This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft
File: A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft (raw, json)
Hash identifier: Rq8uAdS9MyNPotkxTdyzcLQaofDQTqV5znkVWt4LKyY=
Subject key identifier: 7A:24:46:6E:E7:2A:49:B4:1F:D0:7B:95:CA:5D:B1:43:54:8A:D9:B4
Authority key identifier: A3:98:FB:DF:35:77:90:C7:DC:67:C6:D9:2A:15:A3:D4:61:75:58:A6
Certificate issuer: /CN=A398FBDF357790C7DC67C6D92A15A3D4617558A6
Certificate serial: 2E1E6D5095B5F1D15F38B0F5B1598C63BF3A64
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft
Manifest number: 03B2
Signing time: Sun 01 Feb 2026 00:20:01 +0000
Manifest this update: Sun 01 Feb 2026 00:15:01 +0000
Manifest next update: Wed 04 Feb 2026 10:09:01 +0000
Files and hashes: 1: A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl (hash: rg4DruqNdK/l8FQz7YAzH0uUWSf8aa4bKKBuQZjS6l8=)
2: 3130332e3135382e3136322e302f32342d3234203d3e203137393935.roa (hash: uQ2lNYFZctQjtseGT/wzHT4giq7wlDo/uVXWwYPTnAY=)
3: 3130332e3135382e3136322e302f32332d3233203d3e203137393935.roa (hash: HtvdbgNzbep41tsSwxpJVENDrPCo93IVN9YGCXSL+Js=)
4: 3130332e3135382e3136332e302f32342d3234203d3e203137393935.roa (hash: 4RAEHcKydfbmdG7JZ2oBClEPFrTNelxiK32dkCNM718=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl
rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 10:09:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:1e:6d:50:95:b5:f1:d1:5f:38:b0:f5:b1:59:8c:63:bf:3a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A398FBDF357790C7DC67C6D92A15A3D4617558A6
Validity
Not Before: Feb 1 00:15:01 2026 GMT
Not After : Feb 4 10:09:01 2026 GMT
Subject: CN=7A24466EE72A49B41FD07B95CA5DB143548AD9B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b5:ef:e0:c5:26:fa:96:6b:15:94:a5:09:07:
93:cf:bf:85:8c:2e:fa:c7:c7:34:51:34:29:61:b9:
78:7c:96:4a:83:a3:25:7b:b6:17:1e:e9:9a:c2:00:
03:40:7f:20:ef:2b:09:f7:34:c7:e2:b6:aa:34:aa:
d8:b3:61:1a:90:98:46:29:4e:8c:c6:f9:41:6b:0c:
30:61:23:0b:ba:8d:59:b9:4c:9c:af:88:33:1c:e3:
aa:a5:f6:37:cb:cb:e1:30:d3:3f:65:c6:79:83:ca:
6c:c2:90:23:e7:8a:54:4c:59:db:42:ab:2e:36:b0:
20:82:34:05:a3:6a:7f:de:67:99:6e:5e:2a:9f:a3:
94:16:1e:aa:fd:66:3f:d5:fc:1a:dc:7c:c7:a1:57:
fe:c7:72:0a:5a:90:42:44:bd:f6:86:3f:f9:22:e0:
d2:05:2c:e9:b4:fd:ae:18:11:ee:e3:c5:06:4c:d9:
3c:b9:8d:9a:76:c2:c1:51:c6:4d:63:47:2e:5a:fb:
80:51:80:6d:2c:64:67:7d:9a:e9:43:68:ea:45:b4:
d2:52:7a:5b:f7:4e:b9:2e:04:3a:fc:2b:cc:90:6a:
1b:a6:e7:d8:bc:d3:8f:53:ed:e4:7c:02:e2:28:e3:
ee:aa:b9:32:1f:85:07:de:23:0b:96:7d:3e:0c:05:
a0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:24:46:6E:E7:2A:49:B4:1F:D0:7B:95:CA:5D:B1:43:54:8A:D9:B4
X509v3 Authority Key Identifier:
keyid:A3:98:FB:DF:35:77:90:C7:DC:67:C6:D9:2A:15:A3:D4:61:75:58:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:24:25:dd:91:77:ae:8e:d2:8d:79:a4:90:fa:dc:97:91:fa:
f7:4e:65:7b:cb:71:0a:d1:82:4c:48:07:96:5e:d4:a8:fe:5b:
9f:31:de:13:ae:f8:63:1e:9e:62:c9:33:c5:f1:ff:83:27:c1:
76:d2:b8:77:21:c7:03:ae:ed:1a:77:71:83:87:46:36:f4:01:
e6:45:a2:e0:2b:a4:ff:1d:ba:39:81:73:68:21:f7:a7:5a:77:
87:48:95:4d:ca:4b:57:e9:67:80:6e:12:ba:ac:4a:d5:fa:4f:
de:5a:cf:67:9e:75:53:c6:c4:f9:9b:dd:d5:f7:ae:dc:5e:b7:
88:b2:5f:ab:c0:27:f4:ab:54:96:09:6d:24:3b:a2:c7:54:de:
6a:2d:90:5f:fd:e5:37:63:ff:a0:20:7c:19:99:af:f7:70:84:
30:78:f7:6a:19:87:46:a2:98:5c:08:8b:3b:f9:c4:17:ff:e5:
a5:f8:47:92:a6:42:ee:4f:91:4f:80:f8:f9:3e:a1:d8:00:0b:
51:37:56:42:93:76:6f:9a:7a:05:2c:8f:ab:c9:ba:a3:df:18:
f7:03:4b:a7:55:a0:53:37:cf:bd:65:03:c5:7b:5e:b3:6a:d3:
74:34:47:35:f0:74:ee:26:7e:b1:3b:4f:c1:77:18:d2:2e:5d:
c2:84:45:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:51:08 2026 by rpki-client