This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft
File: 0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft (raw, json)
Hash identifier: RagSoU8/NWmb2aN95n0n1mMPe0WkKijKKbxibJZsGaY=
Subject key identifier: 57:A6:B9:D3:2D:87:DE:70:CA:36:19:16:95:59:A0:9B:61:4E:CE:21
Authority key identifier: 0D:80:04:91:C0:3B:FB:57:9D:58:FF:C7:A2:4C:AA:87:10:84:5A:9C
Certificate issuer: /CN=0D800491C03BFB579D58FFC7A24CAA8710845A9C
Certificate serial: 1B90B1D7F169E396582769B954DF184DAEB29789
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft
Manifest number: 016B
Signing time: Sat 24 Jan 2026 13:41:30 +0000
Manifest this update: Sat 24 Jan 2026 13:36:30 +0000
Manifest next update: Tue 27 Jan 2026 17:36:30 +0000
Files and hashes: 1: 3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa (hash: DWfEMEPWxsUozNiwbgr8ihU7QhgizyAKxGEXUL32Nzc=)
2: 0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl (hash: KA5ylYJUELzFfwF2Ly7VK9x3KPuVP8N5pt0iLsqalXw=)
3: 3130332e3134342e3132392e302f32342d3234203d3e20313339343333.roa (hash: vmmdKTzGdj+WW7oR5Y7BlF5cHcjcyn2ZeY0vBD9tiWM=)
4: 3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa (hash: +5s73n1GRDKOs1PLsu8AmlmjjmE1TE3hQKNaKdkD1e0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl
rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 17:36:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:90:b1:d7:f1:69:e3:96:58:27:69:b9:54:df:18:4d:ae:b2:97:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D800491C03BFB579D58FFC7A24CAA8710845A9C
Validity
Not Before: Jan 24 13:36:30 2026 GMT
Not After : Jan 27 17:36:30 2026 GMT
Subject: CN=57A6B9D32D87DE70CA3619169559A09B614ECE21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:55:02:9c:46:2e:14:bf:ea:46:dd:98:ca:3f:
8d:c2:82:80:2e:71:74:3b:a2:c3:a5:33:bd:47:d4:
1f:fe:0f:83:4f:1d:62:0b:94:62:6b:63:21:f8:65:
51:42:b2:f7:e2:65:c6:5a:f0:73:10:ba:fe:a4:98:
c4:ac:60:8d:1f:28:95:1a:bd:4f:2a:6b:70:cb:c6:
8a:26:44:51:38:aa:d2:b1:28:a7:35:b0:e0:3f:49:
c1:4a:3c:d2:7e:5a:19:82:65:11:e7:23:61:5a:72:
ce:8b:4c:0f:e9:f3:46:8f:e4:ee:39:f4:d7:bc:b3:
6e:19:4e:ac:3b:b1:bc:8d:4b:75:13:96:cf:ca:c0:
43:ca:7d:5e:0a:29:59:6f:fe:f8:61:66:0e:32:96:
57:a4:30:4f:e9:f3:28:8e:d6:ce:be:d2:27:8f:df:
cb:54:5b:75:f1:21:07:df:67:ce:18:50:eb:37:00:
b3:77:8a:e9:24:e8:3d:77:5a:dc:33:1d:45:85:22:
1f:8d:1b:09:e6:b1:e9:73:a8:29:a6:e7:3f:89:8f:
0b:02:15:73:54:82:1b:35:9e:38:49:23:c5:16:af:
25:f5:ce:27:4a:df:ee:78:2f:9d:0d:0d:ea:3e:42:
4b:af:0e:f7:04:b8:84:9a:f6:93:fe:2e:e5:1e:7a:
f2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A6:B9:D3:2D:87:DE:70:CA:36:19:16:95:59:A0:9B:61:4E:CE:21
X509v3 Authority Key Identifier:
keyid:0D:80:04:91:C0:3B:FB:57:9D:58:FF:C7:A2:4C:AA:87:10:84:5A:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:bd:2d:38:61:70:c7:b5:19:38:95:60:71:95:4d:ca:48:3f:
4a:41:43:76:5b:d3:1f:b6:b4:c1:0c:0c:94:be:81:02:5b:b4:
11:fb:b6:09:6c:ae:63:c6:47:63:db:4c:fa:7b:da:5f:26:a9:
64:7e:4b:b8:5b:b5:e9:6b:0d:b8:6d:65:86:60:66:ff:2a:bd:
5d:b7:e5:f6:7f:34:27:0b:7b:5c:90:cc:f8:94:4e:62:8b:9d:
67:ef:90:5b:6b:27:1d:d5:c1:eb:bd:f8:76:0a:dd:a4:1e:df:
12:ef:25:fd:85:9f:37:61:fe:68:3d:20:e1:4b:8b:e0:c2:10:
12:26:00:72:da:66:e3:6d:46:b8:c9:71:89:d0:d5:18:2c:8a:
eb:73:fe:69:51:17:ac:00:1e:9e:09:6c:69:c9:e6:00:92:39:
bd:0a:51:95:d1:71:21:c9:ca:10:a7:17:50:82:12:64:66:dd:
96:3d:64:2f:75:ac:a8:96:a0:2e:3e:58:bb:c4:27:bc:aa:d5:
87:ff:1f:7b:ef:ec:e0:6c:ef:93:bc:14:3f:4e:52:b6:f7:6a:
59:75:90:6c:ed:7f:51:be:a7:cb:d3:e3:22:b4:0a:15:50:8f:
34:4f:77:f0:11:10:1f:43:4b:0c:52:dc:e9:9d:29:63:d4:aa:
aa:d9:7b:c5
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUG5Cx1/Fp45ZYJ2m5VN8YTa6yl4kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQ4MDA0OTFDMDNCRkI1NzlENThGRkM3QTI0Q0FBODcx
MDg0NUE5QzAeFw0yNjAxMjQxMzM2MzBaFw0yNjAxMjcxNzM2MzBaMDMxMTAvBgNV
BAMTKDU3QTZCOUQzMkQ4N0RFNzBDQTM2MTkxNjk1NTlBMDlCNjE0RUNFMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2VQKcRi4Uv+pG3ZjKP43CgoAu
cXQ7osOlM71H1B/+D4NPHWILlGJrYyH4ZVFCsvfiZcZa8HMQuv6kmMSsYI0fKJUa
vU8qa3DLxoomRFE4qtKxKKc1sOA/ScFKPNJ+WhmCZRHnI2Facs6LTA/p80aP5O45
9Ne8s24ZTqw7sbyNS3UTls/KwEPKfV4KKVlv/vhhZg4yllekME/p8yiO1s6+0ieP
38tUW3XxIQffZ84YUOs3ALN3iukk6D13WtwzHUWFIh+NGwnmselzqCmm5z+JjwsC
FXNUghs1njhJI8UWryX1zidK3+54L50NDeo+QkuvDvcEuISa9pP+LuUeevItAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUV6a50y2H3nDKNhkWlVmgm2FOziEwHwYDVR0j
BBgwFoAUDYAEkcA7+1edWP/HokyqhxCEWpwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
YTk2ZjQ1OC1jZTVlLTQxYTItYTIzMi05OTY0ZjQ5ODhhMDYvMC8wRDgwMDQ5MUMw
M0JGQjU3OUQ1OEZGQzdBMjRDQUE4NzEwODQ1QTlDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMEQ4MDA0OTFDMDNCRkI1NzlENThGRkM3QTI0Q0FBODcxMDg0
NUE5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2E5NmY0NTgtY2U1ZS00MWEyLWEy
MzItOTk2NGY0OTg4YTA2LzAvMEQ4MDA0OTFDMDNCRkI1NzlENThGRkM3QTI0Q0FB
ODcxMDg0NUE5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIC9LThhcMe1GTiVYHGVTcpIP0pBQ3Zb0x+2
tMEMDJS+gQJbtBH7tglsrmPGR2PbTPp72l8mqWR+S7hbtelrDbhtZYZgZv8qvV23
5fZ/NCcLe1yQzPiUTmKLnWfvkFtrJx3Vweu9+HYK3aQe3xLvJf2Fnzdh/mg9IOFL
i+DCEBImAHLaZuNtRrjJcYnQ1Rgsiutz/mlRF6wAHp4JbGnJ5gCSOb0KUZXRcSHJ
yhCnF1CCEmRm3ZY9ZC91rKiWoC4+WLvEJ7yq1Yf/H3vv7OBs75O8FD9OUrb3all1
kGztf1G+p8vT4yK0ChVQjzRPd/AREB9DSwxS3OmdKWPUqqrZe8U=
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:47:00 2026 by rpki-client