This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft
File: 15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft (raw, json)
Hash identifier: ojqQp7eLNv63/iEa9yGkD3y9SGJr5Ol+FYQSUyGtLiA=
Subject key identifier: 02:4F:66:53:67:5B:F7:75:99:E9:31:82:F9:62:27:25:70:08:D2:19
Authority key identifier: 15:B7:EB:F9:2B:35:FD:B5:BC:69:90:BB:8E:CA:2C:29:7B:45:CB:35
Certificate issuer: /CN=15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35
Certificate serial: 5A83ACABC6FC549D0188BAF4D571986F9537C895
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft
Manifest number: 04E6
Signing time: Sat 24 Jan 2026 23:21:23 +0000
Manifest this update: Sat 24 Jan 2026 23:16:23 +0000
Manifest next update: Wed 28 Jan 2026 11:16:23 +0000
Files and hashes: 1: 3130332e3134312e3130382e302f32332d3234203d3e20313338383836.roa (hash: yIuwDJ7Q95tfvD77KhegvlF4CTHEd3Lu6i61741Xn4E=)
2: 15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.crl (hash: T7Jw0dVF1wC7osuGO5ApUeMu91mTqXLSsQ/RfyK/9m0=)
3: 323430353a313634303a3a2f33322d3438203d3e20313338383836.roa (hash: MItE47EaO9IAk0e+oiW0dyxlfEYvief1VP6PIxAt77c=)
4: 323430353a313634303a363a3a2f34382d3438203d3e203234343239.roa (hash: K1B+8ghkTLIZ5AJ6fsYXvRX9s2r1jX+7WBmIft8mUyc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.crl
rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 11:16:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:83:ac:ab:c6:fc:54:9d:01:88:ba:f4:d5:71:98:6f:95:37:c8:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35
Validity
Not Before: Jan 24 23:16:23 2026 GMT
Not After : Jan 28 11:16:23 2026 GMT
Subject: CN=024F6653675BF77599E93182F96227257008D219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a2:da:8b:88:94:a9:9d:b6:0b:3a:e2:90:70:
9a:ce:9b:41:5a:ce:34:cc:e8:ac:31:62:59:ca:82:
63:20:d5:31:a7:cb:82:af:d0:40:07:66:fa:fe:24:
d3:bf:1a:f8:47:3c:da:c6:1c:d0:ce:0d:2e:63:29:
07:fc:64:5f:ec:93:b9:66:31:a7:f7:86:84:74:07:
2a:12:75:4a:c9:c7:03:1c:7e:86:d4:3c:fb:44:a1:
55:4c:3d:11:f7:5d:aa:a1:2d:12:d5:2f:d1:25:36:
87:40:71:4a:22:57:20:04:44:f0:ef:bc:ba:61:e0:
8c:1d:74:21:49:39:c0:53:a5:b9:90:c9:5d:30:a3:
d9:1a:98:e5:6d:83:7c:09:d9:55:cb:77:ed:d5:17:
38:a2:d7:69:92:22:79:d3:b5:dc:ca:4a:08:ec:59:
d6:8c:5b:83:59:66:c8:0f:1b:f9:59:96:ba:2a:2c:
9b:b7:03:9e:f6:77:a0:f0:6e:ff:80:19:e7:a2:09:
de:6b:69:6a:ff:fa:15:8c:07:42:e0:32:60:fa:e3:
24:60:46:3c:ae:43:54:c4:c8:4f:71:74:1e:13:f0:
ba:1c:b7:e7:6e:4b:9e:cb:39:61:fb:4c:2b:80:00:
72:4d:e6:d9:df:b8:3d:39:41:51:f4:9b:4e:a6:51:
5b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4F:66:53:67:5B:F7:75:99:E9:31:82:F9:62:27:25:70:08:D2:19
X509v3 Authority Key Identifier:
keyid:15:B7:EB:F9:2B:35:FD:B5:BC:69:90:BB:8E:CA:2C:29:7B:45:CB:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:94:e8:d8:fd:f8:8d:d1:fb:c7:17:8d:c1:db:36:18:7c:62:
c8:a2:91:c6:c8:84:b4:ef:57:bb:6f:0c:68:43:2c:34:40:13:
39:c7:12:be:ba:99:4b:37:6e:f7:f2:b0:36:bd:3e:1c:2c:9d:
f0:0e:cb:7e:37:b8:7e:8a:c5:3e:7c:ce:36:ef:1d:d7:47:64:
b5:86:84:b0:0d:db:52:d5:4a:a8:0f:d0:94:c2:52:bc:52:9c:
6a:8a:32:91:ff:95:e6:38:72:49:70:57:b4:75:8c:36:3e:6a:
75:19:ef:0e:59:1d:7e:ff:96:99:cd:5b:c0:84:85:92:4a:e1:
7b:6c:0b:59:0d:8b:78:65:95:fa:b3:8d:6d:4c:57:47:e3:be:
a3:2a:f5:3c:5a:17:a0:1b:28:44:a2:b1:9b:6e:15:48:d8:b5:
18:e1:89:53:87:65:30:51:8f:a2:18:5f:fb:95:52:14:aa:41:
4f:df:0d:b6:04:c1:b4:f9:78:1b:55:41:67:8a:dd:1e:5d:fc:
4f:a8:e1:61:43:6d:0a:86:94:be:4c:30:30:1e:ac:a3:57:d6:
73:45:9b:5b:8f:d0:e5:3c:af:ff:50:e5:7b:89:cb:ae:ea:89:
09:7f:f9:f3:d5:45:4e:6b:94:24:2f:2d:63:49:65:77:f7:56:
1b:b4:c3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:06:02 2026 by rpki-client