This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft
File: 7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft (raw, json)
Hash identifier: abMyxrEG3eKzLQPyyb0QaN4kgX0SlIdoOkfWKiZdp7w=
Subject key identifier: A3:A9:D8:AD:3E:8E:C2:07:5C:89:3A:F5:9A:E4:AA:4E:71:2E:B9:72
Authority key identifier: 7D:9E:0E:E5:BE:72:73:60:81:01:D9:3C:5F:7F:B6:1C:BC:04:04:C7
Certificate issuer: /CN=7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7
Certificate serial: 989553CB5071209DA4C8036635DDFC839AEAEB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft
Manifest number: ED
Signing time: Mon 19 Jan 2026 15:50:00 +0000
Manifest this update: Mon 19 Jan 2026 15:45:00 +0000
Manifest next update: Fri 23 Jan 2026 01:24:00 +0000
Files and hashes: 1: 7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.crl (hash: VUiKi/+JHVA1sXdSAVV+yv3+LTZ89/jSsWl+xB8b2JI=)
2: 3130332e3136392e3134332e302f32342d3234203d3e20313531353831.roa (hash: 4oT7xZVHG5/E0DX/QQMWoNUATmrhrxxUsrgCZ3ThGY4=)
3: 3130332e3136392e3134332e302f32342d3234203d3e20323135373237.roa (hash: Gxx1N7C+QbTulu8Y3abVKzpV17eZ/FeVMjAWzNKkBjk=)
4: 3130332e3136392e3134332e302f32342d3234203d3e20313534343130.roa (hash: s2qqo3oU1qGkmrEqC+VMkH+1kS1V5uXeU54SPuAImfg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.crl
rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 22 Jan 2026 18:40:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
98:95:53:cb:50:71:20:9d:a4:c8:03:66:35:dd:fc:83:9a:ea:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7
Validity
Not Before: Jan 19 15:45:00 2026 GMT
Not After : Jan 23 01:24:00 2026 GMT
Subject: CN=A3A9D8AD3E8EC2075C893AF59AE4AA4E712EB972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6a:2c:d4:15:66:7f:f7:40:4c:be:69:1e:d7:
31:42:80:03:5b:05:13:f4:58:7e:b2:ab:f5:68:de:
d3:5e:32:22:dc:ab:6c:be:81:9d:1d:7f:30:27:6c:
1f:6f:39:bf:dd:84:19:6d:87:7e:e2:21:cb:cc:25:
18:8c:77:48:08:13:ec:bf:a1:59:07:cb:ca:5d:b7:
81:ca:7a:95:d3:e3:e2:2f:64:5f:9b:f7:92:a7:01:
c3:05:4d:84:8c:a6:ce:d1:6d:23:2d:29:0b:e8:c3:
f4:fa:f6:44:7c:86:df:6c:01:1a:e9:b8:9d:28:0b:
6c:c6:18:46:b2:81:51:d0:c7:a6:27:e8:f0:78:40:
a4:0d:37:a9:c0:71:a6:1c:89:19:87:83:9f:70:2b:
f9:13:33:a2:0e:e0:77:85:ac:52:11:0d:7b:2b:58:
f5:e5:01:6f:78:4e:55:7e:04:c0:cc:cc:e5:b8:a3:
c1:4f:88:42:7b:c3:1e:de:52:93:0b:ec:9c:a4:92:
3f:b9:ab:38:f6:8e:e5:02:a0:65:d4:2c:04:6c:80:
13:0f:0e:49:7c:ca:b1:1c:30:24:85:57:79:6b:c9:
3e:d5:5c:2f:d7:0f:58:5a:75:22:46:5b:33:70:17:
4d:c2:35:d4:6a:7b:e6:c1:3a:6f:32:d2:64:d4:8d:
56:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A9:D8:AD:3E:8E:C2:07:5C:89:3A:F5:9A:E4:AA:4E:71:2E:B9:72
X509v3 Authority Key Identifier:
keyid:7D:9E:0E:E5:BE:72:73:60:81:01:D9:3C:5F:7F:B6:1C:BC:04:04:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:08:46:2b:5f:28:c5:66:ee:76:a8:69:c1:e9:47:04:86:4f:
40:a3:b5:ca:4b:b9:0c:c7:df:06:2c:1a:b4:e2:27:e9:cd:dd:
78:39:c3:18:43:0f:18:49:e5:12:27:53:44:83:6c:c9:03:d9:
62:3e:a0:df:f2:07:a6:98:a8:53:9d:64:55:14:17:d2:9d:d7:
ce:3f:63:b9:0c:a3:01:7e:4a:44:0c:44:97:e3:7d:b1:a1:e0:
92:03:1e:df:e7:6f:0f:2f:b8:83:22:5e:65:5a:b2:e1:fb:4e:
63:a3:d9:7a:f6:4f:19:13:8a:af:81:14:19:47:75:02:b0:ca:
01:69:30:a5:b1:f7:79:d7:da:47:47:ef:cd:ac:e4:ed:63:ee:
1f:9a:46:0c:d7:fd:ae:6d:56:56:fa:45:3b:67:d5:7b:a5:53:
21:59:76:09:38:89:16:cc:d2:c3:ec:65:e9:96:3c:d5:b8:92:
76:8e:87:ef:a1:c0:3e:8d:6f:35:6f:b4:7f:d1:a9:8f:8e:72:
52:3f:f0:da:34:5c:6f:83:35:8a:f9:0a:77:2e:cb:30:df:fc:
6e:d5:54:60:dd:f0:12:b8:0c:4d:8e:b2:ea:fa:bd:e3:44:16:
8d:e9:d2:0d:0c:cf:76:25:ef:74:0c:47:f0:47:5f:cb:11:5a:
14:cf:08:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 20:02:21 2026 by rpki-client