This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft
File: 579618DB6FFA608F5998FCD968B270AE61BDB97C.mft (raw, json)
Hash identifier: Q+m17CquxD2xaHoIwF3n09+63Cc7Gv4Nfz4vApq/d4k=
Subject key identifier: F6:CD:27:E8:26:94:9D:50:4F:5D:D4:60:70:D0:28:B3:7D:B8:16:0B
Authority key identifier: 57:96:18:DB:6F:FA:60:8F:59:98:FC:D9:68:B2:70:AE:61:BD:B9:7C
Certificate issuer: /CN=579618DB6FFA608F5998FCD968B270AE61BDB97C
Certificate serial: 28AECC0D1FEF8E5886280F01C674C59832E53907
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft
Manifest number: 0233
Signing time: Sun 01 Feb 2026 17:52:19 +0000
Manifest this update: Sun 01 Feb 2026 17:47:19 +0000
Manifest next update: Thu 05 Feb 2026 05:11:19 +0000
Files and hashes: 1: 323430333a613163303a3a2f33322d3332203d3e20313338303732.roa (hash: sIMuid2cN98YAJ+u3L+3la7IfjwgED+cUwmpS2iHGMw=)
2: 3130332e3132332e3132302e302f32342d3234203d3e20313338303732.roa (hash: etcdt1rptra2wpD632iI4CEj+HZk7gKrmvWLBgXFbpI=)
3: 579618DB6FFA608F5998FCD968B270AE61BDB97C.crl (hash: amMVTPisQJzlNVgjvKsY8a/YXJJsV0kCH6hhIWmSqIE=)
4: 3130332e3132332e3132312e302f32342d3234203d3e20313338303730.roa (hash: kHWm0ElDQFUg3ddfCvb6B3R6hoVD6v/wMJbHPMOHCH8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.crl
rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:11:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:ae:cc:0d:1f:ef:8e:58:86:28:0f:01:c6:74:c5:98:32:e5:39:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=579618DB6FFA608F5998FCD968B270AE61BDB97C
Validity
Not Before: Feb 1 17:47:19 2026 GMT
Not After : Feb 5 05:11:19 2026 GMT
Subject: CN=F6CD27E826949D504F5DD46070D028B37DB8160B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4e:27:4a:d7:1d:a9:54:e4:5a:45:71:3d:29:
4e:b8:d0:40:b9:7d:8d:10:a4:9c:5e:c0:07:f2:a2:
94:82:d4:3e:0f:1b:39:88:76:e1:73:de:50:f8:9b:
38:58:ee:1a:8c:2c:22:85:ee:ae:1d:67:80:90:73:
d2:f1:99:28:6c:af:2f:e6:2b:5e:d8:76:d2:9d:89:
1b:d1:03:0e:f9:3a:f8:b0:26:47:44:f3:20:d0:84:
b7:a1:6b:27:72:75:07:ea:3f:4a:66:0e:c0:64:ba:
b4:26:33:8c:3e:2f:70:81:8e:cb:15:e1:11:54:a2:
62:db:64:9a:f1:92:07:d2:20:a5:cd:e4:53:c9:67:
07:72:35:f2:42:04:df:b2:83:8b:b2:46:d6:e1:ee:
e8:60:8a:06:c0:c5:4f:03:d1:aa:a8:13:1e:c0:cf:
fc:7a:2a:46:5b:e3:62:3c:6e:cb:99:16:e9:19:9f:
88:62:e3:99:9c:b0:40:2d:82:94:84:29:8d:69:f3:
41:5b:35:84:ce:56:b5:f6:50:4f:dc:6c:08:66:59:
9e:c1:ca:a4:db:5e:55:61:64:00:49:91:4a:aa:2a:
50:28:ae:c1:b9:a3:e8:ae:66:04:10:cb:01:d6:40:
2e:c8:b2:80:eb:eb:73:53:ce:92:18:e5:55:8d:e4:
2e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CD:27:E8:26:94:9D:50:4F:5D:D4:60:70:D0:28:B3:7D:B8:16:0B
X509v3 Authority Key Identifier:
keyid:57:96:18:DB:6F:FA:60:8F:59:98:FC:D9:68:B2:70:AE:61:BD:B9:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:14:64:bd:16:17:5b:26:e7:5c:a7:7b:4b:21:59:01:f3:03:
90:f1:4a:8c:ad:e6:1c:92:bb:63:89:39:5c:b7:40:f4:dd:3f:
d2:bf:f8:e6:2e:df:87:c4:aa:5a:09:fa:be:15:d7:f9:54:28:
46:14:ce:f4:04:d3:ac:22:b5:bf:cd:91:95:04:74:0d:97:11:
80:93:76:71:dc:84:2a:71:4c:e9:21:b0:59:9b:dc:34:3f:d8:
a1:2d:42:d6:9c:25:5b:54:d3:92:ea:62:1d:cd:31:ed:36:52:
46:2a:4e:27:e1:68:a3:b5:bc:6b:97:14:15:66:0b:58:df:b0:
7b:c2:26:9b:8c:db:c8:2e:78:7f:f8:61:dd:70:ac:ae:18:40:
0c:d1:c8:e1:87:12:8b:7a:54:5a:92:87:b3:36:30:01:05:9e:
1f:0c:66:84:31:5f:41:05:c5:18:50:4e:6a:c1:a6:0f:d9:40:
69:a3:ac:3b:82:6f:b2:d5:36:9b:6a:5c:4f:c7:ad:20:ec:06:
58:e8:7c:06:8c:4d:6b:f3:cf:69:9c:db:52:e3:fe:e3:5b:d8:
cb:4b:d4:3b:37:e3:c7:bf:ae:e5:48:cf:e9:35:c0:cf:11:eb:
29:24:80:a7:52:62:aa:6b:13:75:29:ef:65:70:33:90:fe:76:
82:1e:61:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:54:42 2026 by rpki-client