This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft
File: E7953AD51AF5D89FB7129E253DEEFE8072247264.mft (raw, json)
Hash identifier: e89nx05Uy7sYQE8cMdAZyEefwFyBeDJnFumlJ/q5sZM=
Subject key identifier: E5:4F:0C:5C:02:A1:F2:82:11:3A:27:B6:FE:57:0C:58:90:0B:B0:4C
Authority key identifier: E7:95:3A:D5:1A:F5:D8:9F:B7:12:9E:25:3D:EE:FE:80:72:24:72:64
Certificate issuer: /CN=E7953AD51AF5D89FB7129E253DEEFE8072247264
Certificate serial: 0248AE8CF8310D196B40A7499D1E8B68008EAD72
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft
Manifest number: 01EB
Signing time: Sun 01 Feb 2026 02:50:54 +0000
Manifest this update: Sun 01 Feb 2026 02:45:54 +0000
Manifest next update: Wed 04 Feb 2026 04:42:54 +0000
Files and hashes: 1: 3130332e36362e36322e302f32332d3233203d3e20313339393832.roa (hash: VxYbMhqwlKJa8vovl6e5giv2nGRmCv5MIyRt8vp3qoU=)
2: E7953AD51AF5D89FB7129E253DEEFE8072247264.crl (hash: FBJQ/U2xM9vUw4jNipQQvEUc+Fl0qQQcIxfblRE+pLE=)
3: 3130332e36362e36322e302f32342d3234203d3e20313339393832.roa (hash: fibpaoWLGLqVlSh+YVe38FiOvASMtn5m89vjXOwhkBg=)
4: 3130332e36362e36332e302f32342d3234203d3e20313339393832.roa (hash: 3IPWWkSr+CRIxbooLiHD2sYaMVl9ZCy+eS+fZpZLV/I=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.crl
rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 04:42:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:48:ae:8c:f8:31:0d:19:6b:40:a7:49:9d:1e:8b:68:00:8e:ad:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E7953AD51AF5D89FB7129E253DEEFE8072247264
Validity
Not Before: Feb 1 02:45:54 2026 GMT
Not After : Feb 4 04:42:54 2026 GMT
Subject: CN=E54F0C5C02A1F282113A27B6FE570C58900BB04C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:17:a8:5b:d2:15:c0:4c:c0:7c:84:1d:44:bb:
20:71:26:49:6d:6e:49:01:2d:36:05:79:4a:4d:c3:
74:b4:77:11:9f:11:f9:33:14:c5:ff:f3:d8:fc:cb:
c6:f9:94:64:2e:f5:80:24:08:ae:1d:86:71:58:ea:
18:f9:ba:4c:ff:4b:f6:6f:01:3e:8c:a2:7b:2f:b0:
8e:1f:0c:35:34:44:82:69:60:09:43:21:20:95:c8:
95:eb:fe:4a:0b:8a:7e:12:ee:ec:83:35:96:c4:bb:
6c:9f:fb:ab:88:94:b3:ab:d1:bf:17:c4:19:7f:61:
93:2e:ef:e7:dd:05:a0:34:44:32:88:8a:d0:e6:27:
fe:78:d0:b9:5a:d2:4d:bc:a7:de:21:47:6e:0b:37:
40:f6:79:f0:f9:d4:0a:ec:5e:00:f4:5f:0a:80:d4:
f1:ea:5c:e5:ae:18:e6:6d:94:99:c7:6d:fc:38:06:
e4:ea:86:64:5b:49:49:7a:12:19:b3:77:e6:71:6a:
65:73:27:3c:4f:7b:69:7b:a9:5b:a9:5f:0c:e2:fb:
16:32:db:3b:8e:a5:f4:34:24:9e:9a:7e:a7:35:1b:
cc:ef:bb:d1:e9:1f:88:11:a0:ae:5b:e3:85:81:90:
e8:e2:98:4d:f3:e4:9d:60:23:49:17:57:c0:90:be:
fc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4F:0C:5C:02:A1:F2:82:11:3A:27:B6:FE:57:0C:58:90:0B:B0:4C
X509v3 Authority Key Identifier:
keyid:E7:95:3A:D5:1A:F5:D8:9F:B7:12:9E:25:3D:EE:FE:80:72:24:72:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:01:a4:85:cd:8b:1e:73:85:89:1e:96:98:be:f1:5f:a5:4d:
0a:af:df:63:5e:87:3a:56:c0:9b:f6:b4:70:d4:94:60:8e:4a:
2f:a7:26:53:ea:7e:18:9a:8f:09:39:f9:81:7f:9d:6b:c9:54:
bf:ef:25:49:60:68:c1:c2:f2:b7:38:5d:5e:1f:30:29:7d:7e:
15:36:94:99:d7:2d:67:9e:ae:c1:38:39:86:89:e8:2f:be:a3:
a7:dc:b9:38:41:e8:87:a9:6e:51:3b:ad:14:d9:e1:58:ba:f9:
3c:4c:59:86:62:03:e7:66:2e:f4:cb:95:45:77:98:5a:61:bc:
04:27:f5:3b:65:d4:c6:6f:90:85:b4:7f:cd:46:ef:b2:ef:4e:
05:52:2d:d9:0f:1c:1d:cb:36:02:03:d1:c4:14:45:9b:b6:cd:
14:a4:6e:40:e2:6f:e3:1e:bd:ca:f5:8c:ee:72:56:f4:9c:0e:
f1:3b:c1:5b:d3:99:75:73:bd:14:8e:a3:a6:26:2d:f1:bb:b2:
62:6e:de:50:cd:fa:c4:1c:7d:cb:fc:3f:a3:8f:39:62:bc:ea:
62:2d:b8:9f:05:43:f5:ef:4a:4b:f3:82:f2:88:b7:19:6e:77:
c7:26:60:fd:89:06:e9:a7:ca:a0:f0:93:4a:87:c6:e3:76:f9:
d0:4f:7b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:20 2026 by rpki-client