This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft
File: 69D341364BC344B4ED6B3A65031AACB403AB3222.mft (raw, json)
Hash identifier: VWLoGOz7N6KqzPpVMgrfqFaLvsttKfiKheQVJLiK4lI=
Subject key identifier: E9:7B:DB:3C:F8:6D:DB:D6:EC:BE:49:9B:FB:1E:A8:E7:41:A8:B9:C8
Authority key identifier: 69:D3:41:36:4B:C3:44:B4:ED:6B:3A:65:03:1A:AC:B4:03:AB:32:22
Certificate issuer: /CN=69D341364BC344B4ED6B3A65031AACB403AB3222
Certificate serial: 5DC58DF6B56582B7FE5A775E7B41569C00808252
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft
Manifest number: 0548
Signing time: Sat 31 Jan 2026 21:31:25 +0000
Manifest this update: Sat 31 Jan 2026 21:26:25 +0000
Manifest next update: Wed 04 Feb 2026 01:57:25 +0000
Files and hashes: 1: 3130332e3130352e35322e302f32322d3234203d3e20313336383733.roa (hash: mEwVbYgiqYJGIGp+5J9MnWrl5gm8ToUUdLv1IaAGjLQ=)
2: 69D341364BC344B4ED6B3A65031AACB403AB3222.crl (hash: NS+fDMb4u1muCO61symTCYVGAhg3KvdNJGZCN+xRo8w=)
3: 323430323a326134303a3a2f33322d3438203d3e20313336383733.roa (hash: uy1yr304rdbNyrp48Sp9BPHAsKJE9GKxgaii4AOju6s=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.crl
rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 01:57:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:c5:8d:f6:b5:65:82:b7:fe:5a:77:5e:7b:41:56:9c:00:80:82:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69D341364BC344B4ED6B3A65031AACB403AB3222
Validity
Not Before: Jan 31 21:26:25 2026 GMT
Not After : Feb 4 01:57:25 2026 GMT
Subject: CN=E97BDB3CF86DDBD6ECBE499BFB1EA8E741A8B9C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:42:19:74:8d:43:db:9a:06:38:93:b8:af:27:
71:a8:48:4c:31:45:bd:6e:19:75:0b:8f:b7:9b:82:
70:0e:90:17:30:35:23:01:af:41:be:9c:b6:c6:5a:
4e:14:28:4a:ee:a6:e0:e3:1d:f6:50:df:28:89:ff:
83:93:a5:27:e5:a7:ba:ad:1c:a5:56:e9:d7:79:e2:
2d:22:a6:38:e5:30:fe:e9:2a:58:90:81:b8:7d:83:
b9:11:82:06:8a:3f:3a:19:aa:9a:ff:27:33:2c:4c:
98:16:f1:49:06:98:47:d9:5b:ef:99:ac:5f:92:08:
9c:f2:4b:75:ec:ad:62:45:78:e7:75:99:9f:87:b7:
3d:44:79:df:29:64:c5:52:40:d1:28:16:5e:fb:5a:
dc:73:6a:ae:b1:ed:07:2a:6d:ef:69:e4:e2:01:a2:
75:0f:37:7d:d5:80:8a:76:2d:ea:81:9f:56:4b:13:
12:a8:6d:97:3c:e8:15:07:ef:aa:23:26:20:56:f8:
64:05:f9:08:7c:42:c2:b9:58:b3:b9:78:ab:a9:04:
0d:99:ed:d2:4c:8e:12:2f:17:a6:97:40:6d:7d:ce:
7f:15:1a:a9:b6:88:4a:94:b3:da:2f:94:64:dc:67:
f8:05:15:75:e3:26:5a:f4:47:6d:19:e0:b2:8d:8b:
99:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:7B:DB:3C:F8:6D:DB:D6:EC:BE:49:9B:FB:1E:A8:E7:41:A8:B9:C8
X509v3 Authority Key Identifier:
keyid:69:D3:41:36:4B:C3:44:B4:ED:6B:3A:65:03:1A:AC:B4:03:AB:32:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:33:c0:f3:31:46:3d:55:01:d2:f4:ed:e3:7e:31:5f:9c:8f:
85:ac:fb:86:a2:04:58:e3:2e:d7:2e:14:c5:65:83:80:be:b4:
ce:cd:ec:5c:93:d9:0f:b6:84:e4:df:32:97:9d:0c:77:d9:bc:
b6:6a:42:ed:44:4f:02:d0:d9:af:4e:92:04:d4:26:30:a3:b0:
bc:fe:50:0c:28:37:62:4a:89:56:0d:8d:6e:60:4e:c7:da:0d:
22:8a:37:45:52:f6:91:81:80:fa:92:47:d7:07:0b:54:1c:e5:
4d:27:a1:b9:d3:11:f0:c4:f3:56:a0:6c:bc:05:9f:0c:3d:8b:
e4:61:2c:23:c6:ec:e5:06:bd:6b:48:0f:fa:c1:7b:15:3d:ab:
7a:7b:76:fe:e5:c9:59:05:01:ef:eb:ef:62:aa:41:4a:ef:b4:
bf:38:86:3a:0c:90:af:55:2d:41:05:bb:b4:8e:a0:a1:32:48:
1c:73:db:5c:af:de:45:5b:99:9f:f8:92:2c:5f:94:c6:8b:af:
2a:d0:a5:82:12:61:73:3d:59:60:4b:27:78:af:12:59:b7:cc:
36:ed:7d:18:28:ff:48:62:97:b6:6a:95:6c:2d:e6:52:18:c4:
0b:7c:7b:33:ac:71:e2:a6:34:36:31:dc:02:b3:bf:93:c5:06:
d7:7b:6c:79
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUXcWN9rVlgrf+Wndee0FWnACAglIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFDQjQw
M0FCMzIyMjAeFw0yNjAxMzEyMTI2MjVaFw0yNjAyMDQwMTU3MjVaMDMxMTAvBgNV
BAMTKEU5N0JEQjNDRjg2RERCRDZFQ0JFNDk5QkZCMUVBOEU3NDFBOEI5QzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdQhl0jUPbmgY4k7ivJ3GoSEwx
Rb1uGXULj7ebgnAOkBcwNSMBr0G+nLbGWk4UKErupuDjHfZQ3yiJ/4OTpSflp7qt
HKVW6dd54i0ipjjlMP7pKliQgbh9g7kRggaKPzoZqpr/JzMsTJgW8UkGmEfZW++Z
rF+SCJzyS3XsrWJFeOd1mZ+Htz1Eed8pZMVSQNEoFl77Wtxzaq6x7Qcqbe9p5OIB
onUPN33VgIp2LeqBn1ZLExKobZc86BUH76ojJiBW+GQF+Qh8QsK5WLO5eKupBA2Z
7dJMjhIvF6aXQG19zn8VGqm2iEqUs9ovlGTcZ/gFFXXjJlr0R20Z4LKNi5nPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU6XvbPPht29bsvkmb+x6o50GoucgwHwYDVR0j
BBgwFoAUadNBNkvDRLTtazplAxqstAOrMiIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
NTdhNmJjYi05ZWI2LTQ5ZGUtYjk5OC0wYmVkM2M1YzEyNzgvMC82OUQzNDEzNjRC
QzM0NEI0RUQ2QjNBNjUwMzFBQUNCNDAzQUIzMjIyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFDQjQwM0FC
MzIyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU3YTZiY2ItOWViNi00OWRlLWI5
OTgtMGJlZDNjNWMxMjc4LzAvNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFD
QjQwM0FCMzIyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKQzwPMxRj1VAdL07eN+MV+cj4Ws+4aiBFjj
LtcuFMVlg4C+tM7N7FyT2Q+2hOTfMpedDHfZvLZqQu1ETwLQ2a9OkgTUJjCjsLz+
UAwoN2JKiVYNjW5gTsfaDSKKN0VS9pGBgPqSR9cHC1Qc5U0nobnTEfDE81agbLwF
nww9i+RhLCPG7OUGvWtID/rBexU9q3p7dv7lyVkFAe/r72KqQUrvtL84hjoMkK9V
LUEFu7SOoKEySBxz21yv3kVbmZ/4kixflMaLryrQpYISYXM9WWBLJ3ivElm3zDbt
fRgo/0hil7ZqlWwt5lIYxAt8ezOsceKmNDYx3AKzv5PFBtd7bHk=
-----END CERTIFICATE-----
Generated at Mon Feb 2 10:05:29 2026 by rpki-client