This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft
File: 1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft (raw, json)
Hash identifier: tv/FYCbc+8iV5aJb6rvFuTJnQqb3MD95FFFfLUR7CHI=
Subject key identifier: 1C:3D:79:88:E3:9D:62:9C:C6:BB:25:92:26:B4:02:31:87:56:06:96
Authority key identifier: 10:07:D1:5C:BB:EA:AB:DE:19:9A:EF:BC:2A:3F:E3:17:B7:57:BD:23
Certificate issuer: /CN=1007D15CBBEAABDE199AEFBC2A3FE317B757BD23
Certificate serial: 1C985C9160765DAF9149AAC5FF890C8A32D771CD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft
Manifest number: 023B
Signing time: Sat 24 Jan 2026 10:12:03 +0000
Manifest this update: Sat 24 Jan 2026 10:07:03 +0000
Manifest next update: Tue 27 Jan 2026 13:17:03 +0000
Files and hashes: 1: 1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl (hash: aO8dVy8N6BcWBAHFNRi7O23a46u+x8JotkPcgrncxcI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl
rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 13:17:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:98:5c:91:60:76:5d:af:91:49:aa:c5:ff:89:0c:8a:32:d7:71:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1007D15CBBEAABDE199AEFBC2A3FE317B757BD23
Validity
Not Before: Jan 24 10:07:03 2026 GMT
Not After : Jan 27 13:17:03 2026 GMT
Subject: CN=1C3D7988E39D629CC6BB259226B4023187560696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c4:52:5e:03:39:26:6f:2a:57:17:e5:bf:74:
5e:6f:cc:6c:7c:9e:bf:ec:4e:27:a2:ae:e3:a9:eb:
53:0d:2e:f7:af:fa:57:b7:6e:4a:3a:23:f5:83:25:
5d:56:21:98:d4:3f:c6:9e:a3:b0:96:87:9a:18:42:
1a:a2:4f:5d:db:dc:20:66:81:30:95:56:f7:ee:75:
17:b7:22:ec:cf:52:6f:17:b4:b7:fe:fc:bc:94:27:
4e:1d:6a:61:3b:4f:e3:59:90:5e:d0:37:58:16:98:
f8:8d:b0:21:bc:ed:c2:15:7e:ae:4c:29:f5:12:81:
5d:5c:f6:27:65:6a:b5:4b:52:4f:f9:5a:2e:95:b9:
47:71:23:fc:8b:ae:7c:b4:2e:db:f8:3b:e1:9e:6b:
c0:23:f3:26:6a:4b:fa:e4:a9:79:ad:bb:2f:b4:d6:
2c:f2:7c:e1:dd:9b:28:01:bc:fd:15:4e:d6:74:a9:
ff:6c:56:97:aa:99:30:68:6d:ad:93:a3:9e:bf:2c:
38:8d:60:44:45:49:b9:08:7a:0f:bd:5b:b1:fc:4f:
28:87:07:94:88:80:17:c2:7d:f2:c2:24:fb:d0:af:
9b:d8:81:f8:0e:c5:f0:81:8c:55:1a:70:9b:ae:8e:
7f:13:9d:50:f4:4d:74:f9:93:11:8f:0c:45:42:38:
37:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3D:79:88:E3:9D:62:9C:C6:BB:25:92:26:B4:02:31:87:56:06:96
X509v3 Authority Key Identifier:
keyid:10:07:D1:5C:BB:EA:AB:DE:19:9A:EF:BC:2A:3F:E3:17:B7:57:BD:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:82:69:b0:aa:af:d4:f6:cf:7c:5a:18:7e:e3:94:8f:41:86:
05:13:c0:d2:43:38:ca:fb:62:ed:76:18:a2:21:09:da:8a:a5:
c2:4f:4e:60:52:b7:25:c3:fd:45:e3:91:24:84:58:e5:89:8b:
9a:d4:74:5a:8e:93:15:cd:af:33:0e:20:4f:a7:c5:80:97:2b:
69:3f:a9:37:0c:43:97:d9:85:76:78:73:75:d6:32:12:f6:37:
ce:bd:af:02:fb:bb:eb:03:a4:17:57:fc:2f:39:7e:45:75:5c:
cb:24:67:ce:d1:74:e1:d8:3a:3b:4f:df:71:2a:e6:46:80:bb:
f3:04:81:df:47:e4:a5:a8:2b:65:4c:0f:c4:da:72:49:4e:73:
c0:e7:7a:99:c1:78:63:d9:2f:d6:b3:6d:2b:ac:1b:f5:59:6a:
0f:78:ab:14:7c:1a:bc:36:6e:f3:db:a2:ad:98:1e:ba:d9:a3:
17:d4:05:0b:5b:ad:5b:99:f2:04:5b:1d:84:50:a4:ba:c9:64:
9d:93:25:04:8f:e8:a7:0e:e8:6b:e3:97:c5:6e:34:8b:1d:bc:
50:0b:dd:53:cc:0f:91:af:76:48:0d:94:5a:de:72:a5:e7:88:
7a:7c:3a:cf:4b:47:96:51:c4:e3:7c:73:5f:d3:ea:1e:20:62:
df:11:fb:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:42:42 2026 by rpki-client