This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft
File: 0CC3B451FD4CA85AECD3DEBA039782844757C400.mft (raw, json)
Hash identifier: os5GpCXVB8ZS1I2xvjQM2K1zG3Zg/BJ/WorajpkBuKc=
Subject key identifier: 43:85:93:50:4B:CF:80:BB:CB:3E:B8:8F:52:D2:6A:4B:0A:DD:29:27
Authority key identifier: 0C:C3:B4:51:FD:4C:A8:5A:EC:D3:DE:BA:03:97:82:84:47:57:C4:00
Certificate issuer: /CN=0CC3B451FD4CA85AECD3DEBA039782844757C400
Certificate serial: 0ED0538103336415D5C0CCAE580364520820186C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CC3B451FD4CA85AECD3DEBA039782844757C400.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft
Manifest number: 014A
Signing time: Sat 31 Jan 2026 08:50:02 +0000
Manifest this update: Sat 31 Jan 2026 08:45:02 +0000
Manifest next update: Tue 03 Feb 2026 13:52:02 +0000
Files and hashes: 1: 3130332e34322e3234332e302f32342d3234203d3e20313531353935.roa (hash: 9thm8tqpKnT0hDlZkI8uSNs6DDGCpKXy22/dK1Jcd3M=)
2: 0CC3B451FD4CA85AECD3DEBA039782844757C400.crl (hash: MU/F6U6zawUzPa2vEXqhogLxF3y2zSH+rsE5t8sFZ0k=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.crl
rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CC3B451FD4CA85AECD3DEBA039782844757C400.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 13:52:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:d0:53:81:03:33:64:15:d5:c0:cc:ae:58:03:64:52:08:20:18:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0CC3B451FD4CA85AECD3DEBA039782844757C400
Validity
Not Before: Jan 31 08:45:02 2026 GMT
Not After : Feb 3 13:52:02 2026 GMT
Subject: CN=438593504BCF80BBCB3EB88F52D26A4B0ADD2927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:eb:19:8d:62:f1:cc:4d:08:e7:18:6e:be:0e:
d6:f8:ca:4b:b1:a3:00:dc:50:a2:2d:16:dd:f7:6d:
4d:88:f0:d7:27:b9:ae:f2:bd:e7:f7:88:f2:d6:44:
ad:54:ce:d6:81:57:3d:23:5f:4f:12:d3:50:52:db:
5b:ae:f6:07:be:a2:43:98:6d:53:ec:06:7d:34:01:
31:ba:89:dd:46:45:67:b8:93:4c:94:ca:c7:92:b8:
a4:e3:1b:f8:63:ea:64:cb:1e:c8:c1:ca:8d:f0:22:
b8:d8:76:66:27:44:48:d6:42:10:1f:20:81:a4:c9:
93:df:d4:49:c1:8c:86:f8:aa:3e:d8:93:79:e0:a0:
69:63:2d:43:ea:1e:dc:9c:4b:9d:40:c2:69:97:8d:
3f:17:42:9c:08:e9:03:cc:57:a8:b4:13:3b:f9:dc:
16:be:76:60:0d:56:c0:40:de:19:49:b2:2f:e9:ca:
03:08:6a:e8:d6:64:55:3a:4b:0b:b7:98:75:ef:0f:
07:fa:e8:59:85:97:81:45:8e:28:ac:60:c4:4e:0d:
7d:6f:6e:d8:a1:e6:3f:b9:d7:ba:5c:57:33:f3:db:
9e:5d:e5:66:8a:67:15:c8:76:82:6b:2c:73:e9:6e:
ab:d0:a5:76:37:eb:b1:60:88:15:1f:28:87:b5:cd:
12:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:85:93:50:4B:CF:80:BB:CB:3E:B8:8F:52:D2:6A:4B:0A:DD:29:27
X509v3 Authority Key Identifier:
keyid:0C:C3:B4:51:FD:4C:A8:5A:EC:D3:DE:BA:03:97:82:84:47:57:C4:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CC3B451FD4CA85AECD3DEBA039782844757C400.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:bd:23:7f:99:ba:3f:c7:77:a1:3f:b5:49:fd:ab:a2:fc:ce:
e5:9c:b6:40:5c:59:3b:c6:f9:80:1a:6c:8f:bf:ba:6c:46:dd:
00:82:34:72:cf:4e:13:6c:f9:52:19:a5:31:09:d2:4d:90:db:
4d:64:89:34:d7:8e:2e:2c:de:49:4b:26:ae:f4:dc:90:bd:30:
95:01:bd:de:42:15:5d:16:ea:1a:8c:56:d7:4b:b4:7a:f8:76:
30:eb:f2:a8:21:49:4b:a1:90:d4:da:40:22:e3:b2:52:ef:b2:
dc:b3:3f:7c:cc:ac:cb:3f:a4:35:8f:29:71:b6:92:a0:9c:bc:
66:05:41:5e:41:a9:1b:32:30:90:97:5d:3f:a3:07:88:09:2a:
a9:e3:74:8a:f1:ca:46:ee:1c:20:f0:ce:3b:1f:6f:7c:26:36:
f5:ff:1e:95:f7:52:54:25:70:19:4a:69:92:2a:92:11:30:10:
ed:59:a2:09:b8:26:5c:0d:1f:e1:a3:77:1d:34:b4:65:3e:b0:
86:8b:e4:bd:75:4f:61:01:b5:9c:6a:0a:02:6c:60:ad:8a:54:
25:3f:2a:54:22:95:30:68:85:ff:6a:c1:9d:96:aa:d9:d7:72:
7c:e5:60:e4:4b:73:2b:b7:88:04:84:79:e2:66:91:e6:35:fd:
6b:af:ed:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:14 2026 by rpki-client