This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft
File: D0DE430E423B23AB634EBCF0195F1126B44A525E.mft (raw, json)
Hash identifier: n78GGkAdrEAepn3mRS7qkbpuHYE9ElNk79FKYOvxAwc=
Subject key identifier: 9E:73:65:24:EC:E3:F7:7D:26:7B:8B:55:CB:EC:DC:6C:3E:C7:9F:28
Authority key identifier: D0:DE:43:0E:42:3B:23:AB:63:4E:BC:F0:19:5F:11:26:B4:4A:52:5E
Certificate issuer: /CN=D0DE430E423B23AB634EBCF0195F1126B44A525E
Certificate serial: 3774E4FDECCF00E29A7A9327042AE86F83646605
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft
Manifest number: 0167
Signing time: Sun 01 Feb 2026 03:02:05 +0000
Manifest this update: Sun 01 Feb 2026 02:57:05 +0000
Manifest next update: Wed 04 Feb 2026 08:27:05 +0000
Files and hashes: 1: 34352e3132332e3134322e302f32342d3234203d3e20313532303236.roa (hash: VvHLmuXRMUHqTPfrpSgqTa3OVr8h9pb8S/5kTj+y7+8=)
2: D0DE430E423B23AB634EBCF0195F1126B44A525E.crl (hash: HOlessgOJSYZGE6fCbH2l7RhxTbDOI+6QZ24AsV+qE8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.crl
rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 08:27:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:74:e4:fd:ec:cf:00:e2:9a:7a:93:27:04:2a:e8:6f:83:64:66:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0DE430E423B23AB634EBCF0195F1126B44A525E
Validity
Not Before: Feb 1 02:57:05 2026 GMT
Not After : Feb 4 08:27:05 2026 GMT
Subject: CN=9E736524ECE3F77D267B8B55CBECDC6C3EC79F28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:03:5c:a0:e0:7e:2d:8e:1e:98:dc:69:c6:84:
2f:b9:db:aa:ff:71:b7:c8:db:5d:ee:5f:5a:3f:1a:
df:0e:7e:19:35:2c:87:78:8f:9c:8a:e4:17:5f:fa:
76:7a:4b:77:5e:3c:5f:a4:3d:46:7a:79:49:d7:38:
ba:c1:81:59:f7:97:48:99:1b:7d:44:95:32:db:10:
60:ee:d9:4a:cd:06:81:92:91:64:c0:42:3f:94:af:
6a:68:57:d9:1f:ef:d1:82:76:02:4c:ab:ab:f5:a1:
09:13:27:1e:59:d8:e1:bd:40:2a:06:98:04:9a:11:
60:79:49:98:85:d1:29:a4:e2:82:f7:bb:e9:ff:1e:
17:56:04:3a:ca:cd:22:b5:8e:94:a6:b8:e8:83:43:
45:44:22:01:1c:0e:9c:1b:66:2e:2d:c7:c3:74:8a:
f2:0b:58:02:75:b4:7c:49:4d:a1:76:39:fd:33:42:
af:6a:77:54:d8:e9:4c:6a:68:f2:3e:3c:4f:e4:26:
9b:12:0f:29:d1:6d:63:0a:0f:95:80:98:f2:62:53:
f0:7d:98:10:93:cc:6a:b0:c5:4a:0f:86:fc:aa:4a:
65:12:59:ea:c5:f4:4f:8a:5c:46:dd:09:ee:a1:b3:
08:c6:89:36:4b:35:ea:fd:5d:2d:a4:b8:12:0d:9d:
e0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:73:65:24:EC:E3:F7:7D:26:7B:8B:55:CB:EC:DC:6C:3E:C7:9F:28
X509v3 Authority Key Identifier:
keyid:D0:DE:43:0E:42:3B:23:AB:63:4E:BC:F0:19:5F:11:26:B4:4A:52:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:6c:8e:4c:96:65:df:3e:ce:49:73:ba:70:a2:fc:8b:22:ab:
8b:78:e4:c3:9a:f7:a6:da:c2:87:44:f1:dd:4a:ca:ef:1e:53:
1b:79:b0:74:e7:c7:11:3e:3a:ff:8d:f7:1a:d3:a9:2a:df:07:
f0:a9:87:75:5c:ce:72:28:3c:f8:f0:1a:f7:4d:ce:1f:ca:e1:
88:60:93:cb:7a:1f:29:ee:f1:44:58:97:4f:01:77:48:5c:ec:
c5:e7:6a:b2:6d:3a:80:ad:e6:cc:04:be:52:67:1a:2f:aa:6f:
87:1a:7f:3b:7b:bb:96:19:24:15:16:f4:10:f8:74:1a:b3:a1:
e7:56:34:d1:f7:48:56:eb:88:6e:3a:a8:f7:e4:db:09:bb:0b:
e8:73:6e:b1:20:9a:9b:00:78:b9:b2:93:7c:bd:e6:8e:09:78:
92:56:89:a1:38:9e:14:d1:42:be:68:75:b8:22:5b:d8:be:85:
93:8b:b8:81:a5:49:24:ce:a3:50:4b:b2:3f:83:85:40:c1:a3:
e3:43:90:b1:d1:1c:3c:37:5b:e6:3d:6f:d2:6d:88:76:a7:5b:
0c:e4:1d:84:04:c6:75:a1:18:d7:c9:1c:ac:9c:4a:1c:4e:5c:
d3:76:32:06:f5:24:22:7d:c9:99:db:85:a8:71:ea:f8:ef:6e:
7d:4c:d0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:56:34 2026 by rpki-client