This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft
File: 230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft (raw, json)
Hash identifier: BiL81zSM0hsXy3Tjl5hnkjIgMHy2/NbaL4AM/CINgLk=
Subject key identifier: E3:8D:8B:7F:8C:8C:D4:70:C3:0B:4E:17:75:D9:91:D6:C2:EF:A1:C7
Authority key identifier: 23:0A:81:B2:83:31:4B:A7:9B:FA:02:4F:DF:9F:F4:DA:66:B4:24:BE
Certificate issuer: /CN=230A81B283314BA79BFA024FDF9FF4DA66B424BE
Certificate serial: 33754C9A1644A4BF8A6DC2DA9D3EE14BDA3B7DB8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/230A81B283314BA79BFA024FDF9FF4DA66B424BE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft
Manifest number: 0243
Signing time: Sun 01 Feb 2026 15:42:21 +0000
Manifest this update: Sun 01 Feb 2026 15:37:21 +0000
Manifest next update: Wed 04 Feb 2026 21:46:21 +0000
Files and hashes: 1: 323430363a333834303a3a2f33322d3438203d3e20313430343438.roa (hash: jGdjjz2tkcnePijzwx0ZLso64VGE3BptkrmYyqOOX94=)
2: 3130332e3135322e3233382e302f32332d3234203d3e20313430343438.roa (hash: IrZeFe8SEJi6FKjU0mpLrOwQUSU/84BjfZY+z57Jm7k=)
3: 230A81B283314BA79BFA024FDF9FF4DA66B424BE.crl (hash: tAtSWoNj9w5NItUz4bcwRxMPbkm7nyFAwu+Aldp9l64=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.crl
rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/230A81B283314BA79BFA024FDF9FF4DA66B424BE.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 21:46:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:75:4c:9a:16:44:a4:bf:8a:6d:c2:da:9d:3e:e1:4b:da:3b:7d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230A81B283314BA79BFA024FDF9FF4DA66B424BE
Validity
Not Before: Feb 1 15:37:21 2026 GMT
Not After : Feb 4 21:46:21 2026 GMT
Subject: CN=E38D8B7F8C8CD470C30B4E1775D991D6C2EFA1C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b6:f3:9c:90:05:1c:8e:aa:df:71:86:0e:74:
8c:5f:b8:5e:1f:ff:fb:7b:e7:b8:2b:57:09:8d:01:
fe:e0:3b:62:38:93:3a:e0:98:4e:a3:d4:d2:97:51:
78:53:c8:d6:2c:c5:e1:cd:34:cf:df:21:f7:e4:e7:
7b:e2:7e:17:7a:94:48:77:96:54:7b:a9:8d:a4:d0:
3a:6e:55:f3:37:59:65:68:4d:b8:b4:0a:52:ad:7b:
87:8c:9d:3f:ce:16:ac:b3:5f:3d:c2:6e:06:ef:a9:
d3:3e:51:4d:15:07:ef:63:dc:d6:08:96:f0:5a:e1:
13:e3:07:b6:ad:1e:db:b8:34:42:69:d9:b2:d8:40:
ac:3e:53:38:cd:4f:b6:3f:a2:43:2a:7b:a4:9c:c8:
fe:e9:51:09:fd:cb:98:a9:67:80:58:bd:3e:7c:c8:
76:29:18:c1:1b:99:13:39:59:a4:e1:c0:0b:01:bc:
67:86:e6:45:c3:78:c0:7a:4e:f4:c9:05:89:a8:53:
c0:0f:2a:00:c8:49:7a:7a:03:5c:02:16:68:08:de:
a9:4d:87:fa:d9:d1:c9:eb:3d:4f:ae:c8:47:cc:44:
28:08:ec:39:31:bc:74:8e:02:f3:27:6c:fe:86:c5:
ec:dc:eb:ed:1f:0d:6f:70:d0:6d:a4:ca:94:81:da:
52:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8D:8B:7F:8C:8C:D4:70:C3:0B:4E:17:75:D9:91:D6:C2:EF:A1:C7
X509v3 Authority Key Identifier:
keyid:23:0A:81:B2:83:31:4B:A7:9B:FA:02:4F:DF:9F:F4:DA:66:B4:24:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/230A81B283314BA79BFA024FDF9FF4DA66B424BE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:06:40:fa:78:08:36:ca:5d:4a:2b:ff:d2:39:ab:1d:44:77:
08:67:9a:8b:cd:22:af:0b:38:94:dc:a4:f2:1c:ef:1a:b7:e5:
a3:78:63:7b:b6:de:18:de:fa:d2:2d:1d:88:05:d3:3d:a8:50:
04:91:8a:41:19:a6:23:00:4b:64:13:9b:54:a0:56:fb:fd:9c:
42:9e:3b:a7:80:f8:ef:8a:ee:ef:ae:aa:5b:ec:ae:14:be:43:
15:3b:29:5f:11:5f:4f:21:fe:e3:99:5d:c9:6c:85:24:d8:1b:
68:e7:8a:74:df:6b:df:4e:f8:fa:05:97:77:5c:3e:23:32:f2:
5a:a4:d8:3d:5c:b3:20:9a:ad:ae:18:8b:81:1f:46:9a:ed:60:
ee:6e:99:da:ef:3b:a6:58:93:1b:34:69:22:23:dc:c1:91:a0:
c0:57:b0:f1:a9:fa:cd:1f:cc:b9:77:9c:7f:7a:35:55:42:6c:
90:32:78:0e:6e:de:f6:e5:e2:35:5c:7a:9d:83:45:eb:fd:19:
e6:bd:b4:c8:c2:a1:a5:66:3b:63:e6:ff:9d:48:e5:a5:8c:3e:
9f:e3:97:77:f2:ed:4e:de:fc:33:52:c0:f9:7b:7e:ab:f0:98:
e3:fd:e0:6b:b3:d2:d9:96:a0:ba:f5:b9:67:64:70:67:22:d1:
ee:86:7f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:42:13 2026 by rpki-client