This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft
File: B126A372835801BBB738696C56DCF255D032D42F.mft (raw, json)
Hash identifier: 6rMyuqAlueg71aBv0B6zT5BJB6h6Hb42foBKmXQ4PTw=
Subject key identifier: 62:9B:37:A5:18:F5:5B:19:55:28:1C:31:66:EF:17:B9:1B:9D:37:C4
Authority key identifier: B1:26:A3:72:83:58:01:BB:B7:38:69:6C:56:DC:F2:55:D0:32:D4:2F
Certificate issuer: /CN=B126A372835801BBB738696C56DCF255D032D42F
Certificate serial: 3158619B612395CE1690D3FA5FFF6FA8BD55CACC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B126A372835801BBB738696C56DCF255D032D42F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft
Manifest number: 03B7
Signing time: Mon 29 Dec 2025 02:02:05 +0000
Manifest this update: Mon 29 Dec 2025 01:57:05 +0000
Manifest next update: Thu 01 Jan 2026 10:23:05 +0000
Files and hashes: 1: 3130332e3136362e33342e302f32332d3234203d3e203137393935.roa (hash: Nmtn3LlfweyxwcAEh/9aYsa4vVfStr8hvIJSQMmS8CI=)
2: B126A372835801BBB738696C56DCF255D032D42F.crl (hash: nZTYuZLFIMq3KAD9r1MtT6loPJ2Cu7u/l16MKQ7BUL8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.crl
rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B126A372835801BBB738696C56DCF255D032D42F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Jan 2026 10:23:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:58:61:9b:61:23:95:ce:16:90:d3:fa:5f:ff:6f:a8:bd:55:ca:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B126A372835801BBB738696C56DCF255D032D42F
Validity
Not Before: Dec 29 01:57:05 2025 GMT
Not After : Jan 1 10:23:05 2026 GMT
Subject: CN=629B37A518F55B1955281C3166EF17B91B9D37C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3c:0d:01:80:45:f0:7b:bc:12:8c:11:95:4e:
b9:db:d0:18:51:b9:d9:03:2a:ec:6d:3e:b1:31:75:
b1:6c:f8:24:e8:bf:29:c3:6e:f4:02:76:8b:72:e7:
2d:e6:72:dc:a0:3d:c8:e3:ad:66:97:34:71:98:9a:
17:a2:fb:64:08:df:6f:33:5c:bf:28:11:49:8b:aa:
96:e1:26:96:ed:79:df:bf:d7:7c:88:cf:8c:c0:fd:
0a:76:d1:b6:62:11:7d:e6:de:3a:79:c6:6b:3a:4e:
dd:6b:17:1b:e4:9c:37:6b:59:93:27:40:63:fa:98:
5f:b0:20:81:09:56:d2:c3:00:92:7b:54:53:80:22:
29:9e:0e:2f:28:b3:ad:19:be:ee:82:9c:6b:fe:ce:
8c:b8:a4:e8:96:2f:0a:94:a7:7e:f6:cd:c7:88:12:
e8:c3:b4:00:45:2b:15:47:8d:da:ee:6e:c1:f3:b6:
c9:1e:fc:8d:db:b4:1c:c0:32:94:6c:c2:b1:cd:6c:
7d:19:69:07:a5:74:d9:9f:0a:b9:d0:52:60:5c:1c:
53:03:1a:44:a1:b1:be:69:f6:59:41:97:f5:86:f1:
a5:83:ec:89:97:57:98:f4:94:16:0d:62:7f:3e:6d:
3a:e8:72:75:c2:25:a7:25:1c:26:cd:ce:aa:11:e4:
89:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9B:37:A5:18:F5:5B:19:55:28:1C:31:66:EF:17:B9:1B:9D:37:C4
X509v3 Authority Key Identifier:
keyid:B1:26:A3:72:83:58:01:BB:B7:38:69:6C:56:DC:F2:55:D0:32:D4:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B126A372835801BBB738696C56DCF255D032D42F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:d8:75:63:de:93:88:4e:d5:6a:37:a2:54:64:33:72:61:4f:
0c:08:8f:af:81:da:74:00:ae:9c:4c:ca:17:a1:13:73:d2:75:
4f:95:55:ec:dd:50:a9:14:69:32:3a:6e:58:3d:5e:32:e4:f0:
39:4c:52:27:ce:8f:db:91:88:c9:58:66:e9:39:17:8d:94:66:
c8:38:04:37:86:b5:eb:c9:16:80:8b:3f:d8:98:af:2b:20:93:
2b:3f:2e:78:9c:64:96:3e:d8:8f:2b:11:9a:7b:bd:f8:37:67:
a0:64:38:f8:1e:c0:68:c1:f1:15:38:05:53:13:01:94:67:f6:
e7:92:aa:01:66:2a:77:a6:2c:6c:99:09:88:ad:69:53:ba:57:
b2:7c:b3:aa:fe:a9:dc:9b:22:c8:07:3c:73:b8:4b:9a:f2:60:
e1:46:c5:31:b5:00:ab:b3:a4:51:07:c5:54:65:a9:38:f8:a3:
cb:49:89:96:01:2c:5c:87:0b:4a:ff:29:60:9a:60:d2:4c:9a:
31:17:29:f4:2e:1c:4b:c2:3b:26:de:b7:2a:1b:43:15:c7:cc:
0b:16:a4:05:2c:f2:e1:b8:bf:d9:ca:eb:1c:45:a4:97:f0:d3:
19:e9:df:44:ba:a6:b3:33:7d:c9:99:f0:47:c6:78:78:1f:ac:
32:7e:9f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 15:00:08 2025 by rpki-client