This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft
File: 1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft (raw, json)
Hash identifier: Q21ndPggIHAk9P/iXiR6OKn4A8tPku9pgV+9cT4LMio=
Subject key identifier: C6:47:AE:21:F4:33:57:BF:0F:C4:CF:E5:B1:6E:DB:92:66:E0:7C:68
Authority key identifier: 16:97:12:7A:E2:88:F4:C0:35:03:ED:0E:D8:F0:9B:D7:A1:0A:1E:20
Certificate issuer: /CN=1697127AE288F4C03503ED0ED8F09BD7A10A1E20
Certificate serial: 2BF305B2C545465B19B4DAB52434890670686736
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft
Manifest number: 027E
Signing time: Sun 01 Feb 2026 13:51:52 +0000
Manifest this update: Sun 01 Feb 2026 13:46:52 +0000
Manifest next update: Wed 04 Feb 2026 18:07:52 +0000
Files and hashes: 1: 3130332e3138302e3235302e302f32332d3234203d3e20313439333733.roa (hash: 6+aOTOrAxzWsWipZ2VbdRwlhEyJYsC/PS67oMR2JaEk=)
2: 3130332e3138302e3235302e302f32342d3234203d3e20313439333733.roa (hash: FU4m4uM0eOvuHrbeEWpDEWdnGc1mYzPxVGKE41GscXY=)
3: 3130332e3138302e3235312e302f32342d3234203d3e20313439333733.roa (hash: hUygR1F36BFXE6jZfKUn6z9xWtDxXwKMMrnfrGbDbrA=)
4: 1697127AE288F4C03503ED0ED8F09BD7A10A1E20.crl (hash: A5hc9mmlb+0yHeyap9mApJsHi929schrY0Xql0JbeZQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.crl
rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 18:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:f3:05:b2:c5:45:46:5b:19:b4:da:b5:24:34:89:06:70:68:67:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1697127AE288F4C03503ED0ED8F09BD7A10A1E20
Validity
Not Before: Feb 1 13:46:52 2026 GMT
Not After : Feb 4 18:07:52 2026 GMT
Subject: CN=C647AE21F43357BF0FC4CFE5B16EDB9266E07C68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:48:69:1f:79:b8:0d:10:37:bb:3d:66:ea:21:
8e:13:77:23:49:a6:01:73:e2:fa:dd:3f:0f:a8:38:
36:d3:a1:60:ab:aa:be:b3:48:60:b4:ea:83:9a:89:
ec:12:bc:60:f7:57:67:ce:7e:ae:8c:58:ef:2b:16:
10:6d:52:9b:83:56:31:21:da:da:33:37:5c:ac:01:
b7:ea:21:c4:48:9f:17:73:37:63:52:80:90:ad:94:
57:89:e5:78:18:a2:23:b3:0f:a2:13:3a:75:8c:c7:
61:1a:4a:7b:fa:bc:3c:7a:a6:ec:e5:55:1f:f4:2d:
cc:5b:fa:f4:49:c8:63:65:5e:37:8b:3b:ab:df:93:
fa:f3:ac:02:12:da:97:5a:ca:1f:5e:3a:4a:44:03:
77:73:42:0a:30:9b:85:23:d7:90:8f:2d:ca:0d:d7:
43:c9:22:df:c5:ac:de:eb:3a:cf:78:9f:a5:6b:84:
ae:fe:6b:d0:9a:2b:50:cd:f7:85:13:27:3f:4b:21:
58:c6:d2:68:df:4b:e6:7c:4d:f8:e4:98:81:be:62:
b9:82:54:25:1a:52:db:d8:3c:cc:70:7a:9b:80:c2:
97:a3:6e:15:a8:84:63:4c:9d:8e:a6:5e:cb:99:a2:
1c:b9:0c:59:0d:6f:dc:e8:27:6f:cc:8d:af:d6:21:
7f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:47:AE:21:F4:33:57:BF:0F:C4:CF:E5:B1:6E:DB:92:66:E0:7C:68
X509v3 Authority Key Identifier:
keyid:16:97:12:7A:E2:88:F4:C0:35:03:ED:0E:D8:F0:9B:D7:A1:0A:1E:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:df:d3:88:99:e4:50:bc:06:6c:be:42:78:86:a0:1d:69:f6:
5d:ef:36:0a:35:03:af:c7:af:38:1a:83:4d:e7:d6:6e:46:91:
ab:ee:3b:59:ef:e0:d9:22:37:3a:28:d4:0e:96:b8:94:0c:b7:
6b:57:ec:e8:78:ad:12:7c:69:0a:32:2a:74:52:cb:3c:9e:76:
99:2d:42:f3:32:11:9e:a5:d2:41:97:4b:a2:6e:06:0b:e6:b2:
d7:cd:7d:27:58:8b:bb:41:23:db:c1:89:4f:82:9c:87:22:23:
c7:27:78:2c:ae:e6:76:0a:50:e6:a1:36:0b:60:9e:68:47:c2:
fc:be:88:4a:46:73:53:ca:12:3e:a6:82:b1:1f:39:ba:c6:a2:
fd:3b:10:86:28:d4:d6:03:5c:4d:10:76:80:32:05:d1:92:52:
18:f4:4f:d3:53:a0:4c:e4:f6:2f:0a:56:62:3c:be:38:cc:57:
27:22:bc:3f:c4:66:a4:84:f5:0b:c9:25:8d:14:f6:8b:28:89:
d1:b2:90:9e:58:07:09:1a:23:6d:f7:cc:43:92:4b:d2:7b:00:
a0:f5:07:78:aa:17:c2:f2:25:e8:65:46:38:6a:fa:c9:94:1f:
57:4e:df:22:e6:83:30:82:cb:1f:db:47:97:1e:c0:84:c4:8a:
6f:b1:d8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:06:56 2026 by rpki-client