This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft
File: 656A72A6F38230D6A0DB097480D736B5C2FBA683.mft (raw, json)
Hash identifier: r8b3wXiH6AhydIw4WYQqpBJnX8B0Ox69nq2frX1Q3es=
Subject key identifier: 4F:82:42:6A:E7:37:9D:1D:21:B0:27:80:9C:F7:D4:FC:81:74:74:25
Authority key identifier: 65:6A:72:A6:F3:82:30:D6:A0:DB:09:74:80:D7:36:B5:C2:FB:A6:83
Certificate issuer: /CN=656A72A6F38230D6A0DB097480D736B5C2FBA683
Certificate serial: 07D60CEA7EF72EC78E26505C36ADC3A68FB6234D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/656A72A6F38230D6A0DB097480D736B5C2FBA683.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft
Manifest number: 027D
Signing time: Mon 02 Feb 2026 02:42:32 +0000
Manifest this update: Mon 02 Feb 2026 02:37:32 +0000
Manifest next update: Thu 05 Feb 2026 10:32:32 +0000
Files and hashes: 1: 656A72A6F38230D6A0DB097480D736B5C2FBA683.crl (hash: IdK2jweDSoWAWQ5uknRJuJoVaShRR/lnAGBLYX6p9Us=)
2: 3130332e3138322e37322e302f32342d3234203d3e20313439343038.roa (hash: Tr9Xm455VVFwcMWVKgFVkQjW4pXUazCaoGIyqlMivog=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.crl
rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/656A72A6F38230D6A0DB097480D736B5C2FBA683.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:d6:0c:ea:7e:f7:2e:c7:8e:26:50:5c:36:ad:c3:a6:8f:b6:23:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656A72A6F38230D6A0DB097480D736B5C2FBA683
Validity
Not Before: Feb 2 02:37:32 2026 GMT
Not After : Feb 5 10:32:32 2026 GMT
Subject: CN=4F82426AE7379D1D21B027809CF7D4FC81747425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:61:2e:eb:f1:29:ab:bb:8c:97:ee:b4:5a:2a:
e6:4d:66:84:68:31:87:f5:55:ac:2f:b1:6a:0b:3e:
8a:a4:7f:cf:87:43:0f:31:1a:0e:c9:eb:6a:71:7e:
e3:be:f0:ee:3d:0d:b3:3f:b5:75:18:42:3f:24:cd:
3f:f2:b4:2b:53:c3:a6:fc:36:e6:68:50:95:2b:c6:
79:81:39:3d:d9:65:0e:87:0e:dd:ce:b9:35:f6:45:
73:6a:f6:47:0d:86:bb:2e:2b:6b:35:5e:17:11:c6:
a6:8e:ae:31:98:64:d4:94:f9:38:3e:dd:21:5b:87:
8b:5f:b0:da:e6:fb:6d:ef:15:1e:df:4d:b0:aa:82:
ed:09:c0:c5:94:1d:e4:d3:d9:2b:66:89:0f:b5:65:
a5:ff:d8:7a:3d:e9:76:ae:44:98:f2:19:b9:6b:3d:
cb:cb:41:ca:c6:22:18:a1:62:f8:31:dc:fe:11:df:
78:16:1f:6c:06:ba:53:2b:6a:91:d6:e7:66:bf:df:
94:98:0f:9d:8d:cf:6a:c4:37:41:ec:6a:5b:a6:13:
e9:97:3a:eb:a9:b9:74:cb:dc:ab:7d:c9:7b:59:10:
00:3b:41:31:d4:36:cc:46:c8:cf:f9:a5:20:13:1c:
ad:5a:42:bb:24:9b:cc:81:93:53:e3:5b:70:fb:b4:
a7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:82:42:6A:E7:37:9D:1D:21:B0:27:80:9C:F7:D4:FC:81:74:74:25
X509v3 Authority Key Identifier:
keyid:65:6A:72:A6:F3:82:30:D6:A0:DB:09:74:80:D7:36:B5:C2:FB:A6:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/656A72A6F38230D6A0DB097480D736B5C2FBA683.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:fa:9d:ea:91:ef:b1:31:ca:a0:43:cd:ff:fa:a9:16:ca:5f:
24:51:0f:fa:32:64:8f:b1:97:3d:de:58:6b:22:0e:88:b6:4a:
77:da:b4:59:c5:dd:07:25:f9:66:f1:31:74:f0:a0:f7:98:f1:
77:ed:e1:41:69:a3:9a:e4:61:6c:00:cb:fe:8e:4e:86:93:6c:
63:7a:a0:84:f2:ca:f1:81:d0:48:bc:7e:b8:ba:de:d9:74:3c:
54:c4:6c:65:03:cf:01:4c:3c:40:f0:0d:6c:68:54:42:11:2d:
87:96:4a:95:9a:92:e3:d8:de:a5:a5:f9:fd:ae:0d:63:16:5f:
b7:30:e4:40:a3:98:eb:aa:17:c1:cf:61:d9:62:87:43:a9:40:
bd:d6:39:a7:a5:f9:66:ad:74:e0:46:ae:7d:d1:cf:0a:c9:23:
08:d9:a1:05:9e:43:be:a6:64:b1:24:20:fb:bf:b4:3a:8b:19:
9a:30:d9:23:79:46:c3:28:b8:9e:a6:f6:62:d1:36:99:6c:f7:
dd:01:51:70:ed:7b:ca:28:d1:a3:e3:59:ff:b6:5b:c4:67:ff:
e3:c6:96:17:41:b8:32:3a:d5:26:33:81:c0:02:7b:13:cb:2e:
d3:0e:b9:1e:ba:fa:a4:a3:01:54:3b:23:16:ae:44:46:46:ec:
81:13:4a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:02:20 2026 by rpki-client