This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft
File: 18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft (raw, json)
Hash identifier: Zf+17pJLn2J5jGVA7M9E+SyAbNV8FyvYgIx/jsAVYMw=
Subject key identifier: 17:3A:44:2D:4D:49:37:07:E6:EC:1F:12:A9:BA:F7:92:83:A3:BC:04
Authority key identifier: 18:E9:DC:5B:AC:AA:E6:8D:1C:9F:50:69:82:56:E0:ED:EF:9A:51:69
Certificate issuer: /CN=18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169
Certificate serial: 5992660261E7EF6619F5D23F0B25585739A5938D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft
Manifest number: 054A
Signing time: Sat 24 Jan 2026 07:32:03 +0000
Manifest this update: Sat 24 Jan 2026 07:27:03 +0000
Manifest next update: Tue 27 Jan 2026 17:29:03 +0000
Files and hashes: 1: 3130332e3130322e3135312e302f32342d3234203d3e20313331373036.roa (hash: uOHSfLHhwtMNN67gMjbV4MGpzJVsSG8o/ohHKk2WQIg=)
2: 3130332e3130322e3134392e302f32342d3234203d3e20313336383533.roa (hash: NL0vGhzpoUf7x+lHSMOuOWEoRUxSZyoCnU3hXUIKCxQ=)
3: 18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl (hash: vmuhHfHDuMcMabKgvepcFd6ricOnomtTALUxkWi5CU4=)
4: 3130332e3130322e3134382e302f32342d3234203d3e20313336383533.roa (hash: u/OeRTsz4AcHqry3VxGlcn2u37fN+K6Q/bDUNs682qo=)
5: 3130332e3130322e3135302e302f32332d3234203d3e20313331373036.roa (hash: nDnbOuaynmDOf79AlnD7cR3kAc1DCFukO1UkfayfyKg=)
6: 3130332e3130322e3135302e302f32342d3234203d3e20313331373036.roa (hash: tZYQoJy4YnmvVxZJj+k/+JZKShXQlZB0IfTGOyNi9Mc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl
rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 17:29:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:92:66:02:61:e7:ef:66:19:f5:d2:3f:0b:25:58:57:39:a5:93:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169
Validity
Not Before: Jan 24 07:27:03 2026 GMT
Not After : Jan 27 17:29:03 2026 GMT
Subject: CN=173A442D4D493707E6EC1F12A9BAF79283A3BC04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:ad:a5:f7:6d:dc:a8:a6:37:85:2c:3c:b6:92:
bc:d1:04:8c:71:d3:8a:24:2a:57:c5:91:56:cf:32:
49:4c:3b:57:f3:7a:37:29:f3:2a:8d:0f:c8:fb:a3:
76:51:37:3a:2c:1b:99:53:cd:8e:db:1f:12:5c:2c:
09:18:38:59:e1:ce:7a:99:1a:97:b2:f7:ab:88:0d:
99:88:61:46:90:cc:ff:75:ef:30:a0:f3:e9:33:d5:
36:ed:12:6a:1a:6e:2b:e5:c5:61:0f:63:5c:b5:cf:
b7:b5:da:8d:7e:d8:91:a1:92:a2:79:da:f1:11:cf:
7c:b9:30:26:04:16:20:fd:c1:3a:44:4f:37:af:51:
f6:9d:99:eb:1d:ab:56:82:e9:03:0a:42:cc:b9:e5:
ab:8c:5f:6b:4c:c4:d8:93:27:e6:a7:e9:59:ed:69:
ac:6e:29:7d:42:c0:a6:83:67:c9:aa:f7:4d:51:a5:
1e:62:25:66:c2:63:dc:bc:9e:a3:22:01:62:cd:fa:
67:0b:5a:c9:7b:0e:3a:fc:db:c8:aa:87:98:d8:14:
e2:ea:b9:ed:dd:19:0d:2e:ec:26:28:21:de:f7:4b:
85:fd:e9:de:d4:20:4d:76:8a:6e:38:2d:e4:ed:88:
f9:89:95:0b:b2:d4:6d:83:54:7e:8c:eb:5f:9e:c9:
c1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3A:44:2D:4D:49:37:07:E6:EC:1F:12:A9:BA:F7:92:83:A3:BC:04
X509v3 Authority Key Identifier:
keyid:18:E9:DC:5B:AC:AA:E6:8D:1C:9F:50:69:82:56:E0:ED:EF:9A:51:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:3c:5c:37:db:62:54:29:0c:98:fb:4d:f2:b3:ae:8a:4f:33:
cc:35:d7:f3:3b:26:70:60:4e:98:be:bf:5e:7d:fe:68:67:0d:
2b:3a:b5:0a:dc:cf:74:bc:54:e5:50:a6:59:8f:50:98:fe:70:
f9:26:16:d3:f0:20:b4:51:32:f3:67:17:95:27:ca:74:e6:59:
dc:0e:2f:6e:69:2b:50:b9:4b:65:5f:7c:92:1c:2c:64:97:c3:
6e:24:8d:ee:54:5b:fb:ea:4f:3c:a4:95:1a:5c:05:5c:d6:94:
c6:0d:32:85:a6:58:70:ba:e6:c9:b1:07:50:8f:b4:32:9b:55:
d7:c6:e1:1e:8b:c1:66:48:99:2c:33:40:d7:e2:e8:7f:da:af:
9c:dd:b5:ff:41:a2:1b:96:50:53:40:4e:70:d9:c0:9c:20:aa:
b4:53:79:b5:d2:59:ef:68:e8:62:ca:2c:46:e0:dc:7f:cb:1b:
04:e2:a7:3f:14:ac:27:8e:12:97:4e:05:9d:15:7f:d2:f9:c2:
8a:97:15:93:3e:a9:3a:68:25:22:7a:a6:cf:a3:31:55:d7:82:
c7:84:3c:30:af:79:f0:d9:12:54:cc:c8:91:62:13:6b:2d:1f:
50:cd:c0:ee:bc:00:5e:fa:11:e1:5c:cf:93:ea:94:02:c7:37:
24:74:3a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:47:50 2026 by rpki-client