This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft
File: DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft (raw, json)
Hash identifier: QxA/1TFQgjWqxQFflKutVXhW7m1hlhUDep4y7qasJB0=
Subject key identifier: 54:56:7C:1E:19:07:2B:37:7A:90:F8:BA:0C:39:FD:93:19:C0:B7:63
Authority key identifier: DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16
Certificate issuer: /CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16
Certificate serial: 22BAEA6E18F7594A20A33534EDA594063B403066
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft
Manifest number: 01C1
Signing time: Mon 02 Feb 2026 00:42:03 +0000
Manifest this update: Mon 02 Feb 2026 00:37:03 +0000
Manifest next update: Thu 05 Feb 2026 08:55:03 +0000
Files and hashes: 1: 3130332e37302e3132332e302f32342d3234203d3e20313530393830.roa (hash: aPx9nZD1wRsR+YuJsPrgngjz+ATISfbMPyPoqRV/0hM=)
2: 3130332e37302e3132322e302f32342d3234203d3e20313530393830.roa (hash: 6+zEkFvJJLps0Ow0oFFDpd+JwPXLZVdctd3PSfCUG8Q=)
3: 3130332e37302e3132322e302f32332d3233203d3e20313530393830.roa (hash: sfj/xLZEElFZFm97ASqdb3Sh5i8unBwVhTxljUPKis0=)
4: DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl (hash: K1odO5oLE1YFyk3fUVOS4lfgQjrMu8ontVWc+uM5+ms=)
5: 323030313a6466323a373463303a3a2f34382d3438203d3e20313530393830.roa (hash: aNAiE73cD/v7tVb+4UuVcbAAh3drncSjCMcGBLb2SJ4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl
rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:ba:ea:6e:18:f7:59:4a:20:a3:35:34:ed:a5:94:06:3b:40:30:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16
Validity
Not Before: Feb 2 00:37:03 2026 GMT
Not After : Feb 5 08:55:03 2026 GMT
Subject: CN=54567C1E19072B377A90F8BA0C39FD9319C0B763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d4:38:8a:b7:65:02:7b:d0:9d:13:f3:7a:7c:
ff:90:76:5b:b5:0c:b3:17:07:da:7d:b0:1a:ea:7c:
f1:bf:a8:76:33:6d:df:91:fc:b7:c5:4b:b7:e7:be:
f3:4e:3a:67:e2:6e:6c:31:23:ef:35:f4:8d:1a:f9:
b1:13:f1:75:99:a9:b0:6a:3d:7b:92:ec:ab:f1:23:
ac:3e:a6:e3:87:11:76:2d:41:d8:1e:da:fd:2b:44:
88:c7:72:00:48:ed:10:0b:b5:0f:7a:87:f4:3a:57:
35:b9:7a:53:b6:ad:ca:1d:8a:b8:8f:0d:ce:2f:c4:
cf:13:3b:51:d1:25:4a:c5:93:00:60:93:4b:8d:1a:
b2:45:a9:79:80:4b:e3:bc:d3:50:c8:fe:38:51:78:
66:33:cf:05:bf:1a:45:3a:a7:b0:f0:94:45:42:2d:
81:4e:a0:51:00:11:37:d4:ef:11:ce:d5:56:4c:14:
d7:60:bd:94:53:21:32:3f:55:a9:44:b9:b8:6e:79:
af:03:10:5d:8d:c3:9d:24:2f:56:dd:16:a6:d0:c4:
1f:99:cf:1b:a0:b7:bc:37:b5:2f:94:e7:df:21:1c:
67:8e:d9:f5:1a:6e:2c:cd:4f:8e:94:73:e9:0d:aa:
7b:db:26:d3:e5:2e:ec:7b:df:fa:6b:71:b0:f4:e0:
c4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:56:7C:1E:19:07:2B:37:7A:90:F8:BA:0C:39:FD:93:19:C0:B7:63
X509v3 Authority Key Identifier:
keyid:DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:1e:1d:3e:83:89:78:00:44:56:8f:33:fc:b9:90:fd:11:4f:
57:9f:aa:81:af:4f:52:f0:69:0d:9d:88:18:50:94:cd:97:11:
bf:b5:af:bc:8a:20:8a:e4:f9:8d:b6:0f:84:f9:fb:0a:18:93:
0b:30:8d:b6:25:45:54:ff:ec:cc:36:42:c8:1b:09:f5:e6:b8:
ba:15:80:ca:f7:ad:ef:39:64:a5:6a:1f:c4:ff:8c:de:00:74:
bd:d2:83:be:9e:d0:2d:da:43:5c:1b:31:38:f4:25:56:99:87:
1e:84:05:f6:5d:21:16:39:37:30:98:31:58:e9:63:42:82:f8:
39:9b:91:26:29:13:aa:e0:ab:be:d9:44:d8:ef:aa:ee:46:68:
ed:e1:0e:c4:6f:5d:1d:3f:8c:3b:39:52:1d:8a:f3:02:0b:f7:
9a:a7:ef:54:60:1f:7f:39:74:93:9c:dd:72:53:f3:8c:1e:e2:
11:c3:00:77:8d:4a:45:14:dc:09:38:8e:da:f4:31:17:26:3f:
29:17:14:40:fa:cc:bf:77:61:a1:8c:f9:32:2e:23:dc:26:7b:
03:8a:ef:c5:ae:29:49:63:6d:a4:21:d4:2a:0a:eb:7e:79:6e:
2b:0b:30:59:ad:34:35:37:22:cb:c2:ce:85:b1:48:08:c2:24:
58:70:a1:b1
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUIrrqbhj3WUogozU07aWUBjtAMGYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMwMDA3
QzlBRkExNjAeFw0yNjAyMDIwMDM3MDNaFw0yNjAyMDUwODU1MDNaMDMxMTAvBgNV
BAMTKDU0NTY3QzFFMTkwNzJCMzc3QTkwRjhCQTBDMzlGRDkzMTlDMEI3NjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi1DiKt2UCe9CdE/N6fP+Qdlu1
DLMXB9p9sBrqfPG/qHYzbd+R/LfFS7fnvvNOOmfibmwxI+819I0a+bET8XWZqbBq
PXuS7KvxI6w+puOHEXYtQdge2v0rRIjHcgBI7RALtQ96h/Q6VzW5elO2rcodiriP
Dc4vxM8TO1HRJUrFkwBgk0uNGrJFqXmAS+O801DI/jhReGYzzwW/GkU6p7DwlEVC
LYFOoFEAETfU7xHO1VZMFNdgvZRTITI/ValEubhuea8DEF2Nw50kL1bdFqbQxB+Z
zxugt7w3tS+U598hHGeO2fUabizNT46Uc+kNqnvbJtPlLux73/prcbD04MQTAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUVFZ8HhkHKzd6kPi6DDn9kxnAt2MwHwYDVR0j
BBgwFoAU3VrNwLLQkVReGF6x+oDAAHya+hYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
MzI1MDY2Mi0zZWVmLTRhYTktOWVkZS01NjI5ZDViNmVhOTUvMC9ERDVBQ0RDMEIy
RDA5MTU0NUUxODVFQjFGQTgwQzAwMDdDOUFGQTE2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMwMDA3QzlB
RkExNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTMyNTA2NjItM2VlZi00YWE5LTll
ZGUtNTYyOWQ1YjZlYTk1LzAvREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMw
MDA3QzlBRkExNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFAeHT6DiXgARFaPM/y5kP0RT1efqoGvT1Lw
aQ2diBhQlM2XEb+1r7yKIIrk+Y22D4T5+woYkwswjbYlRVT/7Mw2QsgbCfXmuLoV
gMr3re85ZKVqH8T/jN4AdL3Sg76e0C3aQ1wbMTj0JVaZhx6EBfZdIRY5NzCYMVjp
Y0KC+DmbkSYpE6rgq77ZRNjvqu5GaO3hDsRvXR0/jDs5Uh2K8wIL95qn71RgH385
dJOc3XJT84we4hHDAHeNSkUU3Ak4jtr0MRcmPykXFED6zL93YaGM+TIuI9wmewOK
78WuKUljbaQh1CoK6355bisLMFmtNDU3IsvCzoWxSAjCJFhwobE=
-----END CERTIFICATE-----
Generated at Mon Feb 2 09:48:41 2026 by rpki-client