This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft
File: A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft (raw, json)
Hash identifier: gT91fzcwzcyjeGgbhgFc+5tql1fK9gVIds5mDIsnSwU=
Subject key identifier: 22:BD:E7:BE:02:2A:17:42:F2:4F:F1:4A:59:89:E1:4D:38:D4:09:7E
Authority key identifier: A3:EF:DD:DA:D5:26:EF:A3:F2:82:1E:9E:6E:C6:E7:47:BB:5B:12:46
Certificate issuer: /CN=A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246
Certificate serial: 2A0888AA5509D1DC9D8E20A21296C4AAD11E39FF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft
Manifest number: 0163
Signing time: Sat 17 Jan 2026 21:01:28 +0000
Manifest this update: Sat 17 Jan 2026 20:56:28 +0000
Manifest next update: Wed 21 Jan 2026 01:12:28 +0000
Files and hashes: 1: 3130332e3134372e38302e302f32342d3234203d3e20313534343130.roa (hash: uRfUQhVw2ch7VqXxR20eCaHEC59WymM8VUU6S8pSv3Q=)
2: 3130332e3134372e38312e302f32342d3234203d3e20313339393533.roa (hash: cossnBP1XdG0zEY8nTnjaUaCSRdcepAuP+Hq1t+V00c=)
3: A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl (hash: e/giEf8fV5eKw/DFPzXl8s6r0Ug4AO8KDzQZG/9X1dQ=)
4: 3130332e3134372e38312e302f32342d3234203d3e20323135373237.roa (hash: kN+ITRJB9Y4U/xn0VPZsd1TVeghOlD4cfCGOQ2XBRrQ=)
5: 3130332e3134372e38302e302f32332d3233203d3e20323135373237.roa (hash: YkSgIj60/WrfXjkzTsvNmSBHnWYo3l/r2aakVLlTHlI=)
6: 3130332e3134372e38302e302f32332d3233203d3e20313534343130.roa (hash: uTRK4cfs6kU0tRewOXGg2ZHMhMcLjNRyQucE48/K6O4=)
7: 3130332e3134372e38312e302f32342d3234203d3e20313534343130.roa (hash: xUzQPT7Y48BY1f3qkuwnRycvuFaKrS+6XVzcFNbQt5U=)
8: 3130332e3134372e38302e302f32342d3234203d3e20323135373237.roa (hash: OYS8ELzbytajd0ilVDQZgP9NBUy3Oh9sGjo4E0+GTlo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl
rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 01:12:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:08:88:aa:55:09:d1:dc:9d:8e:20:a2:12:96:c4:aa:d1:1e:39:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246
Validity
Not Before: Jan 17 20:56:28 2026 GMT
Not After : Jan 21 01:12:28 2026 GMT
Subject: CN=22BDE7BE022A1742F24FF14A5989E14D38D4097E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:47:fb:7d:d2:d0:26:ae:44:7d:50:16:96:ae:
b7:af:3b:c4:64:f4:6b:41:74:74:c8:d6:ba:82:d3:
4e:43:90:a8:18:48:4b:60:41:87:95:68:c4:c1:ac:
67:ab:f0:51:58:1c:88:e1:2c:6d:d8:ab:5b:a3:4c:
40:56:83:91:1b:80:43:68:54:9b:67:48:58:2f:b6:
05:31:58:a3:29:b0:e8:18:ec:58:62:ba:79:7c:10:
43:50:b9:d9:79:8a:1d:de:55:e3:68:11:7a:fd:8c:
66:04:cf:97:38:ea:a1:60:84:16:6c:97:57:d5:12:
a9:06:d2:fc:ce:f0:40:19:49:4c:57:be:c5:43:73:
c3:df:8c:7b:37:34:73:c7:68:b4:f5:a3:ce:85:19:
ed:f7:37:01:bb:e3:0f:57:ce:18:f2:5a:14:49:b6:
25:0d:9a:09:5b:6f:47:17:01:60:36:38:7d:7e:d5:
7e:06:32:13:51:39:a0:be:d2:d8:f2:7a:2c:a4:5c:
8f:f3:43:71:5d:9a:49:2e:52:ec:8a:f7:20:73:8f:
96:68:e8:8e:7d:d9:bc:34:96:7f:ea:d3:f0:c3:ea:
5a:29:8c:eb:84:8d:44:79:03:3a:5f:e1:d5:55:8e:
16:6a:95:44:45:0f:ab:f8:03:6b:25:05:fc:61:dd:
22:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:BD:E7:BE:02:2A:17:42:F2:4F:F1:4A:59:89:E1:4D:38:D4:09:7E
X509v3 Authority Key Identifier:
keyid:A3:EF:DD:DA:D5:26:EF:A3:F2:82:1E:9E:6E:C6:E7:47:BB:5B:12:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:03:4e:a7:9d:f2:ce:c1:0f:66:2a:78:58:5a:67:29:2f:3d:
60:06:56:03:b6:30:01:a5:58:66:d6:56:6e:8a:69:85:4b:17:
e1:02:e4:04:a2:72:87:4b:9c:7d:e5:9b:43:e5:41:95:d2:20:
59:ac:9d:fb:16:b7:ec:fa:fe:6a:0f:9b:d3:dd:b4:d9:81:04:
7a:d6:f9:68:5b:e0:22:2b:c7:02:f8:e2:ba:c5:be:9e:e4:49:
d4:c0:fe:c8:e9:f3:d4:88:11:90:fa:66:15:49:f2:6e:b9:aa:
87:14:44:aa:46:03:f1:f6:c2:4f:81:67:5b:3e:e5:8e:ca:b0:
d7:99:88:ff:9a:2e:33:86:1f:6e:e3:63:7d:12:35:51:92:69:
4d:e1:60:dd:be:27:60:b1:30:6a:c9:48:b8:28:aa:7d:9c:76:
db:16:b8:86:1f:a6:25:d8:22:14:41:0a:0f:84:e3:e9:cc:f1:
3d:97:9f:07:0f:cc:43:74:e8:29:76:98:7f:1e:38:cd:a7:b0:
a0:b7:c6:f8:79:02:9a:84:a1:d3:9d:6e:12:0c:1f:0f:ad:fc:
13:78:bf:89:d8:e3:39:d7:7d:91:0a:6e:26:90:6e:2e:fc:c4:
97:02:51:cc:1a:e5:71:f4:ce:67:7d:e1:a6:aa:8f:19:cd:a3:
34:66:0f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 20:03:09 2026 by rpki-client