This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft
File: C37B0700A782E6CCEE7D187B10AAF240353AB253.mft (raw, json)
Hash identifier: FVbnXiKzFPgrXlxTU0C1gQ6N2SpFZ9kD7asfbeAIoP8=
Subject key identifier: D1:C9:55:D9:15:84:E1:06:44:37:33:F6:CD:BC:F9:3F:CC:AA:72:B0
Authority key identifier: C3:7B:07:00:A7:82:E6:CC:EE:7D:18:7B:10:AA:F2:40:35:3A:B2:53
Certificate issuer: /CN=C37B0700A782E6CCEE7D187B10AAF240353AB253
Certificate serial: 43CBCAAF79124B02DAE60AC7873298814373D57D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft
Manifest number: 0283
Signing time: Mon 02 Feb 2026 04:25:19 +0000
Manifest this update: Mon 02 Feb 2026 04:20:19 +0000
Manifest next update: Thu 05 Feb 2026 09:09:19 +0000
Files and hashes: 1: 3130332e3138342e31362e302f32342d3234203d3e20313439333135.roa (hash: +a0J/aEe/HBxQSyjFU8Jpy6sg/8IuKYftoVKqedXGVw=)
2: 3130332e3138342e31372e302f32342d3234203d3e20313530343739.roa (hash: 5OD+ySaoYqwtpeDmzQIRWYH7Dq1Wh3/KhlzdkZcccKU=)
3: C37B0700A782E6CCEE7D187B10AAF240353AB253.crl (hash: imYdsrvJ6ZCBaVnSIrrGW+LzcbNSgUz78uKjiyhG3nk=)
4: 3130332e3138342e31372e302f32342d3234203d3e20313439333135.roa (hash: zb0DM+/iZNl/DFkGsnnNLfcL5wMKgWl+9ippNLqTYd4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.crl
rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:cb:ca:af:79:12:4b:02:da:e6:0a:c7:87:32:98:81:43:73:d5:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C37B0700A782E6CCEE7D187B10AAF240353AB253
Validity
Not Before: Feb 2 04:20:19 2026 GMT
Not After : Feb 5 09:09:19 2026 GMT
Subject: CN=D1C955D91584E106443733F6CDBCF93FCCAA72B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:50:15:4a:ad:1e:78:d5:5e:a1:35:28:68:d5:
e4:2a:0d:e3:16:dd:9f:73:9a:96:14:8c:95:23:86:
65:15:3f:2e:5f:ca:ac:1e:38:da:46:f4:60:c8:39:
4a:a3:e6:39:89:35:9b:8e:c9:fd:a9:7c:8f:63:bd:
28:97:ce:3c:08:28:4a:54:15:98:90:eb:36:dc:59:
b1:71:70:a0:3f:37:24:98:8a:15:05:f0:47:97:2a:
5f:52:34:0e:12:38:90:d6:d1:a3:63:33:30:18:7a:
c3:c2:46:17:63:15:43:da:95:ec:f0:9f:80:b9:77:
12:c4:91:d1:dc:a1:c7:62:72:d5:77:1e:fe:df:0a:
49:b4:f4:fc:ad:b1:0b:dc:00:84:4c:4b:3c:54:9b:
c2:18:7b:c9:26:60:64:ed:57:77:1c:85:42:ab:8d:
ef:40:e1:7e:d9:47:d7:8b:03:e3:d4:b1:70:6b:e6:
66:49:0e:52:f1:55:21:26:f7:61:b5:12:de:b3:51:
cc:9f:78:f8:d4:54:27:f0:f4:20:43:a0:df:c4:10:
97:89:69:b7:b1:8f:ab:ab:cb:75:60:5f:cf:58:4a:
ed:11:8d:2b:47:42:b4:25:cd:25:9e:42:24:97:f7:
ff:c9:cc:96:3c:8d:2a:95:c3:65:d8:0f:c1:c1:c2:
1b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C9:55:D9:15:84:E1:06:44:37:33:F6:CD:BC:F9:3F:CC:AA:72:B0
X509v3 Authority Key Identifier:
keyid:C3:7B:07:00:A7:82:E6:CC:EE:7D:18:7B:10:AA:F2:40:35:3A:B2:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:99:e0:69:b5:2f:99:46:92:a2:26:00:b9:14:a2:bf:d7:27:
69:cc:df:f7:98:85:eb:e5:ba:42:17:61:70:61:bd:47:e8:f6:
63:06:a8:22:fe:4f:ba:75:97:88:79:8b:11:8c:40:18:68:f0:
d9:f7:46:d9:26:f1:21:73:8e:cf:bb:d6:cd:47:cc:08:66:1f:
eb:c5:ff:58:5f:ed:53:f4:8e:17:81:8b:f6:d6:d6:27:f5:0f:
d8:90:2f:4f:df:bd:c8:28:c1:ae:38:b2:8b:3a:62:1e:c8:dc:
8a:81:b8:46:8b:fc:02:a9:a8:b2:e6:1d:ce:2c:cb:e1:56:fc:
90:46:28:8b:88:e9:a2:8d:3d:40:8b:7c:0d:2a:f6:80:36:a2:
bd:1f:5f:f1:da:e3:a3:fd:de:57:d9:98:59:af:df:ad:5d:15:
3f:95:20:cc:8d:7e:f6:f4:3c:e9:25:f4:c0:cb:fd:fe:0a:a4:
7a:9e:2c:f1:86:0c:1d:b6:3b:4d:ae:4f:63:96:bb:d1:9b:be:
3d:cc:69:ec:95:f1:09:ca:86:d5:9b:91:6b:73:6f:0a:ba:e3:
20:b3:ba:5d:5a:fb:4c:6e:06:70:fe:10:16:f3:90:9d:9f:28:
dc:fd:0f:f7:f9:38:4e:91:62:68:02:94:04:36:c0:ed:d1:c8:
34:fa:7d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:45:13 2026 by rpki-client