This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.mft
File: 893997EF53FFBB5A3C55A47213135040C1C5B843.mft (raw, json)
Hash identifier: dMEFz5BMCHocaGdWG4+RBa+QPceORLxR/syVgyWgWxY=
Subject key identifier: A5:29:A5:CB:C7:01:A2:F7:AD:7B:9D:8D:16:0F:57:19:21:2F:A1:F7
Authority key identifier: 89:39:97:EF:53:FF:BB:5A:3C:55:A4:72:13:13:50:40:C1:C5:B8:43
Certificate issuer: /CN=893997EF53FFBB5A3C55A47213135040C1C5B843
Certificate serial: 19C4BBE8FAA4D1EC3B48ED08BB2478C5071BC0E0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/893997EF53FFBB5A3C55A47213135040C1C5B843.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.mft
Manifest number: 01B7
Signing time: Sat 31 Jan 2026 05:00:50 +0000
Manifest this update: Sat 31 Jan 2026 04:55:50 +0000
Manifest next update: Tue 03 Feb 2026 13:37:50 +0000
Files and hashes: 1: 3130332e3139322e38312e302f32342d3234203d3e20313530393137.roa (hash: 3qZF8ggdlzs3ruDfQ9HAEp9ByaXAzt4cAU9kMTQ4y6s=)
2: 893997EF53FFBB5A3C55A47213135040C1C5B843.crl (hash: kx7q3Dp9j0F3ziu36FFjYkpooC+eFHNTuR5YOBqAxec=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.crl
rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/893997EF53FFBB5A3C55A47213135040C1C5B843.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 13:37:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:c4:bb:e8:fa:a4:d1:ec:3b:48:ed:08:bb:24:78:c5:07:1b:c0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893997EF53FFBB5A3C55A47213135040C1C5B843
Validity
Not Before: Jan 31 04:55:50 2026 GMT
Not After : Feb 3 13:37:50 2026 GMT
Subject: CN=A529A5CBC701A2F7AD7B9D8D160F5719212FA1F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ab:4b:e6:31:d7:fa:c6:1d:6e:85:15:ed:47:
e6:79:40:24:3e:a1:2b:aa:2a:0c:a5:f1:d9:69:09:
66:35:3b:83:a6:0e:9b:9c:0a:35:e4:82:65:c3:48:
ed:19:b0:ee:27:b5:10:d5:a6:6a:38:41:27:95:8b:
1b:06:40:8e:39:08:ac:ec:7a:08:bb:20:54:55:e9:
c2:2b:cc:b5:ca:8b:f4:4e:8f:38:9c:f8:23:c2:27:
00:d7:a2:ab:ee:72:78:cd:b3:b3:6d:ad:fd:69:e3:
04:ee:f3:6e:74:1e:10:93:f9:66:4f:c2:49:6d:cb:
e7:44:1b:eb:c9:87:61:79:21:0e:a0:6d:1a:d8:39:
f3:74:79:17:7e:33:32:30:d9:1a:25:35:0a:a8:db:
e1:80:cd:04:78:f8:85:c5:47:79:cf:31:aa:04:a5:
75:fd:98:d2:0a:32:93:59:2d:80:a8:41:f1:6a:d7:
e5:5e:a4:b5:af:b9:e3:76:2b:73:c6:7b:77:5e:57:
ef:7d:cc:db:ef:83:df:a7:dd:40:df:6d:9e:1a:be:
4a:44:0a:40:12:96:9c:11:97:57:f1:68:f5:d8:af:
ce:9c:d5:07:c8:1e:fd:2d:d1:e3:0d:40:77:19:59:
42:9d:cf:93:4b:c8:39:0c:3d:81:c8:18:72:a1:6b:
19:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:29:A5:CB:C7:01:A2:F7:AD:7B:9D:8D:16:0F:57:19:21:2F:A1:F7
X509v3 Authority Key Identifier:
keyid:89:39:97:EF:53:FF:BB:5A:3C:55:A4:72:13:13:50:40:C1:C5:B8:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/893997EF53FFBB5A3C55A47213135040C1C5B843.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:44:9f:34:74:8d:0d:1e:76:68:da:51:f9:e3:63:a9:cd:bc:
6c:4d:5f:0b:7d:56:85:c7:ac:c7:4f:c5:ff:cf:7f:aa:64:15:
85:53:97:75:2a:2e:63:de:6e:90:64:88:14:aa:95:e4:ee:3a:
0d:7f:17:5e:cc:de:13:52:35:c5:b7:c4:e8:83:b6:58:26:86:
74:5c:65:8a:d2:71:15:85:1f:cd:78:45:47:5f:34:c9:e9:34:
68:24:d0:3c:ba:2e:c1:88:25:de:59:04:1d:e2:fe:d6:0d:cf:
59:1b:ef:5b:5f:56:37:6c:40:bf:6e:ea:fb:47:c9:19:a5:34:
d0:ff:55:4d:30:66:7e:f5:d8:e0:2d:f0:5b:98:91:4a:8d:1a:
d5:1b:f5:c7:8e:f6:88:35:07:eb:4f:bf:70:5d:5c:15:ba:95:
db:5b:44:42:05:d4:c9:48:fc:68:03:3a:69:89:2b:cf:7c:6c:
da:51:3a:7b:b9:d7:e5:3e:e7:b9:aa:11:d3:e7:75:d9:07:80:
7b:2f:a8:16:06:b1:a0:8d:09:cc:5b:e3:bd:90:5f:bf:36:a9:
a8:a4:ca:8d:0e:0a:23:5a:98:83:82:e8:91:e3:92:f9:de:50:
ca:1a:e2:e1:08:2c:9f:6d:79:33:0e:a5:45:95:20:f7:9b:ad:
ce:5d:ad:62
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUGcS76Pqk0ew7SO0IuyR4xQcbwOAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODkzOTk3RUY1M0ZGQkI1QTNDNTVBNDcyMTMxMzUwNDBD
MUM1Qjg0MzAeFw0yNjAxMzEwNDU1NTBaFw0yNjAyMDMxMzM3NTBaMDMxMTAvBgNV
BAMTKEE1MjlBNUNCQzcwMUEyRjdBRDdCOUQ4RDE2MEY1NzE5MjEyRkExRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBq0vmMdf6xh1uhRXtR+Z5QCQ+
oSuqKgyl8dlpCWY1O4OmDpucCjXkgmXDSO0ZsO4ntRDVpmo4QSeVixsGQI45CKzs
egi7IFRV6cIrzLXKi/ROjzic+CPCJwDXoqvucnjNs7Ntrf1p4wTu8250HhCT+WZP
wklty+dEG+vJh2F5IQ6gbRrYOfN0eRd+MzIw2RolNQqo2+GAzQR4+IXFR3nPMaoE
pXX9mNIKMpNZLYCoQfFq1+VepLWvueN2K3PGe3deV+99zNvvg9+n3UDfbZ4avkpE
CkASlpwRl1fxaPXYr86c1QfIHv0t0eMNQHcZWUKdz5NLyDkMPYHIGHKhaxnlAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUpSmly8cBovete52NFg9XGSEvofcwHwYDVR0j
BBgwFoAUiTmX71P/u1o8VaRyExNQQMHFuEMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
NjRmZjdjOS1lOTA1LTQ0ZDYtYmMzNS1jN2RiYjA3MGI3NTcvMC84OTM5OTdFRjUz
RkZCQjVBM0M1NUE0NzIxMzEzNTA0MEMxQzVCODQzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODkzOTk3RUY1M0ZGQkI1QTNDNTVBNDcyMTMxMzUwNDBDMUM1
Qjg0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDY0ZmY3YzktZTkwNS00NGQ2LWJj
MzUtYzdkYmIwNzBiNzU3LzAvODkzOTk3RUY1M0ZGQkI1QTNDNTVBNDcyMTMxMzUw
NDBDMUM1Qjg0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAI5EnzR0jQ0edmjaUfnjY6nNvGxNXwt9VoXH
rMdPxf/Pf6pkFYVTl3UqLmPebpBkiBSqleTuOg1/F17M3hNSNcW3xOiDtlgmhnRc
ZYrScRWFH814RUdfNMnpNGgk0Dy6LsGIJd5ZBB3i/tYNz1kb71tfVjdsQL9u6vtH
yRmlNND/VU0wZn712OAt8FuYkUqNGtUb9ceO9og1B+tPv3BdXBW6ldtbREIF1MlI
/GgDOmmJK898bNpROnu51+U+57mqEdPnddkHgHsvqBYGsaCNCcxb472QX782qaik
yo0OCiNamIOC6JHjkvneUMoa4uEILJ9teTMOpUWVIPebrc5drWI=
-----END CERTIFICATE-----
Generated at Mon Feb 2 09:56:34 2026 by rpki-client