This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft
File: 228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft (raw, json)
Hash identifier: MeI/Id6zFL/DRjU3zTZ6QZ9nF4zQNtesTVUXMY9hniA=
Subject key identifier: 8E:9F:36:A3:20:A9:99:0E:F5:4D:D6:19:E1:04:42:5A:3A:55:77:09
Authority key identifier: 22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73
Certificate issuer: /CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
Certificate serial: 0FCE03A216A28E11AF77856C250379D01506AD86
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft
Manifest number: 022B
Signing time: Mon 02 Feb 2026 05:11:27 +0000
Manifest this update: Mon 02 Feb 2026 05:06:27 +0000
Manifest next update: Thu 05 Feb 2026 15:47:27 +0000
Files and hashes: 1: 3130332e32352e3130382e302f32342d3234203d3e20313332363334.roa (hash: fBDOlCYFIj49Ll99j2HPW9RAkablwrcxgHTldEFv/Jk=)
2: 32372e3132342e38332e302f32342d3234203d3e20313332363334.roa (hash: 2EEYdzWr91JIl7YnldqA+u9ZlAli1CH0l6dUJ+oRlZU=)
3: 3131392e34372e38382e302f32342d3234203d3e203338353237.roa (hash: ZHYZolADCQ3Nh0kSpTOhEiQyqWLeuJaaRLk6yahYzfE=)
4: 3131392e34372e39352e302f32342d3234203d3e20313439343039.roa (hash: IOQi+x8HL04tSdZdkybbwTiZjcbDVMFrGx/+Tn9mObQ=)
5: 3132342e3130392e32332e302f32342d3234203d3e203538333738.roa (hash: E8p39FK+OhNYyY8SwwTjQ8JEs2K6blfiyf4IMTEJdyY=)
6: 228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl (hash: e65PMdrqJOXph4SsOVSSvXnaWbOmrE1c4/UGHD8NDEg=)
7: 3131392e34372e39302e302f32342d3234203d3e203338353237.roa (hash: I3DXvvonrBchTQI06S4LkT6TVSxWcWBTNXL8OzRmw6c=)
8: 3131392e34372e38392e302f32342d3234203d3e203338353237.roa (hash: M5eMsMOetidsRy/C8PwAw9YejdbuLdHg+PDsTMdviAE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl
rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:ce:03:a2:16:a2:8e:11:af:77:85:6c:25:03:79:d0:15:06:ad:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
Validity
Not Before: Feb 2 05:06:27 2026 GMT
Not After : Feb 5 15:47:27 2026 GMT
Subject: CN=8E9F36A320A9990EF54DD619E104425A3A557709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8b:71:79:ae:14:0b:67:9e:0a:a5:70:7a:35:
af:9f:ac:d5:1c:03:26:5f:be:9d:02:d2:6e:20:45:
d5:be:e0:93:83:fb:e3:41:5e:96:70:d6:64:81:3a:
f1:3c:de:e3:c5:d0:6b:35:e6:ee:8a:b6:71:50:b7:
d6:ab:48:1e:5f:39:97:af:a0:4a:81:90:ab:01:51:
a0:e2:19:80:fc:d2:05:4d:4c:32:2e:df:75:f5:2f:
0d:a7:8a:fd:35:27:89:f9:59:fb:64:8e:d4:00:7b:
6d:4a:77:50:55:97:db:d6:e8:22:bc:bd:29:ea:fc:
7f:8f:79:0a:eb:bf:bb:54:b8:eb:f4:3c:07:62:48:
43:72:63:0f:30:ad:12:06:27:75:74:a7:7c:73:86:
31:fa:24:66:f8:2f:1c:20:15:ec:60:61:3a:db:b3:
78:3f:78:72:71:bb:8c:2c:33:7a:b4:77:c3:d9:34:
c4:dd:6c:3a:14:b9:4b:49:13:56:fa:d2:e0:bf:49:
c8:c9:43:a1:9b:df:e1:64:3d:0c:33:28:fd:85:8c:
4c:ab:f3:6c:f3:3e:31:34:e8:f5:c0:b3:87:fd:33:
4e:65:1a:9d:86:1e:1f:79:c3:4e:4b:91:75:25:33:
ff:6c:b7:09:0d:c6:ee:7d:80:18:59:98:85:32:79:
f0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9F:36:A3:20:A9:99:0E:F5:4D:D6:19:E1:04:42:5A:3A:55:77:09
X509v3 Authority Key Identifier:
keyid:22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:11:46:18:b9:ea:d2:79:15:d6:49:41:cb:06:13:28:bc:e7:
ae:a7:27:b8:45:87:9a:e9:b6:c0:d0:95:f5:bd:69:d4:26:75:
26:eb:da:a0:7f:37:16:2c:9d:11:fd:4f:06:16:59:6d:96:49:
5c:43:78:16:0b:51:f2:77:ad:a9:3f:f6:2f:26:c7:7e:65:d1:
93:44:8f:18:e1:d9:6b:00:06:79:1b:b2:b8:7b:82:1b:cd:33:
a6:0c:5d:b1:ba:5b:af:ca:36:49:95:37:0a:b0:48:71:bd:23:
a8:84:a1:28:6a:39:2e:3f:3d:c4:ee:58:81:ec:4e:10:c5:52:
d2:01:02:46:c3:a7:5d:cb:31:69:bc:23:2d:83:23:85:92:e2:
34:1b:60:68:22:9a:9b:eb:36:7b:1f:c5:eb:dd:6a:d8:e5:9e:
88:7d:89:7c:b6:0b:9a:e1:25:b4:ea:1e:dc:dd:07:4b:0f:bf:
0f:fe:e0:6d:5c:83:9d:db:e0:aa:4f:9f:ec:ba:8d:69:90:9c:
d1:d5:e7:e0:c2:29:55:ec:b1:f7:a0:bd:c7:51:e5:15:78:0d:
2c:39:4d:5d:76:31:05:bd:c8:e7:12:b3:91:8e:98:6a:d4:10:
43:c0:2a:fd:e1:62:37:aa:e8:16:c9:02:e5:06:0d:c3:b4:a1:
c8:d6:4c:98
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUD84DohaijhGvd4VsJQN50BUGrYYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBD
RjlBNjQ3MzAeFw0yNjAyMDIwNTA2MjdaFw0yNjAyMDUxNTQ3MjdaMDMxMTAvBgNV
BAMTKDhFOUYzNkEzMjBBOTk5MEVGNTRERDYxOUUxMDQ0MjVBM0E1NTc3MDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDji3F5rhQLZ54KpXB6Na+frNUc
AyZfvp0C0m4gRdW+4JOD++NBXpZw1mSBOvE83uPF0Gs15u6KtnFQt9arSB5fOZev
oEqBkKsBUaDiGYD80gVNTDIu33X1Lw2niv01J4n5WftkjtQAe21Kd1BVl9vW6CK8
vSnq/H+PeQrrv7tUuOv0PAdiSENyYw8wrRIGJ3V0p3xzhjH6JGb4LxwgFexgYTrb
s3g/eHJxu4wsM3q0d8PZNMTdbDoUuUtJE1b60uC/ScjJQ6Gb3+FkPQwzKP2FjEyr
82zzPjE06PXAs4f9M05lGp2GHh95w05LkXUlM/9stwkNxu59gBhZmIUyefDpAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUjp82oyCpmQ71TdYZ4QRCWjpVdwkwHwYDVR0j
BBgwFoAUIo51K7+4wWs7RvPTiOztUM+aZHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MTdlZmQyYS0wMmFiLTQyMDItOTcwZi1mNjk5ZGZmOTdkZTUvMC8yMjhFNzUyQkJG
QjhDMTZCM0I0NkYzRDM4OEVDRUQ1MENGOUE2NDczLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBDRjlB
NjQ3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE3ZWZkMmEtMDJhYi00MjAyLTk3
MGYtZjY5OWRmZjk3ZGU1LzAvMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VE
NTBDRjlBNjQ3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAMIRRhi56tJ5FdZJQcsGEyi8566nJ7hFh5rp
tsDQlfW9adQmdSbr2qB/NxYsnRH9TwYWWW2WSVxDeBYLUfJ3rak/9i8mx35l0ZNE
jxjh2WsABnkbsrh7ghvNM6YMXbG6W6/KNkmVNwqwSHG9I6iEoShqOS4/PcTuWIHs
ThDFUtIBAkbDp13LMWm8Iy2DI4WS4jQbYGgimpvrNnsfxevdatjlnoh9iXy2C5rh
JbTqHtzdB0sPvw/+4G1cg53b4KpPn+y6jWmQnNHV5+DCKVXssfegvcdR5RV4DSw5
TV12MQW9yOcSs5GOmGrUEEPAKv3hYjeq6BbJAuUGDcO0ocjWTJg=
-----END CERTIFICATE-----
Generated at Mon Feb 2 10:06:08 2026 by rpki-client