This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft
File: D1E28E396E82778793018513BD084854BE663886.mft (raw, json)
Hash identifier: IqGyXAKyLxjycOhu2GR/1s4qpEQack18RVPt7T5UWxg=
Subject key identifier: DF:4C:4D:EF:9F:CB:D9:3A:4A:69:FD:36:63:1A:BE:EC:1E:E5:0F:15
Authority key identifier: D1:E2:8E:39:6E:82:77:87:93:01:85:13:BD:08:48:54:BE:66:38:86
Certificate issuer: /CN=D1E28E396E82778793018513BD084854BE663886
Certificate serial: 7D7D3FD56BACFB69524F30899BE5592B8DEE9402
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft
Manifest number: 029B
Signing time: Fri 16 Jan 2026 13:30:49 +0000
Manifest this update: Fri 16 Jan 2026 13:25:49 +0000
Manifest next update: Mon 19 Jan 2026 23:51:49 +0000
Files and hashes: 1: D1E28E396E82778793018513BD084854BE663886.crl (hash: 2al2cBTJuOvrnxXgqyXMOIezDGBB9WGoWIy1N1JMP1A=)
2: 3130332e3136392e3233302e302f32332d3234203d3e2034383030.roa (hash: dbeooOEymowfTHu7nnG695fAge4T8FaVO8HgIWjN8ng=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.crl
rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Jan 2026 16:13:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:7d:3f:d5:6b:ac:fb:69:52:4f:30:89:9b:e5:59:2b:8d:ee:94:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1E28E396E82778793018513BD084854BE663886
Validity
Not Before: Jan 16 13:25:49 2026 GMT
Not After : Jan 19 23:51:49 2026 GMT
Subject: CN=DF4C4DEF9FCBD93A4A69FD36631ABEEC1EE50F15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e0:dd:f1:41:93:2b:86:f9:95:43:ce:7a:99:
4f:43:c0:57:b1:7e:55:bd:18:4e:fd:a2:22:7e:64:
7c:18:28:95:c2:2f:33:b4:8d:d0:57:88:38:92:c6:
1f:05:8e:ee:fc:6d:0c:84:4a:69:36:0f:b4:bd:e0:
a3:59:ae:c6:64:cd:86:1d:d2:f8:a7:07:0a:54:aa:
be:8a:5a:7e:6d:70:e0:da:44:eb:2c:76:37:85:51:
f5:e2:80:4a:1f:c2:a3:aa:0d:24:c1:6e:61:1d:92:
65:15:a8:b6:07:cd:45:5d:37:aa:43:d3:fe:62:2e:
70:2c:49:87:30:d7:45:aa:ce:50:42:cb:43:5c:d2:
94:a8:6f:9e:0e:24:3a:12:63:e2:4d:4f:b5:81:d4:
19:dd:b5:47:8a:85:8c:b2:2e:4f:e6:89:63:f4:d1:
60:cc:cf:f7:1b:dd:c7:84:95:b9:a4:77:7f:00:43:
42:5c:85:2b:6c:ba:4f:19:e0:b1:92:f3:68:72:f5:
3b:61:6c:0c:ac:99:6a:7d:43:3f:f4:dc:68:2a:f2:
26:ad:55:1c:5a:99:50:f7:b7:e8:4d:75:c7:0e:89:
83:da:96:ff:a1:6d:78:38:46:5e:f5:19:ac:ee:b5:
f6:d3:b4:c5:90:14:d2:46:aa:a8:cd:ac:ea:23:c6:
7d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4C:4D:EF:9F:CB:D9:3A:4A:69:FD:36:63:1A:BE:EC:1E:E5:0F:15
X509v3 Authority Key Identifier:
keyid:D1:E2:8E:39:6E:82:77:87:93:01:85:13:BD:08:48:54:BE:66:38:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:a2:be:e2:a4:77:4a:ac:07:3f:6f:01:af:ec:98:7c:6a:e9:
2d:fb:37:d5:0d:09:b4:9c:c4:fb:bc:9c:bb:2c:23:a8:d8:5b:
80:f6:72:1b:51:b2:5b:e8:eb:75:6f:72:9d:0c:9e:8a:d0:17:
a3:a7:c3:d9:ce:13:cb:28:6d:e0:9c:11:f8:b4:b8:32:6a:10:
90:55:03:97:6a:e7:f9:55:08:a8:ad:35:d0:97:e5:17:c9:eb:
72:7f:dd:3f:72:59:da:5e:09:9c:6a:e6:26:c8:62:7e:38:f5:
b9:4d:42:1d:02:ca:2f:35:93:bb:87:35:60:c4:01:f8:6d:e6:
1c:1c:6a:cc:b9:84:64:48:4c:41:71:83:f2:30:e5:8c:7a:54:
6e:d3:c5:36:08:17:43:fb:50:76:5a:35:79:5b:a1:f9:54:c9:
08:63:38:0c:43:7d:4b:c1:c9:c9:07:83:d3:c7:d2:58:ac:aa:
b6:11:12:20:b1:2e:17:b8:7f:aa:34:72:fd:73:ee:2d:dc:95:
46:a8:65:96:8c:df:74:4a:7e:02:53:60:1d:c1:e2:ff:63:6d:
75:e0:4b:06:9f:46:33:23:a4:09:68:a9:e3:50:d9:2d:11:6d:
88:0b:31:c8:db:fc:59:79:4c:e3:b8:cc:22:74:f8:b2:42:c7:
ba:5e:33:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 16 17:29:13 2026 by rpki-client