This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft
File: A7422B678A17489054C0697D44A3B19EB9F67509.mft (raw, json)
Hash identifier: QEr5ZExcBqZtnJrk8UxSVJNXNB5bqyYSYdZ1hiBcg3k=
Subject key identifier: 9B:7E:2B:A5:19:89:9D:58:18:64:69:55:84:D9:FD:2B:5F:76:3D:1E
Authority key identifier: A7:42:2B:67:8A:17:48:90:54:C0:69:7D:44:A3:B1:9E:B9:F6:75:09
Certificate issuer: /CN=A7422B678A17489054C0697D44A3B19EB9F67509
Certificate serial: 699109323C624AE5E3B74026EF7BCF71DC701758
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7422B678A17489054C0697D44A3B19EB9F67509.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft
Manifest number: 0546
Signing time: Sat 31 Jan 2026 18:10:39 +0000
Manifest this update: Sat 31 Jan 2026 18:05:39 +0000
Manifest next update: Wed 04 Feb 2026 05:11:39 +0000
Files and hashes: 1: 323030313a6466343a393830303a3a2f34382d3438203d3e203338373735.roa (hash: qOoJ0LJSDTjqqUqT336SaQD1ve+KUUM1X1KBlqt/05U=)
2: 3230332e33342e3131382e302f32342d3234203d3e203338373735.roa (hash: kAUCvMM7pyFIINYLsBDohcRiHbLYQPvnmOScjw/sM+w=)
3: A7422B678A17489054C0697D44A3B19EB9F67509.crl (hash: wSlOlGeVaD2//98tHqmJLiWqCt0/uc/b7sgDfgxuwSk=)
4: 3230332e33342e3131392e302f32342d3234203d3e203338373735.roa (hash: lQa70hzJ397OJiel1wVx7dOXLMWMPJnsKeiNgocVwQs=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.crl
rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7422B678A17489054C0697D44A3B19EB9F67509.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 05:11:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:91:09:32:3c:62:4a:e5:e3:b7:40:26:ef:7b:cf:71:dc:70:17:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A7422B678A17489054C0697D44A3B19EB9F67509
Validity
Not Before: Jan 31 18:05:39 2026 GMT
Not After : Feb 4 05:11:39 2026 GMT
Subject: CN=9B7E2BA519899D581864695584D9FD2B5F763D1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:13:1d:3a:c0:3f:67:3a:d1:5f:90:cd:3f:cd:
5d:ce:e0:d0:cd:ad:de:c6:13:18:be:61:67:26:45:
3e:9a:18:90:98:75:3d:03:8f:a7:b2:12:34:89:66:
cd:01:fd:4f:6c:7f:ef:45:b9:20:10:41:6f:3c:1c:
8f:bc:a3:90:df:cc:79:37:22:78:b8:7b:91:97:03:
c3:cb:71:07:46:8f:c6:53:c5:d6:be:d8:3f:b8:f9:
57:ae:57:e2:f7:d4:68:11:65:21:c9:05:d4:2b:81:
46:f3:ec:49:0a:81:ae:6e:1f:b1:48:ed:ec:1c:f0:
79:5b:34:fd:80:6d:8f:6e:38:20:2d:6e:f4:51:9f:
00:6b:ef:14:5f:61:7a:46:76:86:ce:3b:4f:93:19:
16:78:e4:29:aa:e4:eb:89:4d:af:f0:8d:5d:2c:e9:
89:ff:5b:f1:b6:f6:89:d8:6e:4e:6d:7b:46:4f:b3:
6a:81:e2:e7:5d:89:a7:99:a0:39:5c:09:a3:65:50:
b3:06:46:70:59:f0:ac:66:d3:d1:9e:db:8c:44:fe:
e4:cc:7e:b9:7a:e1:d0:46:01:c2:1e:c4:f1:76:10:
47:3c:0f:d5:06:3c:34:6d:4b:4b:3e:27:a6:49:e4:
9e:cd:86:ac:61:6d:c2:7c:97:0a:a1:08:43:24:e2:
a4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7E:2B:A5:19:89:9D:58:18:64:69:55:84:D9:FD:2B:5F:76:3D:1E
X509v3 Authority Key Identifier:
keyid:A7:42:2B:67:8A:17:48:90:54:C0:69:7D:44:A3:B1:9E:B9:F6:75:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7422B678A17489054C0697D44A3B19EB9F67509.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ec:76:b7:ad:f9:6d:46:17:67:2f:53:89:dd:7a:a5:d0:1b:
4d:a9:d9:e5:58:a3:d1:b4:93:e7:ef:c6:65:c0:37:30:0c:e1:
22:c2:a2:1e:7e:bd:cd:0a:1d:b2:ea:1c:c6:21:e1:f7:ff:f6:
33:06:2f:71:24:5f:63:2d:42:75:f4:36:1c:33:6e:39:f3:a6:
1b:44:29:b0:80:63:5f:05:30:a8:75:ad:c2:09:0a:de:1b:93:
b9:51:da:6e:26:98:bb:8e:2b:4d:01:40:c9:cf:c6:48:9d:17:
54:be:6b:15:f2:f0:70:80:8c:46:9f:30:f0:1c:fb:98:e6:aa:
3b:0e:d3:45:aa:be:ca:f4:53:e9:fc:1d:c2:90:27:02:67:b2:
55:6d:f1:b0:c9:5d:4d:ee:8e:94:45:a6:73:7e:44:4e:8c:3a:
1d:69:73:8f:2c:24:8c:5d:fd:6d:35:66:18:aa:18:8a:79:b0:
fd:cc:ec:25:88:53:02:77:9c:ae:cf:56:a6:03:6e:6a:9f:ba:
2a:a6:5e:7f:29:8b:98:6c:5f:81:83:f0:9b:47:f8:f2:d6:dc:
f5:88:05:2e:fa:6e:43:37:b9:06:5e:6a:ad:16:4f:2d:4e:08:
03:80:2a:7e:ab:bd:39:e9:61:57:4a:45:30:78:7c:31:d3:d8:
cd:12:64:e2
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUaZEJMjxiSuXjt0Am73vPcdxwF1gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTc0MjJCNjc4QTE3NDg5MDU0QzA2OTdENDRBM0IxOUVC
OUY2NzUwOTAeFw0yNjAxMzExODA1MzlaFw0yNjAyMDQwNTExMzlaMDMxMTAvBgNV
BAMTKDlCN0UyQkE1MTk4OTlENTgxODY0Njk1NTg0RDlGRDJCNUY3NjNEMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlEx06wD9nOtFfkM0/zV3O4NDN
rd7GExi+YWcmRT6aGJCYdT0Dj6eyEjSJZs0B/U9sf+9FuSAQQW88HI+8o5DfzHk3
Ini4e5GXA8PLcQdGj8ZTxda+2D+4+VeuV+L31GgRZSHJBdQrgUbz7EkKga5uH7FI
7ewc8HlbNP2AbY9uOCAtbvRRnwBr7xRfYXpGdobOO0+TGRZ45Cmq5OuJTa/wjV0s
6Yn/W/G29onYbk5te0ZPs2qB4uddiaeZoDlcCaNlULMGRnBZ8Kxm09Ge24xE/uTM
frl64dBGAcIexPF2EEc8D9UGPDRtS0s+J6ZJ5J7NhqxhbcJ8lwqhCEMk4qSFAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUm34rpRmJnVgYZGlVhNn9K192PR4wHwYDVR0j
BBgwFoAUp0IrZ4oXSJBUwGl9RKOxnrn2dQkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
OTA1M2Q5Ni1kYTE3LTQwOTktYjcwNy1kYTBlYjJiZjA3YmMvMC9BNzQyMkI2NzhB
MTc0ODkwNTRDMDY5N0Q0NEEzQjE5RUI5RjY3NTA5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTc0MjJCNjc4QTE3NDg5MDU0QzA2OTdENDRBM0IxOUVCOUY2
NzUwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkwNTNkOTYtZGExNy00MDk5LWI3
MDctZGEwZWIyYmYwN2JjLzAvQTc0MjJCNjc4QTE3NDg5MDU0QzA2OTdENDRBM0Ix
OUVCOUY2NzUwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABTsdret+W1GF2cvU4ndeqXQG02p2eVYo9G0
k+fvxmXANzAM4SLCoh5+vc0KHbLqHMYh4ff/9jMGL3EkX2MtQnX0NhwzbjnzphtE
KbCAY18FMKh1rcIJCt4bk7lR2m4mmLuOK00BQMnPxkidF1S+axXy8HCAjEafMPAc
+5jmqjsO00Wqvsr0U+n8HcKQJwJnslVt8bDJXU3ujpRFpnN+RE6MOh1pc48sJIxd
/W01ZhiqGIp5sP3M7CWIUwJ3nK7PVqYDbmqfuiqmXn8pi5hsX4GD8JtH+PLW3PWI
BS76bkM3uQZeaq0WTy1OCAOAKn6rvTnpYVdKRTB4fDHT2M0SZOI=
-----END CERTIFICATE-----
Generated at Mon Feb 2 10:05:09 2026 by rpki-client