This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft
File: 3053FFA7A0123B032FC9458281063C89F007FA98.mft (raw, json)
Hash identifier: 4nZRV/UNFIfqp4UdWneVyjP590P+Lo22kCHeuw5lu4g=
Subject key identifier: B8:39:F2:ED:D8:EA:90:5A:9B:1A:3E:27:39:A3:A9:96:41:D6:5B:1B
Authority key identifier: 30:53:FF:A7:A0:12:3B:03:2F:C9:45:82:81:06:3C:89:F0:07:FA:98
Certificate issuer: /CN=3053FFA7A0123B032FC9458281063C89F007FA98
Certificate serial: 097E8642B8886191A088C17EAB5B43FCDEEFB699
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3053FFA7A0123B032FC9458281063C89F007FA98.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft
Manifest number: 03C3
Signing time: Sat 31 Jan 2026 22:11:29 +0000
Manifest this update: Sat 31 Jan 2026 22:06:29 +0000
Manifest next update: Tue 03 Feb 2026 23:20:29 +0000
Files and hashes: 1: 3053FFA7A0123B032FC9458281063C89F007FA98.crl (hash: GLyUk2caMZaeexcsRme4M9YaLvBYNvD0dKzhiKqkGzY=)
2: 3130332e3136382e3138382e302f32332d3234203d3e203137393935.roa (hash: X8fSVyl/ekaFc0qdxtX72tyLH/RXxnJtVkW2HtewxfI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.crl
rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3053FFA7A0123B032FC9458281063C89F007FA98.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 23:20:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:7e:86:42:b8:88:61:91:a0:88:c1:7e:ab:5b:43:fc:de:ef:b6:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3053FFA7A0123B032FC9458281063C89F007FA98
Validity
Not Before: Jan 31 22:06:29 2026 GMT
Not After : Feb 3 23:20:29 2026 GMT
Subject: CN=B839F2EDD8EA905A9B1A3E2739A3A99641D65B1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:53:49:4d:84:32:ef:cd:05:df:27:86:c7:0d:
bb:17:a1:07:24:e6:9c:38:2b:bf:dd:7d:84:96:9b:
f3:7c:b6:c6:12:3c:13:40:c5:c8:2f:51:50:34:ff:
43:ca:4b:ad:f1:95:84:16:bc:98:0b:17:70:fe:2b:
56:0f:47:45:d0:f2:3b:67:28:2b:ae:9b:f4:44:68:
d3:8e:9d:45:9f:29:a6:74:5b:62:1a:f8:1e:73:78:
c9:1c:2a:c5:e4:3b:be:4b:05:43:6e:a2:2d:8f:6a:
0d:ff:ab:ef:ab:f0:f7:5a:15:bc:fe:51:3c:6a:1a:
1f:e3:ce:e5:b7:16:39:0e:3f:c2:af:a8:13:b0:a9:
2f:f3:b4:91:01:b3:2b:a5:58:54:ae:7c:6e:3b:57:
a8:49:97:28:6c:db:16:5d:77:09:33:da:a4:20:99:
a1:51:d3:40:7a:a7:13:76:a4:c8:39:29:71:07:2f:
e8:07:3d:f9:d0:1e:34:84:b5:41:47:5a:b3:17:86:
be:f9:58:8e:be:35:db:32:4a:c0:45:56:70:be:28:
3b:e2:7c:d0:6a:85:10:46:7c:ce:8f:fe:0e:17:85:
d1:c7:91:b0:d8:41:ca:be:38:4d:ab:67:58:6d:5e:
39:18:66:ff:53:2a:75:50:4c:d0:2d:03:27:06:4a:
da:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:39:F2:ED:D8:EA:90:5A:9B:1A:3E:27:39:A3:A9:96:41:D6:5B:1B
X509v3 Authority Key Identifier:
keyid:30:53:FF:A7:A0:12:3B:03:2F:C9:45:82:81:06:3C:89:F0:07:FA:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3053FFA7A0123B032FC9458281063C89F007FA98.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:31:df:85:eb:05:99:bf:d1:79:db:18:a5:2e:2a:ea:0a:4c:
be:50:90:b8:00:41:05:e9:19:0b:f0:37:c8:88:ae:e0:ee:30:
99:57:0c:d1:2d:e9:e5:17:ea:0c:da:34:e4:5b:8d:3b:04:ca:
a3:03:4e:c9:fa:de:9b:0b:f9:2f:08:ee:eb:c2:c1:ca:1d:a3:
8a:ac:cf:08:fb:ed:de:2c:eb:23:6d:a7:f3:f6:99:8e:76:73:
5a:28:84:a3:49:80:31:51:fe:66:b2:00:24:da:cb:8b:d7:d6:
50:f4:d6:fb:8f:3d:df:92:a8:73:b3:26:3b:0f:8b:57:e9:d1:
da:eb:ee:de:17:11:23:c0:5a:6e:e9:76:9d:47:89:78:b9:c7:
d3:3f:35:75:10:4a:35:53:89:52:3f:53:05:26:fc:7e:c3:65:
00:bc:b1:bd:52:f1:22:72:dc:c4:ee:5f:60:6d:aa:ad:0c:95:
d3:ce:54:86:41:dd:05:cf:ea:68:3e:a9:3d:c5:fb:bb:4d:cf:
0d:95:70:ab:bc:0d:d1:4e:ce:c9:8f:a0:6e:4c:d4:e6:50:f7:
09:15:a8:22:88:6b:3a:e5:09:c6:47:38:51:d8:1d:d4:17:c7:
c5:0a:e8:5c:be:af:4e:f6:38:48:d0:4f:1d:a1:32:a0:4d:9a:
53:23:cc:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:49:03 2026 by rpki-client