This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft File: 12345F115AC4B62A51F5274C54C81E86463BD0BA.mft (raw, json) Hash identifier: l8rGnde20GSIWZif6m+azyvAeh1HJ92l7uNWod24BxU= Subject key identifier: D8:D9:C4:45:72:C3:70:BF:A0:B0:93:FB:B0:3E:56:34:0A:F2:29:9C Authority key identifier: 12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA Certificate issuer: /CN=A91862140000/serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Certificate serial: 66825D8063CC48BD8E9DC4E8EDB4F082C9872D29 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft Manifest number: 0547 Signing time: Sat 24 Jan 2026 18:00:38 +0000 Manifest this update: Sat 24 Jan 2026 17:55:38 +0000 Manifest next update: Tue 27 Jan 2026 22:24:38 +0000 Files and hashes: 1: 55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer (hash: 5GheOB3UnfwRWeCo8/5o8Y/Ft2slsbsMBmf5vac32Sw=) 2: 12345F115AC4B62A51F5274C54C81E86463BD0BA.crl (hash: 46myVKdNAiGQrtHOwaW3vkly3I3OPJ47riIMinVNUoQ=) 3: 38322e3135382e3132382e302f31392d3234203d3e2039333431.roa (hash: kXLN0HaZu/PhLPiFi30mit71JHQuO6u1X5gZIB305jg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 22:24:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:82:5d:80:63:cc:48:bd:8e:9d:c4:e8:ed:b4:f0:82:c9:87:2d:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Validity Not Before: Jan 24 17:55:38 2026 GMT Not After : Jan 27 22:24:38 2026 GMT Subject: CN=D8D9C44572C370BFA0B093FBB03E56340AF2299C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b7:d8:22:aa:04:ee:8c:a7:2a:74:00:8b:63: 23:ab:75:7d:5d:5b:b9:7a:3d:21:ea:7f:50:19:d8: 77:f7:b7:c6:97:c4:9e:99:98:bf:d4:46:7b:97:96: 41:b2:3b:9f:96:68:6f:9a:2c:23:6c:f1:8b:84:14: d3:80:33:93:46:a6:03:a6:16:1d:f3:b1:94:8f:97: fc:fb:60:b0:fd:f0:f7:73:13:68:31:c8:0b:15:3f: 64:30:48:ea:b3:c6:46:32:e3:a1:a3:f8:90:d6:9e: 83:21:43:27:2d:73:dc:be:4a:ec:95:b4:5c:e1:65: 51:22:e2:f7:39:a2:05:ab:b1:54:b7:40:c8:32:37: 28:bb:70:35:fd:48:78:93:67:1c:8e:a9:21:1f:3b: 6e:3c:d0:89:1c:83:cd:87:2c:c0:b3:ea:b6:38:2b: 76:e3:55:e6:82:01:44:d5:91:df:f3:56:ae:76:99: 5e:2d:48:54:df:7a:8f:c6:39:1a:6c:55:87:ad:d8: c1:4a:fc:c2:3e:1f:b4:61:9d:25:c9:82:1c:a4:8f: 0f:17:82:2a:52:ef:d5:f5:0d:46:07:fe:48:c3:63: 5a:ba:cb:c0:fc:da:6b:1c:f7:24:fc:6b:60:b3:17: db:a2:32:c7:e9:f2:35:a2:ec:d1:fe:88:31:fb:db: 62:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D9:C4:45:72:C3:70:BF:A0:B0:93:FB:B0:3E:56:34:0A:F2:29:9C X509v3 Authority Key Identifier: keyid:12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:2a:20:90:bc:2f:c0:72:d8:e9:c7:a4:40:f0:38:96:b2:51: 3b:83:14:b7:67:94:f7:71:cb:17:0e:71:4d:b7:59:38:c2:58: 8c:29:64:b2:c6:05:00:75:c9:f4:d0:35:82:65:09:6c:49:85: c0:fd:5c:d4:7e:14:35:96:85:bd:89:c7:28:ff:fd:64:71:e6: 15:27:88:9d:2a:48:ff:cc:a9:ba:2c:47:36:e2:74:e1:5b:f5: 07:eb:2e:11:0d:ef:9e:05:c5:a3:6b:58:39:e1:dd:92:98:e2: ac:f1:6f:78:01:84:41:aa:39:af:40:d4:77:af:c4:bc:de:7a: 52:a1:56:2d:e6:a5:ed:a3:03:4f:1a:a9:ec:c3:27:c1:01:b9: 50:da:46:cf:c5:03:9d:2d:d6:f2:18:06:5c:3f:43:c6:05:2d: 91:9f:7a:fb:16:40:72:ac:4c:eb:72:cc:e3:8c:5e:87:63:df: 93:37:d1:c8:7c:e0:8e:a0:d9:5b:79:d9:1b:56:a3:2b:25:c7: 06:b6:79:b0:0e:01:9a:4a:a3:17:33:08:73:df:90:cb:bb:c5: 32:2e:ae:97:0f:1b:89:01:0d:ab:d3:ed:29:98:2c:29:bc:c6: c8:09:e6:0b:88:5f:e6:26:93:75:00:42:37:2d:94:ce:73:bb: e7:d8:8c:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgIUZoJdgGPMSL2OncTo7bTwgsmHLSkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEygxMjM0NUYxMTVB QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBMB4XDTI2MDEyNDE3NTUzOFoX DTI2MDEyNzIyMjQzOFowMzExMC8GA1UEAxMoRDhEOUM0NDU3MkMzNzBCRkEwQjA5 M0ZCQjAzRTU2MzQwQUYyMjk5QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK+32CKqBO6Mpyp0AItjI6t1fV1buXo9Iep/UBnYd/e3xpfEnpmYv9RGe5eW QbI7n5Zob5osI2zxi4QU04Azk0amA6YWHfOxlI+X/PtgsP3w93MTaDHICxU/ZDBI 6rPGRjLjoaP4kNaegyFDJy1z3L5K7JW0XOFlUSLi9zmiBauxVLdAyDI3KLtwNf1I eJNnHI6pIR87bjzQiRyDzYcswLPqtjgrduNV5oIBRNWR3/NWrnaZXi1IVN96j8Y5 GmxVh63YwUr8wj4ftGGdJcmCHKSPDxeCKlLv1fUNRgf+SMNjWrrLwPzaaxz3JPxr YLMX26Iyx+nyNaLs0f6IMfvbYmUCAwEAAaOCAgkwggIFMB0GA1UdDgQWBBTY2cRF csNwv6Cwk/uwPlY0CvIpnDAfBgNVHSMEGDAWgBQSNF8RWsS2KlH1J0xUyB6GRjvQ ujAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMC8xMjM0NUYxMTVBQzRCNjJB NTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CMzIy QTVGNDFENjYxMUUyQTNGMjdGN0M3MkZEMUZGMi9FalJmRVZyRXRpcFI5U2RNVk1n ZWhrWTcwTG8uY2VyMHQGCCsGAQUFBwELBGgwZjBkBggrBgEFBQcwC4ZYcnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMC8xMjM0NUYxMTVB QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAciogkLwv wHLY6cekQPA4lrJRO4MUt2eU93HLFw5xTbdZOMJYjClkssYFAHXJ9NA1gmUJbEmF wP1c1H4UNZaFvYnHKP/9ZHHmFSeInSpI/8ypuixHNuJ04Vv1B+suEQ3vngXFo2tY OeHdkpjirPFveAGEQao5r0DUd6/EvN56UqFWLeal7aMDTxqp7MMnwQG5UNpGz8UD nS3W8hgGXD9DxgUtkZ96+xZAcqxM63LM44xeh2PfkzfRyHzgjqDZW3nZG1ajKyXH BrZ5sA4BmkqjFzMIc9+Qy7vFMi6ulw8biQENq9PtKZgsKbzGyAnmC4hf5iaTdQBC Ny2UznO759iMhA== -----END CERTIFICATE-----Generated at Sun Jan 25 18:57:26 2026 by rpki-client