This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft
File: 45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft (raw, json)
Hash identifier: 8ac/f9XSCX9JKIgEhj9LP9rXxsGnKJ5HmAkEJYg2kBk=
Subject key identifier: 2F:B8:B7:47:B3:4C:2A:9D:5E:94:D3:FE:DB:53:44:BF:FB:09:83:C0
Authority key identifier: 45:79:5C:E4:11:02:7C:69:61:B8:9E:9C:0F:BD:B9:B7:3B:D6:1C:39
Certificate issuer: /CN=45795CE411027C6961B89E9C0FBDB9B73BD61C39
Certificate serial: 16C97450B2D1A0D2DA232F9EAD73B568CA948702
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft
Manifest number: 0545
Signing time: Sun 25 Jan 2026 13:21:01 +0000
Manifest this update: Sun 25 Jan 2026 13:16:01 +0000
Manifest next update: Wed 28 Jan 2026 17:57:01 +0000
Files and hashes: 1: 323030313a6466303a623238303a3a2f34382d3438203d3e20313338383733.roa (hash: Hrvwt79CsllNFcgj1XkX080ZEGTR3oJEJ5/uQyuwag4=)
2: 3130332e3134302e37382e302f32332d3234203d3e20313338383733.roa (hash: DGGFs/nhZ+k7NUxZJLoh30LOsNcccBtIeZpWg8Hba0w=)
3: 3130332e3134302e37392e302f32342d3234203d3e203438343635.roa (hash: DkleJkN5W2PyaQBgkh3h9+A6EIKYUBI0XIE9LsGOkEE=)
4: 3130332e3134302e37382e302f32342d3234203d3e203438343635.roa (hash: rLQgAbVnt3V9mbyukLPioMNmLMKQ2mxQ9vlQUzCluhI=)
5: 45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl (hash: xkx33mzudcuD2VFBQYzeTGQSpr04byWZ9h0iNuAVJC4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl
rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:c9:74:50:b2:d1:a0:d2:da:23:2f:9e:ad:73:b5:68:ca:94:87:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45795CE411027C6961B89E9C0FBDB9B73BD61C39
Validity
Not Before: Jan 25 13:16:01 2026 GMT
Not After : Jan 28 17:57:01 2026 GMT
Subject: CN=2FB8B747B34C2A9D5E94D3FEDB5344BFFB0983C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:dd:8b:b1:f4:23:36:2f:d8:b0:d6:61:60:c1:
53:bf:c5:07:b8:6c:ac:38:2b:d8:b0:3c:ec:e5:97:
c1:6d:5c:c6:d6:43:87:5a:c7:a2:8f:c9:27:c8:39:
fd:24:f2:88:22:69:32:96:dc:2a:c2:f9:40:ff:cd:
a8:29:7c:11:92:3d:0d:ee:b1:f5:27:39:9d:d6:9d:
6b:83:db:9b:80:ac:e2:93:62:25:0f:6e:1e:36:b9:
82:25:8e:41:b0:2b:b7:6e:77:d5:20:84:bc:59:e5:
c8:74:93:8b:63:68:54:5b:04:9c:7a:c8:23:db:7f:
84:8b:25:23:5f:b8:1e:16:27:93:d2:df:e7:af:84:
5b:65:18:1d:2e:97:64:89:eb:c6:f8:30:38:3c:c9:
d2:72:a6:5d:89:e0:f8:76:2f:bf:69:04:b9:fe:c5:
c0:c4:c1:b0:2c:bf:71:d1:8f:2b:07:09:40:21:ce:
dd:10:70:85:b0:5f:03:e5:d6:61:d0:f7:74:a3:86:
53:66:e5:d9:68:05:2d:b5:55:9e:0b:e8:22:af:46:
44:76:11:77:cc:62:e7:1b:af:77:bf:86:ce:3c:d4:
98:8c:ad:12:9b:20:7e:6a:63:a1:20:2d:3f:43:6b:
8c:2c:95:90:71:79:9f:2f:e0:3c:65:17:63:5e:c7:
8b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B8:B7:47:B3:4C:2A:9D:5E:94:D3:FE:DB:53:44:BF:FB:09:83:C0
X509v3 Authority Key Identifier:
keyid:45:79:5C:E4:11:02:7C:69:61:B8:9E:9C:0F:BD:B9:B7:3B:D6:1C:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:7c:69:1e:b7:14:80:ef:a1:2b:99:37:3f:bf:26:d9:c2:dc:
59:7f:c3:d2:53:46:e0:39:0c:d6:5a:f3:74:12:ce:d2:cb:0d:
0b:7c:68:1d:bd:ac:7c:10:1b:8d:66:17:5e:9d:72:3f:99:f2:
53:b1:5c:ed:48:e0:76:ad:8e:55:af:02:fc:3d:f5:cb:50:10:
ae:bf:89:43:ea:eb:36:47:cd:46:ef:00:15:29:22:2d:67:f7:
71:9c:75:c7:55:1d:db:0c:ac:57:53:13:ad:e2:9f:80:d3:5b:
b6:ba:8d:35:5e:e9:eb:41:0b:de:78:32:25:bb:52:be:44:34:
12:83:e0:a3:95:d8:87:bd:ee:af:81:e0:8f:db:45:e2:20:97:
7e:71:69:76:34:c0:d2:7e:dc:7a:fb:0f:f0:e1:74:5d:43:a4:
4a:6e:61:38:a2:b4:b1:47:09:49:6a:01:b9:b3:e1:ba:2e:57:
72:99:a1:f4:8f:9c:76:ec:03:8e:08:8b:06:c3:da:f3:21:71:
ac:f8:0b:aa:2d:7b:7b:2b:a7:b7:fa:ec:23:52:24:5c:b6:bf:
3f:2f:f0:33:e4:53:58:2a:6d:af:d8:3c:e6:08:a8:50:57:f1:
25:43:55:8f:1e:d2:8f:d7:37:d9:c4:cc:b7:28:b2:5d:fb:98:
e2:87:35:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:30:52 2026 by rpki-client