This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft
File: AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft (raw, json)
Hash identifier: fJdvSYkLcblRj901YD7BcWIZSYUj0BXoRErvst5oAsk=
Subject key identifier: 1B:F2:53:A6:51:1C:9C:09:F5:06:F8:7C:91:8F:57:22:5D:E8:F1:16
Authority key identifier: AD:9B:CA:DB:23:5B:6D:EE:6C:AD:4E:B4:C5:3A:A8:B3:BA:73:FE:F2
Certificate issuer: /CN=AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2
Certificate serial: 6D0DF3A07C2CE24E197A2569B38A99DC75910822
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft
Manifest number: 01DD
Signing time: Sat 31 Jan 2026 19:51:12 +0000
Manifest this update: Sat 31 Jan 2026 19:46:12 +0000
Manifest next update: Wed 04 Feb 2026 02:41:12 +0000
Files and hashes: 1: 3130332e3135332e38332e302f32342d3234203d3e20313439373034.roa (hash: CyqCQFsLxJfTBDBdmJ04cZzDUHG5T26HrmU816zhY/E=)
2: AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl (hash: HfV0PccixC6TZZ5JMJ2NyE7FdIguIcy/Q1f80j4rn24=)
3: 3130332e3135332e38322e302f32342d3234203d3e20313430343539.roa (hash: 5/bb2m/l4G8bQopKZ9eyezGHRGaLv9nfRV9c/BB9Gks=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl
rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 02:41:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:0d:f3:a0:7c:2c:e2:4e:19:7a:25:69:b3:8a:99:dc:75:91:08:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2
Validity
Not Before: Jan 31 19:46:12 2026 GMT
Not After : Feb 4 02:41:12 2026 GMT
Subject: CN=1BF253A6511C9C09F506F87C918F57225DE8F116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:82:f9:13:25:98:f4:f9:21:95:f9:03:22:80:
77:65:ae:ac:9d:d4:43:08:56:69:34:c2:19:a6:7b:
b0:9d:aa:f6:91:cd:2f:5d:69:c4:d9:60:9c:4e:95:
e5:a3:9e:73:62:46:d3:6f:50:52:e3:03:da:c4:ce:
e8:c8:68:fb:ae:61:d7:8e:0f:c7:b6:7e:48:02:d7:
28:83:d0:a9:43:e1:65:38:70:0c:38:b5:b6:00:03:
c8:41:44:12:32:94:d8:cd:0b:fc:9c:1f:34:a5:f8:
48:a7:96:a8:98:1b:8a:d5:a4:8c:03:e6:5c:1b:67:
fb:dc:20:4a:c5:6b:88:8a:5d:72:40:fc:e9:fa:56:
23:15:65:a7:47:5e:88:e2:14:91:f5:36:52:7a:d3:
19:4a:0d:95:3b:26:b5:64:66:9d:32:06:ca:19:06:
e0:f3:cd:ec:1b:72:2b:91:40:4a:45:f7:8b:d1:a7:
89:bb:e7:9b:f8:b3:a3:0f:58:10:16:8f:77:76:cd:
c4:c4:46:42:e4:c4:33:77:76:7c:e6:84:d1:07:7f:
fb:f8:59:3d:ea:e2:4d:d3:b9:62:d9:a3:95:0a:9b:
64:59:97:a8:7d:ca:4f:6f:fe:90:be:49:e9:c6:b0:
77:0a:c8:fe:8a:b9:20:25:f7:6a:c2:01:11:c2:08:
35:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F2:53:A6:51:1C:9C:09:F5:06:F8:7C:91:8F:57:22:5D:E8:F1:16
X509v3 Authority Key Identifier:
keyid:AD:9B:CA:DB:23:5B:6D:EE:6C:AD:4E:B4:C5:3A:A8:B3:BA:73:FE:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a4:c6:6a:26:ea:39:fd:05:85:ef:28:4c:ea:1a:13:63:10:
6f:70:d0:ff:3a:21:76:0c:a8:e2:99:60:c7:0d:11:88:ca:4c:
94:79:bd:84:2b:e5:41:77:7b:a3:50:f0:bd:13:86:07:55:33:
2f:79:04:48:e9:24:35:e7:d4:5e:da:af:09:65:9b:e6:1d:13:
14:27:b8:e6:56:be:09:21:ed:9b:98:ca:ad:8d:3c:ea:d7:b8:
71:1a:73:e6:bd:02:37:da:51:cf:7a:df:58:92:a2:7d:99:20:
de:2b:e4:db:73:1f:71:d4:85:1d:c9:d6:8e:69:89:d0:5e:a3:
1e:9e:b4:1a:ec:b1:41:7b:d8:3a:df:4c:99:7e:dd:87:cc:e8:
3a:60:76:eb:b8:17:1d:33:90:18:0b:4a:74:94:29:82:e8:01:
26:14:8d:dc:a9:21:e1:1e:20:42:90:f3:3b:5f:10:e4:35:76:
53:db:6b:56:b3:41:74:24:63:ac:5b:09:97:a2:b0:70:a1:6c:
c2:ec:4c:84:ed:be:ee:fc:8a:df:b1:98:5f:44:9b:d8:ec:05:
21:c6:80:26:18:a7:6b:d2:5c:48:bd:4a:6b:6c:11:1a:33:d2:
c5:d3:b0:0b:6b:1a:b2:2c:38:b2:93:66:42:a9:9f:d1:66:04:
e1:49:b8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:45:26 2026 by rpki-client