This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.mft
File: 1B42B2BB5674F23468744614CDF9B0B00D510190.mft (raw, json)
Hash identifier: 6F2vl21s8DJzFLC/b7crazmZ++xhTAJNNLfa42sYVIg=
Subject key identifier: D7:FE:60:C4:69:63:A8:85:19:E7:3F:A1:A5:2C:38:58:03:79:FB:38
Authority key identifier: 1B:42:B2:BB:56:74:F2:34:68:74:46:14:CD:F9:B0:B0:0D:51:01:90
Certificate issuer: /CN=1B42B2BB5674F23468744614CDF9B0B00D510190
Certificate serial: 6B4CE7D708CC9F77D6BBADDBDD596705E5169733
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B42B2BB5674F23468744614CDF9B0B00D510190.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.mft
Manifest number: 0210
Signing time: Sat 31 Jan 2026 16:22:08 +0000
Manifest this update: Sat 31 Jan 2026 16:17:08 +0000
Manifest next update: Wed 04 Feb 2026 00:51:08 +0000
Files and hashes: 1: 1B42B2BB5674F23468744614CDF9B0B00D510190.crl (hash: NQlCFoLRoBGtrvp66I6HEtH8VXN/Un6rRPg2M9vMGWc=)
2: 3130332e31392e3135372e302f32342d3234203d3e20313530323334.roa (hash: Czzvj4vJQSB2KKayEoKqCf4S1sGvCeEbVuyOD7N/uO0=)
3: 3130332e31392e3135362e302f32342d3234203d3e20313530323334.roa (hash: 7jDOzKEybqHgosjfCyx4hqCz0tcDh6a5dAdb4UBUTOc=)
4: 3130332e31392e3135362e302f32332d3233203d3e20313530323334.roa (hash: oFFK8blgpeKf9LD5SV2KXd2JEMT+aIlFev67ub7lEjE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.crl
rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B42B2BB5674F23468744614CDF9B0B00D510190.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 00:51:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:4c:e7:d7:08:cc:9f:77:d6:bb:ad:db:dd:59:67:05:e5:16:97:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B42B2BB5674F23468744614CDF9B0B00D510190
Validity
Not Before: Jan 31 16:17:08 2026 GMT
Not After : Feb 4 00:51:08 2026 GMT
Subject: CN=D7FE60C46963A88519E73FA1A52C38580379FB38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:84:8b:68:96:1a:c1:07:54:39:d2:26:71:09:
75:c1:c1:e8:b0:8d:4e:9a:4b:56:79:6b:73:d8:ce:
36:c7:fb:80:dd:c6:d4:2e:8e:7b:b6:21:42:a7:b7:
3e:dc:3f:a2:10:23:49:d5:ab:a5:b1:02:f1:b1:76:
69:5a:11:80:24:97:db:96:57:29:58:0c:9b:1a:04:
fa:9d:fc:15:70:a9:98:1a:2b:4f:e3:40:00:b5:c3:
a8:e2:73:d9:88:7c:cc:5e:b2:57:a9:fe:8c:6a:79:
64:bf:c5:ab:0a:1b:9f:6f:2a:fb:cb:a8:b9:13:ed:
36:ac:28:28:f6:28:00:e2:f9:96:9b:45:9f:be:c4:
1e:0e:89:f2:e2:e1:08:e2:b7:43:9f:5c:2c:c1:ea:
50:81:79:7d:4d:50:89:a8:31:81:60:66:53:37:99:
99:75:e2:f1:e3:0b:94:5c:99:8f:9f:87:e5:18:33:
8a:0d:88:b3:0e:48:63:a4:2f:90:20:44:26:e6:ad:
f0:b1:e7:27:f5:14:f7:71:05:1a:4b:84:7f:23:3a:
7a:ee:37:d3:ba:32:f3:04:33:fa:b9:a6:75:d9:fd:
39:55:69:a1:19:93:1f:55:2f:31:77:c0:0d:f1:76:
6f:6d:01:39:71:17:0c:00:48:f8:a3:54:24:ec:d4:
69:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:FE:60:C4:69:63:A8:85:19:E7:3F:A1:A5:2C:38:58:03:79:FB:38
X509v3 Authority Key Identifier:
keyid:1B:42:B2:BB:56:74:F2:34:68:74:46:14:CD:F9:B0:B0:0D:51:01:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B42B2BB5674F23468744614CDF9B0B00D510190.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:bc:c9:20:1c:37:8a:63:a9:f4:c4:ab:73:cd:c5:4f:fb:52:
90:e1:f9:c5:87:4c:19:67:11:a8:70:44:e7:a6:0c:fa:0e:0d:
e5:63:76:54:65:ec:be:12:9b:0b:68:2a:8d:a6:01:41:53:4d:
f4:2c:88:c2:09:e7:46:dc:87:73:17:7a:95:af:ed:23:6d:66:
99:83:39:c7:5e:07:24:60:5b:d6:f0:0a:ea:26:f2:42:25:ed:
bd:7d:ca:4e:20:22:d8:83:96:ba:92:93:d8:da:2b:24:dd:68:
be:4d:11:3f:0e:9c:ed:52:9a:24:b5:28:60:28:a7:86:37:ea:
1b:32:87:43:75:a8:ba:e1:50:19:35:57:33:c1:be:ea:44:b9:
df:d5:13:32:fc:5f:c5:13:89:0a:34:c4:92:0b:2e:99:14:d4:
21:98:83:48:76:6e:27:a9:98:7f:44:bd:84:8a:ca:68:52:b7:
9d:68:20:6a:40:56:b5:a4:9a:f2:16:fb:2f:56:60:82:2a:f0:
a0:15:3f:61:3e:a7:5d:24:7d:1e:c4:95:83:94:77:d9:b8:cb:
f3:a6:3b:c6:2d:55:93:16:f3:14:28:aa:8b:8f:2a:8e:05:0a:
f9:1f:78:de:b6:1e:4f:c0:01:52:8f:fa:7f:d2:28:f2:22:b2:
0e:ce:a2:7c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUa0zn1wjMn3fWu63b3VlnBeUWlzMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUI0MkIyQkI1Njc0RjIzNDY4NzQ0NjE0Q0RGOUIwQjAw
RDUxMDE5MDAeFw0yNjAxMzExNjE3MDhaFw0yNjAyMDQwMDUxMDhaMDMxMTAvBgNV
BAMTKEQ3RkU2MEM0Njk2M0E4ODUxOUU3M0ZBMUE1MkMzODU4MDM3OUZCMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvhItolhrBB1Q50iZxCXXBweiw
jU6aS1Z5a3PYzjbH+4DdxtQujnu2IUKntz7cP6IQI0nVq6WxAvGxdmlaEYAkl9uW
VylYDJsaBPqd/BVwqZgaK0/jQAC1w6jic9mIfMxeslep/oxqeWS/xasKG59vKvvL
qLkT7TasKCj2KADi+ZabRZ++xB4OifLi4Qjit0OfXCzB6lCBeX1NUImoMYFgZlM3
mZl14vHjC5RcmY+fh+UYM4oNiLMOSGOkL5AgRCbmrfCx5yf1FPdxBRpLhH8jOnru
N9O6MvMEM/q5pnXZ/TlVaaEZkx9VLzF3wA3xdm9tATlxFwwASPijVCTs1GmXAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU1/5gxGljqIUZ5z+hpSw4WAN5+zgwHwYDVR0j
BBgwFoAUG0Kyu1Z08jRodEYUzfmwsA1RAZAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
MTQ0MjUyYi1kMzBlLTRiZGMtODMyZi1iMzhiMDVjN2EwMzUvMC8xQjQyQjJCQjU2
NzRGMjM0Njg3NDQ2MTRDREY5QjBCMDBENTEwMTkwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMUI0MkIyQkI1Njc0RjIzNDY4NzQ0NjE0Q0RGOUIwQjAwRDUx
MDE5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjE0NDI1MmItZDMwZS00YmRjLTgz
MmYtYjM4YjA1YzdhMDM1LzAvMUI0MkIyQkI1Njc0RjIzNDY4NzQ0NjE0Q0RGOUIw
QjAwRDUxMDE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFy8ySAcN4pjqfTEq3PNxU/7UpDh+cWHTBln
EahwROemDPoODeVjdlRl7L4SmwtoKo2mAUFTTfQsiMIJ50bch3MXepWv7SNtZpmD
OcdeByRgW9bwCuom8kIl7b19yk4gItiDlrqSk9jaKyTdaL5NET8OnO1SmiS1KGAo
p4Y36hsyh0N1qLrhUBk1VzPBvupEud/VEzL8X8UTiQo0xJILLpkU1CGYg0h2biep
mH9EvYSKymhSt51oIGpAVrWkmvIW+y9WYIIq8KAVP2E+p10kfR7ElYOUd9m4y/Om
O8YtVZMW8xQoqouPKo4FCvkfeN62Hk/AAVKP+n/SKPIisg7Oonw=
-----END CERTIFICATE-----
Generated at Mon Feb 2 10:04:18 2026 by rpki-client