This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/053084D88D32CFF591DBCBF3109B9137C3E74648.mft
File: 053084D88D32CFF591DBCBF3109B9137C3E74648.mft (raw, json)
Hash identifier: A1dCJiJbWjOMT9eQpNk0KyYEywN3dnfONSkVwenai4Q=
Subject key identifier: A2:04:E0:B0:9C:FC:9B:8D:C4:89:99:56:A0:38:61:BF:6C:1A:44:42
Authority key identifier: 05:30:84:D8:8D:32:CF:F5:91:DB:CB:F3:10:9B:91:37:C3:E7:46:48
Certificate issuer: /CN=053084D88D32CFF591DBCBF3109B9137C3E74648
Certificate serial: 6C510D55D1A2EADFFF9520ECBBC95DC8AD94F5B4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/053084D88D32CFF591DBCBF3109B9137C3E74648.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/053084D88D32CFF591DBCBF3109B9137C3E74648.mft
Manifest number: 01A7
Signing time: Sat 31 Jan 2026 19:52:23 +0000
Manifest this update: Sat 31 Jan 2026 19:47:23 +0000
Manifest next update: Wed 04 Feb 2026 03:40:23 +0000
Files and hashes: 1: 3130332e3230352e36322e302f32332d3234203d3e20313530393932.roa (hash: x0rdzW+Z+6mUhvRC+qwoD+PtRMhNjhgY1WA5KetHwXU=)
2: 053084D88D32CFF591DBCBF3109B9137C3E74648.crl (hash: 3k/Mx03Tj3rUNG0a2twEuWXzlNHhYInSqK8pEhJHk4k=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/053084D88D32CFF591DBCBF3109B9137C3E74648.crl
rsync://repo-rpki.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/053084D88D32CFF591DBCBF3109B9137C3E74648.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/053084D88D32CFF591DBCBF3109B9137C3E74648.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 03:40:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:51:0d:55:d1:a2:ea:df:ff:95:20:ec:bb:c9:5d:c8:ad:94:f5:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053084D88D32CFF591DBCBF3109B9137C3E74648
Validity
Not Before: Jan 31 19:47:23 2026 GMT
Not After : Feb 4 03:40:23 2026 GMT
Subject: CN=A204E0B09CFC9B8DC4899956A03861BF6C1A4442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:40:85:0c:14:c0:a6:b3:e5:1a:bd:c9:b0:f6:
62:56:c2:06:e0:05:e2:b9:de:a7:82:56:a4:a1:d1:
40:15:f3:a7:51:92:19:6a:72:4a:6d:0b:37:21:11:
b4:bc:6e:2b:25:b8:c0:48:bb:3b:87:30:63:48:33:
fe:59:28:6d:6a:56:87:59:97:e3:9e:50:b1:37:ff:
c5:04:7b:d6:aa:a7:ff:67:69:32:4a:51:ec:d2:22:
5e:e6:27:bf:1d:7d:e9:19:34:76:da:d2:82:c7:90:
94:71:9a:0b:a3:af:f4:5c:f3:96:3e:04:99:fc:3e:
57:a0:3b:1c:43:f6:7b:fb:b0:0c:22:76:11:96:6b:
b3:63:5a:c0:c6:3c:27:26:4c:52:d6:f6:4d:56:bf:
c2:87:30:c5:32:d9:af:fe:3b:43:78:91:2e:c5:1b:
ed:e6:1e:c9:c4:07:cb:90:63:f7:06:c3:7b:ae:d7:
a8:a4:78:af:1c:c0:5f:c0:3f:39:ca:dc:f9:65:c3:
6a:2e:12:76:4b:ee:93:2f:ef:a0:0a:4b:7c:d2:36:
b1:c8:8c:66:77:29:46:23:a3:1d:cf:8d:cb:dd:6d:
02:23:f5:6b:b6:83:cf:58:ba:9c:08:62:18:30:72:
34:79:42:88:13:a4:96:50:f7:ad:f9:c6:5f:7b:04:
6c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:04:E0:B0:9C:FC:9B:8D:C4:89:99:56:A0:38:61:BF:6C:1A:44:42
X509v3 Authority Key Identifier:
keyid:05:30:84:D8:8D:32:CF:F5:91:DB:CB:F3:10:9B:91:37:C3:E7:46:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/053084D88D32CFF591DBCBF3109B9137C3E74648.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/053084D88D32CFF591DBCBF3109B9137C3E74648.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/053084D88D32CFF591DBCBF3109B9137C3E74648.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:02:e9:1f:c6:35:54:f1:c0:9b:25:db:8c:6c:79:72:c6:3b:
29:80:e1:c0:b6:c5:12:22:6e:9a:32:e0:46:a8:fd:7a:04:52:
c9:01:91:51:1e:00:4f:e6:7b:b4:85:26:46:af:3f:51:c0:9b:
14:9b:2e:78:21:34:2a:25:40:96:76:5b:98:c1:70:b5:f1:6e:
ce:4d:da:83:a1:14:61:68:57:65:c1:ec:4c:55:7c:c3:88:be:
97:2f:62:3c:75:f5:ae:12:e3:d2:bc:e3:98:0d:4c:e7:1f:63:
41:35:4b:ca:36:da:af:51:6a:fa:68:87:13:d6:72:69:bd:4b:
4f:9f:1d:4f:f3:17:73:e2:6f:18:51:e5:10:71:ad:46:b4:10:
82:5d:58:42:7b:e7:f4:ed:7a:1f:71:92:43:b9:09:f5:5b:e5:
07:7f:6c:fc:c6:d6:72:88:7d:b6:21:37:32:76:eb:39:15:8b:
35:66:af:c8:a6:e4:e1:46:94:ec:9b:24:61:32:18:4e:37:0a:
d2:e4:0c:a2:03:e2:13:b6:fb:ca:a3:6a:29:57:59:30:a8:ff:
f8:db:ef:a5:52:08:31:88:1f:52:1a:f7:58:fc:59:e4:b3:12:
f7:7c:87:91:78:3c:56:ec:1e:55:f4:ed:9b:ba:4f:ef:bc:74:
9c:59:1e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:04:23 2026 by rpki-client