This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
File: 2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft (raw, json)
Hash identifier: M8h2Yxng0hkpq+d6ZY0sJ9Tk6xvDnwu06Rp3VzXcWAk=
Subject key identifier: 3E:81:B9:1D:A3:1B:9E:77:C8:05:33:47:C7:B2:8A:DD:A3:BB:E9:A5
Authority key identifier: 2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9
Certificate issuer: /CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
Certificate serial: 5B1EACBE29BF05FF8321E58FA70EE1F8B709A023
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
Manifest number: 0545
Signing time: Sun 01 Feb 2026 15:51:57 +0000
Manifest this update: Sun 01 Feb 2026 15:46:57 +0000
Manifest next update: Wed 04 Feb 2026 21:37:57 +0000
Files and hashes: 1: 3138302e3231342e3234302e302f32342d3234203d3e203338313530.roa (hash: 3hpRgS72xqbHw/rzHvrZvr06sNkUSk2YClN/PS2G8VY=)
2: 3138302e3231342e3234312e302f32342d3234203d3e203338313530.roa (hash: bu8PQupPQERGQ/wzLVVe3ZYhIOmwELfx937WvLW0lzc=)
3: 3230322e39312e31322e302f32342d3234203d3e203338313530.roa (hash: M1sZzZsXerpK67gBWx+pwUlEiAdZNEC8sdxke6ageOg=)
4: 3138302e3231342e3234342e302f32342d3234203d3e203338313530.roa (hash: t73bJSev/MnTBxda4w51EgtY3s6q8wQKW/7viVMLk2M=)
5: 3230322e39312e31312e302f32342d3234203d3e203338313530.roa (hash: GOw6BJn4XT5wEmOGVeX/6A1aWsswmeb6q3J3zFZr2JM=)
6: 3230322e39312e382e302f32342d3234203d3e203338313530.roa (hash: Ge6toEI3GzH1rudvQNuKe4sTOqkKcImFzmaL0fB9K2A=)
7: 323430323a663038303a313a3a2f34382d3438203d3e203338313530.roa (hash: l7IvhWfbT+lx2dajFWFQHmgoo+JryhgkVz+DjITDf5w=)
8: 3138302e3231342e3234392e302f32342d3234203d3e203338313530.roa (hash: ktBqyZQvnsVWZJg0o8QMMym54n+sUY8BtLk1pA6WS3M=)
9: 323430323a663038303a333a3a2f34382d3438203d3e203338313530.roa (hash: oVmfGlTp0DWOtWPGyWCK/51mm8QlFMAOkDDm7W0JfnE=)
10: 2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl (hash: tGbauWmQhfENAzf9i1YiCddjQxH4yhJI1zT5K0eb38c=)
11: 3138302e3231342e3235322e302f32342d3234203d3e203338313530.roa (hash: oOJaEiRPwPQflN2dss15Y4scB4IK0srdXT4sQ+7Afow=)
12: 3138302e3231342e3234332e302f32342d3234203d3e203338313530.roa (hash: akxHC8MKM3EFjHhlpdlYP+/pk7TEX/1Nsq+20Bs3aRk=)
13: 3230322e39312e31332e302f32342d3234203d3e203338313530.roa (hash: Pm3ejHe0iKXyhk2uLd7JZnNwWHWfKfQSqqt4OykxpQA=)
14: 3138302e3231342e3234362e302f32342d3234203d3e203338313530.roa (hash: euoMpvL4eG72VF7oEqlEoSVWhRjwaeq3y0huB9mjd6w=)
15: 3138302e3231342e3235332e302f32342d3234203d3e203338313530.roa (hash: vVu41fldo66s3GTiO3p70Y9WjrS6PJn4ErhvMTYrL+0=)
16: 3138302e3231342e3234352e302f32342d3234203d3e203338313530.roa (hash: impujDOUoN2BKQyTyiVBUJjqkOdpqC1eOXOcnJD1Ge8=)
17: 323430323a663038303a623a3a2f34382d3438203d3e203338313530.roa (hash: Rjbhv9edaboHxu8zehTXAVaGiJWP5SEtMWZfSRiWBmE=)
18: 3230322e39312e31352e302f32342d3234203d3e203338313530.roa (hash: sTkMNKXQHwGJCIGPBjMVfmb030wQu4FTAnEhwXDkkhA=)
19: 3138302e3231342e3234322e302f32342d3234203d3e203338313530.roa (hash: b1d2IpMrPiIjBD6MTNOx5pdXixsLXZonVO5D5NGCeqQ=)
20: 3138302e3231342e3235352e302f32342d3234203d3e203338313530.roa (hash: 9DRtavO7TXPRRO9r4nJOU2l6z0jZDLCjiuHMpKPIfJU=)
21: 3230322e39312e31342e302f32342d3234203d3e203338313530.roa (hash: afV3DuPWJs229SMBfZ6L1zzWwdYeqEIzLl+zAnPOPc8=)
22: 3138302e3231342e3235342e302f32342d3234203d3e203338313530.roa (hash: qU/iCVYcrH5NwRFFUnpTANC1C4dNa/LYJXSxq8pN8yQ=)
23: 3138302e3231342e3234382e302f32342d3234203d3e203338313530.roa (hash: O4758ltnaCnZlk7IYIR3KUuRIpNS2S4KZ7yVd+rr0y0=)
24: 3138302e3231342e3234372e302f32342d3234203d3e203338313530.roa (hash: 7CnLEJTxSmV5XmK1oL/nqrOB4/valIkxzWgpmSqfSL0=)
25: 323430323a663038303a633a3a2f34382d3438203d3e203338313530.roa (hash: 2I4LUvDndEY+56Z45Zke7IZg+TWoP7vGoCnv2WeX4qA=)
26: 323430323a663038303a613a3a2f34382d3438203d3e203338313530.roa (hash: DnA9pVTlc5t5JUQmGO4bpvoQrAWbOAtoPuSdy5Z19iI=)
27: 323430323a663038303a323a3a2f34382d3438203d3e203338313530.roa (hash: nbkYpz+Buhh+XcMqkAbLahjlkTuDcneq98AvbJE0oqQ=)
28: 323430323a663038303a3a2f34382d3438203d3e203338313530.roa (hash: SpSJ2mlMQ8WdpZZy+WtaRGJCKRn7SkirsoH4mwvq2iA=)
29: 3230322e39312e31302e302f32342d3234203d3e203338313530.roa (hash: iEwos51aWtJInprKu1evUCiZY2FYY6kr/E794RVuLRw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl
rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 21:37:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:1e:ac:be:29:bf:05:ff:83:21:e5:8f:a7:0e:e1:f8:b7:09:a0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
Validity
Not Before: Feb 1 15:46:57 2026 GMT
Not After : Feb 4 21:37:57 2026 GMT
Subject: CN=3E81B91DA31B9E77C8053347C7B28ADDA3BBE9A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:14:7d:23:c4:70:ed:92:9f:4d:8d:09:27:6c:
1c:d5:eb:1b:dc:ed:bd:0a:16:c2:df:4b:94:d7:8c:
bd:c9:d8:47:c5:6e:9b:24:17:5a:70:bd:f3:79:10:
e9:71:e4:ff:49:ae:70:1a:09:2a:37:ee:60:bf:22:
09:8a:9f:98:3c:97:ed:44:92:c9:be:86:f7:43:93:
4b:8d:b4:03:c7:98:e8:91:d9:0a:92:af:22:0f:5e:
a0:c9:5c:20:01:dd:8b:63:20:0e:c3:6f:99:7a:14:
c0:7f:27:6d:5b:4c:fa:40:80:76:76:bf:fc:1a:84:
66:38:84:62:f9:e2:87:be:3c:7c:fb:80:5f:27:33:
a4:00:4c:2a:4d:43:8e:e5:e7:d6:f5:2d:e5:b8:87:
b3:92:2e:0e:be:f9:55:87:1b:1f:19:8f:13:d1:e7:
88:08:83:90:94:23:88:54:87:8a:e4:23:07:47:b4:
e4:32:aa:14:2b:82:71:0c:84:2b:f8:53:e1:83:66:
e4:ac:aa:e0:c9:ab:6f:11:49:45:2d:58:d1:60:bc:
5f:0d:63:30:9a:c9:4f:94:37:36:b1:a1:6c:98:98:
c8:9e:f8:01:b1:74:71:40:85:f9:6b:a6:7f:ad:37:
2a:f6:90:8f:64:e8:ab:23:78:e9:d5:b2:5c:28:7c:
d2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:81:B9:1D:A3:1B:9E:77:C8:05:33:47:C7:B2:8A:DD:A3:BB:E9:A5
X509v3 Authority Key Identifier:
keyid:2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:60:58:cd:3e:20:b7:fe:fb:7b:8d:c3:a1:28:4c:17:6e:0e:
8d:f9:64:08:28:e7:c9:23:e8:de:fa:13:92:5b:c6:4e:8c:57:
fc:cb:a2:36:88:4c:9b:1c:fc:8a:2f:73:b8:7b:d2:00:d2:e8:
eb:82:18:17:98:86:75:41:a4:78:25:e3:02:5d:11:83:1e:36:
13:92:1e:bc:6a:c7:5a:dd:ea:a2:64:97:b2:12:f6:c9:f1:9f:
ff:46:d0:ee:2d:6b:f3:58:ea:0c:9f:77:61:00:5b:1f:ea:cc:
aa:8c:ce:a8:c6:f5:50:d1:97:c8:8b:52:83:82:87:9f:d2:96:
55:0e:24:ca:f2:3b:8e:66:94:2a:33:ac:5e:75:8a:24:b9:71:
43:8c:a6:80:a8:7e:60:db:24:9f:c5:7a:85:27:6b:22:df:52:
7c:84:f6:72:e9:40:18:74:39:ad:03:97:f5:f6:c5:e5:93:a1:
52:35:29:f9:0b:35:d6:19:22:de:ac:62:bd:f3:61:3a:e0:a1:
a1:38:2d:3c:25:00:4c:1b:e1:ba:59:2b:bf:64:39:6f:25:84:
a8:b4:34:0c:93:12:07:cd:c2:c2:37:6e:d7:d5:a6:fb:6c:27:
ca:50:c1:64:3a:24:a0:fc:60:7f:42:6e:42:d3:70:e0:0f:00:
0e:fd:61:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:53:54 2026 by rpki-client