This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/53135743CD59EB438954FEB651A5D92D9BCC4F6B.mft
File: 53135743CD59EB438954FEB651A5D92D9BCC4F6B.mft (raw, json)
Hash identifier: QCukrw/j3MAYam3i7HZG82AoBOfiOBiF3aulE7PG1pI=
Subject key identifier: 58:0C:0E:08:25:0B:5C:3E:62:70:7B:E5:A1:7F:19:43:B1:62:2B:E1
Authority key identifier: 53:13:57:43:CD:59:EB:43:89:54:FE:B6:51:A5:D9:2D:9B:CC:4F:6B
Certificate issuer: /CN=53135743CD59EB438954FEB651A5D92D9BCC4F6B
Certificate serial: 2EBDBFF4E82B2712FDD3B0B00167CFCBF7E1AF9D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53135743CD59EB438954FEB651A5D92D9BCC4F6B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/53135743CD59EB438954FEB651A5D92D9BCC4F6B.mft
Manifest number: 016B
Signing time: Sat 24 Jan 2026 01:41:46 +0000
Manifest this update: Sat 24 Jan 2026 01:36:46 +0000
Manifest next update: Tue 27 Jan 2026 06:18:46 +0000
Files and hashes: 1: 3130332e36372e36392e302f32342d3234203d3e20313531393938.roa (hash: 6UY/R+UdRsBhwgNfBVY0MjOGp2DSj7k+K0sc21L+Is0=)
2: 53135743CD59EB438954FEB651A5D92D9BCC4F6B.crl (hash: 88xD9YWsfdl2gjtwifqSvhRTtWZqfATVWKC9T9QXKEQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/53135743CD59EB438954FEB651A5D92D9BCC4F6B.crl
rsync://repo-rpki.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/53135743CD59EB438954FEB651A5D92D9BCC4F6B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53135743CD59EB438954FEB651A5D92D9BCC4F6B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 06:18:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:bd:bf:f4:e8:2b:27:12:fd:d3:b0:b0:01:67:cf:cb:f7:e1:af:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53135743CD59EB438954FEB651A5D92D9BCC4F6B
Validity
Not Before: Jan 24 01:36:46 2026 GMT
Not After : Jan 27 06:18:46 2026 GMT
Subject: CN=580C0E08250B5C3E62707BE5A17F1943B1622BE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d7:ba:39:c2:83:65:0d:06:67:90:56:8c:2f:
c6:28:13:11:4f:1f:d8:b1:87:3b:96:98:7d:e5:c2:
f4:32:84:f4:89:98:d2:dd:8a:66:89:98:00:dd:e6:
f2:bc:a9:ae:e3:2c:04:17:a6:26:a0:46:28:7e:1b:
cd:3e:98:e3:59:da:f0:da:96:52:ea:c6:6e:2a:2e:
49:55:8b:6f:1d:7d:1d:8b:bc:3e:98:41:28:6e:53:
39:05:39:ab:de:54:95:68:d7:8e:ff:2d:03:cd:62:
20:b0:a0:fc:86:a2:f2:c4:24:9d:93:14:e3:f5:14:
a3:8e:7f:27:51:dc:4a:4e:64:02:cc:15:3a:0c:35:
61:47:1b:91:7e:89:f7:bd:ec:be:1d:43:d2:ed:c0:
bd:67:ec:97:d5:6c:f7:72:27:94:61:f4:d7:e8:2b:
cf:a3:25:5d:72:73:87:fb:2b:cd:bc:65:8e:14:9a:
95:fa:45:b3:b0:87:94:07:d9:b9:62:93:1c:81:a7:
e4:f3:28:b0:d7:08:04:79:ae:24:47:72:d8:5c:af:
00:34:ad:9c:c5:b5:90:5f:37:80:0f:2c:97:b4:66:
3f:b5:98:32:40:eb:d7:16:6f:81:45:24:f8:e8:9c:
ea:88:cf:6e:44:78:04:13:be:34:c2:2e:dd:11:7a:
7a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:0C:0E:08:25:0B:5C:3E:62:70:7B:E5:A1:7F:19:43:B1:62:2B:E1
X509v3 Authority Key Identifier:
keyid:53:13:57:43:CD:59:EB:43:89:54:FE:B6:51:A5:D9:2D:9B:CC:4F:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/53135743CD59EB438954FEB651A5D92D9BCC4F6B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53135743CD59EB438954FEB651A5D92D9BCC4F6B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/53135743CD59EB438954FEB651A5D92D9BCC4F6B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f0:1a:7b:9b:e7:7d:c3:d8:e2:54:7f:f8:fb:16:60:d8:99:
dc:cd:6b:10:83:b5:64:7c:53:3c:c0:5d:d9:02:aa:41:17:99:
58:38:2c:df:b9:30:cb:36:f1:f5:08:2d:56:7e:61:50:43:17:
9c:63:9c:20:67:b4:e3:d2:c5:d3:bb:5e:f0:fa:7e:aa:02:fe:
dd:d5:78:a5:9e:65:81:c9:9c:74:d3:be:d4:9e:08:b3:e8:c4:
1b:5a:37:80:85:d6:ea:6d:c5:68:26:0c:30:ee:5e:a3:72:5a:
da:f1:ee:f4:0a:8c:fc:0b:0b:fa:53:6f:ff:e9:f8:85:b8:02:
a3:b3:62:79:83:f2:74:67:38:ca:97:30:60:98:97:73:90:7c:
62:21:39:3d:ba:77:ff:22:f1:4d:40:cb:3b:bf:0c:21:52:c6:
f9:ab:2e:1a:d5:f0:50:79:b8:96:2b:a6:6c:52:55:f9:a2:75:
da:c3:4a:db:e4:70:df:0f:38:9f:a1:fd:e6:93:02:7a:ad:ec:
8a:98:dc:fe:7c:33:41:2a:87:46:69:a3:24:48:52:97:b2:03:
96:7a:63:2c:9e:cc:01:a6:f4:a3:41:18:d1:4c:b2:54:3f:c4:
05:bb:d2:4e:5e:63:8d:89:15:b9:70:0f:0e:0f:8d:cf:6c:ce:
7f:c3:33:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:52:46 2026 by rpki-client