This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.mft
File: FF45D0F44B7B63B976B41EEE18CC92393CF8184F.mft (raw, json)
Hash identifier: wt7VTNn9lDMEaW4gK6FjsGFUPFE+ea/QLmIctN35c2g=
Subject key identifier: 8E:C3:CE:F6:2B:32:B2:B7:A7:B3:2C:3D:63:13:47:F2:C1:77:29:EC
Authority key identifier: FF:45:D0:F4:4B:7B:63:B9:76:B4:1E:EE:18:CC:92:39:3C:F8:18:4F
Certificate issuer: /CN=FF45D0F44B7B63B976B41EEE18CC92393CF8184F
Certificate serial: 2011161931E1DAC2F842204777703A2E7A5DBF08
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.mft
Manifest number: 0222
Signing time: Sun 01 Feb 2026 15:50:03 +0000
Manifest this update: Sun 01 Feb 2026 15:45:03 +0000
Manifest next update: Thu 05 Feb 2026 02:21:03 +0000
Files and hashes: 1: FF45D0F44B7B63B976B41EEE18CC92393CF8184F.crl (hash: ffdBJWDWDClbaYG5f4rYH3DPe5bAu/GzXDSYQQ+9C3s=)
2: 3130332e3136392e33382e302f32332d3234203d3e20313432333331.roa (hash: XR+TpGg6coEePHmhn8BPw57A0ogwMebLb1ve/vRAoWA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.crl
rsync://repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 02:21:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:11:16:19:31:e1:da:c2:f8:42:20:47:77:70:3a:2e:7a:5d:bf:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF45D0F44B7B63B976B41EEE18CC92393CF8184F
Validity
Not Before: Feb 1 15:45:03 2026 GMT
Not After : Feb 5 02:21:03 2026 GMT
Subject: CN=8EC3CEF62B32B2B7A7B32C3D631347F2C17729EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:cd:59:33:67:2b:62:18:5e:20:c7:2b:db:52:
79:3d:23:98:5d:6a:06:dd:b1:2c:d5:39:09:96:b9:
34:37:1b:67:bd:ea:19:2d:94:1a:d2:83:78:03:42:
79:01:70:19:4d:c2:cc:60:5d:b0:ef:35:80:9c:45:
55:cb:28:66:b8:64:88:bd:10:bb:51:fc:6e:f2:47:
f8:da:80:43:3b:88:c4:7c:f8:91:3c:c8:3b:83:ca:
a9:8b:b4:28:a0:16:28:2e:13:32:05:b4:7c:d1:48:
79:10:de:e2:8e:df:45:bf:f9:cd:9b:a6:c0:47:12:
60:fd:c4:f1:42:67:f9:6a:30:16:9c:3d:11:71:57:
1b:be:8a:cd:21:dd:f0:52:db:0f:fe:fb:19:d7:a1:
e4:32:f2:30:46:ff:25:d9:df:13:44:e0:cf:f4:07:
a5:b1:ff:8d:5e:ca:1e:f7:c0:dd:c4:c5:ba:e1:da:
9f:70:96:34:cc:df:67:1d:57:a8:bc:d5:56:ef:79:
35:dd:dd:13:4e:17:10:af:cb:9c:c5:05:8e:5e:2d:
e6:fe:78:54:92:3a:34:71:e8:00:0d:01:6e:f7:3b:
73:17:69:9a:c4:12:b8:8a:56:1b:e7:11:2a:30:38:
cc:07:a3:16:a3:5f:c8:77:f1:1c:61:a8:15:56:10:
70:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C3:CE:F6:2B:32:B2:B7:A7:B3:2C:3D:63:13:47:F2:C1:77:29:EC
X509v3 Authority Key Identifier:
keyid:FF:45:D0:F4:4B:7B:63:B9:76:B4:1E:EE:18:CC:92:39:3C:F8:18:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:88:89:50:6c:33:7e:af:a3:4c:1f:65:86:b5:b5:4f:24:59:
65:87:53:68:43:c0:98:fd:cf:73:47:02:63:41:61:19:bf:77:
5b:d4:cd:eb:54:0b:d4:00:2d:82:82:77:a4:37:1d:95:a6:2b:
03:83:c2:fd:2d:12:85:6c:66:89:cf:fc:fa:8f:00:89:12:d8:
8c:0c:49:8f:bf:47:9e:58:84:8d:52:06:1a:28:ff:6a:82:92:
01:1d:c0:eb:26:ea:82:5c:ac:f5:33:c3:c1:1b:a1:20:e2:04:
28:cc:d1:3a:6a:36:4c:b5:dc:98:af:78:1a:13:fe:28:09:69:
ac:7e:0d:f5:4c:8e:4f:a0:01:38:05:cc:8d:61:ec:71:38:1e:
5c:d3:a6:68:32:27:e0:ae:1a:a5:58:ee:ca:0d:6f:cc:a7:46:
70:19:80:15:1f:fd:0f:50:73:46:c1:5b:6d:6f:a9:47:52:4a:
f0:20:0f:3c:f7:d6:c1:31:82:7f:94:b0:ea:82:ed:2f:98:f0:
7b:87:4b:85:fc:32:3b:81:05:1c:07:ef:77:8b:22:6a:56:e3:
13:c6:3a:a1:6b:32:78:5f:b8:2a:dd:c8:63:35:2c:0f:a0:96:
20:1b:8a:97:74:9e:54:e6:ea:1d:4f:f4:de:a6:6f:97:13:1d:
cb:05:ef:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:15 2026 by rpki-client