This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft
File: 1072AD17A8EDB1513AED95A258088F480ADA492B.mft (raw, json)
Hash identifier: 4nrjALa47OXcE/IBSmJBqoHPZWaNABX03legSxvbFVs=
Subject key identifier: 26:1A:08:94:1E:62:AA:7D:B7:99:E7:41:40:36:43:FA:47:EC:2C:E8
Authority key identifier: 10:72:AD:17:A8:ED:B1:51:3A:ED:95:A2:58:08:8F:48:0A:DA:49:2B
Certificate issuer: /CN=1072AD17A8EDB1513AED95A258088F480ADA492B
Certificate serial: 73DEC5ABFC2AAEA154A9AC71D21B84B0B8B82960
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1072AD17A8EDB1513AED95A258088F480ADA492B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft
Manifest number: 01DF
Signing time: Mon 02 Feb 2026 03:40:44 +0000
Manifest this update: Mon 02 Feb 2026 03:35:44 +0000
Manifest next update: Thu 05 Feb 2026 13:08:44 +0000
Files and hashes: 1: 1072AD17A8EDB1513AED95A258088F480ADA492B.crl (hash: /otj+DrE4cGH2AggWsu6Tp95o8p+WVtp/GpDr7aiT4g=)
2: 3130332e3232302e3131342e302f32332d3234203d3e20313335343436.roa (hash: iOecriuLYOaY71DNd88M3kxYp9C78ZPc3k0drPavCOg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.crl
rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1072AD17A8EDB1513AED95A258088F480ADA492B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:de:c5:ab:fc:2a:ae:a1:54:a9:ac:71:d2:1b:84:b0:b8:b8:29:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1072AD17A8EDB1513AED95A258088F480ADA492B
Validity
Not Before: Feb 2 03:35:44 2026 GMT
Not After : Feb 5 13:08:44 2026 GMT
Subject: CN=261A08941E62AA7DB799E741403643FA47EC2CE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5e:86:e7:0c:90:e3:c0:8e:13:ad:9c:79:93:
e5:a5:b1:78:ad:ed:00:c4:e8:45:76:a6:9f:4d:20:
f5:60:aa:ad:db:84:29:64:fd:49:88:0b:73:ee:f3:
c9:2e:9a:c3:28:26:c7:31:67:7d:63:06:34:6b:8f:
42:6f:74:f0:75:3d:80:3b:67:2d:5b:c2:c4:54:5c:
00:b5:92:15:a4:1e:2c:e0:d7:43:15:e9:d0:c2:92:
28:cc:bc:cf:25:2a:6e:30:4c:08:8a:22:c0:7e:3d:
0d:45:59:fa:aa:3d:fd:31:55:43:86:e2:37:2c:24:
a2:93:d0:3a:a9:4c:f8:68:06:ed:94:35:b0:ba:f3:
44:91:32:11:07:cd:7a:61:b1:14:3c:e3:90:b4:cc:
77:2b:4c:2e:ec:14:aa:fd:ca:d8:47:6e:88:f5:ac:
f1:ac:b0:46:d1:1e:c9:e1:01:41:ea:55:eb:d6:ce:
72:3a:5a:fa:28:91:6d:cd:f1:04:2b:87:59:f4:f7:
ef:fc:b4:cb:18:27:b4:c8:ff:90:b7:e5:c6:b9:75:
b3:3f:de:0e:73:d6:90:f3:73:a3:a4:b9:bd:50:c8:
79:c7:fe:05:26:a3:ee:9e:a5:21:94:d8:d9:28:6a:
6d:0b:69:b5:0b:70:26:7e:40:af:bf:e3:10:8f:98:
16:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:1A:08:94:1E:62:AA:7D:B7:99:E7:41:40:36:43:FA:47:EC:2C:E8
X509v3 Authority Key Identifier:
keyid:10:72:AD:17:A8:ED:B1:51:3A:ED:95:A2:58:08:8F:48:0A:DA:49:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1072AD17A8EDB1513AED95A258088F480ADA492B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ac:0b:da:e3:a4:fa:f5:77:16:8c:a2:b4:12:cd:be:3e:13:
a3:1e:e4:b8:63:78:71:80:5d:e5:ce:b5:09:01:d7:1e:06:01:
f6:f5:2c:cc:22:85:29:12:7b:a0:e8:3f:4f:fb:ac:0e:e7:94:
38:33:01:ad:2f:73:a9:8e:63:b9:10:ba:93:ee:c6:89:1d:67:
5e:96:5d:dc:c7:14:1e:a2:13:9d:25:fe:ad:6e:bc:56:20:0f:
17:ac:12:fb:fb:70:87:c7:0a:7f:bc:68:e9:9a:b7:ec:18:96:
45:b8:22:26:8d:0a:ad:fa:41:8d:87:10:48:38:31:91:a5:23:
0e:b9:ab:77:8d:c0:4b:da:bf:14:44:86:54:4b:86:20:fd:1d:
c0:f2:f7:61:aa:c9:16:69:c4:07:60:02:0d:5b:1d:db:aa:eb:
e3:3e:bd:dc:19:dd:82:d7:31:82:84:a7:69:74:14:f3:cf:56:
8b:10:32:1a:00:47:09:03:df:42:ba:8f:82:93:6c:5a:f9:fc:
93:34:32:44:a5:3a:39:0f:a2:72:d3:60:7e:ff:52:38:12:42:
a1:20:88:1f:e8:9b:16:0e:98:da:62:e6:f3:07:75:45:f2:08:
8b:70:9c:57:63:fb:b6:1b:ef:4f:21:30:93:9b:5c:bc:1c:52:
fb:5b:56:15
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUc97Fq/wqrqFUqaxx0huEsLi4KWAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA3MkFEMTdBOEVEQjE1MTNBRUQ5NUEyNTgwODhGNDgw
QURBNDkyQjAeFw0yNjAyMDIwMzM1NDRaFw0yNjAyMDUxMzA4NDRaMDMxMTAvBgNV
BAMTKDI2MUEwODk0MUU2MkFBN0RCNzk5RTc0MTQwMzY0M0ZBNDdFQzJDRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUXobnDJDjwI4TrZx5k+WlsXit
7QDE6EV2pp9NIPVgqq3bhClk/UmIC3Pu88kumsMoJscxZ31jBjRrj0JvdPB1PYA7
Zy1bwsRUXAC1khWkHizg10MV6dDCkijMvM8lKm4wTAiKIsB+PQ1FWfqqPf0xVUOG
4jcsJKKT0DqpTPhoBu2UNbC680SRMhEHzXphsRQ845C0zHcrTC7sFKr9ythHboj1
rPGssEbRHsnhAUHqVevWznI6WvookW3N8QQrh1n09+/8tMsYJ7TI/5C35ca5dbM/
3g5z1pDzc6Okub1QyHnH/gUmo+6epSGU2Nkoam0LabULcCZ+QK+/4xCPmBZhAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUJhoIlB5iqn23medBQDZD+kfsLOgwHwYDVR0j
BBgwFoAUEHKtF6jtsVE67ZWiWAiPSAraSSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NTRiOWQzMi0zYzVhLTQwZTItYjc4OC0wNjlkZTBjM2QyZGUvMC8xMDcyQUQxN0E4
RURCMTUxM0FFRDk1QTI1ODA4OEY0ODBBREE0OTJCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTA3MkFEMTdBOEVEQjE1MTNBRUQ5NUEyNTgwODhGNDgwQURB
NDkyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTU0YjlkMzItM2M1YS00MGUyLWI3
ODgtMDY5ZGUwYzNkMmRlLzAvMTA3MkFEMTdBOEVEQjE1MTNBRUQ5NUEyNTgwODhG
NDgwQURBNDkyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAECsC9rjpPr1dxaMorQSzb4+E6Me5LhjeHGA
XeXOtQkB1x4GAfb1LMwihSkSe6DoP0/7rA7nlDgzAa0vc6mOY7kQupPuxokdZ16W
XdzHFB6iE50l/q1uvFYgDxesEvv7cIfHCn+8aOmat+wYlkW4IiaNCq36QY2HEEg4
MZGlIw65q3eNwEvavxREhlRLhiD9HcDy92GqyRZpxAdgAg1bHduq6+M+vdwZ3YLX
MYKEp2l0FPPPVosQMhoARwkD30K6j4KTbFr5/JM0MkSlOjkPonLTYH7/UjgSQqEg
iB/omxYOmNpi5vMHdUXyCItwnFdj+7Yb708hMJObXLwcUvtbVhU=
-----END CERTIFICATE-----
Generated at Mon Feb 2 12:48:53 2026 by rpki-client