This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft
File: 7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft (raw, json)
Hash identifier: FXLIZqx6j1u1qk2CVrxWX49fmjvuA0TlJJA4BY1MqxI=
Subject key identifier: 65:34:BA:84:3F:D6:C6:25:60:05:BC:DA:A0:4C:2B:D2:82:B6:2E:B5
Authority key identifier: 7E:8D:E1:54:9E:89:D4:B4:80:B5:56:69:5C:AB:E9:CE:7F:DF:5F:24
Certificate issuer: /CN=7E8DE1549E89D4B480B556695CABE9CE7FDF5F24
Certificate serial: 0DB14593BE62748DEAAF6C0310BBBD2666871748
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft
Manifest number: BE
Signing time: Sat 31 Jan 2026 21:01:04 +0000
Manifest this update: Sat 31 Jan 2026 20:56:04 +0000
Manifest next update: Tue 03 Feb 2026 22:20:04 +0000
Files and hashes: 1: 323030313a6466343a396134303a3a2f34382d3438203d3e20313533313439.roa (hash: ScM8Q2LMGZOkrNtPg/8PjLIyPY1b7rJ+ByzrKdDmKiU=)
2: 7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl (hash: LihnfN5hufdlti1lrTV3amkGvYTm7E9AVvCZLrkgNLI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl
rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 22:20:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:b1:45:93:be:62:74:8d:ea:af:6c:03:10:bb:bd:26:66:87:17:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E8DE1549E89D4B480B556695CABE9CE7FDF5F24
Validity
Not Before: Jan 31 20:56:04 2026 GMT
Not After : Feb 3 22:20:04 2026 GMT
Subject: CN=6534BA843FD6C6256005BCDAA04C2BD282B62EB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:08:63:9c:15:e3:23:01:ef:8f:5f:14:f5:b6:
46:ea:a6:28:73:b0:08:c3:d4:d9:e6:62:4b:53:c6:
ef:bd:e0:4d:7d:47:19:e0:05:80:4f:88:e3:c7:90:
c8:46:fd:40:5a:59:88:d7:ce:a6:02:45:c4:4d:57:
8a:57:6b:e4:a5:4f:d3:d2:36:4b:83:0c:2e:29:46:
da:2d:11:6c:ad:a2:55:9a:a0:4f:49:85:49:7e:52:
0f:81:6b:d8:89:fd:6a:e0:b6:83:0c:9e:20:c7:1a:
9f:52:1f:86:e7:5b:a8:50:27:78:9b:41:7e:ef:09:
f4:7a:9d:83:fc:d8:d8:58:fe:fc:c5:33:ae:ad:0a:
b0:29:6b:dc:08:2d:b6:a0:88:ba:b0:1b:43:14:cd:
99:73:68:ec:f3:b3:04:42:08:01:5f:24:c0:2b:3c:
1c:2d:fe:1a:33:46:aa:38:71:78:eb:23:e1:10:95:
9f:26:8b:74:af:0d:c5:79:ff:d8:e4:75:7e:8a:c1:
dc:e4:6f:ed:75:02:38:a9:25:bf:74:48:77:ae:24:
45:a1:7e:75:b0:f6:0e:4b:b6:22:ae:db:7d:38:b4:
92:bc:7a:e9:ae:97:86:55:de:d8:fd:ae:f9:3d:24:
8a:1d:3d:41:4a:60:24:30:c1:a7:84:9c:1d:b7:4b:
be:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:34:BA:84:3F:D6:C6:25:60:05:BC:DA:A0:4C:2B:D2:82:B6:2E:B5
X509v3 Authority Key Identifier:
keyid:7E:8D:E1:54:9E:89:D4:B4:80:B5:56:69:5C:AB:E9:CE:7F:DF:5F:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:81:fb:f4:0a:be:6c:38:54:a2:44:58:d4:38:cb:e8:11:81:
b6:6f:1e:9e:7d:b3:4a:92:89:a9:ef:2c:a9:05:6a:68:3f:35:
03:1a:d0:de:2b:3f:fd:4f:d7:69:cb:f0:50:ca:35:a5:db:ce:
2b:61:0c:d2:a9:f3:07:b8:89:31:a4:8a:a1:50:77:f6:d7:6a:
e4:4f:e7:70:a7:93:a8:25:86:c4:10:72:9d:00:26:12:6d:20:
8b:e2:b5:51:89:9b:ce:48:2a:29:b4:36:01:77:40:6a:28:ff:
4e:c7:7f:02:85:73:14:a8:35:72:e2:cc:ef:13:e0:3e:71:f6:
bf:73:e4:05:4e:64:e6:ec:48:79:40:d5:ba:53:50:11:62:bf:
01:27:cc:94:fb:2a:e3:24:07:8a:17:b5:90:59:a5:49:f9:d4:
8e:df:ed:1d:c9:bc:69:66:cf:e1:b8:bd:a9:74:e6:ad:0f:84:
9b:39:35:84:a8:c5:06:b9:4a:f5:ed:a8:7d:95:02:33:bc:bf:
dc:a9:45:60:c1:bc:15:0d:06:4f:1b:39:9e:17:6b:74:b3:92:
a6:61:32:d5:71:ba:0a:46:97:2f:14:16:1b:cb:20:31:15:bf:
50:c1:06:c5:52:ae:8f:45:83:81:68:99:34:a5:88:59:c6:a0:
9d:8b:4c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:47 2026 by rpki-client