This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft
File: 1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft (raw, json)
Hash identifier: Cfs+LY2gjuPoEaRlT+jsFxREnWtnTVQvw9DxU3+a50Q=
Subject key identifier: 8A:16:65:DA:BF:75:CB:12:61:48:9E:75:08:99:D9:34:AA:3B:B0:B5
Authority key identifier: 1D:4A:75:62:F0:96:F3:F7:53:E3:88:C1:45:94:BA:75:AE:09:E7:F3
Certificate issuer: /CN=1D4A7562F096F3F753E388C14594BA75AE09E7F3
Certificate serial: 1B4F13DCF9C158D92F705C0A23E327963FCC7E96
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft
Manifest number: 01BF
Signing time: Sun 25 Jan 2026 19:01:39 +0000
Manifest this update: Sun 25 Jan 2026 18:56:39 +0000
Manifest next update: Thu 29 Jan 2026 00:21:39 +0000
Files and hashes: 1: 3130332e3130372e3137372e302f32342d3234203d3e20313530393434.roa (hash: Tu2pBk/URNroZW6zOqNNP1pzL3rQikcBMBsuhpkJzRA=)
2: 3130332e3130372e3137362e302f32342d3234203d3e20313530393434.roa (hash: t5cP9pI7pfpZ95tebj5VAs5xM+wyda4Uz0LABi641BU=)
3: 1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl (hash: cHSvcTYh6v9GJkZR1ADvVuA4GCu+OVLNqBTpY0cahJk=)
4: 3130332e3130372e3137362e302f32332d3233203d3e20313530393434.roa (hash: +kGXvvTp0IkbxrGv/DEpgvQeRlEwoEyXoWledhe0tWQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl
rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:4f:13:dc:f9:c1:58:d9:2f:70:5c:0a:23:e3:27:96:3f:cc:7e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D4A7562F096F3F753E388C14594BA75AE09E7F3
Validity
Not Before: Jan 25 18:56:39 2026 GMT
Not After : Jan 29 00:21:39 2026 GMT
Subject: CN=8A1665DABF75CB1261489E750899D934AA3BB0B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9b:e7:a0:5c:94:d8:27:85:e8:11:09:36:84:
2e:02:50:5b:41:36:5c:ae:02:10:db:a8:c1:c3:1d:
77:dd:3e:fb:1d:7d:0c:cf:39:6e:96:ae:5a:bb:30:
75:98:3b:0f:e7:5d:88:df:e9:f5:ec:24:ac:37:00:
c2:ac:16:20:f6:f2:d0:ea:8f:a2:1c:d6:a8:69:f7:
72:2b:9a:b8:b9:42:91:cc:77:f7:ac:03:bc:c7:61:
8e:47:df:cf:a1:24:a2:0e:a4:9f:89:c9:47:dc:ea:
19:17:65:89:bf:6b:92:15:cc:02:44:7a:a7:d2:3d:
d6:59:ed:fb:f7:fc:a4:ed:2f:ca:50:45:c6:ce:bc:
d3:b4:4f:1a:ea:91:4e:24:6c:ca:f6:a1:45:92:b3:
a9:c6:c6:53:84:82:14:b2:89:b4:5e:1b:bf:98:7b:
eb:f4:83:49:ff:23:7d:7f:58:4b:b5:1a:f7:20:81:
df:49:24:3e:c4:70:f2:8b:83:8c:04:65:0c:60:9c:
31:47:7a:9f:d1:3d:5f:c6:ef:89:e2:10:4e:c8:5b:
9c:21:ae:c0:8d:8f:db:29:f3:31:df:97:2d:90:8c:
2e:37:50:60:ed:51:c9:2e:63:53:7e:21:80:e3:82:
42:b5:3c:8e:f4:85:f4:ec:2f:da:7a:95:d0:d4:9a:
a8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:16:65:DA:BF:75:CB:12:61:48:9E:75:08:99:D9:34:AA:3B:B0:B5
X509v3 Authority Key Identifier:
keyid:1D:4A:75:62:F0:96:F3:F7:53:E3:88:C1:45:94:BA:75:AE:09:E7:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:de:f7:cc:12:32:67:c0:11:c6:48:bc:06:67:e2:43:23:76:
40:75:eb:d7:94:9f:af:c9:ea:dd:4e:8b:df:1a:d6:86:fb:a1:
35:31:04:bc:76:20:d6:33:d7:ad:a5:5d:ba:7b:23:5b:90:ce:
86:0e:16:d3:0c:e1:d6:03:a5:66:d2:23:2b:33:d6:2b:ff:73:
8b:de:b4:d1:be:d1:2a:5e:05:c5:ed:e9:3b:96:b1:75:cf:22:
e8:ce:ea:28:90:9a:6c:f4:d7:81:81:5d:59:2d:0b:c4:79:89:
04:e3:07:b5:38:b9:f4:3a:01:8d:31:ab:2d:b4:a1:0b:4c:3d:
46:cf:5d:fd:a5:65:61:8e:f1:ca:fd:db:61:7c:17:f9:62:08:
0e:a1:4c:cf:b6:49:21:7d:5c:4f:8b:44:1a:60:04:dc:c7:0c:
7b:05:73:b9:4e:59:e4:93:90:4d:d9:73:77:f6:b5:cc:bc:0c:
2a:cb:e4:60:fd:1a:19:8e:0e:3e:a3:1d:54:e0:d6:56:de:51:
32:26:af:0b:50:14:35:cb:2c:7c:5b:0d:c1:f1:e9:b5:5f:52:
a0:5b:0d:35:9e:e8:70:14:fd:ad:d0:13:09:62:ae:76:c5:b2:
8d:ec:e9:dc:84:05:55:75:ba:4d:96:69:91:ab:da:33:7a:25:
ff:e6:12:f1
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUG08T3PnBWNkvcFwKI+Mnlj/MfpYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUQ0QTc1NjJGMDk2RjNGNzUzRTM4OEMxNDU5NEJBNzVB
RTA5RTdGMzAeFw0yNjAxMjUxODU2MzlaFw0yNjAxMjkwMDIxMzlaMDMxMTAvBgNV
BAMTKDhBMTY2NURBQkY3NUNCMTI2MTQ4OUU3NTA4OTlEOTM0QUEzQkIwQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbm+egXJTYJ4XoEQk2hC4CUFtB
NlyuAhDbqMHDHXfdPvsdfQzPOW6Wrlq7MHWYOw/nXYjf6fXsJKw3AMKsFiD28tDq
j6Ic1qhp93Irmri5QpHMd/esA7zHYY5H38+hJKIOpJ+JyUfc6hkXZYm/a5IVzAJE
eqfSPdZZ7fv3/KTtL8pQRcbOvNO0TxrqkU4kbMr2oUWSs6nGxlOEghSyibReG7+Y
e+v0g0n/I31/WEu1Gvcggd9JJD7EcPKLg4wEZQxgnDFHep/RPV/G74niEE7IW5wh
rsCNj9sp8zHfly2QjC43UGDtUckuY1N+IYDjgkK1PI70hfTsL9p6ldDUmqgxAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUihZl2r91yxJhSJ51CJnZNKo7sLUwHwYDVR0j
BBgwFoAUHUp1YvCW8/dT44jBRZS6da4J5/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
MzZhYjA0ZC02OGM3LTQyNDktYjEwOS00NmIyOGNmODAzZjMvMC8xRDRBNzU2MkYw
OTZGM0Y3NTNFMzg4QzE0NTk0QkE3NUFFMDlFN0YzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMUQ0QTc1NjJGMDk2RjNGNzUzRTM4OEMxNDU5NEJBNzVBRTA5
RTdGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDM2YWIwNGQtNjhjNy00MjQ5LWIx
MDktNDZiMjhjZjgwM2YzLzAvMUQ0QTc1NjJGMDk2RjNGNzUzRTM4OEMxNDU5NEJB
NzVBRTA5RTdGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAI/e98wSMmfAEcZIvAZn4kMjdkB169eUn6/J
6t1Oi98a1ob7oTUxBLx2INYz162lXbp7I1uQzoYOFtMM4dYDpWbSIysz1iv/c4ve
tNG+0SpeBcXt6TuWsXXPIujO6iiQmmz014GBXVktC8R5iQTjB7U4ufQ6AY0xqy20
oQtMPUbPXf2lZWGO8cr922F8F/liCA6hTM+2SSF9XE+LRBpgBNzHDHsFc7lOWeST
kE3Zc3f2tcy8DCrL5GD9GhmODj6jHVTg1lbeUTImrwtQFDXLLHxbDcHx6bVfUqBb
DTWe6HAU/a3QEwlirnbFso3s6dyEBVV1uk2WaZGr2jN6Jf/mEvE=
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:02:34 2026 by rpki-client