This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft
File: B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft (raw, json)
Hash identifier: Fg3g9hRsrFuqUcvtt+FqBYyzjMNLYGpUY5uh0ebJmGY=
Subject key identifier: 2F:E2:65:B1:37:CB:23:50:72:08:AC:C7:69:DF:E2:B1:F1:BD:C5:5B
Authority key identifier: B9:21:DA:AB:B8:49:49:DD:C2:50:0D:4F:0A:6D:93:FA:0E:B3:84:E1
Certificate issuer: /CN=B921DAABB84949DDC2500D4F0A6D93FA0EB384E1
Certificate serial: 2DB3945B712ECB970C41D45B654441F6F1AE9821
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft
Manifest number: 02DB
Signing time: Sun 01 Feb 2026 13:22:03 +0000
Manifest this update: Sun 01 Feb 2026 13:17:03 +0000
Manifest next update: Wed 04 Feb 2026 15:00:03 +0000
Files and hashes: 1: 3130332e33302e3232312e302f32342d3234203d3e203338313438.roa (hash: 7jwgwmu5p9Vx0nJtBBICc1jR6TLu2T+YBURAKlHLhFY=)
2: B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.crl (hash: 5hbyR8+fidot8Vao2BKSaPmh6XPPYUdlyDyBmKxvSTQ=)
3: 3130332e33302e3232302e302f32322d3233203d3e203338313438.roa (hash: dip5cfpPOxv7j5avMlkj27CtA1ffgVlncphql09alQk=)
4: 323430313a396230303a3a2f33322d3438203d3e203338313438.roa (hash: KdtiKUAOdh5Pdj0OkOpsBFHlVClUvcCXmF1ngZraMiI=)
5: 3130332e33302e3232322e302f32342d3234203d3e203338313438.roa (hash: +SJaFJQyqBdRsoSnVqf1c6YDNbR+iItpuCQMYo/GJwM=)
6: 3130332e33302e3232332e302f32342d3234203d3e203338313438.roa (hash: Oz3xD+pukxgYWpnFQL+j6A86Gc4jUZiZu2sP1l7btM0=)
7: 3132322e3230302e3134342e302f32312d3234203d3e203338313438.roa (hash: q36ZaNZnng4e3YSesfRm7Xhg/e4wHbxv2r58SbE/Hyw=)
8: 3130332e33302e3232302e302f32342d3234203d3e203338313438.roa (hash: o3fKHuVWFD6jkUIoyhNcY5O2uYQKepNEkJqsRTcT0Zs=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.crl
rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 15:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:b3:94:5b:71:2e:cb:97:0c:41:d4:5b:65:44:41:f6:f1:ae:98:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B921DAABB84949DDC2500D4F0A6D93FA0EB384E1
Validity
Not Before: Feb 1 13:17:03 2026 GMT
Not After : Feb 4 15:00:03 2026 GMT
Subject: CN=2FE265B137CB23507208ACC769DFE2B1F1BDC55B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c2:94:53:d7:6c:00:58:31:7f:ba:4a:9a:24:
c9:84:fb:6e:2e:80:9f:45:4e:6f:70:f9:3b:3a:31:
89:ca:6d:0a:27:ca:67:fc:4f:af:d3:81:d0:73:fa:
aa:b4:ab:b7:46:08:09:84:c4:97:31:00:4e:84:11:
92:b9:c3:3d:e6:0b:f1:f7:99:53:e8:83:98:8a:54:
09:4a:bf:8f:10:be:ac:34:ed:db:01:59:cd:e0:6b:
6c:92:62:8c:c0:a2:53:37:90:76:80:1d:db:47:c9:
8e:eb:29:f9:99:38:ee:5f:db:d9:b2:ff:02:4d:c3:
67:cb:82:6c:65:28:e3:fc:91:e6:0b:35:5e:da:79:
e8:13:34:0c:f2:e5:7f:fb:7a:3c:a2:a1:2c:8f:43:
cf:7f:1f:b5:bf:2a:80:97:a0:b7:9d:24:c4:aa:83:
c9:4d:96:81:e5:1f:5f:5e:49:1c:2c:f9:26:56:f9:
66:09:fc:aa:c9:ec:54:ec:d2:74:c6:6f:1e:6c:41:
3e:75:ef:cf:f6:2c:6f:7b:d0:cb:23:df:37:82:1c:
aa:ff:4a:49:5e:5e:82:35:47:9b:9c:b2:26:a6:5a:
48:e0:2a:cd:11:17:3c:fd:94:fd:82:46:f4:ca:84:
f3:51:96:d5:c2:2f:5c:a4:07:4b:e0:b0:14:ca:79:
01:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E2:65:B1:37:CB:23:50:72:08:AC:C7:69:DF:E2:B1:F1:BD:C5:5B
X509v3 Authority Key Identifier:
keyid:B9:21:DA:AB:B8:49:49:DD:C2:50:0D:4F:0A:6D:93:FA:0E:B3:84:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:94:c9:8e:41:4c:fc:4c:5a:c4:38:9f:1e:fd:06:ec:92:ee:
18:c1:94:2a:f2:df:c1:46:16:5a:53:c3:09:15:ce:e6:48:e4:
b7:6c:8b:5c:b0:1c:75:05:23:f6:a3:32:e8:c6:c7:b8:9b:74:
d5:a3:fd:9a:2e:61:62:61:0d:d9:b0:9a:91:bb:00:aa:c6:13:
32:1d:24:d8:6b:0d:c5:48:a2:8e:5e:58:27:3e:56:8e:74:ce:
e2:6f:be:74:59:77:35:9a:bc:e9:ca:9e:d6:e3:4c:48:f4:6f:
89:11:97:8c:44:2e:9f:51:81:97:82:e1:d4:29:6c:ae:7d:e7:
a8:a7:ad:d8:8c:f3:c3:dd:93:29:55:61:63:0f:5f:ce:41:ca:
7a:ab:ad:70:37:1a:4f:44:9f:9d:be:55:c1:2a:19:26:7a:17:
83:63:99:fe:71:6b:aa:c3:50:43:16:f5:f3:21:48:66:28:6e:
e1:6c:77:fb:f0:b1:48:56:bf:d1:af:de:13:ec:cf:8d:b4:ef:
83:34:4a:77:4d:25:27:4e:dd:68:49:8a:8b:64:10:da:cf:e3:
3a:71:15:6c:33:9c:ce:33:c2:11:fc:e3:30:37:e7:17:d1:da:
a5:13:9f:84:3b:79:fc:f2:bc:c0:80:24:95:eb:a0:82:dc:d8:
e3:94:06:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:45:16 2026 by rpki-client