This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft
File: E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft (raw, json)
Hash identifier: Al8keoZjYXfe3qareFbhEQVi4oK4UNRNLfd2zoKM/T0=
Subject key identifier: 67:E3:77:4D:1D:02:05:D3:31:AC:B8:C5:B0:BE:45:CF:5E:B1:BD:35
Authority key identifier: E0:7F:0E:8D:E2:57:2D:C7:B8:13:7E:C0:67:9F:42:64:5D:69:5A:54
Certificate issuer: /CN=E07F0E8DE2572DC7B8137EC0679F42645D695A54
Certificate serial: 28A54EF92713B40E4E4887341F957A1678B58495
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07F0E8DE2572DC7B8137EC0679F42645D695A54.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft
Manifest number: FE
Signing time: Sun 25 Jan 2026 08:50:44 +0000
Manifest this update: Sun 25 Jan 2026 08:45:44 +0000
Manifest next update: Wed 28 Jan 2026 10:29:44 +0000
Files and hashes: 1: 323030313a6466333a666434303a3a2f34382d3438203d3e20313532303535.roa (hash: nQLud3Jn262khF6pI+ZrfSTaiFCpRTXR0OL4+TzR7ac=)
2: E07F0E8DE2572DC7B8137EC0679F42645D695A54.crl (hash: Ly9WSn823UTYdpbI1fWPDa4PJVnw1LwRPSnY45Lil0o=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.crl
rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07F0E8DE2572DC7B8137EC0679F42645D695A54.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 10:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:a5:4e:f9:27:13:b4:0e:4e:48:87:34:1f:95:7a:16:78:b5:84:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E07F0E8DE2572DC7B8137EC0679F42645D695A54
Validity
Not Before: Jan 25 08:45:44 2026 GMT
Not After : Jan 28 10:29:44 2026 GMT
Subject: CN=67E3774D1D0205D331ACB8C5B0BE45CF5EB1BD35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cc:62:36:08:1c:54:1a:08:06:28:36:68:57:
df:66:86:f7:86:bd:7a:d2:bd:d7:12:f4:e1:52:d8:
07:ae:93:4b:c4:f7:95:36:b9:15:bd:34:3c:96:0e:
d8:98:73:03:65:fe:66:a8:70:8c:5a:46:f1:3c:82:
44:bd:67:6a:2a:b9:90:55:98:a1:06:15:a2:37:8a:
31:47:f8:b4:93:c0:b2:08:5f:05:e3:46:cb:40:ae:
93:4e:94:f0:46:2f:6c:e9:7f:6c:c5:97:1c:88:5a:
55:e4:45:64:67:ea:e8:72:7d:74:55:59:b4:c7:41:
39:5f:51:e8:c6:7c:08:4e:c3:99:19:c4:f5:1d:54:
a9:a3:56:22:4f:80:69:37:8b:23:24:c4:a9:0e:b2:
14:7c:07:b6:0b:bc:d9:cb:df:8d:2a:6d:60:75:de:
f3:d3:b5:b0:c2:6b:64:d3:c7:bc:f8:ff:dc:83:8b:
90:33:3a:d1:17:e2:e8:4a:cc:de:d2:0d:92:57:39:
6b:37:fb:2f:3e:53:3d:25:a2:81:de:15:e5:f8:e3:
f2:46:6e:5f:46:75:c4:79:2d:73:c0:c0:9d:6e:1e:
c6:d2:aa:b1:e1:d0:2d:f5:c2:d0:f1:7b:d7:6b:2e:
0c:45:67:a0:59:02:75:9a:e0:42:65:ca:40:c0:ad:
46:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E3:77:4D:1D:02:05:D3:31:AC:B8:C5:B0:BE:45:CF:5E:B1:BD:35
X509v3 Authority Key Identifier:
keyid:E0:7F:0E:8D:E2:57:2D:C7:B8:13:7E:C0:67:9F:42:64:5D:69:5A:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07F0E8DE2572DC7B8137EC0679F42645D695A54.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:dc:a3:89:51:d5:80:b1:45:90:12:37:bb:37:0e:ee:2f:9c:
8e:86:fc:d4:9f:76:07:1f:e4:62:0d:bb:16:98:64:db:e4:9a:
c6:ee:36:1d:43:b6:81:67:8e:ed:2f:3c:b8:e9:2c:73:0f:ec:
ae:c1:6a:fb:61:23:24:1e:50:73:80:57:21:cd:bb:5a:39:35:
e5:af:1d:ab:57:27:9d:2e:e9:9b:8d:0d:fc:f4:61:c8:ff:02:
31:6d:93:87:97:ce:c9:d6:eb:0a:cb:87:38:f1:62:2b:17:af:
6c:c9:e8:59:84:ca:2a:ff:69:d1:32:38:e3:d0:69:ed:25:6a:
2c:76:e8:12:88:54:4c:e4:9d:b3:6d:ea:62:39:67:74:c5:4e:
08:41:2c:90:5d:dc:56:02:68:eb:17:52:2c:33:6e:dc:2c:a5:
68:23:1c:00:dc:f0:a7:98:8a:3f:53:f5:fd:1d:95:2b:b3:16:
dc:96:a0:53:4f:d7:19:87:4d:ef:21:62:77:05:f6:d9:35:11:
4d:f6:37:bb:a1:80:bf:62:09:7c:a3:0b:f5:97:67:47:c1:ec:
a2:d2:fa:f9:46:34:b3:03:5c:ef:0e:d9:8a:bd:aa:cf:0d:b5:
39:26:b2:e0:e6:5b:4a:22:88:28:a4:81:a2:f0:05:7f:8c:d2:
e5:4e:3e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:23:43 2026 by rpki-client