This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.mft
File: 39B4AA9B3C7F780261DC490658E62BE86B85FF3A.mft (raw, json)
Hash identifier: PzbkHKAhlImhsWObRIXZUk9iDvkbLsp75TkiLenhwQ8=
Subject key identifier: FC:A6:5D:C6:45:EA:5B:60:47:DD:E8:AA:7C:CC:E6:29:67:E6:A3:BA
Authority key identifier: 39:B4:AA:9B:3C:7F:78:02:61:DC:49:06:58:E6:2B:E8:6B:85:FF:3A
Certificate issuer: /CN=39B4AA9B3C7F780261DC490658E62BE86B85FF3A
Certificate serial: 244CA8FE1C7A7A60A9D27CD008D8DA23327CE234
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.mft
Manifest number: 11
Signing time: Sun 01 Feb 2026 20:00:41 +0000
Manifest this update: Sun 01 Feb 2026 19:55:41 +0000
Manifest next update: Thu 05 Feb 2026 07:29:41 +0000
Files and hashes: 1: 323430353a326434303a35343a3a2f34382d3438203d3e203535363935.roa (hash: FnkUHZBrG989K95SzJmPZ3VlJE7bRu6MxYgvfXPwI1I=)
2: 323430353a326434303a36343a3a2f34382d3438203d3e203535363935.roa (hash: w6Pa9H6dXhB2Rk0qIagT2ApTDekMkBQRHE2JtUHHFYM=)
3: 3131372e3130332e36342e302f32332d3234203d3e203535363935.roa (hash: KyBKzIQsEpd0PgxrEi5EeRSnZ5mxNIfKVnq+jHAVmuQ=)
4: 323430353a326434303a36353a3a2f34382d3438203d3e203535363935.roa (hash: xhA/2CTOIWfVDpHM1NkVlpPmJHY6UZcMtq24fqHi4DE=)
5: 323430353a326434303a35353a3a2f34382d3438203d3e203535363935.roa (hash: rPxNyJ1z70O0nMqBth9k9AL54wxNqFDgED4SxkwBthU=)
6: 323430353a326434303a39333a3a2f34382d3438203d3e203535363935.roa (hash: pk+TPwqQgroDMciGoscp5z8cID/jM70gaJIC3nV7COg=)
7: 3130332e32352e35342e302f32332d3234203d3e203535363935.roa (hash: 71yRknNPky7gIICGHwyWcufvVOlV/QSbdNUKr/ErIcc=)
8: 3230322e302e39322e302f32332d3234203d3e203535363935.roa (hash: MqAwWrLiifg0NVQLvNMyPUe2lZOdrumhHENCKuLcOOQ=)
9: 323430353a326434303a3a2f33322d3332203d3e203535363935.roa (hash: gxDcNPkVDSFdZ41agLUQg+G8pCeb+5J4nXDU0DZLJ2Q=)
10: 39B4AA9B3C7F780261DC490658E62BE86B85FF3A.crl (hash: SDkTGsYzOBGQprrh13AV96dq9RvhkAitGd5g8M5/lsU=)
11: 323430353a326434303a39323a3a2f34382d3438203d3e203535363935.roa (hash: e44E7s4PRD9CCUk2jY7ZZ7l5t8KM/OqUwkHUrfkkOcg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.crl
rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:4c:a8:fe:1c:7a:7a:60:a9:d2:7c:d0:08:d8:da:23:32:7c:e2:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39B4AA9B3C7F780261DC490658E62BE86B85FF3A
Validity
Not Before: Feb 1 19:55:41 2026 GMT
Not After : Feb 5 07:29:41 2026 GMT
Subject: CN=FCA65DC645EA5B6047DDE8AA7CCCE62967E6A3BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:61:74:b2:91:a6:7c:12:1b:96:60:d9:9e:ff:
1b:a5:51:c7:de:eb:e1:cf:73:8d:da:d6:82:76:c2:
2c:2f:27:fe:21:0e:5c:16:a0:69:44:14:72:c9:32:
14:a6:d1:c3:d8:58:fb:43:52:ed:4b:60:4b:a8:5b:
ed:ba:3f:08:39:1b:51:28:d9:13:e7:f9:2b:7c:1b:
77:6c:ad:3b:aa:63:03:b6:e6:ef:9b:98:70:89:72:
f6:95:89:89:49:15:0e:b0:af:17:d7:15:2b:c4:31:
2d:fd:6a:f1:e4:70:a4:8d:2c:dc:8b:98:e6:3d:32:
f8:87:89:f9:30:29:2c:90:df:7d:10:f0:29:e9:9b:
7f:58:e4:f5:33:eb:14:b4:d7:9f:33:0a:08:b3:23:
43:9c:c0:92:a2:44:c6:87:ec:84:d8:8e:95:79:a4:
ca:16:74:ac:27:a8:32:57:dc:3e:2c:8b:0b:77:cd:
8d:f8:d8:5b:bc:5c:68:11:d7:48:ec:92:47:cb:40:
c8:13:0e:ca:66:d0:1d:89:7a:b4:63:7e:5a:16:af:
69:2c:2e:9b:44:b6:e8:6f:c3:e6:2e:ec:6e:03:90:
95:49:ed:e4:bf:0b:63:70:90:d2:e5:bc:8e:da:8f:
7b:06:ff:ab:da:e5:0e:9b:77:57:9e:e9:2c:aa:1e:
82:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A6:5D:C6:45:EA:5B:60:47:DD:E8:AA:7C:CC:E6:29:67:E6:A3:BA
X509v3 Authority Key Identifier:
keyid:39:B4:AA:9B:3C:7F:78:02:61:DC:49:06:58:E6:2B:E8:6B:85:FF:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:44:e8:39:3c:d8:2b:5e:72:b5:6b:c8:7e:67:99:31:87:c3:
57:cc:f5:35:ba:8e:9d:c6:bd:8f:49:11:e0:13:cd:bf:aa:02:
15:eb:92:80:df:bc:62:37:1c:22:8f:36:61:f9:d2:ec:b3:c3:
70:19:b8:83:3e:22:cb:f2:a5:78:30:a3:e7:00:52:ab:3f:b3:
5a:27:01:3a:30:94:6b:94:e0:a7:d8:28:04:5a:00:24:1d:6a:
70:a7:62:d0:b1:80:13:23:81:ca:dd:bf:1a:fc:b9:b7:5e:c6:
2f:61:b7:7f:6a:76:fb:6a:3a:8e:53:93:89:23:3e:16:90:74:
4f:99:c2:da:66:a5:06:19:b2:0a:0e:37:cc:6b:af:7b:74:53:
66:1e:2f:e0:5a:b9:b3:3b:89:98:e0:d2:d2:ca:e6:63:c8:5d:
2f:fd:59:c3:cb:55:cb:76:02:37:69:40:aa:1a:cb:5d:24:12:
f6:de:02:18:ee:c0:c8:b5:40:0c:7b:46:46:f8:12:71:cd:40:
4d:dc:03:f7:46:a5:2d:d7:c8:61:b6:e6:3d:b9:d7:8c:d7:af:
86:a9:cb:b7:fb:5c:fb:de:e1:e4:4d:d0:d3:8e:f8:22:76:6a:
89:d6:76:f7:95:ba:ec:ea:f7:f0:77:d9:7c:c9:63:4c:2a:e6:
03:df:c6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:40:06 2026 by rpki-client