This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.mft
File: 032056FFABA06741112BA404900B315C87E35361.mft (raw, json)
Hash identifier: hxx76CtPl5CMxo7HzbtjNgoma0hIqrWckYcpnA2jbLQ=
Subject key identifier: 32:9E:06:C0:D6:F7:65:D5:C4:2B:09:40:E7:D2:0F:AD:15:0F:C8:7C
Authority key identifier: 03:20:56:FF:AB:A0:67:41:11:2B:A4:04:90:0B:31:5C:87:E3:53:61
Certificate issuer: /CN=032056FFABA06741112BA404900B315C87E35361
Certificate serial: 2037642CFE567559AE71E82A5EB2C69253C5CB9F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032056FFABA06741112BA404900B315C87E35361.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.mft
Manifest number: 04D3
Signing time: Sun 01 Feb 2026 04:51:49 +0000
Manifest this update: Sun 01 Feb 2026 04:46:49 +0000
Manifest next update: Wed 04 Feb 2026 12:30:49 +0000
Files and hashes: 1: 3130332e3136302e3137382e302f32332d3233203d3e20313431353932.roa (hash: QK6CN8VP70JNYDKvwc0+OXdvb1mIgOWz+j/nYm9EjQI=)
2: 3130332e3136302e3137392e302f32342d3234203d3e20313431353932.roa (hash: XpUtFFHKDImDXUc3xuhie6Np6VSuqCdJLLAEZLptbEU=)
3: 3130332e3136302e3137382e302f32342d3234203d3e20313431353932.roa (hash: 070ri83xExMdKtEdfjzfBz11cSdoZunm6w/qFgRzS8c=)
4: 032056FFABA06741112BA404900B315C87E35361.crl (hash: SjrFLMi5JLaLbAtfaOkCicSmHXnOCOFJ1olSWI0vLls=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.crl
rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032056FFABA06741112BA404900B315C87E35361.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 12:30:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:37:64:2c:fe:56:75:59:ae:71:e8:2a:5e:b2:c6:92:53:c5:cb:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032056FFABA06741112BA404900B315C87E35361
Validity
Not Before: Feb 1 04:46:49 2026 GMT
Not After : Feb 4 12:30:49 2026 GMT
Subject: CN=329E06C0D6F765D5C42B0940E7D20FAD150FC87C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:8a:eb:c7:2b:5c:1d:50:df:92:4f:c0:db:d4:
e1:9e:5a:0e:49:fa:0b:e0:3f:1c:66:4d:7d:56:50:
88:63:9d:37:14:e5:26:b2:e2:48:47:9f:47:f0:1a:
88:82:e9:f3:7a:c2:0c:e4:1c:07:f1:85:ea:f5:86:
1b:af:05:ef:9d:01:48:22:85:c8:56:b9:c3:5d:d6:
ea:ba:f6:ce:45:8d:23:28:25:8a:e8:4c:02:25:0f:
50:17:73:52:e3:6e:d5:0a:d7:e6:e9:8a:63:9b:c5:
eb:3e:9b:91:e0:91:8e:c3:e9:5c:09:95:a8:59:66:
a5:c5:c2:5b:43:34:f9:00:f1:1c:96:cb:84:37:66:
4b:2d:51:27:38:a4:ae:e0:fe:87:ce:2a:f8:19:b7:
69:20:74:dc:ae:1a:d2:d9:47:10:6d:24:5c:a7:99:
43:25:60:63:bb:eb:51:2a:45:5f:51:0d:72:1f:fb:
b8:60:14:05:e0:22:24:62:fb:27:2d:f9:cd:c1:49:
a7:34:b1:d2:43:cc:4f:4a:aa:94:ec:9d:d0:9a:71:
28:70:eb:8a:53:07:ad:a2:d9:90:09:87:25:b2:cc:
48:b6:3f:43:11:0c:82:b4:61:5c:07:f9:13:e4:d1:
f1:f8:fc:ec:3e:e9:76:a0:1f:a5:40:d8:6e:20:16:
99:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9E:06:C0:D6:F7:65:D5:C4:2B:09:40:E7:D2:0F:AD:15:0F:C8:7C
X509v3 Authority Key Identifier:
keyid:03:20:56:FF:AB:A0:67:41:11:2B:A4:04:90:0B:31:5C:87:E3:53:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032056FFABA06741112BA404900B315C87E35361.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:4e:51:75:d5:ac:86:ae:42:e7:2c:ff:e2:bc:76:a4:64:e6:
90:70:54:19:2c:98:f4:74:db:73:4e:e4:9f:7b:25:90:69:0e:
ed:b7:6f:78:d0:00:7d:20:4f:fc:9e:f0:53:70:29:35:fc:07:
0e:5c:20:1a:40:23:b7:40:59:14:d3:be:33:54:ad:6a:1e:8b:
e3:97:44:19:2a:28:08:74:dc:e9:09:f6:f4:53:25:96:1e:75:
14:00:6f:e4:a6:e7:64:09:65:80:72:e3:06:81:14:c8:cd:0e:
0b:64:8a:0c:8a:cf:5b:5d:5b:ef:29:0b:6f:e6:d3:aa:2f:c5:
51:a5:4b:4b:6a:2c:04:75:7a:2b:b6:33:ef:0c:58:fc:48:cb:
33:ca:bd:8c:cb:01:29:1e:a2:5c:7e:9a:d5:cf:cf:46:46:9f:
a7:1e:76:1d:e8:33:ee:80:71:15:c5:98:65:a3:7d:27:cb:77:
6a:82:51:d6:91:b7:ed:0b:bb:8b:86:c1:01:db:d8:06:57:d7:
0a:b2:ac:ba:53:91:59:82:4a:1a:1e:11:27:14:5a:4d:91:b9:
ab:ff:56:75:b7:2e:50:2c:fd:97:ec:55:97:5a:69:72:f9:90:
ec:ff:82:57:5d:72:00:bb:e6:a1:1a:08:df:e7:34:96:b6:fc:
f2:8c:c7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:06:09 2026 by rpki-client