This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft
File: 846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft (raw, json)
Hash identifier: 1WWGsKUUMv+6hnwimm3icTnVMNe3Jo6bLhKHgvnpWpg=
Subject key identifier: 53:E8:77:A4:5E:73:D5:32:30:42:20:A9:09:00:36:8E:37:1F:74:55
Authority key identifier: 84:6B:CB:85:C1:E1:AA:59:03:7B:0A:2A:C5:9E:D1:E8:E7:42:0E:D0
Certificate issuer: /CN=846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0
Certificate serial: 2484EB5B1B53CB13BAEB6398884655D125509FD3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft
Manifest number: 03AD
Signing time: Sun 01 Feb 2026 00:41:59 +0000
Manifest this update: Sun 01 Feb 2026 00:36:59 +0000
Manifest next update: Wed 04 Feb 2026 03:39:59 +0000
Files and hashes: 1: 846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl (hash: Yxstl4OzF2eKBgt8geHb8K5kdOuULibdxXuOIEJimEs=)
2: 3130332e3136392e3133382e302f32332d3234203d3e20313432333433.roa (hash: VrU1SwTl8NTtyMThFSf4hTGqANokx1m/tgJCu2ItF4k=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl
rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 03:39:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:84:eb:5b:1b:53:cb:13:ba:eb:63:98:88:46:55:d1:25:50:9f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0
Validity
Not Before: Feb 1 00:36:59 2026 GMT
Not After : Feb 4 03:39:59 2026 GMT
Subject: CN=53E877A45E73D532304220A90900368E371F7455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9b:f2:54:91:58:0c:d7:ef:28:b2:95:40:94:
3a:45:74:fd:75:01:9f:cf:e7:f8:68:65:d3:73:f1:
cd:ed:4b:af:46:2e:48:19:60:eb:e8:2e:c1:3a:9e:
4d:d6:f0:1b:f4:cb:fe:9c:fe:b0:35:61:7c:9e:50:
a6:80:5f:3f:b1:8c:ca:5f:fd:3e:e2:24:cd:da:cf:
36:a6:2b:ed:02:02:65:2b:d0:27:86:09:eb:79:26:
0a:95:b1:74:70:b2:66:b4:28:42:b5:eb:20:28:aa:
87:55:a2:b0:6d:5e:c1:9f:fe:4a:0a:94:e8:37:4e:
40:2d:83:fd:f2:3a:6f:f5:30:26:c3:e7:7c:62:e1:
f3:55:08:fb:c3:12:a9:6c:88:d7:da:75:8d:6f:26:
9b:37:5d:7e:18:49:28:47:89:8a:ea:95:f9:e0:76:
87:42:20:c7:f4:35:44:93:39:ab:d5:ff:ba:ab:bd:
31:43:52:1c:68:72:62:2c:19:0e:85:eb:76:56:c7:
fc:53:cd:cf:78:c8:0f:a2:4d:90:4d:56:87:ec:28:
2d:9f:e4:49:26:fa:d1:9f:15:29:9c:2a:de:c5:72:
36:ca:dd:e5:16:30:e1:49:2f:d7:0e:b9:1c:1e:a9:
42:a7:e2:73:d6:9c:5a:1f:38:a4:59:32:60:49:21:
3c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E8:77:A4:5E:73:D5:32:30:42:20:A9:09:00:36:8E:37:1F:74:55
X509v3 Authority Key Identifier:
keyid:84:6B:CB:85:C1:E1:AA:59:03:7B:0A:2A:C5:9E:D1:E8:E7:42:0E:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:37:f4:5c:01:d9:0f:f9:0c:51:45:5d:b0:23:ac:ac:e9:7f:
3b:0e:42:01:df:6e:0b:40:af:6b:4b:dc:22:10:d6:e3:4c:bc:
72:8e:73:a6:bc:15:06:f8:9d:c0:ce:4f:58:e2:d0:f5:f7:72:
c2:e8:08:64:e6:6f:e7:00:86:68:a6:d7:3c:40:51:56:b1:7d:
32:af:8f:4e:ff:90:8e:0f:89:37:7c:b6:34:60:f1:9d:1e:9d:
98:ea:60:7c:1a:c2:92:b5:8c:a8:07:9a:64:f7:3a:42:41:2b:
38:c5:79:72:dd:ce:f4:21:7d:b7:f4:04:79:56:c5:73:f1:9d:
59:a5:9f:70:07:dd:bb:16:a7:9b:b1:a7:92:a7:1c:19:34:09:
64:74:b8:2d:3e:68:0d:f7:43:45:b5:62:33:a6:50:28:59:9e:
e3:5d:73:2b:51:9b:af:18:56:55:fa:d5:20:9f:32:71:04:d2:
c9:ef:ba:9d:94:37:db:61:32:14:8c:a5:cb:8a:e0:f2:50:0c:
2e:74:0c:28:6e:78:dc:e4:6e:dc:86:82:40:ca:77:4e:88:35:
53:23:5c:97:ed:d8:31:a6:ff:1a:c6:22:76:fc:9a:69:cb:47:
cc:b6:e1:0f:80:5a:13:c3:ef:1e:c1:6c:b8:e2:d8:76:40:5d:
47:ef:0b:01
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUJITrWxtTyxO662OYiEZV0SVQn9MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQxRThF
NzQyMEVEMDAeFw0yNjAyMDEwMDM2NTlaFw0yNjAyMDQwMzM5NTlaMDMxMTAvBgNV
BAMTKDUzRTg3N0E0NUU3M0Q1MzIzMDQyMjBBOTA5MDAzNjhFMzcxRjc0NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCm/JUkVgM1+8ospVAlDpFdP11
AZ/P5/hoZdNz8c3tS69GLkgZYOvoLsE6nk3W8Bv0y/6c/rA1YXyeUKaAXz+xjMpf
/T7iJM3azzamK+0CAmUr0CeGCet5JgqVsXRwsma0KEK16yAoqodVorBtXsGf/koK
lOg3TkAtg/3yOm/1MCbD53xi4fNVCPvDEqlsiNfadY1vJps3XX4YSShHiYrqlfng
dodCIMf0NUSTOavV/7qrvTFDUhxocmIsGQ6F63ZWx/xTzc94yA+iTZBNVofsKC2f
5Ekm+tGfFSmcKt7FcjbK3eUWMOFJL9cOuRweqUKn4nPWnFofOKRZMmBJITwNAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUU+h3pF5z1TIwQiCpCQA2jjcfdFUwHwYDVR0j
BBgwFoAUhGvLhcHhqlkDewoqxZ7R6OdCDtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
NGNhNTg2OC01N2U5LTQ5YjktYmZlMS00OGQ3ODMzNGExOGMvMC84NDZCQ0I4NUMx
RTFBQTU5MDM3QjBBMkFDNTlFRDFFOEU3NDIwRUQwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQxRThFNzQy
MEVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDRjYTU4NjgtNTdlOS00OWI5LWJm
ZTEtNDhkNzgzMzRhMThjLzAvODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQx
RThFNzQyMEVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJ039FwB2Q/5DFFFXbAjrKzpfzsOQgHfbgtA
r2tL3CIQ1uNMvHKOc6a8FQb4ncDOT1ji0PX3csLoCGTmb+cAhmim1zxAUVaxfTKv
j07/kI4PiTd8tjRg8Z0enZjqYHwawpK1jKgHmmT3OkJBKzjFeXLdzvQhfbf0BHlW
xXPxnVmln3AH3bsWp5uxp5KnHBk0CWR0uC0+aA33Q0W1YjOmUChZnuNdcytRm68Y
VlX61SCfMnEE0snvup2UN9thMhSMpcuK4PJQDC50DChueNzkbtyGgkDKd06INVMj
XJft2DGm/xrGInb8mmnLR8y24Q+AWhPD7x7BbLji2HZAXUfvCwE=
-----END CERTIFICATE-----
Generated at Mon Feb 2 12:50:42 2026 by rpki-client