:28:d4:e2:19:2e:94:e9:c5:c5:8d:82:1d:
ba:ad:43:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:54:27 2026 by rpki-client