This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.mft
File: 2A2E185B12379871494114828D5D5D713982E469.mft (raw, json)
Hash identifier: LVjLcQ0XOgvnP3QTp/haAv8aXTPI82qbY8rgZm4G4+I=
Subject key identifier: 0A:13:49:15:B5:ED:2F:0A:D7:28:04:DE:C0:0B:8A:96:A9:D6:7A:FF
Authority key identifier: 2A:2E:18:5B:12:37:98:71:49:41:14:82:8D:5D:5D:71:39:82:E4:69
Certificate issuer: /CN=2A2E185B12379871494114828D5D5D713982E469
Certificate serial: 3CD9A4A18FD343B033E0B8C38173F3530564C608
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A2E185B12379871494114828D5D5D713982E469.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.mft
Manifest number: 013E
Signing time: Wed 21 Jan 2026 07:30:51 +0000
Manifest this update: Wed 21 Jan 2026 07:25:51 +0000
Manifest next update: Sat 24 Jan 2026 15:30:51 +0000
Files and hashes: 1: 3135372e32302e32342e302f32342d3234203d3e203633353036.roa (hash: sTQiXQPTUn8HIqNQ+b3wvUaJvQWDXNesHzrzHQ54ZJs=)
2: 2A2E185B12379871494114828D5D5D713982E469.crl (hash: IogHB39udr+oRotPrU75F7vMsUgDazHzeWcMCHJsAg4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.crl
rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A2E185B12379871494114828D5D5D713982E469.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 13:35:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:d9:a4:a1:8f:d3:43:b0:33:e0:b8:c3:81:73:f3:53:05:64:c6:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2E185B12379871494114828D5D5D713982E469
Validity
Not Before: Jan 21 07:25:51 2026 GMT
Not After : Jan 24 15:30:51 2026 GMT
Subject: CN=0A134915B5ED2F0AD72804DEC00B8A96A9D67AFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e7:de:c8:30:09:51:0e:c1:51:fe:45:52:16:
98:fd:43:82:15:01:17:03:b3:15:22:2b:9e:2f:48:
b9:a9:29:cb:3c:9d:94:d4:bd:70:bb:ad:e6:0c:e1:
ca:b1:8e:15:c4:ca:01:56:b8:bf:92:42:20:c1:39:
ce:aa:24:bf:35:f1:23:b6:4d:51:6d:0e:b1:01:ea:
c5:08:ac:ae:34:0c:1e:af:85:a6:77:a4:ec:e5:3b:
2e:18:4e:35:fb:76:3a:6d:5e:f9:68:3f:60:7b:88:
d7:82:d5:ac:6b:cb:af:36:c2:90:eb:71:72:f4:3a:
07:24:7b:b6:aa:7b:70:2b:c9:96:7a:5d:d1:d0:2d:
a9:28:2b:0b:91:6e:7c:09:23:b5:73:70:ce:00:cd:
58:ad:5b:ec:1d:36:20:64:1a:89:e6:75:76:92:a8:
97:6f:14:17:50:4a:56:33:c9:86:1b:9e:e6:f9:99:
6a:e4:e1:4a:7a:20:ab:5b:1e:ca:c3:46:63:f9:29:
25:0a:b8:7b:d3:9b:10:24:ee:e6:34:04:f7:a3:c2:
e5:64:48:39:85:21:4a:a4:ee:fe:ce:10:79:7b:90:
56:5f:e3:e8:7a:fd:dd:96:a7:0c:2b:f2:7b:65:d2:
f9:b5:f0:f6:a1:ce:07:6d:87:96:8b:fa:9a:5d:21:
af:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:13:49:15:B5:ED:2F:0A:D7:28:04:DE:C0:0B:8A:96:A9:D6:7A:FF
X509v3 Authority Key Identifier:
keyid:2A:2E:18:5B:12:37:98:71:49:41:14:82:8D:5D:5D:71:39:82:E4:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A2E185B12379871494114828D5D5D713982E469.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:49:86:aa:8b:7b:61:d9:bb:bd:cb:c3:c1:2d:87:8f:1b:d5:
4f:a4:1d:6e:f1:55:bc:50:c6:e2:bb:7a:6a:06:d6:f3:00:3b:
53:74:fd:e3:7d:55:fa:ae:e6:1c:29:e8:36:00:d5:4a:c2:8e:
a8:e5:de:52:23:16:ad:43:ba:5a:90:7e:39:ab:8d:e5:c7:8f:
1c:20:df:d2:bf:be:5f:fa:48:1a:eb:24:4d:59:fb:20:dd:d1:
6c:14:4b:bb:0a:f3:fb:37:e9:3c:7f:d3:4b:8d:4e:cc:ab:dd:
53:7d:cd:c9:78:bb:1d:1b:43:8d:00:29:99:f1:71:3d:f9:ab:
e7:17:ee:8e:5a:99:2e:d5:fd:2d:97:54:a8:5d:e9:93:0b:ab:
37:6b:17:0a:3d:92:34:90:ca:0e:24:78:d0:5d:8b:35:52:11:
fe:5d:d2:e0:fb:b8:ad:0f:7c:72:e4:15:75:f1:a9:4f:aa:19:
7d:2b:72:54:a3:dc:84:f4:aa:46:52:3e:06:86:22:0e:5a:70:
9c:1a:9a:1d:89:e9:ed:d5:a5:bf:f6:91:ea:f9:7a:29:04:83:
cf:9c:8f:fe:34:00:40:d3:80:6e:97:a9:89:cf:7a:0f:77:74:
0a:6d:90:51:b9:9d:2b:7f:d2:da:4f:ee:47:4e:9e:57:58:4e:
18:11:e9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 12:03:20 2026 by rpki-client