This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft
File: 0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft (raw, json)
Hash identifier: cOJyeX5LjDqIQ7Ckir2oGou4yMsNvN36/NcqdM0aeWI=
Subject key identifier: C7:BC:40:39:90:C6:EA:B7:CA:C5:B2:2C:44:7B:C6:22:F4:87:84:62
Authority key identifier: 0F:16:59:BD:C3:11:75:84:63:AD:3C:EA:23:A7:EB:5E:D3:77:FC:C2
Certificate issuer: /CN=0F1659BDC311758463AD3CEA23A7EB5ED377FCC2
Certificate serial: 31ABF9FD782EE03070AD7EB541222BB6DAD9418D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft
Manifest number: 03C2
Signing time: Sat 24 Jan 2026 13:32:18 +0000
Manifest this update: Sat 24 Jan 2026 13:27:18 +0000
Manifest next update: Wed 28 Jan 2026 00:45:18 +0000
Files and hashes: 1: 0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl (hash: iWHcPhCH52WQwlWZiwEqkQLxAm6T8ViDG38+PD0NGGA=)
2: 3130332e3136322e3132322e302f32332d3234203d3e203137393935.roa (hash: 5kmhgTgeSHUwhas6AKT+9HvbtryMe4lzQT0rPZxLy0k=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl
rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 00:45:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:ab:f9:fd:78:2e:e0:30:70:ad:7e:b5:41:22:2b:b6:da:d9:41:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0F1659BDC311758463AD3CEA23A7EB5ED377FCC2
Validity
Not Before: Jan 24 13:27:18 2026 GMT
Not After : Jan 28 00:45:18 2026 GMT
Subject: CN=C7BC403990C6EAB7CAC5B22C447BC622F4878462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f5:18:92:44:af:a1:26:cc:ec:9c:c9:89:96:
e9:cf:1c:fd:44:e4:6a:a1:c1:e2:4d:10:f0:39:31:
88:32:87:a5:cf:19:9d:c4:38:a3:49:d4:e6:ea:53:
1d:c2:00:ad:87:56:98:c3:08:b0:15:a1:60:dd:b3:
4e:ac:b1:be:c2:f8:46:2b:ad:3f:36:95:77:31:08:
d0:8f:f9:c6:f8:77:00:42:9d:0e:35:c3:60:98:6e:
fa:f8:31:0d:f5:4e:96:a0:96:b5:db:5b:40:ad:85:
0a:b2:b2:a2:95:bc:9a:ac:a8:fe:0e:22:46:0d:28:
1d:d0:d9:01:4c:0a:85:c0:74:de:25:e9:0a:05:30:
fa:7a:f1:dc:2e:df:ab:09:ea:da:8c:03:b9:62:64:
07:b7:b7:61:ad:b9:ab:ef:9c:3d:3f:81:fc:b1:f6:
ad:f6:bb:03:96:c1:e7:6a:c7:2b:2d:ab:ba:b6:f0:
14:ee:37:8b:46:97:f5:d3:41:19:3f:d2:01:d2:96:
9a:da:84:18:09:d2:91:5e:40:5d:03:4c:41:c9:60:
fa:9a:a1:74:db:dd:b7:f6:5a:fc:43:91:1a:a5:56:
69:2d:d6:22:1c:ba:bb:2f:06:9f:54:93:ad:64:eb:
5a:9b:04:e2:96:ca:6a:4a:40:6c:05:ad:f0:7e:13:
63:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:BC:40:39:90:C6:EA:B7:CA:C5:B2:2C:44:7B:C6:22:F4:87:84:62
X509v3 Authority Key Identifier:
keyid:0F:16:59:BD:C3:11:75:84:63:AD:3C:EA:23:A7:EB:5E:D3:77:FC:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b0:10:28:54:d6:9f:b8:66:c2:2a:59:47:ff:e7:9c:66:f0:
50:4e:59:de:64:92:f3:3e:a0:59:97:6c:0e:b4:c6:ee:5a:b2:
a8:7b:71:e3:81:4c:5a:7c:6e:98:f6:c6:02:9d:81:f0:43:44:
e5:bb:c4:61:2c:48:ad:7f:b6:d5:66:01:8b:09:dd:d0:e5:00:
b2:e1:bb:4f:9d:14:d9:a3:14:71:a7:6d:7c:34:74:10:79:e7:
a0:1a:7c:e7:01:58:e4:21:23:3c:1d:6a:aa:89:4d:82:a0:2e:
e6:37:8a:ca:be:2a:8e:64:0f:8a:50:57:bc:a5:34:55:5c:c4:
bf:e3:4b:c9:72:3f:f9:6f:3e:fd:b4:c6:6c:bb:d9:bb:55:d5:
6c:0b:c1:27:1e:98:af:12:0f:0f:f9:db:58:d0:41:19:ad:da:
0c:17:68:c8:0f:6e:42:a5:13:ef:0b:ed:09:fd:67:b9:7c:89:
09:be:3e:99:24:8c:d2:2b:d4:36:09:5e:04:c4:52:ba:92:6d:
6a:a6:32:50:95:9a:1a:0f:7f:14:cb:bc:26:b4:61:e8:65:0b:
b2:37:20:4e:26:91:b4:83:e1:27:ed:1d:af:0d:f1:51:fb:78:
ce:27:a1:03:65:be:97:7c:34:93:49:1d:7e:fd:d2:78:f7:72:
93:c3:6d:ac
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMav5/Xgu4DBwrX61QSIrttrZQY0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEYxNjU5QkRDMzExNzU4NDYzQUQzQ0VBMjNBN0VCNUVE
Mzc3RkNDMjAeFw0yNjAxMjQxMzI3MThaFw0yNjAxMjgwMDQ1MThaMDMxMTAvBgNV
BAMTKEM3QkM0MDM5OTBDNkVBQjdDQUM1QjIyQzQ0N0JDNjIyRjQ4Nzg0NjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ9RiSRK+hJszsnMmJlunPHP1E
5GqhweJNEPA5MYgyh6XPGZ3EOKNJ1ObqUx3CAK2HVpjDCLAVoWDds06ssb7C+EYr
rT82lXcxCNCP+cb4dwBCnQ41w2CYbvr4MQ31TpaglrXbW0CthQqysqKVvJqsqP4O
IkYNKB3Q2QFMCoXAdN4l6QoFMPp68dwu36sJ6tqMA7liZAe3t2GtuavvnD0/gfyx
9q32uwOWwedqxystq7q28BTuN4tGl/XTQRk/0gHSlprahBgJ0pFeQF0DTEHJYPqa
oXTb3bf2WvxDkRqlVmkt1iIcursvBp9Uk61k61qbBOKWympKQGwFrfB+E2PnAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUx7xAOZDG6rfKxbIsRHvGIvSHhGIwHwYDVR0j
BBgwFoAUDxZZvcMRdYRjrTzqI6frXtN3/MIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
MWIzZmU0NS1iNTg4LTRiYjctYWU5MC05MWY1N2Y1OTNjYjUvMC8wRjE2NTlCREMz
MTE3NTg0NjNBRDNDRUEyM0E3RUI1RUQzNzdGQ0MyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMEYxNjU5QkRDMzExNzU4NDYzQUQzQ0VBMjNBN0VCNUVEMzc3
RkNDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDFiM2ZlNDUtYjU4OC00YmI3LWFl
OTAtOTFmNTdmNTkzY2I1LzAvMEYxNjU5QkRDMzExNzU4NDYzQUQzQ0VBMjNBN0VC
NUVEMzc3RkNDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABywEChU1p+4ZsIqWUf/55xm8FBOWd5kkvM+
oFmXbA60xu5asqh7ceOBTFp8bpj2xgKdgfBDROW7xGEsSK1/ttVmAYsJ3dDlALLh
u0+dFNmjFHGnbXw0dBB556AafOcBWOQhIzwdaqqJTYKgLuY3isq+Ko5kD4pQV7yl
NFVcxL/jS8lyP/lvPv20xmy72btV1WwLwScemK8SDw/521jQQRmt2gwXaMgPbkKl
E+8L7Qn9Z7l8iQm+PpkkjNIr1DYJXgTEUrqSbWqmMlCVmhoPfxTLvCa0YehlC7I3
IE4mkbSD4SftHa8N8VH7eM4noQNlvpd8NJNJHX790nj3cpPDbaw=
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:52:43 2026 by rpki-client