This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.mft
File: 7470038419B67CD1743CE4D96953077ECE6928FE.mft (raw, json)
Hash identifier: 2+OW+kaepedP63mJEE8CxiKtWEw7Fqt40BCg48YMS9U=
Subject key identifier: A2:29:86:A2:49:AC:1D:E0:6B:03:BC:39:23:CF:36:83:50:36:C4:47
Authority key identifier: 74:70:03:84:19:B6:7C:D1:74:3C:E4:D9:69:53:07:7E:CE:69:28:FE
Certificate issuer: /CN=7470038419B67CD1743CE4D96953077ECE6928FE
Certificate serial: 1350D0AE8565AC19F15087AF3EDD84AD1A514DB2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7470038419B67CD1743CE4D96953077ECE6928FE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.mft
Manifest number: 0211
Signing time: Sat 31 Jan 2026 16:31:53 +0000
Manifest this update: Sat 31 Jan 2026 16:26:53 +0000
Manifest next update: Wed 04 Feb 2026 04:12:53 +0000
Files and hashes: 1: 3130332e3135342e35322e302f32342d3234203d3e20313430343739.roa (hash: tMxmqnyNs+AqUZmzCKA8ba+dMpF5PucwNl1kbWxh19Q=)
2: 323430363a353463303a383030303a3a2f33332d3333203d3e20313430343739.roa (hash: pDyawm8Ut1xJC/Kb1Iiv+fIq9ylWhbkOkOXsv+y8R04=)
3: 7470038419B67CD1743CE4D96953077ECE6928FE.crl (hash: /cOJqNSk1mv5vydW1HI8KJ769KGG9wpvDA+FJIGgft8=)
4: 3130332e3135342e35332e302f32342d3234203d3e20313430343739.roa (hash: XMfcxb2cyU/BTawAea91z/0xjspg0vqpK5L29ZTTMeY=)
5: 323430363a353463303a3a2f33332d3333203d3e20313430343739.roa (hash: PrqwHi6VDGsbOfGzpQVys1jP9vQnIVrI8cB9N7l7cwc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.crl
rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7470038419B67CD1743CE4D96953077ECE6928FE.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 04:12:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:50:d0:ae:85:65:ac:19:f1:50:87:af:3e:dd:84:ad:1a:51:4d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7470038419B67CD1743CE4D96953077ECE6928FE
Validity
Not Before: Jan 31 16:26:53 2026 GMT
Not After : Feb 4 04:12:53 2026 GMT
Subject: CN=A22986A249AC1DE06B03BC3923CF36835036C447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:31:b3:34:51:2c:91:c8:72:9c:99:3a:d1:85:
2f:1b:4f:6b:a7:0c:e5:46:79:ff:60:13:fb:7d:bf:
e0:39:d4:c0:12:6c:fb:7a:63:5c:c0:ea:d0:16:8c:
d0:39:ef:5d:b6:4c:84:95:bd:87:f6:0f:9c:e4:eb:
af:96:00:3e:13:aa:a4:09:70:61:51:fb:42:07:4c:
8b:aa:1b:d7:ac:fb:69:c4:21:b8:5a:20:6e:de:45:
c3:d8:fd:e9:4a:6b:79:02:5a:01:dc:b1:60:c0:c3:
d9:bb:cf:86:3d:5e:8d:65:f7:31:30:63:d4:f0:eb:
40:6f:e9:37:c8:6c:c4:a0:97:57:4d:c1:85:df:d0:
2c:18:0d:33:77:fd:b0:79:87:9c:f9:12:b5:61:b3:
a8:1e:da:67:0d:99:de:ff:06:e4:30:f4:06:c2:3a:
3b:16:22:75:e3:c4:fa:d5:df:ee:3f:24:cc:b2:ff:
82:a4:f7:f0:a1:c5:28:05:22:6c:83:39:1a:9f:a6:
ca:51:fc:88:c9:4f:0f:7b:a5:c1:e5:43:88:cd:5f:
db:dd:1f:c2:40:c6:45:e1:55:42:ba:1c:fa:c8:7e:
eb:ca:52:d8:50:d3:d7:ba:d8:bf:f8:bc:28:14:18:
dd:c4:e8:c4:26:5a:ab:42:62:bd:3d:0f:a3:4e:86:
cd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:29:86:A2:49:AC:1D:E0:6B:03:BC:39:23:CF:36:83:50:36:C4:47
X509v3 Authority Key Identifier:
keyid:74:70:03:84:19:B6:7C:D1:74:3C:E4:D9:69:53:07:7E:CE:69:28:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7470038419B67CD1743CE4D96953077ECE6928FE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:1c:fc:3f:89:e3:39:42:db:dc:ed:df:36:e2:94:d9:67:e0:
4d:cc:90:5a:e8:cc:d4:4b:59:4d:b1:8f:50:42:09:f3:f9:b2:
54:bc:45:f3:77:81:86:70:33:7d:86:30:04:55:34:bf:c3:94:
38:89:c4:3e:27:cb:05:95:2a:84:0d:2d:a2:66:62:6b:9e:73:
93:f4:25:02:13:dc:be:8a:ec:c0:57:90:19:b2:e9:fe:50:83:
cb:c7:16:d8:6b:4c:be:79:3d:83:e3:1b:a8:17:7f:84:44:9b:
5d:de:37:34:33:ea:0e:3c:23:5f:e4:41:a4:1f:6d:6d:dd:a1:
bd:96:e3:b2:33:cd:a5:c6:83:bb:92:81:49:e3:c0:9b:d1:e7:
88:af:ac:c6:53:81:b7:da:c8:4b:e0:ed:6e:10:23:69:9d:38:
26:1c:2e:8a:a2:3a:4c:a0:af:16:c2:9a:8d:5f:17:09:15:cc:
7d:26:5a:7c:73:f1:b3:79:92:7f:44:5e:f9:ee:4e:c5:2f:07:
da:44:c4:71:1f:2c:35:8a:e3:fa:06:eb:f7:42:f5:b3:b7:22:
48:fd:a2:ef:59:29:e2:20:3a:aa:a2:a9:3f:d5:31:e5:8e:c2:
6f:82:a1:86:44:9c:09:0f:6c:92:2f:63:99:28:dd:4b:47:0c:
d3:4f:ef:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:48:40 2026 by rpki-client