This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft
File: E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft (raw, json)
Hash identifier: R1P94OtigLwBFgZ/UNI1F42PGzNEeby58gbISYhsE/g=
Subject key identifier: 91:C3:FD:4D:03:08:E6:2C:46:F9:0B:75:89:B2:B7:B6:82:63:60:24
Authority key identifier: E0:7F:0E:8D:E2:57:2D:C7:B8:13:7E:C0:67:9F:42:64:5D:69:5A:54
Certificate issuer: /CN=E07F0E8DE2572DC7B8137EC0679F42645D695A54
Certificate serial: 0C22D7EB4CA290DB5F131732EBE7C0BAE38588FF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07F0E8DE2572DC7B8137EC0679F42645D695A54.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft
Manifest number: 0101
Signing time: Sat 31 Jan 2026 18:20:43 +0000
Manifest this update: Sat 31 Jan 2026 18:15:43 +0000
Manifest next update: Wed 04 Feb 2026 06:02:43 +0000
Files and hashes: 1: E07F0E8DE2572DC7B8137EC0679F42645D695A54.crl (hash: qP619FDo+QSx2zcUL4dhTt57uhOcetlm7eIpCITGndw=)
2: 323030313a6466333a666434303a3a2f34382d3438203d3e20313532303535.roa (hash: nQLud3Jn262khF6pI+ZrfSTaiFCpRTXR0OL4+TzR7ac=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.crl
rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07F0E8DE2572DC7B8137EC0679F42645D695A54.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 06:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:22:d7:eb:4c:a2:90:db:5f:13:17:32:eb:e7:c0:ba:e3:85:88:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E07F0E8DE2572DC7B8137EC0679F42645D695A54
Validity
Not Before: Jan 31 18:15:43 2026 GMT
Not After : Feb 4 06:02:43 2026 GMT
Subject: CN=91C3FD4D0308E62C46F90B7589B2B7B682636024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:45:4c:e4:39:73:ed:ac:c2:c6:85:e2:88:65:
aa:3f:e1:07:ee:f5:de:29:25:7d:6e:9c:7a:2a:74:
3f:1d:54:d7:d7:1b:5f:80:e0:54:76:4c:b7:3f:d9:
ff:df:24:a6:a6:70:05:d0:43:ad:8b:2e:58:34:f4:
3b:fc:27:94:c0:53:b6:b3:ce:ce:4f:b0:34:e7:13:
ab:31:60:f4:c3:42:41:e8:25:e7:5d:24:87:4f:f8:
c7:56:33:a5:11:b0:bf:f1:e1:44:a1:ee:d1:41:8c:
ff:be:69:b0:f0:6f:35:b1:0b:b3:3d:58:27:30:35:
d4:97:13:f4:06:c3:9e:08:e4:f2:48:df:a3:d9:cd:
23:bf:34:a8:1b:68:8d:00:46:64:bd:3c:c2:2a:6b:
d9:6c:07:c1:0c:0d:8d:19:24:d7:fc:f3:49:5d:05:
fa:bf:b6:b6:28:ab:8b:e5:dd:48:71:5d:46:5d:a9:
6a:1c:f1:77:83:c6:8f:aa:f1:28:b8:0d:4f:a7:17:
e5:8b:6b:27:b2:bd:97:86:7d:24:11:f7:bf:7a:30:
be:27:04:ba:03:91:8e:04:fd:d2:e6:68:a3:85:55:
a0:9f:00:d1:45:09:e8:8b:4a:f7:d1:d7:e8:38:52:
d7:d5:e8:87:52:94:b9:50:b8:4a:22:17:36:e8:60:
78:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C3:FD:4D:03:08:E6:2C:46:F9:0B:75:89:B2:B7:B6:82:63:60:24
X509v3 Authority Key Identifier:
keyid:E0:7F:0E:8D:E2:57:2D:C7:B8:13:7E:C0:67:9F:42:64:5D:69:5A:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07F0E8DE2572DC7B8137EC0679F42645D695A54.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:3a:34:1e:04:6b:b7:5a:e9:a9:00:30:32:ae:29:d7:24:1d:
d1:ec:d0:50:19:1e:be:8e:04:04:21:2b:2a:ad:8c:e5:91:20:
9a:02:0d:7b:58:1d:63:85:64:83:ef:1f:c1:ba:b9:61:8c:e4:
dc:c3:94:88:0c:64:cd:20:9b:b5:0b:d2:a1:e7:e9:ad:a1:21:
a6:a6:96:ce:92:17:a4:61:73:7d:ea:5e:64:f4:fe:e1:1f:38:
2d:7a:bc:d6:a5:e4:00:30:b0:2e:29:2e:91:2f:64:7a:23:d0:
e5:b6:e5:be:26:c3:04:ad:b2:bf:05:07:fa:3d:ae:d6:64:2f:
64:dc:50:f5:6d:11:ac:f7:01:14:0d:f9:17:a1:33:cb:40:46:
ef:76:77:3f:d0:c0:37:58:29:25:cf:33:ba:61:c2:36:f5:47:
0c:19:c5:0d:1e:f0:c4:8c:7d:93:44:5f:95:a5:14:cd:58:c2:
a1:ab:5e:7a:ce:cf:0e:91:8b:06:51:95:ec:3a:e3:91:aa:72:
c7:9b:2e:bb:0e:eb:ab:62:36:b1:4b:e2:02:a2:d8:2e:73:e4:
14:c3:62:77:98:c6:44:b8:28:86:1d:78:d0:40:5a:99:27:10:
42:5d:be:22:68:04:04:18:c5:39:47:1a:3f:30:a0:17:4e:1c:
d9:0e:41:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:06:34 2026 by rpki-client