This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft
File: A500108F09BF54E5603B5C1F6E6325A561FE7126.mft (raw, json)
Hash identifier: xJlFrPlUkopGtdALIMKT01RlhEdKQPCShZnvt17AAD0=
Subject key identifier: B6:49:C5:8D:26:2F:7B:95:A3:28:5F:5A:9E:79:36:D0:77:F4:44:7D
Authority key identifier: A5:00:10:8F:09:BF:54:E5:60:3B:5C:1F:6E:63:25:A5:61:FE:71:26
Certificate issuer: /CN=A500108F09BF54E5603B5C1F6E6325A561FE7126
Certificate serial: 776A29BFEA6B14AA09F32B6C212C20F790929C48
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft
Manifest number: 0544
Signing time: Sun 01 Feb 2026 13:02:31 +0000
Manifest this update: Sun 01 Feb 2026 12:57:31 +0000
Manifest next update: Wed 04 Feb 2026 23:07:31 +0000
Files and hashes: 1: A500108F09BF54E5603B5C1F6E6325A561FE7126.crl (hash: HFblQDlFaG573ZvwwPGrgcg7cX0dr8vWkaoc4wHiDqc=)
2: 3130332e3133332e3232322e302f32332d3234203d3e20313337333331.roa (hash: oiQrxAKU3WAq8WQAa4AsG/VSgBXo6JykRbhPhmfaGc4=)
3: 3130332e3131322e3136322e302f32332d3234203d3e20313337333331.roa (hash: lIpuwQni1CJCCy7a6RQeBOueUSsNd+BwETQKPZ3/nzw=)
4: 323030313a6466343a623130303a3a2f34382d3438203d3e20313337333331.roa (hash: N5WXqZ6Jw+zSS8rnedVuQEefp7BbCpCEzbN4PssNcrU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.crl
rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 23:07:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:6a:29:bf:ea:6b:14:aa:09:f3:2b:6c:21:2c:20:f7:90:92:9c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A500108F09BF54E5603B5C1F6E6325A561FE7126
Validity
Not Before: Feb 1 12:57:31 2026 GMT
Not After : Feb 4 23:07:31 2026 GMT
Subject: CN=B649C58D262F7B95A3285F5A9E7936D077F4447D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1e:a9:db:69:62:ea:2e:a4:3b:0e:ec:ab:cb:
a4:8c:7b:0a:2a:40:68:90:17:3e:30:c8:cb:b2:e9:
29:d3:55:f0:ef:de:20:d0:d7:ac:8e:00:06:86:2c:
0d:85:8a:fb:8d:0d:ec:03:43:77:ab:d6:79:dd:b8:
c7:d0:8a:25:e6:22:e6:06:83:db:ae:d0:17:60:1d:
ce:56:65:4c:db:5b:06:7d:50:92:5b:aa:d8:84:cd:
42:59:9d:15:5d:db:d7:5a:a7:c0:63:57:18:53:ce:
37:d6:ff:3b:2a:5f:6f:e6:f7:9c:5a:de:4f:5e:55:
c0:f2:9a:bb:4f:58:d4:51:d7:c3:62:2d:ab:44:70:
58:df:b5:26:63:7d:b9:ff:cb:bc:06:62:5a:37:88:
c5:ae:d0:65:ef:88:86:7b:36:fd:71:ad:70:17:99:
5b:b5:fe:d0:b3:48:f3:7a:55:bd:f5:7a:f8:e3:3b:
39:42:f7:07:61:c3:6c:9d:26:a7:d7:48:21:c9:e0:
1a:b3:7f:01:8d:96:64:de:3a:8e:d5:28:b3:30:01:
7e:d0:b0:ea:19:2a:85:4d:d0:9b:64:67:67:19:d8:
0f:bb:5a:02:5f:e4:57:e6:86:00:d7:f0:36:50:71:
5d:27:3c:32:92:cb:b1:31:cf:f8:04:9f:bf:f0:81:
0f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:49:C5:8D:26:2F:7B:95:A3:28:5F:5A:9E:79:36:D0:77:F4:44:7D
X509v3 Authority Key Identifier:
keyid:A5:00:10:8F:09:BF:54:E5:60:3B:5C:1F:6E:63:25:A5:61:FE:71:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:00:fb:5b:d4:2b:1c:c2:74:78:59:2f:17:18:a3:03:c1:9f:
47:86:73:11:3a:46:08:5e:33:9e:d0:98:33:ca:a0:66:43:03:
ce:3e:be:ae:59:f0:5c:eb:f7:7e:bd:51:65:85:0a:1f:92:12:
86:6e:8d:42:57:4b:04:03:97:28:5f:56:24:35:c1:c3:8f:96:
ca:fe:64:5c:eb:c6:45:a8:0a:bc:b1:f5:68:22:7f:d8:40:0b:
bd:22:69:56:68:70:5f:fc:6e:91:03:22:e6:83:03:04:4e:96:
0e:fd:60:84:6f:7b:e1:46:f3:cc:10:5c:38:e6:21:3f:a9:3e:
95:67:a7:d3:e3:02:fb:0a:ee:5f:98:a4:94:74:15:1a:4d:31:
60:00:fe:5e:52:8d:70:ad:36:a9:fb:85:ca:cf:e6:e2:23:ab:
39:4d:3a:65:15:fa:1f:0a:46:31:5b:e1:a3:48:ac:a9:fa:f0:
72:63:f0:16:f7:f8:89:ce:da:81:b6:6c:63:7a:89:03:5b:a4:
db:1c:e0:e7:18:aa:06:28:10:77:7e:c8:45:d8:97:fb:69:d5:
01:b6:7b:a6:44:51:17:79:11:4f:cd:de:1d:dd:69:34:65:ba:
b6:b5:b7:96:b2:58:00:84:12:e1:9b:94:83:e4:46:49:ca:f4:
1f:93:e3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 20:55:48 2026 by rpki-client