This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft
File: 03832B38693F0F23EF49480775A2493B9E3F7FA0.mft (raw, json)
Hash identifier: eNSmxdNLQwY/1OVp/KaizO439atxm0piu6yGPvJuOEw=
Subject key identifier: 96:97:B4:95:79:EE:0A:B5:43:88:33:3B:FC:E5:D1:BA:1E:18:C0:33
Authority key identifier: 03:83:2B:38:69:3F:0F:23:EF:49:48:07:75:A2:49:3B:9E:3F:7F:A0
Certificate issuer: /CN=03832B38693F0F23EF49480775A2493B9E3F7FA0
Certificate serial: 6684AC04875764AD61826AFD4C329C1E65F3AA42
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03832B38693F0F23EF49480775A2493B9E3F7FA0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft
Manifest number: 0365
Signing time: Sun 25 Jan 2026 16:00:54 +0000
Manifest this update: Sun 25 Jan 2026 15:55:54 +0000
Manifest next update: Wed 28 Jan 2026 17:42:54 +0000
Files and hashes: 1: 3130332e3135352e3235302e302f32332d3234203d3e203137383834.roa (hash: C109hu1BJkl1pWWKKoRbk9sf7Lmm7AwONWDQ76EwY1Q=)
2: 323030313a6466343a646638303a3a2f34382d3438203d3e20313431303730.roa (hash: pmzgckCGAS5Ljr2SgdcTD9JmH8nize0p1NnNdSRs+P0=)
3: 03832B38693F0F23EF49480775A2493B9E3F7FA0.crl (hash: n5S8jkNOG0PJdS2az4HtL27t3gOE0ekZcYzqzcJSNgY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.crl
rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03832B38693F0F23EF49480775A2493B9E3F7FA0.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:84:ac:04:87:57:64:ad:61:82:6a:fd:4c:32:9c:1e:65:f3:aa:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03832B38693F0F23EF49480775A2493B9E3F7FA0
Validity
Not Before: Jan 25 15:55:54 2026 GMT
Not After : Jan 28 17:42:54 2026 GMT
Subject: CN=9697B49579EE0AB54388333BFCE5D1BA1E18C033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c9:7a:ce:e4:ab:c3:ea:18:f9:c3:7f:75:9c:
2d:80:ee:32:f0:50:6c:9d:c3:73:0e:88:ca:8a:1b:
eb:36:dd:aa:5b:89:85:2c:d0:a1:ae:80:e8:b7:0d:
02:56:65:6f:b8:4c:86:c0:47:b9:e5:ee:79:e9:13:
ec:9c:05:6f:8d:20:96:3d:9a:83:50:d4:d9:1b:20:
5a:72:b8:10:16:93:f4:fa:7b:3f:c4:f8:fd:9d:eb:
db:b2:7e:79:c6:8b:fd:87:cc:47:42:7f:f4:3c:c9:
6e:dd:52:d5:6a:c4:10:f6:a3:62:94:4e:59:e1:1b:
9a:74:a2:19:97:58:3d:09:fa:56:d0:67:d4:29:7a:
38:5f:8d:f4:da:e8:8e:12:f3:5a:62:df:df:55:ec:
55:8a:a9:3c:03:4c:bd:81:2e:7c:5d:f9:6c:4e:07:
75:07:32:c9:54:8e:61:1e:fe:9c:c6:27:52:f6:6b:
b8:f3:29:91:9e:68:fc:36:1f:e6:e8:01:e3:a4:fe:
7b:91:a2:51:8e:1d:9d:4f:a2:94:fb:71:9a:fe:cf:
58:65:bc:49:99:a9:ef:be:95:db:53:4c:65:78:84:
21:17:4a:92:5c:d5:d0:a9:4c:ea:69:22:b1:50:13:
d5:59:12:a8:6e:80:87:9b:54:06:8a:fd:04:bc:42:
23:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:97:B4:95:79:EE:0A:B5:43:88:33:3B:FC:E5:D1:BA:1E:18:C0:33
X509v3 Authority Key Identifier:
keyid:03:83:2B:38:69:3F:0F:23:EF:49:48:07:75:A2:49:3B:9E:3F:7F:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03832B38693F0F23EF49480775A2493B9E3F7FA0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:12:07:c9:c3:ff:1c:44:4e:9e:b1:09:75:14:9b:16:a6:ea:
1f:72:4a:b7:76:de:f5:ec:a4:c0:a9:12:07:c7:25:7d:6c:91:
9e:2d:92:f5:84:7a:ac:ad:19:bb:ea:4c:4f:e6:a7:b7:4f:f7:
26:9d:52:6c:5b:9f:cc:76:5c:44:7a:74:9c:79:25:5a:e2:e2:
31:e7:db:e5:be:63:66:ee:04:cc:49:a6:ca:5a:59:88:c8:53:
ac:98:95:5b:3b:9a:39:a4:c1:08:f6:08:de:47:17:0d:25:63:
19:ab:84:c7:8e:fe:55:b7:cb:54:91:5b:e9:6d:19:25:f6:7b:
71:aa:60:30:87:49:3d:af:07:09:1c:6f:c5:5b:dc:d3:b6:28:
40:fc:2b:5e:cb:1e:82:e3:43:3c:36:53:ab:9e:f9:e3:24:d5:
d0:4d:65:2e:9f:15:72:62:5a:4d:d1:fc:d7:5b:70:d2:2f:ee:
9d:26:02:c0:2f:c0:8c:79:82:c9:ae:94:f0:c8:16:57:bc:52:
56:9e:87:5d:e4:86:ca:9b:e1:aa:7f:41:a6:ab:80:8e:c5:0f:
2d:cb:9c:09:61:c3:f7:d2:f7:6e:f6:13:59:8c:7a:e4:67:60:
8c:fb:75:c2:c8:f5:18:1a:7c:0c:cc:e0:54:97:54:25:eb:88:
63:b3:11:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:36:26 2026 by rpki-client