This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft
File: F490341241E1B1C7D170AB872CA39A68309B3F3B.mft (raw, json)
Hash identifier: 4pnouAzuU8X7IJquc0T6299Uey/zv/f1qF2cdLEK3lA=
Subject key identifier: 09:5C:42:98:58:BE:78:5B:8C:A8:50:02:DB:23:B9:9D:85:49:9A:A6
Authority key identifier: F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B
Certificate issuer: /CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
Certificate serial: 664C0BD6CFC40AA6CF48FFBEBE07691BEA9DFE27
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft
Manifest number: 0563
Signing time: Sat 24 Jan 2026 07:51:14 +0000
Manifest this update: Sat 24 Jan 2026 07:46:14 +0000
Manifest next update: Tue 27 Jan 2026 14:40:14 +0000
Files and hashes: 1: 3138322e3235352e302e302f32342d3234203d3e203436303439.roa (hash: CAyWkxyi9LMtsrHYjfAG2boS5jHeuAANIsKyYBMp0r8=)
2: 3138322e3235352e322e302f32342d3234203d3e203436303439.roa (hash: s6t8B9Yb32gbmphUa2yAhVP1WuavRJY2Ru8LFunH5f8=)
3: 3138322e3235352e362e302f32342d3234203d3e203436303439.roa (hash: QRYn8WtwsQRs+x1TkdeVU1UH0/rjpzX3BZt6CYg28oE=)
4: 3138322e3235352e302e302f32322d3232203d3e203436303439.roa (hash: 760KemyA/8CG6teBonQBDvPWQiZb2MFgnxH7YjBubLE=)
5: F490341241E1B1C7D170AB872CA39A68309B3F3B.crl (hash: pGeYdh1qg/aMrYyW6S2avA4Ew+eg3qpZTMnL7mPy52o=)
6: 323030313a6466303a62353a3a2f34382d3438203d3e203436303439.roa (hash: 2VAQFfeqQhEyAnMrmaTI9sSR0U2G484A8xe93rrxtaE=)
7: 3138322e3235352e332e302f32342d3234203d3e203436303439.roa (hash: 916QQrsogPaFL20AzlqFBpH82vUOjVu3r9uBPeIXCrE=)
8: 3138322e3235352e342e302f32342d3234203d3e203436303439.roa (hash: RKttGS5PwJEjpYkkwnYXSXMh2rGPID7tZySIx4z8fXc=)
9: 3138322e3235352e342e302f32322d3232203d3e203436303439.roa (hash: WTHU/5ITLWOOuxdsynAF/KxIVTWen6H2gEJyk6lWAdc=)
10: 3138322e3235352e372e302f32342d3234203d3e203436303439.roa (hash: ZOn1duEgq0Mggi6JeNyv0wxbJd/1uQH8PSmUAhWuNpM=)
11: 3138322e3235352e302e302f32312d3231203d3e203436303439.roa (hash: I1A638CYsM8J+ynZCPmsBPN7YoHXf4XqHlMcOkLKF2I=)
12: 3138322e3235352e312e302f32342d3234203d3e203436303439.roa (hash: /whKyexdqjSOrcGqLso5j6gTdy//noyVQBpRBCINN/I=)
13: 3138322e3235352e352e302f32342d3234203d3e203436303439.roa (hash: q1fJNMSMrTdPYX6ezkyT1Xn0IDgEntngG/ryVwe3mo8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl
rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 14:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:4c:0b:d6:cf:c4:0a:a6:cf:48:ff:be:be:07:69:1b:ea:9d:fe:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
Validity
Not Before: Jan 24 07:46:14 2026 GMT
Not After : Jan 27 14:40:14 2026 GMT
Subject: CN=095C429858BE785B8CA85002DB23B99D85499AA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2e:d4:e0:c6:00:be:f9:4a:19:33:76:15:6e:
30:1d:f1:b0:d5:ea:0e:d4:dc:93:d7:02:55:ca:15:
66:04:b0:29:87:f2:83:bb:14:bc:81:9e:51:11:f9:
db:1f:aa:be:15:05:35:65:8d:8f:c2:ab:59:22:c6:
a2:c3:c5:c7:59:34:f3:68:60:65:c1:b2:e6:74:da:
fd:c6:9b:66:c0:05:49:c8:87:e5:9b:b6:de:70:2e:
4b:34:44:91:47:93:e2:f7:f0:7f:23:e6:54:8f:4f:
52:a7:c2:8e:ee:d1:51:89:37:d3:eb:a7:45:f1:cc:
ba:5a:22:83:cf:77:2b:53:45:2f:1d:d5:8d:7b:df:
7c:fa:3b:eb:44:b3:29:a0:ab:81:7d:1d:0e:a8:78:
62:17:1f:04:cb:51:d3:57:b3:da:c0:f6:52:48:30:
41:72:28:26:fd:f6:8f:42:42:e1:23:fc:50:4f:b3:
5a:c4:6d:a2:21:5e:60:d2:30:d1:0b:32:92:c2:c2:
6e:98:a0:b4:0e:35:59:ae:6e:9b:ea:6e:24:4c:a6:
87:cc:5c:c6:df:8a:23:8d:a7:2a:32:72:12:76:bd:
73:1a:35:26:03:cd:d6:b1:00:51:ac:09:2c:11:eb:
dd:a8:8a:52:a2:49:96:19:b2:90:77:61:45:0e:ef:
de:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:5C:42:98:58:BE:78:5B:8C:A8:50:02:DB:23:B9:9D:85:49:9A:A6
X509v3 Authority Key Identifier:
keyid:F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:16:e2:ba:7f:63:94:99:63:f6:29:39:41:97:41:9d:d2:b1:
17:55:ce:83:21:78:13:67:2a:f7:02:67:69:1f:4e:2f:64:93:
cd:5a:00:08:16:d0:59:a6:5f:04:18:2d:1f:d8:21:cb:95:a3:
10:c7:3f:2c:25:1f:d9:ef:fd:7a:dc:4d:da:d4:e3:94:15:45:
ca:b8:3a:33:35:ea:79:d2:a1:31:a5:27:6d:0e:9d:25:f1:2a:
33:0b:5f:c4:aa:97:63:ad:00:31:5f:61:d2:1f:d2:c8:73:ab:
7c:49:92:5d:50:cf:dc:46:49:66:7c:42:f8:1a:83:5e:2f:10:
8b:61:26:77:31:c0:0e:05:08:d9:ec:cb:7b:84:68:df:2b:6b:
f9:1a:98:ee:f7:08:26:5c:bc:ba:f0:36:3a:1c:12:c8:92:24:
86:56:d9:b4:b4:75:eb:50:50:f7:c0:4b:1c:b3:77:d5:52:3d:
78:5b:32:e1:63:04:b9:15:d5:da:ea:fc:69:b9:d7:e4:5b:58:
c6:e0:67:0c:a3:22:65:84:34:02:f9:de:23:5d:c3:7e:09:d3:
f4:56:77:ca:51:69:aa:fd:b5:71:eb:3c:61:7e:5a:51:f9:da:
63:95:15:e2:a0:9c:50:8f:41:53:b1:c5:50:df:15:df:b0:57:
71:ce:eb:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:11:14 2026 by rpki-client