This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft File: 12345F115AC4B62A51F5274C54C81E86463BD0BA.mft (raw, json) Hash identifier: GKjqrShzcvlO2bcOm40oxxx20tmfmLbdnW46guZfJrM= Subject key identifier: D7:FB:C8:83:60:33:CB:B9:8E:C5:EF:96:7C:E7:F0:16:AC:77:07:FC Authority key identifier: 12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA Certificate issuer: /CN=A91862140000/serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Certificate serial: 1157924862AD025D71177CEC3D75AA9E663C2A2D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft Manifest number: 0545 Signing time: Tue 20 Jan 2026 05:30:38 +0000 Manifest this update: Tue 20 Jan 2026 05:25:38 +0000 Manifest next update: Fri 23 Jan 2026 10:40:38 +0000 Files and hashes: 1: 12345F115AC4B62A51F5274C54C81E86463BD0BA.crl (hash: w6ZAYuntxfll7R6zSpA4tE4nL7ZJaV5ufgi0LQtPBUg=) 2: 38322e3135382e3132382e302f31392d3234203d3e2039333431.roa (hash: kXLN0HaZu/PhLPiFi30mit71JHQuO6u1X5gZIB305jg=) 3: 55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer (hash: 5GheOB3UnfwRWeCo8/5o8Y/Ft2slsbsMBmf5vac32Sw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 10:40:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:57:92:48:62:ad:02:5d:71:17:7c:ec:3d:75:aa:9e:66:3c:2a:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Validity Not Before: Jan 20 05:25:38 2026 GMT Not After : Jan 23 10:40:38 2026 GMT Subject: CN=D7FBC8836033CBB98EC5EF967CE7F016AC7707FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d8:c6:04:29:6f:09:10:b8:92:65:2f:14:0a: 33:b3:14:e4:33:fa:85:a1:66:9c:99:b4:70:b9:b5: 3f:00:fd:b9:93:2f:b1:3d:70:3a:e3:d8:a5:d1:51: 61:7c:18:32:24:a1:1c:0a:ea:f2:31:5b:c9:db:4b: 54:97:ab:5d:c3:51:d2:8f:02:ee:5e:8d:99:a1:a9: 32:ba:ef:86:91:31:43:3f:54:11:dd:cd:39:cb:12: 70:b1:71:ca:e4:93:e8:ec:c1:d5:cf:2f:75:3e:27: 07:00:77:44:de:5b:59:8f:d8:ab:52:8f:b0:e1:11: d1:84:06:ae:95:b5:29:da:57:5d:11:0a:bb:51:c8: d8:7d:03:b0:9f:72:2a:13:9c:46:24:c2:08:35:48: 1b:2b:26:91:a8:38:db:a6:8d:98:d4:55:03:95:a1: f5:2a:33:c7:75:d7:df:c0:90:11:77:a9:a7:60:d7: 83:dc:d1:8c:ad:a3:25:cd:82:f0:9a:5d:52:98:02: 6e:d4:60:f6:d0:14:86:97:f2:1c:07:e1:3d:7a:5a: 1c:df:9d:25:f2:47:a8:b1:d3:a8:f6:75:77:b5:be: a7:3d:df:fe:09:58:6c:1e:de:c9:78:ad:04:54:d9: 39:b0:c8:9e:4c:24:6d:68:cd:db:8f:56:b9:35:9f: d0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:FB:C8:83:60:33:CB:B9:8E:C5:EF:96:7C:E7:F0:16:AC:77:07:FC X509v3 Authority Key Identifier: keyid:12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e6:60:71:9e:9c:f7:26:b0:64:8d:94:da:c6:cc:b8:10:aa:a5: 3a:e8:6e:38:db:8c:18:17:67:b2:f9:c6:c4:ea:a5:3e:c0:cd: 85:16:eb:cd:2a:b0:78:86:16:40:2c:ee:37:fd:c9:70:d0:71: 0d:d2:c7:f7:28:4c:69:f6:e2:02:d2:ad:78:7d:9a:1e:f2:27: 90:df:fd:60:a4:d7:53:f1:6a:06:55:45:4c:65:29:dd:6a:36: 91:ad:db:65:95:fb:cd:ff:98:41:8b:28:bb:9e:b2:72:23:c3: f3:a6:d0:3f:56:1e:e2:37:b9:65:2d:95:ef:b7:40:49:eb:29: 13:57:55:02:c1:d1:c0:c2:dc:ed:58:bd:b2:eb:01:03:2a:da: 2b:44:13:c9:85:66:d1:cb:43:a7:35:2a:0d:bd:fd:fe:10:c5: 7d:b6:0a:6c:71:64:a5:64:28:d2:55:47:13:80:d4:e2:29:8b: cd:4f:ad:5d:18:73:1a:9c:e9:3c:fe:f2:57:36:26:e6:54:ce: 9c:38:39:f6:21:2a:b0:5d:23:c1:cd:c0:2c:b4:aa:72:96:1c: 47:96:fe:5d:45:64:7d:d5:24:78:eb:b9:a9:3c:a1:41:41:04: b1:21:9e:a4:0b:a0:d5:ef:df:41:13:2b:28:15:3c:bb:7f:c8: 67:90:32:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgIUEVeSSGKtAl1xF3zsPXWqnmY8Ki0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEygxMjM0NUYxMTVB QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBMB4XDTI2MDEyMDA1MjUzOFoX DTI2MDEyMzEwNDAzOFowMzExMC8GA1UEAxMoRDdGQkM4ODM2MDMzQ0JCOThFQzVF Rjk2N0NFN0YwMTZBQzc3MDdGQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMPYxgQpbwkQuJJlLxQKM7MU5DP6haFmnJm0cLm1PwD9uZMvsT1wOuPYpdFR YXwYMiShHArq8jFbydtLVJerXcNR0o8C7l6NmaGpMrrvhpExQz9UEd3NOcsScLFx yuST6OzB1c8vdT4nBwB3RN5bWY/Yq1KPsOER0YQGrpW1KdpXXREKu1HI2H0DsJ9y KhOcRiTCCDVIGysmkag426aNmNRVA5Wh9Sozx3XX38CQEXepp2DXg9zRjK2jJc2C 8JpdUpgCbtRg9tAUhpfyHAfhPXpaHN+dJfJHqLHTqPZ1d7W+pz3f/glYbB7eyXit BFTZObDInkwkbWjN249WuTWf0BkCAwEAAaOCAgkwggIFMB0GA1UdDgQWBBTX+8iD YDPLuY7F75Z85/AWrHcH/DAfBgNVHSMEGDAWgBQSNF8RWsS2KlH1J0xUyB6GRjvQ ujAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMC8xMjM0NUYxMTVBQzRCNjJB NTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CMzIy QTVGNDFENjYxMUUyQTNGMjdGN0M3MkZEMUZGMi9FalJmRVZyRXRpcFI5U2RNVk1n ZWhrWTcwTG8uY2VyMHQGCCsGAQUFBwELBGgwZjBkBggrBgEFBQcwC4ZYcnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMC8xMjM0NUYxMTVB QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5mBxnpz3 JrBkjZTaxsy4EKqlOuhuONuMGBdnsvnGxOqlPsDNhRbrzSqweIYWQCzuN/3JcNBx DdLH9yhMafbiAtKteH2aHvInkN/9YKTXU/FqBlVFTGUp3Wo2ka3bZZX7zf+YQYso u56yciPD86bQP1Ye4je5ZS2V77dASespE1dVAsHRwMLc7Vi9susBAyraK0QTyYVm 0ctDpzUqDb39/hDFfbYKbHFkpWQo0lVHE4DU4imLzU+tXRhzGpzpPP7yVzYm5lTO nDg59iEqsF0jwc3ALLSqcpYcR5b+XUVkfdUkeOu5qTyhQUEEsSGepAug1e/fQRMr KBU8u3/IZ5Aymg== -----END CERTIFICATE-----Generated at Wed Jan 21 07:52:46 2026 by rpki-client