This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft
File: 48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft (raw, json)
Hash identifier: lWU8lmkvXVkMFCDt67iFvQVMqxTywVJ4Ohh5rI2LSt0=
Subject key identifier: 27:42:1C:F1:41:BB:BF:1B:5C:DF:02:2B:EE:49:9C:38:CB:D7:77:BB
Authority key identifier: 48:54:9F:5F:50:A2:AB:C9:3D:8E:6B:9E:C2:07:4F:11:6E:3D:73:B8
Certificate issuer: /CN=48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8
Certificate serial: 60E8D57B94E671B38AB95A9A49955FA1B09ABAA1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft
Manifest number: 03C7
Signing time: Sat 24 Jan 2026 23:21:07 +0000
Manifest this update: Sat 24 Jan 2026 23:16:07 +0000
Manifest next update: Wed 28 Jan 2026 11:15:07 +0000
Files and hashes: 1: 3130332e3136392e3233382e302f32342d3234203d3e20313338383831.roa (hash: P1vMuZbunUFRMJmCFPvVUKKPOpQNGYneEv0PzmT3lQM=)
2: 3130332e3136392e3233392e302f32342d3234203d3e20313338383831.roa (hash: CZs1I8dUPWQDsBqpGNZkzGBe+O9Bk4R+3W5yaMyDGIY=)
3: 3130332e3136392e3233382e302f32332d3233203d3e20313338383831.roa (hash: bsXADU2MANDvYNrthrNZs3NmDaaJZRaO6UbqMjiPRtc=)
4: 48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.crl (hash: M9N/egBhVida3OwLZcDA7ZSi8O88tvlqFr4wAdwVMew=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.crl
rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 11:15:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:e8:d5:7b:94:e6:71:b3:8a:b9:5a:9a:49:95:5f:a1:b0:9a:ba:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8
Validity
Not Before: Jan 24 23:16:07 2026 GMT
Not After : Jan 28 11:15:07 2026 GMT
Subject: CN=27421CF141BBBF1B5CDF022BEE499C38CBD777BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c5:9d:68:17:cc:85:a5:f1:d8:f3:b1:d4:b3:
cf:49:99:aa:02:dd:7a:68:64:53:93:cc:5c:75:ee:
ef:cf:4f:b8:50:1b:1a:41:cc:60:db:69:08:64:e5:
0a:dd:50:30:78:c7:d5:02:77:ca:ba:77:b2:9d:66:
fd:22:8f:1c:4e:9f:b3:5e:b7:e0:44:d2:97:fb:0c:
f7:fa:16:a0:c2:19:01:86:f0:4e:e5:2a:b8:0a:86:
39:bb:57:7c:0a:c4:da:4e:ca:59:03:c6:c4:1a:3d:
e2:8d:28:a5:ba:aa:35:6b:2b:a9:e7:db:ef:9f:4b:
67:e2:0f:c7:61:3e:51:c3:1f:2a:76:3a:02:e5:75:
b4:6b:37:a9:d8:19:b5:eb:aa:28:ff:be:2e:eb:4f:
46:78:47:2f:32:7e:e2:14:17:3c:80:cf:40:c5:d7:
47:1a:e8:0d:8b:ac:f3:23:6f:42:7d:0e:59:20:fa:
f9:2f:d2:e1:3a:9a:be:33:7e:8d:d4:95:9e:85:95:
6f:1e:37:9f:30:b5:e9:45:9f:b7:a3:84:0a:2b:9f:
d0:90:76:07:47:d6:8a:90:14:af:57:1a:30:a9:dc:
83:9a:c4:ca:63:fc:cf:1b:80:22:ea:70:14:8f:92:
2c:b0:84:b1:69:cd:e3:56:db:54:b3:b7:9d:2f:2c:
f9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:42:1C:F1:41:BB:BF:1B:5C:DF:02:2B:EE:49:9C:38:CB:D7:77:BB
X509v3 Authority Key Identifier:
keyid:48:54:9F:5F:50:A2:AB:C9:3D:8E:6B:9E:C2:07:4F:11:6E:3D:73:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:5a:7c:ba:88:31:1c:d7:f7:13:c6:10:95:34:14:83:7e:eb:
b0:a5:47:e2:dc:6a:42:6d:74:52:72:b3:81:6a:7f:c8:94:e7:
df:56:43:2b:c4:43:66:2d:70:c9:9c:11:f5:df:4c:c2:51:b9:
64:a3:d3:b3:d2:46:57:55:15:41:a7:ac:f1:09:62:c9:23:b8:
a8:fd:61:c5:e8:25:0f:31:b5:3e:ec:c6:59:57:2d:c7:03:ef:
46:7d:b4:73:70:08:6a:7e:7f:64:48:f7:ca:93:49:03:d6:ce:
6c:1d:7c:23:ff:1f:e0:b4:a3:1c:1f:0e:0b:1b:2d:4f:56:d0:
9a:15:b9:e0:b2:16:a2:c7:b8:db:21:39:5d:d3:7c:8d:d8:13:
f0:02:fd:34:8a:3f:b9:ba:68:dc:8e:65:9d:06:66:68:fb:49:
a7:f3:7e:75:87:cd:08:b8:9f:97:cd:c5:18:d0:fb:50:25:21:
68:04:10:a7:49:85:42:8c:8d:90:2a:29:cd:0d:b2:d9:cf:92:
f4:68:05:75:11:81:5c:e6:cf:a9:fc:aa:2a:05:be:75:8d:c0:
0f:61:21:24:55:11:f2:a6:e9:c2:8f:9c:60:bd:7c:d3:d6:2b:
77:78:3d:f3:fd:2e:84:31:eb:4c:90:6c:48:5e:9c:7f:a4:61:
60:69:e6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:00:25 2026 by rpki-client