This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft
File: 63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft (raw, json)
Hash identifier: A7U9YF0farE9/JQrfi9ob3fwXKDbtMY36egkg2CXsng=
Subject key identifier: D7:85:E7:1A:21:B1:36:49:6C:E6:D1:43:86:5A:83:46:06:37:A0:4D
Authority key identifier: 63:FD:8D:EE:5A:44:38:A5:0F:F5:0B:6B:9B:9D:6A:3F:53:F3:48:DC
Certificate issuer: /CN=63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC
Certificate serial: 23DD52110E97C4F45F414471C0D56D77E7B0CA26
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft
Manifest number: 054D
Signing time: Mon 02 Feb 2026 04:11:46 +0000
Manifest this update: Mon 02 Feb 2026 04:06:46 +0000
Manifest next update: Thu 05 Feb 2026 13:26:46 +0000
Files and hashes: 1: 3130332e362e3131372e302f32342d3234203d3e20313332313634.roa (hash: kVt5AplIi2tCio95fGZq/cPfVyltnVVl2G0ZCHPdgRg=)
2: 323030313a6466303a396530303a3a2f34382d3438203d3e20313332313634.roa (hash: UVW9pjMMh6nTzzAse0pe198GDDypk+vSUVBxDpcZFG8=)
3: 63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl (hash: zWQm8yLl/C9/W6W5rdJCitjPtgORbjpDFn3EY1f8W48=)
4: 3130332e35302e3231362e302f32342d3234203d3e20313332313634.roa (hash: ZpF/KGxPbErqJ8VSz1WkiCybrFY70jeXAIswB/bXwuI=)
5: 3130332e35302e3231372e302f32342d3234203d3e20313332313634.roa (hash: KII5650hF6mmxLQ/rbgTb8PaRw7N913WBuqCn/GKGRI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl
rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:dd:52:11:0e:97:c4:f4:5f:41:44:71:c0:d5:6d:77:e7:b0:ca:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC
Validity
Not Before: Feb 2 04:06:46 2026 GMT
Not After : Feb 5 13:26:46 2026 GMT
Subject: CN=D785E71A21B136496CE6D143865A83460637A04D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f5:18:41:a3:8a:31:34:ee:14:70:ef:06:2c:
c4:1d:2d:48:c0:7d:04:e9:01:02:6c:ac:26:2e:65:
2a:1b:2b:07:b8:6f:f3:69:6a:5c:66:5d:a6:73:e2:
84:f2:77:07:a8:e9:de:94:a7:fb:fa:39:01:b0:3b:
df:47:4d:8c:19:2d:37:39:c0:e9:85:17:0f:b9:98:
01:ad:0d:f2:52:43:ad:c7:e5:5e:aa:14:a7:93:f7:
8e:f0:22:ed:87:e2:82:4f:b7:10:c5:c9:4a:a1:43:
f1:17:ce:ea:ae:ea:4c:98:bf:80:4a:79:df:b4:80:
19:6e:13:55:93:8c:f2:59:ea:13:0b:bc:aa:c5:e7:
fa:ba:3f:7e:6f:a5:9d:6d:79:a2:09:a5:1b:e1:8f:
38:e1:1f:70:6c:6f:7e:2b:b5:f4:27:61:04:bf:2f:
7f:4b:f2:7e:25:db:fa:9c:98:05:ff:02:05:3b:23:
fd:83:53:28:52:38:cf:76:a9:a7:23:53:3f:88:80:
8b:3c:3b:6c:70:a9:e9:cb:e4:be:8f:9b:f7:10:1c:
d3:6f:74:86:20:5f:04:5a:e0:e2:1f:b3:b2:71:7e:
64:ea:e8:fb:4a:a1:04:6f:2a:6f:29:a6:fc:c2:95:
dd:13:87:bc:f3:32:29:14:48:8d:7a:06:50:38:4c:
16:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:85:E7:1A:21:B1:36:49:6C:E6:D1:43:86:5A:83:46:06:37:A0:4D
X509v3 Authority Key Identifier:
keyid:63:FD:8D:EE:5A:44:38:A5:0F:F5:0B:6B:9B:9D:6A:3F:53:F3:48:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:62:54:c2:ea:82:73:a1:d3:a5:0a:bf:55:5a:c4:50:7d:ba:
b5:c0:a0:ae:4c:09:24:fa:db:29:a9:f0:ac:a0:f6:ff:ae:9a:
45:ba:86:82:b5:4f:d8:f8:0a:97:2b:7a:9c:e4:ef:09:06:da:
50:07:83:84:40:58:c6:aa:43:a4:23:25:7c:fe:49:aa:e7:70:
6a:55:4f:d5:c0:63:14:86:b0:80:61:80:84:00:c9:3f:0d:32:
b9:95:96:87:08:19:0c:e2:22:6c:f8:9a:21:f6:39:b0:db:e9:
3c:18:6c:e6:a3:d6:5d:dc:31:75:ce:55:6d:c9:7a:b6:60:fb:
85:72:3e:36:30:4b:c8:29:47:d3:b3:6d:02:7d:aa:1c:75:be:
62:fe:aa:32:d8:94:3b:a4:8e:8d:ab:a6:fe:91:a9:9e:b1:10:
e3:3d:25:e5:4c:88:a8:f6:05:c7:37:c8:4d:49:11:3d:d3:e1:
8e:1a:ae:ee:1c:5d:8c:10:cc:1e:f9:76:07:63:4f:fb:d6:5f:
bc:06:03:4d:f7:21:df:ae:a4:bf:be:7d:4c:71:8e:4d:fc:99:
8f:7f:bc:ec:cd:4f:e8:e3:10:68:c3:61:ca:27:5a:b8:1d:54:
e2:b4:e1:1e:03:f7:09:e2:8b:1f:fb:dc:ae:35:dd:e0:2e:43:
a1:d4:04:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:45:07 2026 by rpki-client