This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft
File: 8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft (raw, json)
Hash identifier: UkjUEJvF/Qyk/9ptlJE21noUpcVaMTD/d4RSmkWbUn8=
Subject key identifier: 51:91:32:71:8F:34:4A:87:C8:55:46:4E:4C:B9:79:5A:DA:AC:C9:82
Authority key identifier: 8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0
Certificate issuer: /CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0
Certificate serial: 1E08DC71F41C5FA1470A5A72A8D79880E47D0B7F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft
Manifest number: 0374
Signing time: Sun 01 Feb 2026 16:00:03 +0000
Manifest this update: Sun 01 Feb 2026 15:55:03 +0000
Manifest next update: Wed 04 Feb 2026 18:03:03 +0000
Files and hashes: 1: 8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl (hash: B/cxuDzQeK6LIFdB+yjCoJQylA6gRHX+M1Sjw+pcl/M=)
2: 3130332e3135392e3230322e302f32332d3234203d3e20313331313131.roa (hash: Ho5Y5TOHX49gl1fZYVO+j2M3OjYa1AKAk+KnhAmd/6M=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl
rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 18:03:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:08:dc:71:f4:1c:5f:a1:47:0a:5a:72:a8:d7:98:80:e4:7d:0b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0
Validity
Not Before: Feb 1 15:55:03 2026 GMT
Not After : Feb 4 18:03:03 2026 GMT
Subject: CN=519132718F344A87C855464E4CB9795ADAACC982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:95:28:77:ac:52:ee:75:e2:53:3a:db:56:ef:
92:63:95:9c:43:d0:dd:33:c1:dd:79:71:8d:cf:27:
8a:9f:d2:64:7b:09:da:ac:60:6e:bf:3a:1c:77:94:
91:c4:aa:ed:10:39:4b:b7:49:28:21:1b:25:91:78:
74:c5:0a:aa:aa:f2:11:b3:fb:3e:ff:4d:7b:d3:52:
ab:83:35:20:a4:11:92:8a:5e:6d:76:a9:ff:dd:52:
92:7b:94:38:eb:99:a6:36:08:0d:6d:20:ca:8d:0b:
98:76:5f:73:69:70:db:51:ac:fb:81:63:f2:8b:ac:
3e:e9:0a:ae:d9:33:bc:9a:38:51:85:c4:5d:ec:25:
ee:8f:d2:2d:3b:d7:3c:23:20:36:25:3c:e2:5a:9d:
83:7f:d4:ec:46:ca:05:42:61:31:c7:7f:68:47:9e:
05:23:e0:99:d1:b9:75:19:e6:06:a4:79:85:2f:ea:
83:c0:84:6b:78:7d:9a:4b:97:3d:ac:66:a1:f4:2f:
f8:2f:99:6c:ad:b5:a8:e7:ec:2b:5f:4f:1d:07:46:
41:00:bb:cf:d7:87:44:c7:e5:ae:a9:9d:29:3d:2a:
24:ca:20:5d:eb:2c:f5:f1:f3:87:c1:6d:24:15:a7:
e1:00:b7:7d:48:ae:d5:e8:38:a2:17:d0:b5:ef:b4:
40:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:91:32:71:8F:34:4A:87:C8:55:46:4E:4C:B9:79:5A:DA:AC:C9:82
X509v3 Authority Key Identifier:
keyid:8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:ab:c1:13:73:96:39:35:3e:49:1d:8b:cf:8a:72:d0:fe:af:
0d:c8:73:cf:da:0b:d1:08:84:a4:19:c4:f9:a5:c7:0e:b3:6a:
9e:02:dc:fa:5f:b6:60:b1:49:30:cc:0d:fa:20:21:11:9c:ee:
ab:c6:46:66:a8:d2:1a:c0:4a:08:23:fc:32:b6:d6:f6:87:b4:
67:32:5b:70:ca:6c:bd:a1:25:82:96:2c:a5:77:ec:7d:c4:65:
bd:be:a4:9d:54:ff:6f:73:43:f7:36:2d:b2:f3:f8:d4:ff:19:
bf:f8:b0:12:0b:7e:7d:5c:1c:e4:ac:50:75:8d:f9:83:d3:83:
3a:05:7c:e7:e8:60:7e:ad:6c:cd:aa:44:7b:56:f2:01:98:38:
09:d3:36:95:33:6e:79:1e:f7:2a:04:65:0a:3a:3f:a3:6a:d0:
0d:4b:41:f1:0b:6e:c5:77:de:48:23:01:92:72:fb:8c:0c:f0:
e9:cc:e7:d0:51:66:89:0f:e8:45:34:d8:53:13:a5:a7:80:b0:
86:7c:f0:76:31:3c:f4:1b:28:7f:b7:be:24:a5:03:92:0f:7b:
ad:09:8e:1d:06:7c:c8:e9:b8:ed:42:23:3e:44:9e:58:d2:78:
e2:34:0a:83:79:46:ce:e0:43:af:4c:73:a0:d7:b4:16:c7:93:
e7:2c:de:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:04:19 2026 by rpki-client