This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft
File: 507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft (raw, json)
Hash identifier: +/AR7yybCj0pMQBW42nozkjsvMZD4P3RZnPp3qWaK6o=
Subject key identifier: 46:AB:AD:9F:7E:91:4C:A7:26:15:BA:5F:7B:B4:45:FC:5B:4B:11:E9
Authority key identifier: 50:7D:BC:E0:DE:73:C3:8C:3E:E9:75:AE:23:FB:7C:0C:03:77:01:1A
Certificate issuer: /CN=507DBCE0DE73C38C3EE975AE23FB7C0C0377011A
Certificate serial: 60B061F0D62D9C69E3116299A13467A38C2E87F1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft
Manifest number: 0556
Signing time: Sat 31 Jan 2026 10:11:40 +0000
Manifest this update: Sat 31 Jan 2026 10:06:40 +0000
Manifest next update: Tue 03 Feb 2026 21:25:40 +0000
Files and hashes: 1: 507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.crl (hash: t5CoZ74U1zStPUadf+L5wbwlrN3Z6c/wT/k1BZ6S7T8=)
2: 3130332e3134342e33382e302f32332d3233203d3e20313339343234.roa (hash: XP0ftXtJRKTRnMmM5RHfXvqivFStcWbbL9fTaa1lIQs=)
3: 3130332e3134342e33382e302f32342d3234203d3e20313339343234.roa (hash: Z+yI+qBEJQ4HpP+yvfIUbQbmmee7rBGeSeum3wqAtpo=)
4: 3130332e3134342e33392e302f32342d3234203d3e20313339343234.roa (hash: MxlZMpoNv5CdONEOPyJ0XCI3HYckgI0HEgji/tMrUdg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.crl
rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 21:25:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:b0:61:f0:d6:2d:9c:69:e3:11:62:99:a1:34:67:a3:8c:2e:87:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=507DBCE0DE73C38C3EE975AE23FB7C0C0377011A
Validity
Not Before: Jan 31 10:06:40 2026 GMT
Not After : Feb 3 21:25:40 2026 GMT
Subject: CN=46ABAD9F7E914CA72615BA5F7BB445FC5B4B11E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:57:4b:40:f9:28:2d:3f:fc:ab:79:98:20:41:
23:af:f3:4f:0d:4f:8e:4d:c7:dd:60:47:b1:43:c5:
b3:10:f9:4d:1f:cd:5a:39:44:d5:8e:c6:23:49:45:
f1:fb:77:9b:2a:6f:80:2f:9a:44:ec:d3:a6:6f:53:
c5:52:6b:75:0a:f8:5c:7f:fd:e9:2b:64:26:b4:92:
32:12:f8:26:3d:0a:53:a4:45:92:16:01:ba:d1:d8:
73:7b:79:85:4b:01:65:10:f8:b8:e7:f4:61:ca:35:
c9:94:1a:31:0a:67:f9:45:c8:2c:64:5f:83:17:0f:
a7:66:11:f1:b5:08:c3:72:dd:fc:3e:68:ec:3a:4a:
15:d7:75:1b:54:ab:7b:f7:43:b8:9c:33:2a:54:6f:
08:09:c0:43:82:01:c3:ae:62:9b:5b:92:71:27:75:
60:81:cb:99:31:80:5e:64:cf:c4:82:07:bc:b7:d7:
35:3a:6e:e8:b5:5a:7d:2b:c9:17:54:f0:51:18:dc:
4f:3b:59:d8:5d:bc:e4:7f:51:eb:4b:70:e4:a3:08:
11:dc:68:cf:a0:98:dd:6d:47:3a:dc:de:93:39:54:
bf:7e:24:96:b6:87:3a:5d:e3:1f:00:bc:cb:07:a3:
ca:e2:5c:7b:c9:8e:4d:1c:d8:61:1f:eb:85:34:ec:
68:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AB:AD:9F:7E:91:4C:A7:26:15:BA:5F:7B:B4:45:FC:5B:4B:11:E9
X509v3 Authority Key Identifier:
keyid:50:7D:BC:E0:DE:73:C3:8C:3E:E9:75:AE:23:FB:7C:0C:03:77:01:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:3b:ad:06:2e:76:cb:8d:ab:89:7b:e9:fd:59:47:e0:b5:b5:
b3:5b:6a:7c:4f:4a:39:74:4e:24:77:eb:25:83:2e:7c:1c:a9:
84:4f:a9:01:5d:0e:77:5f:26:6f:8c:4d:c8:9b:b0:b1:1a:c7:
06:83:10:97:17:07:d9:ec:d5:20:71:32:35:ff:d1:da:78:89:
a3:a1:9b:ad:f9:0f:c9:92:ff:88:a1:1f:31:41:c8:98:12:e8:
71:81:be:35:14:8b:fc:f2:04:2c:28:2d:f1:83:fe:cd:cb:f6:
31:11:b9:3c:b5:7d:ef:0e:df:ab:e7:e5:79:8f:0d:e3:0a:01:
01:22:eb:ee:ab:91:42:35:5b:b5:74:81:2f:3b:fa:b7:ec:bc:
75:9c:12:64:49:0b:e8:24:7d:01:38:12:98:c4:b6:a2:c5:43:
97:28:6b:5b:08:38:af:0c:85:8b:20:fc:63:25:eb:51:bb:91:
1f:57:03:f0:3d:f4:dc:ea:98:6a:3d:5c:be:88:0e:27:4c:52:
56:25:d7:cf:30:10:4c:7c:67:c8:1f:68:d1:d7:d3:f5:31:32:
87:5d:98:f4:af:81:68:5e:99:b8:70:9a:a9:12:59:7c:53:85:
fe:7f:ab:63:f2:41:81:1b:c6:ab:fc:4b:82:65:4c:5a:16:97:
59:43:c7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:02:56 2026 by rpki-client