This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft
File: 7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft (raw, json)
Hash identifier: UlxQng3OWPRle1SVOftsAyU4nill3FQIEtVMdyVoajI=
Subject key identifier: 05:D2:0A:A5:53:4A:54:81:93:79:FD:D4:EE:41:56:D0:1A:C8:DD:A5
Authority key identifier: 7D:50:8B:22:53:50:B0:D2:04:F1:94:3F:4F:53:D4:D8:6A:C4:FC:31
Certificate issuer: /CN=7D508B225350B0D204F1943F4F53D4D86AC4FC31
Certificate serial: 4469985A8D401B5F7A23D6ADF2E297103288F4AD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft
Manifest number: EE
Signing time: Sat 24 Jan 2026 07:52:11 +0000
Manifest this update: Sat 24 Jan 2026 07:47:11 +0000
Manifest next update: Tue 27 Jan 2026 13:10:11 +0000
Files and hashes: 1: 7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl (hash: 4qtsWf33jrSiai+QAwNJ8A3/h8OhDNNd6hGQ51mDaIY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl
rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 13:10:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:69:98:5a:8d:40:1b:5f:7a:23:d6:ad:f2:e2:97:10:32:88:f4:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D508B225350B0D204F1943F4F53D4D86AC4FC31
Validity
Not Before: Jan 24 07:47:11 2026 GMT
Not After : Jan 27 13:10:11 2026 GMT
Subject: CN=05D20AA5534A54819379FDD4EE4156D01AC8DDA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:17:08:9f:89:c6:92:0a:4e:b1:34:43:75:48:
77:9f:bb:0f:64:21:b1:d5:75:eb:2e:4f:d2:4b:ff:
14:fe:7c:c7:f8:52:58:6d:da:36:65:20:b7:25:22:
cf:4b:13:ad:1e:00:6d:72:50:fd:e0:df:63:5f:fd:
27:79:92:c8:40:cd:89:5d:7b:bc:0b:3d:ac:0b:13:
3a:7d:cd:ec:6c:a0:72:4e:25:30:ea:56:84:08:6b:
87:30:ae:6c:d9:75:16:96:ce:b7:40:e3:d4:dc:4f:
1c:4f:c5:fe:4d:e7:f8:da:32:fc:62:c2:9c:0e:34:
0c:5d:f4:c9:af:4f:aa:8c:cc:5d:88:eb:ec:4e:ea:
4e:2f:4f:06:a5:f5:2d:8d:3e:aa:b1:8d:f0:4f:e0:
66:30:b3:01:8f:b8:dc:8c:a5:1b:08:2b:cd:0e:42:
8e:d6:dc:ba:20:60:f3:5e:cf:75:2d:e1:a6:82:ec:
57:7f:31:60:95:f7:d6:cd:ed:0c:ff:12:a3:0c:f4:
56:a0:b3:9c:3a:08:87:b2:8e:6e:4b:0a:53:75:f6:
c8:f0:90:ac:ae:b7:90:32:72:d7:19:f7:6f:17:5d:
bf:f6:69:b8:8d:99:cf:b4:ea:e0:19:e7:8e:1e:58:
08:5e:07:ba:0c:b4:1f:b9:e8:b8:57:bf:4f:06:0e:
ee:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D2:0A:A5:53:4A:54:81:93:79:FD:D4:EE:41:56:D0:1A:C8:DD:A5
X509v3 Authority Key Identifier:
keyid:7D:50:8B:22:53:50:B0:D2:04:F1:94:3F:4F:53:D4:D8:6A:C4:FC:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:24:fd:24:77:87:85:9f:9e:d0:88:a0:a7:05:3c:50:b8:ef:
33:0f:af:2f:ad:01:6b:3e:ea:18:21:5d:85:eb:cb:50:ab:f2:
3b:82:c9:31:fe:95:7c:b8:28:7c:b6:e0:98:79:3d:92:36:94:
ff:dc:80:f0:85:c7:3e:34:f0:83:38:7f:3d:eb:e2:49:ef:14:
6c:20:8a:35:09:a0:27:e6:51:c7:73:6f:f2:24:04:d7:a4:65:
79:5e:91:45:98:5b:c7:e6:30:af:43:89:82:de:31:f2:d3:ca:
df:08:c7:12:1e:71:88:a6:06:7a:0c:62:6a:c1:52:e8:c7:23:
cb:99:b5:6b:3c:08:e9:33:1b:b4:87:50:08:5f:ae:8a:47:30:
5b:f0:64:94:cf:be:0b:7a:b1:63:77:18:84:4d:68:2f:e8:60:
c5:56:8d:c1:87:2d:c8:5b:75:a4:51:c8:da:c8:19:a9:54:73:
e9:36:06:f6:37:9d:b0:33:e7:34:ba:12:55:d2:1a:41:45:3d:
9c:af:72:c1:9c:06:19:a5:03:9f:e8:53:f9:00:95:5e:02:1b:
9f:ee:e9:63:e2:7e:86:68:20:a7:1c:bf:82:6d:7c:f5:a1:86:
5c:ae:3c:7a:0b:71:22:18:58:28:a4:95:e1:42:83:90:ab:45:
ec:61:1e:88
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIURGmYWo1AG196I9at8uKXEDKI9K0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0RDg2
QUM0RkMzMTAeFw0yNjAxMjQwNzQ3MTFaFw0yNjAxMjcxMzEwMTFaMDMxMTAvBgNV
BAMTKDA1RDIwQUE1NTM0QTU0ODE5Mzc5RkRENEVFNDE1NkQwMUFDOEREQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6FwificaSCk6xNEN1SHefuw9k
IbHVdesuT9JL/xT+fMf4Ulht2jZlILclIs9LE60eAG1yUP3g32Nf/Sd5kshAzYld
e7wLPawLEzp9zexsoHJOJTDqVoQIa4cwrmzZdRaWzrdA49TcTxxPxf5N5/jaMvxi
wpwONAxd9MmvT6qMzF2I6+xO6k4vTwal9S2NPqqxjfBP4GYwswGPuNyMpRsIK80O
Qo7W3LogYPNez3Ut4aaC7Fd/MWCV99bN7Qz/EqMM9Fags5w6CIeyjm5LClN19sjw
kKyut5AyctcZ928XXb/2abiNmc+06uAZ544eWAheB7oMtB+56LhXv08GDu7zAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUBdIKpVNKVIGTef3U7kFW0BrI3aUwHwYDVR0j
BBgwFoAUfVCLIlNQsNIE8ZQ/T1PU2GrE/DEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
YjNiMjMwYS1mZmYxLTQ3ZjAtYmY5MS03Y2ViOGQzNjA5NmUvMC83RDUwOEIyMjUz
NTBCMEQyMDRGMTk0M0Y0RjUzRDREODZBQzRGQzMxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0RDg2QUM0
RkMzMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWIzYjIzMGEtZmZmMS00N2YwLWJm
OTEtN2NlYjhkMzYwOTZlLzAvN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0
RDg2QUM0RkMzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACMk/SR3h4WfntCIoKcFPFC47zMPry+tAWs+
6hghXYXry1Cr8juCyTH+lXy4KHy24Jh5PZI2lP/cgPCFxz408IM4fz3r4knvFGwg
ijUJoCfmUcdzb/IkBNekZXlekUWYW8fmMK9DiYLeMfLTyt8IxxIecYimBnoMYmrB
UujHI8uZtWs8COkzG7SHUAhfropHMFvwZJTPvgt6sWN3GIRNaC/oYMVWjcGHLchb
daRRyNrIGalUc+k2BvY3nbAz5zS6ElXSGkFFPZyvcsGcBhmlA5/oU/kAlV4CG5/u
6WPifoZoIKccv4JtfPWhhlyuPHoLcSIYWCikleFCg5CrRexhHog=
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:19:53 2026 by rpki-client