This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft
File: E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft (raw, json)
Hash identifier: BzFyllQ3yC/OAfGV3iTnnCwG5zxHdtY5XI+8UEv0zhQ=
Subject key identifier: D1:68:3B:FD:A4:92:5C:AC:F0:95:52:D5:3D:CA:D9:2A:AF:15:95:2B
Authority key identifier: E5:3C:DD:20:4A:5D:5B:F7:88:3A:04:38:BF:C2:17:94:95:95:3A:1F
Certificate issuer: /CN=E53CDD204A5D5BF7883A0438BFC2179495953A1F
Certificate serial: 2CCA1A7A2FBB3FCAD063A140DFC075953A9CA55B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E53CDD204A5D5BF7883A0438BFC2179495953A1F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft
Manifest number: BE
Signing time: Sun 01 Feb 2026 10:10:59 +0000
Manifest this update: Sun 01 Feb 2026 10:05:59 +0000
Manifest next update: Wed 04 Feb 2026 18:53:59 +0000
Files and hashes: 1: E53CDD204A5D5BF7883A0438BFC2179495953A1F.crl (hash: VljmvY6aSBQFMYBF06kL3eNGbCiw6wPZTzVBQIy4mrM=)
2: 3130332e332e3233322e302f32342d3234203d3e20313531353238.roa (hash: dSXAsb0EYxBUtM1CoaRZWop2Ld4yRUPCa2RHmQsYyhU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.crl
rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E53CDD204A5D5BF7883A0438BFC2179495953A1F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 18:53:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:ca:1a:7a:2f:bb:3f:ca:d0:63:a1:40:df:c0:75:95:3a:9c:a5:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E53CDD204A5D5BF7883A0438BFC2179495953A1F
Validity
Not Before: Feb 1 10:05:59 2026 GMT
Not After : Feb 4 18:53:59 2026 GMT
Subject: CN=D1683BFDA4925CACF09552D53DCAD92AAF15952B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:15:42:e4:f7:bf:2e:6f:51:2f:80:1b:0d:7f:
1a:d9:b9:65:36:ef:6e:30:86:11:ee:a3:8e:9b:e7:
cf:a3:71:26:e0:94:3f:cb:30:44:d5:36:c8:d6:01:
3b:17:aa:6f:5e:ed:9e:0c:83:83:b1:2d:59:b4:74:
18:60:59:16:ca:0c:17:27:d4:e6:11:da:2d:9d:78:
15:cd:13:04:1d:47:79:60:42:8b:af:d1:48:c0:9a:
67:99:2c:28:c3:08:4c:03:15:00:12:0e:5b:57:12:
9e:d4:7f:6e:0a:73:61:82:58:48:23:a0:3b:96:4d:
40:4f:07:02:3d:e0:a5:bb:d3:37:94:ac:11:60:37:
fc:93:9a:a4:ee:18:08:6f:0c:3b:ba:7e:62:54:52:
12:e3:28:ba:02:81:c2:c3:00:b4:85:ba:9b:15:5a:
af:af:1b:8d:e7:79:07:68:63:e2:4b:b5:33:a5:5b:
af:02:53:ae:07:6a:91:ac:ee:69:12:44:a2:a7:62:
9e:eb:16:90:5c:11:8d:b8:34:17:57:f5:7a:f3:91:
46:06:5a:68:96:67:2e:14:4a:a0:2d:a6:c2:b9:4b:
b7:e6:0e:87:78:36:cc:74:09:9b:50:71:37:ae:38:
f9:ba:54:c4:55:58:61:dd:ab:f3:6c:9c:7e:db:5b:
1b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:68:3B:FD:A4:92:5C:AC:F0:95:52:D5:3D:CA:D9:2A:AF:15:95:2B
X509v3 Authority Key Identifier:
keyid:E5:3C:DD:20:4A:5D:5B:F7:88:3A:04:38:BF:C2:17:94:95:95:3A:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E53CDD204A5D5BF7883A0438BFC2179495953A1F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ff:ae:dd:cf:ab:42:1e:5b:89:27:57:d5:cb:43:6a:9c:34:
e4:8c:c8:b2:52:e1:64:c9:98:6c:4c:4a:94:ce:66:6d:5b:2a:
4d:0f:15:de:f6:35:9f:d5:61:5f:bc:bd:df:ee:34:9e:5e:da:
77:93:d7:8f:85:42:b9:08:83:e8:1e:a6:45:f3:9b:19:ea:61:
f1:a8:d7:ee:7e:e2:d9:85:9a:44:13:db:f3:99:e0:04:2e:ef:
e4:f8:d9:4c:33:2a:f1:45:28:7e:4c:d4:2b:67:51:66:2f:96:
90:ea:00:2a:e9:a8:37:b0:18:cc:17:c0:5e:f3:f6:8e:2a:cc:
bf:4b:a3:dd:e2:d4:b5:94:2d:73:6c:45:e4:24:3e:c2:6b:03:
0c:01:3f:a2:fc:cb:7b:84:06:f9:10:f7:64:b0:2e:5d:73:c5:
30:21:cb:da:54:cc:a5:fa:ee:1f:cd:d0:be:3e:5e:0a:51:e9:
d8:70:db:df:e5:fe:da:c7:07:24:6a:91:92:5d:9b:33:66:8f:
88:2f:5f:d8:78:ec:f5:75:eb:3b:2e:1c:94:23:d9:ed:c5:a7:
de:3f:3d:eb:11:d6:26:9f:f0:06:50:c1:57:b9:de:ee:69:94:
03:a4:bc:79:9f:ec:ff:ea:d1:26:55:32:60:0b:27:28:31:d9:
8f:77:71:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:59 2026 by rpki-client