This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft
File: A7422B678A17489054C0697D44A3B19EB9F67509.mft (raw, json)
Hash identifier: Iyixd/LF4JsxqhIK9L4MeRyELnZzrHZ/rSvCcaJjkOY=
Subject key identifier: 0E:36:E8:5D:C5:0D:B4:FF:11:5D:F6:11:FC:5A:CA:6B:70:3E:26:FE
Authority key identifier: A7:42:2B:67:8A:17:48:90:54:C0:69:7D:44:A3:B1:9E:B9:F6:75:09
Certificate issuer: /CN=A7422B678A17489054C0697D44A3B19EB9F67509
Certificate serial: 75F6936F4B4C55FE93EF90A3C9C8BDACDFC0995E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7422B678A17489054C0697D44A3B19EB9F67509.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft
Manifest number: 0543
Signing time: Sun 25 Jan 2026 02:20:39 +0000
Manifest this update: Sun 25 Jan 2026 02:15:39 +0000
Manifest next update: Wed 28 Jan 2026 02:25:39 +0000
Files and hashes: 1: 3230332e33342e3131392e302f32342d3234203d3e203338373735.roa (hash: lQa70hzJ397OJiel1wVx7dOXLMWMPJnsKeiNgocVwQs=)
2: 3230332e33342e3131382e302f32342d3234203d3e203338373735.roa (hash: kAUCvMM7pyFIINYLsBDohcRiHbLYQPvnmOScjw/sM+w=)
3: A7422B678A17489054C0697D44A3B19EB9F67509.crl (hash: MJTwqCr5qg0akF0n8LOsRQA8G5UvYQFt/vRwL2Ci0i8=)
4: 323030313a6466343a393830303a3a2f34382d3438203d3e203338373735.roa (hash: qOoJ0LJSDTjqqUqT336SaQD1ve+KUUM1X1KBlqt/05U=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.crl
rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7422B678A17489054C0697D44A3B19EB9F67509.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 02:25:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:f6:93:6f:4b:4c:55:fe:93:ef:90:a3:c9:c8:bd:ac:df:c0:99:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A7422B678A17489054C0697D44A3B19EB9F67509
Validity
Not Before: Jan 25 02:15:39 2026 GMT
Not After : Jan 28 02:25:39 2026 GMT
Subject: CN=0E36E85DC50DB4FF115DF611FC5ACA6B703E26FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f9:2e:55:0f:a8:4a:3c:65:3a:47:77:d6:fd:
d3:10:93:68:b8:5f:9c:f7:2a:72:34:1a:f6:cf:ad:
91:3f:0d:33:48:f3:00:14:75:08:e1:21:a8:bd:91:
19:ef:e6:a7:22:71:83:d5:a3:bd:40:29:1a:af:52:
2d:9c:94:f5:eb:01:8f:a8:3a:4d:7d:c0:1d:3e:c9:
92:fc:b9:0a:f0:2e:e0:b9:97:9b:ba:94:53:89:ce:
3b:b1:c2:9f:94:71:2e:b8:f3:a1:27:72:e9:4a:e8:
c6:90:a7:99:ef:90:e1:10:27:c8:5a:38:96:a2:a4:
58:3f:53:08:70:ab:ae:1b:8a:9e:d9:5a:30:d1:09:
68:85:0e:3b:12:5e:c9:40:25:6c:b0:24:cb:3a:f2:
79:e9:c3:cf:a7:e2:a5:ab:c5:59:ba:a0:9d:b8:28:
c8:47:c5:e7:d0:e6:7a:05:e8:15:c1:91:d8:a2:e1:
a9:6e:e5:7e:6c:e2:6a:b9:55:a2:13:1b:e8:ea:84:
98:57:8e:e7:e4:0b:a0:32:8a:62:a9:c1:e3:c8:fd:
09:d7:c1:73:14:f4:5d:4b:ea:68:0c:8a:51:cf:23:
fb:1e:b2:e2:2c:1e:d3:05:94:cb:45:83:01:c7:33:
a0:e1:bb:05:98:30:45:dc:07:fe:24:42:c0:ce:fb:
d5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:36:E8:5D:C5:0D:B4:FF:11:5D:F6:11:FC:5A:CA:6B:70:3E:26:FE
X509v3 Authority Key Identifier:
keyid:A7:42:2B:67:8A:17:48:90:54:C0:69:7D:44:A3:B1:9E:B9:F6:75:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7422B678A17489054C0697D44A3B19EB9F67509.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:4d:24:0e:ca:ad:31:d9:cc:a0:3f:97:85:a4:7d:90:79:bc:
3c:3d:79:f6:56:7e:7c:cb:fa:c3:d2:a3:e2:78:05:8d:25:6d:
f3:4a:28:ff:4e:8b:e1:53:21:b7:64:c2:f9:30:4a:76:b1:d7:
33:53:12:b3:42:e2:5e:9c:4a:c9:40:1f:15:bc:a9:d0:cf:cc:
5b:8d:98:0f:4d:6b:e8:42:8f:9c:d0:da:b1:df:6c:f4:0b:c5:
ee:72:42:2a:c3:f8:84:06:00:ea:e8:fb:ae:98:65:7e:cd:46:
ca:0c:3a:5d:9e:71:c1:1a:37:3e:20:35:04:b0:72:d5:e7:0f:
0b:18:b2:f9:50:6f:57:6c:d7:60:e3:65:ac:7a:8c:d0:21:38:
32:1c:80:5c:8b:fe:b1:09:6a:01:dc:38:a7:36:7a:c6:b3:ac:
1a:5e:53:d6:53:c7:1b:6b:64:9f:c0:ea:20:6b:c4:31:87:6b:
1b:e9:a2:c3:fc:9c:bb:e0:05:e0:1e:16:72:d0:88:40:63:f6:
a8:3a:f9:af:35:3e:21:26:53:0d:88:05:9c:6b:5f:39:31:e3:
01:18:a5:19:d8:c4:71:31:03:9a:26:52:d9:95:22:53:c2:02:
c3:04:44:d2:ba:bc:2a:a6:9f:18:b7:51:8b:40:18:4e:c6:5b:
e0:16:da:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:02:06 2026 by rpki-client