This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft
File: DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft (raw, json)
Hash identifier: kZkR2QmVjLy5TLLlIq1VIvC+0fY54l8ckqUMuKFQLj0=
Subject key identifier: BF:F3:EE:69:ED:BA:29:31:02:BD:C4:57:2F:FC:B7:90:13:A3:D2:3C
Authority key identifier: DA:6C:3D:41:56:C0:5B:74:E3:B5:C0:49:F7:98:B0:0D:C6:34:2B:70
Certificate issuer: /CN=DA6C3D4156C05B74E3B5C049F798B00DC6342B70
Certificate serial: 55FA19F3DC38B8C6614D4C7D5A4366176FE564A3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft
Manifest number: 015A
Signing time: Fri 23 Jan 2026 23:41:50 +0000
Manifest this update: Fri 23 Jan 2026 23:36:50 +0000
Manifest next update: Tue 27 Jan 2026 11:12:50 +0000
Files and hashes: 1: 3130332e3234392e3232362e302f32342d3234203d3e20313531353236.roa (hash: 0NLsga2/g7s+EizQykHVB3FIXfa2PQbybGIhJhV4p2k=)
2: DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl (hash: u49NjoF1mJ1QV2tXlfcdltsMlQBEgJGS5vlR81AyUFo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl
rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 11:12:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:fa:19:f3:dc:38:b8:c6:61:4d:4c:7d:5a:43:66:17:6f:e5:64:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA6C3D4156C05B74E3B5C049F798B00DC6342B70
Validity
Not Before: Jan 23 23:36:50 2026 GMT
Not After : Jan 27 11:12:50 2026 GMT
Subject: CN=BFF3EE69EDBA293102BDC4572FFCB79013A3D23C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:40:a1:74:ea:aa:e8:05:8f:73:36:05:a9:ae:
f6:22:c1:ba:49:5d:4b:84:b9:92:3f:5f:ee:34:cd:
cc:67:47:cd:b3:ee:28:4e:2d:8f:d4:70:58:79:80:
9f:92:45:bc:ca:45:9b:eb:83:6b:c6:45:1c:98:e0:
c7:65:f9:24:1a:96:c3:15:e9:d5:12:83:0f:bf:49:
76:50:b3:a1:08:64:f6:4b:bb:f0:a5:7f:0e:74:fb:
1f:45:f0:8b:78:f5:0f:29:21:1b:4d:cf:db:36:5c:
31:37:45:18:b3:60:14:69:68:05:23:82:6b:bf:76:
89:17:5f:b5:74:5a:08:4e:31:a7:47:cf:75:92:17:
0d:df:cd:de:31:00:63:ca:cc:0a:57:c0:a7:e9:91:
f6:e2:ac:a3:7a:15:2b:38:0c:c1:ef:18:94:06:98:
56:c4:d1:17:d4:ae:f9:10:a8:ab:7f:05:c0:1d:da:
3d:b0:10:f6:2c:43:73:85:21:a8:12:e3:60:1e:28:
6e:d5:a3:83:1e:34:80:ac:16:fe:1a:38:ae:fc:ac:
26:df:33:d8:c2:55:13:72:6d:54:df:8a:c5:6e:db:
d3:4b:70:f0:fc:4f:7d:cf:97:f1:b8:19:0b:27:e6:
4a:84:e2:79:27:a1:46:86:a1:8b:48:3b:1e:69:80:
2c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F3:EE:69:ED:BA:29:31:02:BD:C4:57:2F:FC:B7:90:13:A3:D2:3C
X509v3 Authority Key Identifier:
keyid:DA:6C:3D:41:56:C0:5B:74:E3:B5:C0:49:F7:98:B0:0D:C6:34:2B:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:39:06:2e:e8:12:33:4c:f5:a2:fb:e0:d6:3d:cf:1d:a1:3c:
4d:14:d4:f7:2d:6b:3c:e3:0a:cc:72:f0:76:5d:35:ba:bf:09:
df:a3:59:99:9b:36:55:6f:42:2d:6f:75:67:71:1a:0e:2f:13:
c3:05:0f:26:ac:77:5f:7f:18:2a:70:7f:c0:c8:f7:37:37:d3:
d1:0f:82:bb:b3:45:b7:01:bc:08:fa:e7:d8:c6:09:67:c1:a6:
ac:7f:44:32:82:5e:05:21:1c:6d:1a:ae:a2:cd:9c:67:4b:c5:
87:63:4e:30:3f:a5:e8:90:2c:83:3f:34:5c:88:3f:b2:b6:f5:
46:8c:6a:ca:bb:e3:96:cc:a8:3b:33:fd:b4:b1:e2:12:86:92:
83:87:ba:88:f2:28:82:35:ed:5d:ec:52:a2:1d:69:c5:fe:04:
b7:8d:90:92:38:b5:f0:bb:fb:54:2b:5e:10:01:76:43:7c:2a:
a0:7f:16:7d:53:de:8b:f3:a7:cc:10:7d:0f:8e:bb:ed:5c:5c:
9a:f7:74:3d:dc:2e:6b:de:db:e7:42:cb:3c:0b:32:40:79:de:
d9:26:11:dc:0f:d9:a8:ae:6a:7f:af:58:a9:ac:84:91:86:f3:
61:bc:2a:f7:5a:36:f6:2b:d8:ff:ff:6b:8c:ab:82:9c:ef:e1:
45:de:41:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:50:03 2026 by rpki-client