This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.mft
File: 7195906BF48238F96B0510D75000910A519133F7.mft (raw, json)
Hash identifier: gwQEXRuca0b9CGwiJNAOuRmTvFwjYgJ2NGdJXMwxVLw=
Subject key identifier: B9:E1:58:83:CD:73:33:8B:6C:FF:86:51:46:EA:01:BF:D9:B3:72:80
Authority key identifier: 71:95:90:6B:F4:82:38:F9:6B:05:10:D7:50:00:91:0A:51:91:33:F7
Certificate issuer: /CN=7195906BF48238F96B0510D75000910A519133F7
Certificate serial: 2F4BAC4033047050C90248E10C23E83D91B8178F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7195906BF48238F96B0510D75000910A519133F7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.mft
Manifest number: 01DB
Signing time: Sat 24 Jan 2026 19:21:39 +0000
Manifest this update: Sat 24 Jan 2026 19:16:39 +0000
Manifest next update: Wed 28 Jan 2026 00:36:39 +0000
Files and hashes: 1: 3130332e3136382e3135302e302f32342d3234203d3e20313432333131.roa (hash: FbNYGlqllOlMcgZqW/AYQTW3Ig+jNpTHmcZ/SLk/YWc=)
2: 7195906BF48238F96B0510D75000910A519133F7.crl (hash: KZIZSuStzgehOWlwXrQVHAYmKc4R/Cr3npKKhZ1C1ss=)
3: 3130332e3136382e3135312e302f32342d3234203d3e20313432333131.roa (hash: s6WBhLaUVIxSMrwUa1GyQKxiSJ5Lxm0zhF+JRIxoxjM=)
4: 3130332e3136382e3135302e302f32332d3233203d3e20313432333131.roa (hash: vej87BChpsakmxUSnkAXWyF/hseNZHZfP/+A76YToPE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.crl
rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7195906BF48238F96B0510D75000910A519133F7.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 00:36:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:4b:ac:40:33:04:70:50:c9:02:48:e1:0c:23:e8:3d:91:b8:17:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7195906BF48238F96B0510D75000910A519133F7
Validity
Not Before: Jan 24 19:16:39 2026 GMT
Not After : Jan 28 00:36:39 2026 GMT
Subject: CN=B9E15883CD73338B6CFF865146EA01BFD9B37280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:26:53:e6:00:62:eb:29:40:26:88:48:62:23:
f7:9b:55:71:b9:1e:5d:2e:67:a4:46:57:7a:26:24:
a2:08:12:d5:ba:6e:9d:e4:68:0f:82:e0:60:bc:63:
1f:ef:0e:0a:d9:d2:8a:ac:5d:20:37:4d:b0:4b:d4:
f4:63:67:39:c0:7f:bb:80:0a:52:fc:69:24:8a:42:
a1:17:12:95:13:b9:3e:6d:a7:98:a3:d5:26:6a:16:
db:7c:cc:23:79:61:f4:3f:3f:0e:25:c1:f4:48:34:
1f:df:75:1d:87:a5:33:6e:e7:21:f2:99:61:1a:2b:
d1:0c:c1:25:88:93:b2:62:9d:f3:0d:74:07:0c:a4:
51:a9:28:f7:72:4e:d3:db:81:a7:31:14:ee:43:66:
13:85:5f:b9:b8:33:71:24:42:6c:ad:fe:05:21:9d:
7d:ef:00:09:06:a2:83:aa:78:f5:b7:11:62:79:97:
cd:f0:7f:5e:d8:91:10:fb:8f:bc:f8:e7:4e:c1:8e:
7b:37:79:08:85:e2:75:c3:de:f6:2c:ba:df:b1:92:
b2:4e:d7:11:6c:6f:93:89:c6:ec:d0:0c:ec:b6:6d:
ad:28:6d:31:5e:97:f0:76:39:69:10:a5:47:fd:46:
5f:58:36:2e:93:eb:d7:ab:25:6f:a5:6b:5c:eb:14:
33:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E1:58:83:CD:73:33:8B:6C:FF:86:51:46:EA:01:BF:D9:B3:72:80
X509v3 Authority Key Identifier:
keyid:71:95:90:6B:F4:82:38:F9:6B:05:10:D7:50:00:91:0A:51:91:33:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7195906BF48238F96B0510D75000910A519133F7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:ab:3b:31:f8:0e:88:15:92:5a:39:85:ed:5c:4b:39:d9:85:
c9:1f:b0:07:43:38:c8:89:90:38:25:35:38:00:1c:5b:93:e4:
7d:6e:b0:1b:97:e0:86:e0:1b:51:c6:35:1a:9d:86:cd:92:12:
73:6d:c8:55:4c:98:17:1f:30:22:49:3a:59:88:5f:ce:d3:f9:
95:a2:6c:a9:44:8a:2f:e4:08:dc:aa:a5:3d:c8:38:c4:13:9b:
9c:1d:2f:6a:2f:1b:7c:4e:c7:7c:90:6f:a4:a9:63:7d:3e:1d:
62:d1:b5:34:b6:c6:13:bf:9a:b4:e5:09:50:d6:ef:36:1f:f0:
47:f7:a9:8b:08:5d:bb:01:22:9d:cd:f1:3a:0a:2c:c3:c8:6c:
45:aa:cd:51:28:b6:8e:4a:03:c6:89:bf:e9:f4:da:03:71:23:
51:5b:2d:29:c4:a1:9a:d8:d5:67:a3:19:31:50:79:63:d2:59:
e8:0e:20:9a:6b:1a:0d:44:b7:27:97:5f:e7:21:6b:4a:7f:19:
63:4e:54:e9:eb:35:83:83:c5:a3:25:0d:5a:c7:22:6c:2d:22:
9d:f2:dd:64:c9:4a:45:ed:90:74:d9:73:37:ae:f2:00:13:6f:
27:89:e3:52:1b:79:20:22:25:be:d2:ee:6a:11:d2:64:e6:c5:
d2:d0:25:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:40:14 2026 by rpki-client