This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft
File: 986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft (raw, json)
Hash identifier: QKg6JW5oneCDK/Z0VGag4pZlZ7qmuu56wJ59usRWzlQ=
Subject key identifier: 7C:94:F4:2A:CA:B5:32:88:9E:CF:CA:D6:B2:D2:C1:C7:E5:E8:02:E5
Authority key identifier: 98:6E:FE:1C:2B:B8:B0:E4:E1:47:2E:9D:AA:5B:77:5A:A4:F6:68:9F
Certificate issuer: /CN=986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F
Certificate serial: 7BD27C9ADB56F1DFFB14AEFFE78102B9BC2CE54C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft
Manifest number: 0545
Signing time: Mon 02 Feb 2026 00:11:42 +0000
Manifest this update: Mon 02 Feb 2026 00:06:42 +0000
Manifest next update: Thu 05 Feb 2026 07:35:42 +0000
Files and hashes: 1: 986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.crl (hash: 5u7/mkM24F5ivJHdcTWllnJtFFlC24LkYOgFwYTRUK4=)
2: 3130332e3132362e35362e302f32322d3234203d3e20313338313037.roa (hash: PNy2Ky9qBufKbv/f4p4dFdjvMCRYXe8YTpQCXZbAHQM=)
3: 323030313a6466373a336230303a3a2f34382d3438203d3e20313338313037.roa (hash: 5ZMFCFB2Z2k1wsOQD3WlLnfBqmNmCDqFjaN+cKeJCYg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.crl
rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:d2:7c:9a:db:56:f1:df:fb:14:ae:ff:e7:81:02:b9:bc:2c:e5:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F
Validity
Not Before: Feb 2 00:06:42 2026 GMT
Not After : Feb 5 07:35:42 2026 GMT
Subject: CN=7C94F42ACAB532889ECFCAD6B2D2C1C7E5E802E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:50:c7:64:c5:aa:c2:51:1b:9e:f1:58:d0:23:
05:4d:c9:3d:71:cd:f4:e1:55:05:f5:e1:26:25:31:
68:6a:a7:83:e2:09:a3:e6:26:ac:03:fc:a8:cd:91:
cf:82:22:9f:ea:bb:40:12:61:b3:a1:b0:e7:0c:47:
26:88:66:14:fb:a8:f1:53:50:22:b9:f2:1c:fc:79:
b7:1e:89:a6:80:73:02:e6:22:d3:f8:78:0e:d9:33:
69:5f:e8:ba:a5:5c:e1:14:40:65:ee:48:3d:8d:36:
f4:b1:1e:e9:fd:9f:28:c8:38:e7:b4:00:d0:2b:2c:
ea:d4:11:c4:b1:d0:f5:33:5a:de:cc:48:b8:05:4a:
0e:a7:1b:8b:26:0f:0c:61:d4:d0:d2:a0:29:7c:0b:
dc:3c:10:13:ef:27:5a:4f:41:bf:f1:43:cc:0e:68:
f4:28:76:ba:08:01:8d:1e:b0:66:92:74:f2:9f:c9:
b1:db:2d:63:fd:b4:e2:88:04:fb:07:d5:2d:19:11:
ec:b8:fd:87:da:16:04:30:1b:3b:61:f2:3e:cf:46:
a1:cb:c5:40:4b:00:8a:e0:46:78:75:c1:e0:59:a0:
a3:b9:e3:55:63:17:85:ae:bb:0e:56:e6:58:ab:0d:
f7:55:d6:f9:47:50:7f:cf:d4:97:bd:00:65:ce:0f:
1d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:94:F4:2A:CA:B5:32:88:9E:CF:CA:D6:B2:D2:C1:C7:E5:E8:02:E5
X509v3 Authority Key Identifier:
keyid:98:6E:FE:1C:2B:B8:B0:E4:E1:47:2E:9D:AA:5B:77:5A:A4:F6:68:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:14:7e:a7:e4:c9:44:08:81:f2:ac:92:ea:34:7c:72:2c:65:
8a:fa:c2:68:8a:88:a7:f9:4e:6d:9b:27:27:a4:b1:ca:7e:e8:
ce:93:24:28:38:af:0c:7b:8a:e5:48:56:ac:25:e6:25:8f:65:
84:d1:ef:49:c1:f6:12:db:37:37:fd:d1:c5:86:96:89:04:55:
02:20:1d:8a:9f:36:fa:be:fc:5d:eb:8a:de:5b:2a:60:27:45:
6f:22:47:b0:2b:3a:56:e4:4b:4a:86:82:3a:c2:ce:f1:e1:7e:
97:6f:20:17:22:a2:e6:2c:6d:8a:42:48:52:ca:f1:39:21:99:
6f:fc:58:a4:de:8a:9a:ac:c4:ed:63:ab:dd:26:70:40:24:3d:
e6:d8:8d:6a:2a:65:11:b8:b6:70:22:f9:14:a3:69:13:8a:dc:
13:4b:52:18:e4:30:b4:2b:c4:79:5a:5d:88:49:d0:8b:b9:7c:
71:c8:4b:9f:dc:a4:7d:54:fb:0f:6b:53:3a:ed:7b:83:88:77:
ad:a8:4e:51:0a:9f:89:2f:bc:e8:a8:d9:20:31:ff:03:fb:5e:
da:ab:30:3a:d4:80:a6:c1:84:fc:aa:d3:3a:5c:88:15:7c:0e:
cd:86:82:40:7e:93:08:ce:85:51:49:6e:01:47:96:b3:3a:c0:
02:db:06:f8
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUe9J8mttW8d/7FK7/54ECubws5UwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTg2RUZFMUMyQkI4QjBFNEUxNDcyRTlEQUE1Qjc3NUFB
NEY2Njg5RjAeFw0yNjAyMDIwMDA2NDJaFw0yNjAyMDUwNzM1NDJaMDMxMTAvBgNV
BAMTKDdDOTRGNDJBQ0FCNTMyODg5RUNGQ0FENkIyRDJDMUM3RTVFODAyRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIUMdkxarCURue8VjQIwVNyT1x
zfThVQX14SYlMWhqp4PiCaPmJqwD/KjNkc+CIp/qu0ASYbOhsOcMRyaIZhT7qPFT
UCK58hz8ebceiaaAcwLmItP4eA7ZM2lf6LqlXOEUQGXuSD2NNvSxHun9nyjIOOe0
ANArLOrUEcSx0PUzWt7MSLgFSg6nG4smDwxh1NDSoCl8C9w8EBPvJ1pPQb/xQ8wO
aPQodroIAY0esGaSdPKfybHbLWP9tOKIBPsH1S0ZEey4/YfaFgQwGzth8j7PRqHL
xUBLAIrgRnh1weBZoKO541VjF4Wuuw5W5lirDfdV1vlHUH/P1Je9AGXODx2pAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUfJT0Ksq1Moiez8rWstLBx+XoAuUwHwYDVR0j
BBgwFoAUmG7+HCu4sOThRy6dqlt3WqT2aJ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MTYyZDE1Yi0xMDJiLTQzMWYtYTUzOS0wYTkzMmIzMTM2NmMvMC85ODZFRkUxQzJC
QjhCMEU0RTE0NzJFOURBQTVCNzc1QUE0RjY2ODlGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTg2RUZFMUMyQkI4QjBFNEUxNDcyRTlEQUE1Qjc3NUFBNEY2
Njg5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE2MmQxNWItMTAyYi00MzFmLWE1
MzktMGE5MzJiMzEzNjZjLzAvOTg2RUZFMUMyQkI4QjBFNEUxNDcyRTlEQUE1Qjc3
NUFBNEY2Njg5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAC8UfqfkyUQIgfKskuo0fHIsZYr6wmiKiKf5
Tm2bJyekscp+6M6TJCg4rwx7iuVIVqwl5iWPZYTR70nB9hLbNzf90cWGlokEVQIg
HYqfNvq+/F3rit5bKmAnRW8iR7ArOlbkS0qGgjrCzvHhfpdvIBciouYsbYpCSFLK
8TkhmW/8WKTeipqsxO1jq90mcEAkPebYjWoqZRG4tnAi+RSjaROK3BNLUhjkMLQr
xHlaXYhJ0Iu5fHHIS5/cpH1U+w9rUzrte4OId62oTlEKn4kvvOio2SAx/wP7Xtqr
MDrUgKbBhPyq0zpciBV8Ds2GgkB+kwjOhVFJbgFHlrM6wALbBvg=
-----END CERTIFICATE-----
Generated at Mon Feb 2 10:06:55 2026 by rpki-client