This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.mft
File: F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.mft (raw, json)
Hash identifier: agOi3NwDl+lNgZHMdsCa/1qcULR1oMwarExVx2qBiQA=
Subject key identifier: F0:54:AD:38:38:84:3C:B0:9F:24:40:15:AF:82:97:2F:1D:16:48:BE
Authority key identifier: F0:61:54:57:40:B6:B6:6A:9D:3C:1D:1F:E4:F3:FD:B5:A4:F6:93:87
Certificate issuer: /CN=F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387
Certificate serial: 0DCC6A2FECC1CD7C0D4030EC3D3B27A9FC8F19CC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.mft
Manifest number: 0423
Signing time: Sun 25 Jan 2026 14:01:37 +0000
Manifest this update: Sun 25 Jan 2026 13:56:37 +0000
Manifest next update: Thu 29 Jan 2026 00:38:37 +0000
Files and hashes: 1: 323430373a366163303a383a3a2f34382d3438203d3e20313431393638.roa (hash: eNWwXCWeYF839zYO7rMMIV3xkBiscdjR2fVL1yHTmFI=)
2: 323430373a366163303a363a3a2f34382d3438203d3e20313431393638.roa (hash: T/o1aeON+5pcPSVvOY4Ob6kz5MQ6qhREksqkwLylLGs=)
3: 323430373a366163303a393a3a2f34382d3438203d3e20313431393638.roa (hash: yNpbjX6gTD89ln+i99OQ8YcqMnJleD0jKIxU7l3uW2g=)
4: 323430373a366163303a373a3a2f34382d3438203d3e20313431393638.roa (hash: atcNnqjFig4yqzcc2NQKhseVRp+SSu5h8Qfgjziyil4=)
5: 323430373a366163303a343a3a2f34382d3438203d3e20313431393638.roa (hash: i0RgwT0qanGUvdxsXMyR7MVxxtMqoKmL58+Eu4f9DWA=)
6: 323430373a366163303a353a3a2f34382d3438203d3e20313431393638.roa (hash: y53KFZA/tHqzsXpGrb+bL9SpP44PyS+GN1rbt/HAxH8=)
7: 323430373a366163303a333a3a2f34382d3438203d3e20313431393638.roa (hash: /VC6Nzqbkey0me4WfOLi7H8x3rryeyAeIA0bOas07CU=)
8: 3130332e3136372e33352e302f32342d3234203d3e20313431393638.roa (hash: X75Y1ke9EhYYnMWTmSs9YygENE9XIc8HW5QtbaF4szA=)
9: 323430373a366163303a31323a3a2f34382d3438203d3e20313431393638.roa (hash: 2uoAvqN/FM14L5lYzO1GVcFvR0u9AsKQ/EUf68eVpD0=)
10: 323430373a366163303a3a2f33322d3332203d3e20313431393638.roa (hash: BYOZ/cPV+fUkHg0+c7RxKqMf19AlU3qFLfOj2NidjIY=)
11: 323430373a366163303a323a3a2f34382d3438203d3e20313431393638.roa (hash: yEBIywXimpkaV6kkZf88ktJaXacXrWtJ0Gm2cewbi/o=)
12: 323430373a366163303a31303a3a2f34382d3438203d3e20313431393638.roa (hash: RSMkgkbZL4J3AjFFRuXF01xRgKPhd/9MO1mI7DC0lXE=)
13: 323430373a366163303a313a3a2f34382d3438203d3e20313431393638.roa (hash: JuWvkFNe6CRMNhByLK16nJkYZTO2k5TO5xniu6RBjQg=)
14: 3130332e3136372e33342e302f32342d3234203d3e20313431393638.roa (hash: 4RGO73jPUEYZsGWgfGegl/rwd/0QbjuHMtgIH17ts/g=)
15: 323430373a366163303a31313a3a2f34382d3438203d3e20313431393638.roa (hash: KAJCu1iCPskRzFApZeKWkG+iUAJWkZs6zCJ/D+YJ9os=)
16: F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.crl (hash: yjBMabWEQT6oa2Dn77VVFhzMjlk3PdqFxBWoI6oPc5w=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.crl
rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:cc:6a:2f:ec:c1:cd:7c:0d:40:30:ec:3d:3b:27:a9:fc:8f:19:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387
Validity
Not Before: Jan 25 13:56:37 2026 GMT
Not After : Jan 29 00:38:37 2026 GMT
Subject: CN=F054AD3838843CB09F244015AF82972F1D1648BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b6:c2:ad:6f:d5:72:74:04:47:e0:07:49:66:
b7:2b:ba:55:19:39:bf:c4:a8:4e:05:34:a6:26:04:
68:dd:fc:61:8d:d3:1e:6e:61:91:a5:47:18:76:3b:
2a:a2:35:2b:9e:a9:f7:5f:5e:fb:3e:69:b9:9c:2b:
73:a8:79:21:11:e3:3d:42:67:8f:eb:2b:9b:f2:2f:
38:a9:d7:28:06:c5:ff:1b:c5:05:af:09:08:34:5a:
17:f9:c3:bf:9e:61:c9:21:5d:54:4e:7f:4c:d2:b2:
10:ab:89:ad:8d:d4:e9:8f:15:e6:28:52:32:86:a8:
fc:ed:ae:5e:2b:cb:9f:9d:a7:d6:6a:30:76:0f:af:
c5:e8:4f:75:22:1e:ca:c7:a0:7a:3b:5c:df:5d:78:
b1:2e:bc:04:f6:d5:7a:a3:a8:54:a6:e3:a2:d1:27:
2c:c5:11:95:d9:30:b0:3c:98:5b:4c:dd:85:1e:7f:
20:17:05:05:f7:d3:e5:d9:44:f3:09:80:0c:3c:e9:
1d:29:5b:93:ce:41:b5:26:9d:bd:73:3e:93:82:c4:
f4:3b:4d:a3:1d:fc:31:27:a3:0a:e2:2b:e8:d5:fc:
97:aa:7e:a9:00:f6:2b:73:b2:d2:52:de:cb:51:68:
08:cb:1a:db:5a:b0:75:7f:db:3b:81:71:40:28:9d:
f3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:54:AD:38:38:84:3C:B0:9F:24:40:15:AF:82:97:2F:1D:16:48:BE
X509v3 Authority Key Identifier:
keyid:F0:61:54:57:40:B6:B6:6A:9D:3C:1D:1F:E4:F3:FD:B5:A4:F6:93:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:cb:b6:64:34:96:f6:e3:01:b1:ef:05:37:33:1e:d3:68:25:
5a:fa:c3:ee:d5:dc:0b:bb:10:86:1f:da:77:19:fe:7a:dd:a3:
c7:a6:02:ba:64:66:dc:55:26:2f:67:02:9a:c5:42:fd:7f:83:
e7:05:24:bd:20:13:fd:56:b5:31:bf:34:62:74:0e:da:22:31:
8f:9f:2b:76:2d:26:a7:e3:86:86:bf:6a:9f:ba:d8:5d:aa:23:
30:b9:29:95:34:1c:d3:8b:c7:74:70:bc:1e:34:38:9b:64:8d:
aa:c3:23:74:80:b5:14:37:37:3f:ff:86:47:05:7c:da:cb:45:
bc:ca:25:d7:78:56:eb:e4:09:f8:60:7d:22:ae:ea:36:47:98:
e3:e7:bd:01:17:fa:c7:fb:9a:4a:ae:42:32:0e:fe:36:ce:07:
fc:ed:02:7f:cb:85:c1:70:39:fd:09:a7:a0:8d:f3:68:ee:7a:
ac:85:86:23:78:d4:18:2d:93:24:36:41:9b:f8:a8:82:50:45:
e0:35:a9:04:93:77:40:18:51:fe:bf:e3:73:a2:ab:06:62:fc:
dd:19:3a:54:7d:16:f4:2e:64:9b:d5:bb:44:f4:ba:78:df:7f:
c6:91:57:d1:55:b9:88:f3:fd:40:ec:12:dc:76:62:d7:91:1e:
f5:93:c4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:00:56 2026 by rpki-client