This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.mft
File: 84DE1C79BB946275D6796DBDBC79083CB24881A6.mft (raw, json)
Hash identifier: SNMjqRCx1cLIjbBFQGdOnViFs5pt6/cJNRLlTJNoGdw=
Subject key identifier: 76:5B:59:EE:E4:07:99:AD:48:AF:09:91:F9:78:11:EC:DC:CB:48:FC
Authority key identifier: 84:DE:1C:79:BB:94:62:75:D6:79:6D:BD:BC:79:08:3C:B2:48:81:A6
Certificate issuer: /CN=84DE1C79BB946275D6796DBDBC79083CB24881A6
Certificate serial: 0324F0ECC752101AD6650DFAD35C222E2519AFD6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/84DE1C79BB946275D6796DBDBC79083CB24881A6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.mft
Manifest number: 61
Signing time: Fri 23 Jan 2026 17:02:16 +0000
Manifest this update: Fri 23 Jan 2026 16:57:16 +0000
Manifest next update: Tue 27 Jan 2026 01:48:16 +0000
Files and hashes: 1: 34332e3234312e3234362e302f32332d3234203d3e20313532303837.roa (hash: nPcZF2JbaXVg4aqEl6fdLSlNMJ+HNs6j21SzssKEs40=)
2: 84DE1C79BB946275D6796DBDBC79083CB24881A6.crl (hash: N176tSddDTR0WO3FBSnPLn+DNYPKY2EhyXPheyPa8Qc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.crl
rsync://repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/84DE1C79BB946275D6796DBDBC79083CB24881A6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 01:48:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:24:f0:ec:c7:52:10:1a:d6:65:0d:fa:d3:5c:22:2e:25:19:af:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84DE1C79BB946275D6796DBDBC79083CB24881A6
Validity
Not Before: Jan 23 16:57:16 2026 GMT
Not After : Jan 27 01:48:16 2026 GMT
Subject: CN=765B59EEE40799AD48AF0991F97811ECDCCB48FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:27:01:b4:48:a6:d6:9e:9c:0f:55:53:5a:b1:
12:de:cd:07:06:6c:21:10:ed:e6:03:4e:12:89:d0:
52:87:f3:51:ee:57:7d:6c:d4:b2:18:42:e1:5a:c1:
46:10:e1:4f:da:74:1f:ad:c7:f4:c4:35:50:97:bd:
ca:f2:d1:9b:d9:4c:82:17:9d:e1:5c:5d:0b:e8:26:
19:4b:de:6d:7b:69:c4:b2:08:97:80:65:62:bf:a3:
7a:87:78:90:b5:e1:dc:eb:7b:46:da:5a:51:1a:d9:
5a:0b:a6:e5:2d:fe:cf:62:ac:06:43:b5:fb:c2:d4:
04:5b:9d:56:4d:35:2e:eb:6c:56:fc:de:b6:7d:b0:
2f:c4:d8:c4:f9:ff:6e:e1:07:16:33:8c:98:2c:d4:
36:9a:28:93:2d:de:bf:a0:c6:ea:50:f5:88:95:5e:
9f:22:34:5e:66:e8:ec:56:5d:aa:05:16:9e:fa:50:
93:21:f5:a8:0f:75:c4:7d:2e:15:3d:de:a3:94:f9:
fc:fa:bd:b3:b8:53:4f:66:ec:83:04:9a:80:48:18:
01:b8:a1:c1:32:02:a4:eb:e9:7a:7b:b4:66:ea:62:
bb:35:4c:e7:e9:a1:ad:c0:cc:7c:2e:a7:d7:37:5f:
fc:15:3a:85:08:b9:59:84:d5:3a:7f:be:b0:6c:37:
e4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:5B:59:EE:E4:07:99:AD:48:AF:09:91:F9:78:11:EC:DC:CB:48:FC
X509v3 Authority Key Identifier:
keyid:84:DE:1C:79:BB:94:62:75:D6:79:6D:BD:BC:79:08:3C:B2:48:81:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/84DE1C79BB946275D6796DBDBC79083CB24881A6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:0c:18:ae:b7:38:c4:43:2a:d7:80:40:5c:c8:83:4f:a6:87:
db:15:ab:b9:78:eb:aa:dd:48:1c:b3:01:ac:de:6e:0c:98:ee:
c3:7e:9a:09:e8:86:6b:44:d9:b4:43:76:d9:d3:16:7e:21:14:
dd:04:ab:fa:21:cd:d9:aa:56:35:b8:e7:4d:5d:34:dc:5a:e4:
56:d7:98:9a:b2:af:18:e2:78:11:97:e9:ad:77:be:ed:cb:d5:
50:bf:53:7f:a8:c1:92:00:69:e1:31:76:b9:61:55:f4:50:68:
f8:5b:d6:0b:b5:98:1e:a9:cc:95:84:f3:48:b2:c3:e5:b5:5c:
c5:c0:62:53:fd:23:8b:2f:b7:9d:32:66:f7:26:7e:e2:1c:31:
b3:65:34:d3:e4:b7:69:dc:65:cc:d2:6a:e7:70:5e:6b:dd:1e:
da:02:f8:df:de:d8:9c:82:dd:35:51:fe:c4:9b:a7:03:92:aa:
57:61:5c:79:4a:19:f3:7e:a0:52:00:8f:f6:11:b5:af:3c:a9:
85:33:35:f4:0b:b9:1b:0d:cf:bf:d0:33:84:f9:ca:e9:28:ff:
ce:dc:92:b0:ed:1b:33:8a:d8:36:f8:f7:70:52:57:36:db:ba:
bf:fc:2d:11:cf:ac:6a:8c:dd:fe:2e:52:77:c8:19:cd:60:de:
d7:69:49:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:58:05 2026 by rpki-client