This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft
File: 1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft (raw, json)
Hash identifier: AMdtN8qjFqvRIWNRhx2DwYxfFwstvGBUUvfcAE0iBA0=
Subject key identifier: 17:1C:26:BF:BB:D2:AE:A2:92:4B:1D:0D:3A:57:07:5B:EE:79:D5:EB
Authority key identifier: 1E:64:BF:65:05:10:52:D9:13:D7:DB:8C:45:12:F6:15:E3:FA:B9:B2
Certificate issuer: /CN=1E64BF65051052D913D7DB8C4512F615E3FAB9B2
Certificate serial: 0FE7D09C9A974E74F04A9D0E932F3F78BC95D0E4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft
Manifest number: 010A
Signing time: Sun 25 Jan 2026 16:11:11 +0000
Manifest this update: Sun 25 Jan 2026 16:06:11 +0000
Manifest next update: Wed 28 Jan 2026 18:24:11 +0000
Files and hashes: 1: 1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl (hash: 8eE7vVZVUejmEa21CKt+SuNaE2ufTqAREuwdcfTwxVI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl
rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:e7:d0:9c:9a:97:4e:74:f0:4a:9d:0e:93:2f:3f:78:bc:95:d0:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E64BF65051052D913D7DB8C4512F615E3FAB9B2
Validity
Not Before: Jan 25 16:06:11 2026 GMT
Not After : Jan 28 18:24:11 2026 GMT
Subject: CN=171C26BFBBD2AEA2924B1D0D3A57075BEE79D5EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:8d:3d:7b:f9:c0:a7:90:b9:14:6b:af:2a:b8:
ff:26:09:cb:83:e1:c0:3d:3b:04:db:50:23:5e:2d:
b8:58:71:0d:f8:74:23:b4:fd:72:9d:dc:00:d0:2c:
3a:9e:9e:32:cb:d9:93:ec:5c:86:35:15:2d:7e:99:
86:39:df:9a:92:8f:b4:e9:e0:81:db:fd:d5:f7:4d:
e2:34:15:a3:b5:55:50:62:e5:59:91:f0:01:b3:10:
4e:f9:71:9f:a4:b9:eb:d1:e8:fd:ee:a2:94:32:0f:
0d:a6:ca:df:31:cf:75:b2:99:ec:91:46:e8:a1:d1:
65:36:5d:7c:5c:a2:c1:42:5b:3f:f1:96:a3:e0:12:
9f:55:0b:20:c9:50:48:b5:bf:58:85:c9:e4:f8:ae:
56:33:d5:ef:b9:dd:92:2a:d2:ec:62:22:07:c8:a2:
31:6c:fd:d2:57:bc:d2:4b:64:21:3e:9f:00:67:d9:
26:d6:e7:28:69:6c:93:cb:aa:d3:76:94:02:8c:2a:
b0:47:79:6d:5d:63:61:9d:e0:08:20:60:b4:d8:ad:
40:c8:38:36:72:ae:1a:c1:72:d9:a6:4a:b8:4f:09:
ea:60:92:5b:63:7f:69:ea:30:6d:e0:9b:ba:71:83:
42:1d:1e:2b:78:82:d6:c0:49:fb:a4:41:fe:b6:ca:
0c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:1C:26:BF:BB:D2:AE:A2:92:4B:1D:0D:3A:57:07:5B:EE:79:D5:EB
X509v3 Authority Key Identifier:
keyid:1E:64:BF:65:05:10:52:D9:13:D7:DB:8C:45:12:F6:15:E3:FA:B9:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f0:77:3f:7e:2b:15:66:40:c0:97:88:b3:3e:a5:31:6d:17:
fb:5a:cc:c7:fa:43:5d:4e:40:f8:b3:76:5c:23:e3:bc:34:89:
17:89:f1:8b:7c:af:8e:d5:b4:34:92:cf:65:ed:32:48:a7:37:
7e:8f:1d:5c:de:0e:ce:61:49:5d:81:ab:54:b9:a3:78:34:68:
41:68:6c:78:22:4e:b1:3c:68:aa:b0:d7:c6:eb:1f:72:cb:c9:
1d:f8:75:35:e6:1b:56:e5:59:ae:4a:ff:ec:4e:ba:3a:af:3a:
34:a6:3c:5f:9c:59:07:17:39:4d:d8:91:17:eb:ad:10:ce:f2:
42:7c:b6:2a:37:fc:2a:fe:8b:52:56:61:74:ae:71:03:64:5d:
26:4f:87:40:a1:3c:f9:c1:92:f0:1e:8f:3c:a8:a0:72:6c:d0:
94:29:68:d3:c2:9e:f6:7d:b8:0f:13:50:71:fa:33:64:58:f0:
84:63:af:8e:b2:bb:29:49:e2:5f:75:8f:0d:56:44:c7:af:b4:
9d:96:19:4c:6c:ae:b9:7d:6c:fb:ff:82:55:d5:76:ba:24:e9:
ca:a9:0e:15:53:f0:f6:b3:7b:7c:69:2c:be:5a:0b:df:06:05:
f0:d6:d9:42:c9:1d:1f:f1:82:3d:ed:a9:25:26:37:c9:9f:d0:
a0:d8:be:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:38:18 2026 by rpki-client