This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft
File: 456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft (raw, json)
Hash identifier: 28xiyg70S1OS+rK0ivD8HptGdEDO8Pvj4IuDRoJMzZY=
Subject key identifier: 09:27:CE:BF:3F:D5:85:21:8A:DC:E4:B6:B7:37:F0:31:99:66:49:84
Authority key identifier: 45:69:57:B6:E3:2A:BD:15:76:13:6B:F4:B3:9E:C4:CC:AD:97:2F:CD
Certificate issuer: /CN=456957B6E32ABD1576136BF4B39EC4CCAD972FCD
Certificate serial: 0F74147B65C24E31D07C7064AB9E4730AE71FA0C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft
Manifest number: 01E5
Signing time: Sat 24 Jan 2026 07:31:25 +0000
Manifest this update: Sat 24 Jan 2026 07:26:25 +0000
Manifest next update: Tue 27 Jan 2026 13:26:25 +0000
Files and hashes: 1: 3130332e3134302e39302e302f32332d3234203d3e20313338383736.roa (hash: nNtuDch1T6loQOI43k4Pa/PnmvoP73GfE/Ea1GsFAQw=)
2: 323030313a6466303a623538303a3a2f34382d3438203d3e20313338383736.roa (hash: a0pLp5FVIOKCyynC3nqEg0f7XooNhe6lSNrvEp9yAtY=)
3: 3130332e3134302e39312e302f32342d3234203d3e20313338383736.roa (hash: 99LHlaqlJvFBEChHJUY+/SooMeB1+Go2teO3Iar+WnU=)
4: 3130332e3134302e39302e302f32342d3234203d3e20313338383736.roa (hash: TgFFHo7ru8wPRV9QoxZjMRgufeQSRNupm9ex/WNdqlE=)
5: 456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl (hash: wjUKz7Fj7KiJ28N4NGNjKT1A+1FPHO47N/zHXtFflKw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl
rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 13:26:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:74:14:7b:65:c2:4e:31:d0:7c:70:64:ab:9e:47:30:ae:71:fa:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=456957B6E32ABD1576136BF4B39EC4CCAD972FCD
Validity
Not Before: Jan 24 07:26:25 2026 GMT
Not After : Jan 27 13:26:25 2026 GMT
Subject: CN=0927CEBF3FD585218ADCE4B6B737F03199664984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ae:e1:93:51:f1:dc:6c:22:86:1e:d9:71:44:
50:a6:e3:7e:85:35:dc:e7:ad:bb:ac:88:a4:5d:15:
ce:0e:80:35:59:11:fd:1e:53:26:ae:5d:f3:62:42:
e0:4d:a9:14:71:d6:57:39:38:9a:34:d9:a8:b6:70:
c9:15:c7:20:5b:6e:d5:8f:e9:6c:29:c1:72:be:7e:
25:66:66:e5:40:53:15:64:62:28:b7:db:df:50:ce:
67:a4:ec:cd:0c:b7:0f:d0:25:e1:78:0d:a7:53:7e:
c8:34:74:36:8a:7a:c5:ff:dc:36:ec:c3:47:26:cf:
4c:a9:3c:d2:7d:0f:8d:d5:4d:ff:eb:18:d4:cd:d9:
8b:37:ae:17:3e:43:0e:a1:72:99:46:3b:a0:53:16:
0d:c4:f3:60:56:64:bd:48:bb:30:c0:19:e3:37:8a:
d3:e1:d9:82:db:9c:24:08:d4:01:c9:64:ff:d4:b6:
28:72:42:83:cf:1b:e7:f3:7c:51:4b:23:4c:cd:e6:
ec:cc:62:94:7c:43:b6:c1:1c:2c:e2:22:25:f0:5a:
19:00:45:56:a7:3a:f5:82:e3:8e:3d:3e:ed:43:00:
27:86:40:de:3c:41:32:e8:f1:39:da:58:9b:8c:92:
d7:db:de:1b:50:ed:39:0b:d3:c6:48:42:94:f5:71:
2b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:27:CE:BF:3F:D5:85:21:8A:DC:E4:B6:B7:37:F0:31:99:66:49:84
X509v3 Authority Key Identifier:
keyid:45:69:57:B6:E3:2A:BD:15:76:13:6B:F4:B3:9E:C4:CC:AD:97:2F:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:2d:22:98:2d:82:25:2f:b5:a6:63:ed:5c:3d:b9:80:96:44:
c0:2f:30:40:04:cb:dd:01:f2:d0:c0:b8:1d:5b:6c:7d:d6:d1:
fa:f9:6f:4e:4c:aa:fa:e9:86:25:a6:22:c1:7d:3b:8c:a0:bd:
36:c3:d4:07:0d:1b:bb:eb:a4:1f:d1:a0:94:8c:26:e1:ce:c7:
aa:09:48:da:10:bf:0c:61:61:f6:ee:1c:bf:55:2d:78:f1:22:
68:28:e3:92:87:6b:9a:19:ae:3a:b8:b4:81:39:27:d6:a0:29:
92:bd:57:8c:18:69:4c:ec:3f:15:b8:17:62:48:af:80:e2:fd:
9d:5f:39:30:86:b2:e6:2b:8c:2c:44:3c:e5:b0:1e:27:08:33:
c2:0e:7c:c0:30:05:f9:7f:a5:3c:88:25:4d:05:e6:65:8b:86:
47:0b:5c:ad:86:dc:d1:51:54:12:be:89:92:9b:6e:cf:60:55:
e0:25:b3:02:40:40:4d:89:00:f8:d8:91:3e:9a:f8:1a:07:97:
1c:52:d1:2d:da:e8:fb:1a:e0:ec:90:06:a0:13:d5:66:92:19:
63:03:2a:6a:e1:e8:13:08:48:07:03:2e:d0:2d:92:75:44:d0:
fa:1b:df:54:83:12:f4:6c:60:df:2b:84:5f:c1:e5:ca:cc:56:
51:39:94:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:21:00 2026 by rpki-client