This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft
File: 104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft (raw, json)
Hash identifier: iyQ9h5MbgZlL80JmtwD0fkU/+XmRCBTrzoVdtG1GiTQ=
Subject key identifier: B8:33:C7:6A:5A:3A:13:63:6E:D8:94:6F:EA:74:F5:43:F8:69:51:5F
Authority key identifier: 10:4C:4F:CF:88:8F:3C:86:B8:C1:28:D8:1C:5B:95:FE:53:89:BB:59
Certificate issuer: /CN=104C4FCF888F3C86B8C128D81C5B95FE5389BB59
Certificate serial: 505717EC6E804CB84B8ACEF25AECC8616FE876E2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft
Manifest number: 0206
Signing time: Sun 01 Feb 2026 05:20:56 +0000
Manifest this update: Sun 01 Feb 2026 05:15:56 +0000
Manifest next update: Wed 04 Feb 2026 13:47:56 +0000
Files and hashes: 1: 3130332e35312e3132322e302f32332d3233203d3e20313530343730.roa (hash: NI7opR0A7S7kCuIeE9SGtTIr4seOauTv5NKnbC+c5S8=)
2: 104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl (hash: LmU3CUhYWWgjbFTv6kKL00vaI+NNZWyDaV45hNjY+Cg=)
3: 3130332e35312e3132332e302f32342d3234203d3e20313530343730.roa (hash: vxMPTESIzZEY7G3+9W6n+soUJ5to979lR7MTr9paLOY=)
4: 3130332e35312e3132322e302f32342d3234203d3e203438343635.roa (hash: TC6MS8F6oQCAfD0GoVUZH+L8RFHHUoyFXx511/+SVcQ=)
5: 3130332e35312e3132322e302f32342d3234203d3e20313530343730.roa (hash: 9H3El07W5poKziXy5nJS/+wd9IjLStSX7hOc3PPnjBQ=)
6: 3130332e35312e3132332e302f32342d3234203d3e203438343635.roa (hash: 5O6AdoKEG1I98tyOWG63JsCNRsZNMKKnN/EqzafjGiA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl
rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 13:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:57:17:ec:6e:80:4c:b8:4b:8a:ce:f2:5a:ec:c8:61:6f:e8:76:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=104C4FCF888F3C86B8C128D81C5B95FE5389BB59
Validity
Not Before: Feb 1 05:15:56 2026 GMT
Not After : Feb 4 13:47:56 2026 GMT
Subject: CN=B833C76A5A3A13636ED8946FEA74F543F869515F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ee:55:f5:55:c2:36:ae:a6:7b:90:77:19:0b:
92:40:7a:b1:42:48:82:66:99:80:7a:8b:09:d6:6f:
f6:17:5b:25:9c:7a:d5:62:42:fa:88:7f:99:69:6f:
a5:1e:dc:88:32:0b:0b:3d:dd:bd:f9:66:57:39:df:
20:43:88:03:84:1c:64:e6:69:a2:46:b4:be:a6:87:
8c:e3:ba:6e:1e:26:32:92:d8:74:4f:32:f4:0a:d6:
19:ab:be:41:0c:6a:1f:8f:87:11:13:52:7c:43:ec:
06:51:62:65:e7:68:45:5f:fd:1f:b5:43:aa:13:7b:
86:1a:e0:92:d1:90:eb:be:52:a7:76:dc:f8:a9:db:
8b:51:d9:75:1c:67:75:35:eb:01:2f:b1:19:55:be:
65:8a:6d:c5:d5:25:39:ec:a4:57:db:c9:90:fc:1a:
53:11:51:4d:17:d0:0f:99:8c:83:d7:ba:2b:49:36:
61:17:02:68:ca:a0:35:b4:50:ec:18:c6:c2:9f:37:
16:e1:fe:bb:94:1e:e9:a0:32:fa:3b:d0:d5:95:1d:
00:f4:8f:c2:de:0a:c9:86:63:61:a6:13:f2:aa:ad:
e2:f7:4b:f0:86:b3:bd:a0:06:10:b3:05:96:e6:f0:
4f:97:09:81:ea:bd:e5:a4:55:ce:55:5c:18:4b:c2:
af:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:33:C7:6A:5A:3A:13:63:6E:D8:94:6F:EA:74:F5:43:F8:69:51:5F
X509v3 Authority Key Identifier:
keyid:10:4C:4F:CF:88:8F:3C:86:B8:C1:28:D8:1C:5B:95:FE:53:89:BB:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ca:86:6d:38:e9:c1:d2:4d:91:ac:78:27:b7:39:09:f2:41:
6b:bf:ab:d0:9d:8a:6d:1d:2d:23:c8:d7:63:6f:22:f8:06:52:
95:22:a8:84:13:d5:c2:fe:7d:c5:d9:33:81:01:61:12:a3:28:
67:21:97:75:8a:fa:d6:46:5f:8d:c6:23:12:b9:74:04:7b:da:
5c:a4:dd:d4:c3:6a:07:2c:1f:a2:c7:a8:22:1f:8d:9f:e4:29:
66:61:23:92:d2:49:13:ae:95:c1:e1:5e:26:a3:ca:17:08:60:
ec:aa:ed:e0:6e:c9:68:17:75:b2:91:95:a3:3b:d2:c9:cc:14:
34:56:9d:ae:9d:b4:ec:de:0c:78:5d:48:00:66:7f:51:73:90:
db:e5:5a:1c:ea:a8:de:ee:f5:78:53:4c:9c:8f:23:28:1d:da:
3c:0c:76:70:09:ac:66:8c:9f:70:1e:a1:7d:1c:50:f2:43:d7:
98:fd:e3:5a:52:fc:4f:cf:8c:79:93:d9:54:2b:52:8c:1c:de:
d3:4f:6f:b0:b6:58:b4:fb:99:2c:2f:0d:d5:7a:84:5f:3c:d9:
90:90:9f:23:dc:f4:3a:08:28:d0:b7:e4:4c:db:e9:d5:04:a9:
6d:9a:72:83:6b:69:33:c8:aa:e5:84:42:d6:c8:98:2a:bb:27:
2c:84:1d:8e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUUFcX7G6ATLhLis7yWuzIYW/oduIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1RkU1
Mzg5QkI1OTAeFw0yNjAyMDEwNTE1NTZaFw0yNjAyMDQxMzQ3NTZaMDMxMTAvBgNV
BAMTKEI4MzNDNzZBNUEzQTEzNjM2RUQ4OTQ2RkVBNzRGNTQzRjg2OTUxNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV7lX1VcI2rqZ7kHcZC5JAerFC
SIJmmYB6iwnWb/YXWyWcetViQvqIf5lpb6Ue3IgyCws93b35Zlc53yBDiAOEHGTm
aaJGtL6mh4zjum4eJjKS2HRPMvQK1hmrvkEMah+PhxETUnxD7AZRYmXnaEVf/R+1
Q6oTe4Ya4JLRkOu+Uqd23Pip24tR2XUcZ3U16wEvsRlVvmWKbcXVJTnspFfbyZD8
GlMRUU0X0A+ZjIPXuitJNmEXAmjKoDW0UOwYxsKfNxbh/ruUHumgMvo70NWVHQD0
j8LeCsmGY2GmE/KqreL3S/CGs72gBhCzBZbm8E+XCYHqveWkVc5VXBhLwq9LAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUuDPHalo6E2Nu2JRv6nT1Q/hpUV8wHwYDVR0j
BBgwFoAUEExPz4iPPIa4wSjYHFuV/lOJu1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MjhlZWM1Yi01MzI0LTQ0MjItYTMyZi05YjFkY2VkMzc1OWYvMC8xMDRDNEZDRjg4
OEYzQzg2QjhDMTI4RDgxQzVCOTVGRTUzODlCQjU5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1RkU1Mzg5
QkI1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI4ZWVjNWItNTMyNC00NDIyLWEz
MmYtOWIxZGNlZDM3NTlmLzAvMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1
RkU1Mzg5QkI1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAjKhm046cHSTZGseCe3OQnyQWu/q9Cdim0d
LSPI12NvIvgGUpUiqIQT1cL+fcXZM4EBYRKjKGchl3WK+tZGX43GIxK5dAR72lyk
3dTDagcsH6LHqCIfjZ/kKWZhI5LSSROulcHhXiajyhcIYOyq7eBuyWgXdbKRlaM7
0snMFDRWna6dtOzeDHhdSABmf1FzkNvlWhzqqN7u9XhTTJyPIygd2jwMdnAJrGaM
n3AeoX0cUPJD15j941pS/E/PjHmT2VQrUowc3tNPb7C2WLT7mSwvDdV6hF882ZCQ
nyPc9DoIKNC35Ezb6dUEqW2acoNraTPIquWEQtbImCq7JyyEHY4=
-----END CERTIFICATE-----
Generated at Mon Feb 2 10:05:10 2026 by rpki-client