This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft
File: D1553F19BBD3B70719E720005FDB3145CC910A1F.mft (raw, json)
Hash identifier: hxuFgTGw0gy1XNtMbVukyhkz2GU9AkaB/lxCAmfFSlA=
Subject key identifier: 6E:73:AF:2E:2F:41:57:2F:DF:7E:03:60:44:44:3B:07:A7:54:21:E7
Authority key identifier: D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F
Certificate issuer: /CN=D1553F19BBD3B70719E720005FDB3145CC910A1F
Certificate serial: 396A484ADDBE791D33D50F0A0DF33318D5D9BFE9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft
Manifest number: 027B
Signing time: Sun 01 Feb 2026 21:30:39 +0000
Manifest this update: Sun 01 Feb 2026 21:25:39 +0000
Manifest next update: Thu 05 Feb 2026 01:57:39 +0000
Files and hashes: 1: 3130332e3138332e35382e302f32342d3234203d3e20313439343039.roa (hash: B89ThQDBq7NFEdKxZJ9Go94Cy2gr/9mNFR+AP3UQspo=)
2: 3130332e3138332e35392e302f32342d3234203d3e20313439343039.roa (hash: WjcJ7E0QSWsLWoEbkMd62oz7h2Nk8rjlfX12OFJZZWw=)
3: 3130332e3138332e35382e302f32332d3233203d3e20313439343039.roa (hash: zkfW7G82q4G/1aqENxbcKsFNsfS8k4+ZqlphVmUFO1g=)
4: D1553F19BBD3B70719E720005FDB3145CC910A1F.crl (hash: WD3Tpu0Z8WfZbTkciutMUBgVnLGG/oRGMADXTJz6nvo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.crl
rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 01:57:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:6a:48:4a:dd:be:79:1d:33:d5:0f:0a:0d:f3:33:18:d5:d9:bf:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1553F19BBD3B70719E720005FDB3145CC910A1F
Validity
Not Before: Feb 1 21:25:39 2026 GMT
Not After : Feb 5 01:57:39 2026 GMT
Subject: CN=6E73AF2E2F41572FDF7E036044443B07A75421E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:91:bc:f1:66:a8:ff:c3:2a:2e:60:5c:b9:26:
a6:f0:5e:bc:c4:62:60:24:ab:c8:4f:62:e2:2d:2f:
71:09:8b:09:91:cf:97:fe:51:f8:f4:00:81:2c:4d:
0a:b7:aa:2b:65:f1:12:1b:61:81:d3:2f:d6:d7:32:
d2:81:7d:0c:0e:7d:6a:6c:55:23:5e:71:38:4e:80:
57:23:51:b3:8d:c9:c0:e7:f4:ac:3c:87:b6:d7:b7:
5c:44:8c:da:cb:54:5c:4d:d4:f0:51:64:4f:24:06:
c1:12:31:5a:73:de:f3:0b:d8:29:70:1b:49:8e:13:
11:fd:7e:b5:23:d5:81:da:c4:22:1d:96:81:77:09:
b3:6a:6f:c5:6f:f8:80:d6:36:5c:6f:ed:a1:fb:dd:
cd:6e:a1:39:86:fa:8f:0b:72:91:ae:5a:87:72:75:
e4:a0:75:f8:d0:57:2c:26:e9:03:04:94:1f:09:0d:
de:48:8c:1b:55:da:c1:fe:69:d1:c3:79:bb:90:ae:
dc:95:8f:74:25:c7:b5:2b:3f:de:a2:4d:bd:04:f2:
d2:3d:b1:3a:7a:87:1f:94:52:41:8c:ce:25:7c:f7:
ba:f6:39:f5:7e:9d:e2:90:63:b5:de:8f:b8:a9:19:
4f:61:0a:31:02:0f:3f:11:8b:fb:3d:4d:ac:c7:c4:
10:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:73:AF:2E:2F:41:57:2F:DF:7E:03:60:44:44:3B:07:A7:54:21:E7
X509v3 Authority Key Identifier:
keyid:D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:f4:65:9e:c0:14:aa:a4:c1:3f:62:cb:7f:dc:68:98:9e:50:
96:60:2b:02:aa:64:bf:43:83:99:c2:17:6b:c6:16:e9:86:c9:
8d:4f:b1:41:66:89:ec:4f:8a:fd:b6:bc:2e:69:dd:a4:23:64:
d8:a5:2f:21:99:ae:38:e2:d5:e5:6d:51:bb:42:e1:2e:d0:23:
ea:68:c7:77:7a:2b:44:dc:c5:cd:09:98:ec:67:d0:0c:37:a7:
87:af:86:40:90:36:a5:99:c9:48:6e:20:dc:39:27:1a:3c:23:
bc:16:61:a0:72:e9:46:8e:64:ec:06:2d:f0:db:d2:ba:57:88:
01:e5:d9:7a:49:b4:0e:b3:30:27:ba:89:2d:05:fa:68:e0:eb:
38:5b:53:a2:8e:f6:da:99:05:e7:4b:25:bc:93:5d:cc:f1:8e:
a4:7f:e6:d6:38:20:bb:74:bf:8c:22:d6:0f:c1:af:23:00:bb:
57:5f:fb:45:ce:39:69:69:9a:70:58:ee:96:01:a1:e0:7e:f5:
c0:54:6f:fd:de:6c:19:18:61:79:b1:b8:b7:b4:df:c4:bd:5a:
32:01:a1:31:2b:69:8a:0a:ff:b3:b1:c3:db:19:3e:18:04:62:
e8:3f:24:3c:11:b6:ca:fe:07:93:b6:4b:b0:ef:86:2b:c3:53:
be:4d:2b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:05:10 2026 by rpki-client