This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft
File: D51CE7B1B9196EF73BFF65318453095C925ECF91.mft (raw, json)
Hash identifier: EXtF27NJaTg5/CF04z4I3HtXOeQXai1fWDOIy0IY/38=
Subject key identifier: 49:52:0A:99:66:6C:78:C9:81:F6:7C:02:E3:D9:BB:B0:D2:29:B9:1B
Authority key identifier: D5:1C:E7:B1:B9:19:6E:F7:3B:FF:65:31:84:53:09:5C:92:5E:CF:91
Certificate issuer: /CN=D51CE7B1B9196EF73BFF65318453095C925ECF91
Certificate serial: 34250093CD8F1633F353DA18499F8E43ECFC76D7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft
Manifest number: 050D
Signing time: Sat 24 Jan 2026 03:41:19 +0000
Manifest this update: Sat 24 Jan 2026 03:36:19 +0000
Manifest next update: Tue 27 Jan 2026 06:55:19 +0000
Files and hashes: 1: 3130332e3134362e3132382e302f32342d3234203d3e20313430303238.roa (hash: gicJjzX38cvUlj+q/M4Y/XP1+pLgazBAyQOFz8mgKiM=)
2: 3130332e3134362e3132392e302f32342d3234203d3e20313430303238.roa (hash: 1Ph7pIbfyLL/MFd5kaSHsFP+/qk1l1ex5P/+8l18KxM=)
3: 3130332e3134362e3132382e302f32332d3233203d3e20313430303238.roa (hash: yKK3Hq8hEk1LGbPgkhx2NEZ4T23a1BRrLBg1d7QrEfc=)
4: D51CE7B1B9196EF73BFF65318453095C925ECF91.crl (hash: DX6YCNIsP0OdVsHZEV4t4A6rXdMCLSwfMUJ9GZ1ADAY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.crl
rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 06:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:25:00:93:cd:8f:16:33:f3:53:da:18:49:9f:8e:43:ec:fc:76:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D51CE7B1B9196EF73BFF65318453095C925ECF91
Validity
Not Before: Jan 24 03:36:19 2026 GMT
Not After : Jan 27 06:55:19 2026 GMT
Subject: CN=49520A99666C78C981F67C02E3D9BBB0D229B91B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4e:10:d0:ea:ea:86:a2:e7:ad:d4:d0:f2:96:
1e:a3:9c:9a:96:2e:05:07:fc:8a:ad:1e:27:1f:b3:
df:91:4d:bd:c8:03:6a:e5:4f:c0:21:82:a2:e4:7a:
78:cb:21:96:6c:63:03:0e:5e:ec:5d:85:7a:43:a2:
c5:54:05:a1:fd:b0:e5:f9:be:d8:75:f3:20:74:d5:
2a:86:78:99:34:0b:ba:37:70:57:b6:a3:d3:76:d3:
1f:c3:19:9f:b2:bd:6a:d6:28:c7:5e:1b:49:3a:40:
20:63:54:e5:12:c9:ae:ae:99:ae:06:fc:52:73:d3:
d7:a3:ed:69:b8:e3:4a:b7:1d:97:e0:35:a3:87:e1:
41:52:5e:02:e7:a7:a9:a9:44:9f:71:c2:e5:10:cf:
84:f9:0f:84:fb:3f:ce:4b:e0:f6:6e:bd:bc:c6:c5:
e1:e9:02:c0:9c:c3:55:44:da:f6:0a:40:5f:73:12:
42:1a:0d:1d:63:be:8e:7d:76:78:1f:fe:a1:46:9e:
08:11:c0:53:0b:c8:4e:e0:78:22:e2:0b:94:1a:b5:
c2:7e:43:6e:83:02:12:fb:43:8f:57:21:d0:89:34:
19:85:d0:68:08:a0:5d:e2:ab:78:66:b2:f3:da:f2:
3d:cd:d6:14:25:83:3c:ec:1d:d4:3a:16:35:24:e9:
b5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:52:0A:99:66:6C:78:C9:81:F6:7C:02:E3:D9:BB:B0:D2:29:B9:1B
X509v3 Authority Key Identifier:
keyid:D5:1C:E7:B1:B9:19:6E:F7:3B:FF:65:31:84:53:09:5C:92:5E:CF:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:07:80:77:ad:26:f9:3c:fb:39:a5:50:40:9e:8f:66:59:30:
1a:b1:36:11:74:c8:4f:40:ce:14:65:4e:ac:8d:ba:1d:96:ec:
6d:9c:7b:6d:1f:9c:d5:14:b3:e1:a5:94:83:db:65:32:f3:b9:
18:8e:26:73:1a:f6:af:0d:d2:77:43:af:b1:55:69:a2:df:17:
8f:ec:57:2b:ec:75:3f:b6:3c:fd:5a:97:4d:29:de:0e:97:21:
04:ec:90:56:2f:e3:dd:e3:54:0a:6a:cd:9d:e7:42:49:e1:57:
c5:12:c3:05:ac:02:46:44:c9:24:1a:5d:60:19:07:6d:97:fc:
b8:b3:66:d0:02:18:39:1b:48:00:12:9c:dd:1d:ae:bb:52:e5:
42:7b:23:db:6a:02:26:ed:ae:23:d7:ae:6f:6d:61:d3:f7:f3:
0a:40:8a:a1:88:10:eb:ae:da:14:42:76:cb:f9:d8:49:f7:7f:
f2:1a:e7:37:02:14:9d:19:85:96:71:4c:4f:e7:bf:d0:90:9f:
e2:b7:15:70:a8:26:26:96:17:56:50:8a:21:9c:13:22:b3:44:
c2:8c:d7:95:6a:d7:fa:96:e1:02:b7:75:8a:7a:8a:f1:8b:ae:
6f:23:9d:20:ee:32:92:c6:38:25:49:6a:39:6d:0b:ab:95:43:
27:fb:73:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:41:57 2026 by rpki-client