This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft
File: F40A3B698C292462E4AF862C69FB242F66E56191.mft (raw, json)
Hash identifier: 2dBnNPokyKn9UdS/bhCx3Gdcelh5ZHAPd0Kc6LUda8A=
Subject key identifier: E4:88:E5:23:D4:61:22:05:18:18:AD:05:98:11:4C:B3:A0:0F:DD:B7
Authority key identifier: F4:0A:3B:69:8C:29:24:62:E4:AF:86:2C:69:FB:24:2F:66:E5:61:91
Certificate issuer: /CN=F40A3B698C292462E4AF862C69FB242F66E56191
Certificate serial: 7257F77B07DBB6BF8B756B6A6620681AC8C43359
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F40A3B698C292462E4AF862C69FB242F66E56191.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft
Manifest number: 0346
Signing time: Sat 31 Jan 2026 11:00:53 +0000
Manifest this update: Sat 31 Jan 2026 10:55:53 +0000
Manifest next update: Tue 03 Feb 2026 17:38:53 +0000
Files and hashes: 1: 3130332e3137342e33362e302f32332d3234203d3e20313331313131.roa (hash: gIT/zHc/1K0b1PiVmUPHw03fHkctz7eSoTHWuLp5tjo=)
2: F40A3B698C292462E4AF862C69FB242F66E56191.crl (hash: YckeII7tBEywrh0MmjHbOZemKrFhQrzMOas3fjQUd4U=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.crl
rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F40A3B698C292462E4AF862C69FB242F66E56191.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 17:38:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:57:f7:7b:07:db:b6:bf:8b:75:6b:6a:66:20:68:1a:c8:c4:33:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F40A3B698C292462E4AF862C69FB242F66E56191
Validity
Not Before: Jan 31 10:55:53 2026 GMT
Not After : Feb 3 17:38:53 2026 GMT
Subject: CN=E488E523D46122051818AD0598114CB3A00FDDB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:49:3b:b4:81:80:4b:f3:be:67:35:c7:5b:88:
4b:c0:3a:73:2e:59:a6:78:4e:bd:e7:91:4c:dc:28:
92:6f:da:05:7b:5d:d6:72:e8:08:bb:4c:ed:3d:b7:
20:e4:f6:ab:a0:b4:b5:52:5d:07:85:1b:ca:ae:c4:
a3:72:a0:87:65:e8:82:a0:5d:46:50:89:65:f7:22:
ee:43:2e:b1:ae:09:35:6c:9e:de:31:78:e3:37:84:
5e:9c:89:26:da:fd:3c:33:00:b8:44:a4:cd:a7:62:
51:c2:28:48:af:36:c9:fd:4b:62:50:bc:7b:14:f7:
a1:35:fa:4c:2b:6a:17:84:29:f3:3a:cf:30:0b:f3:
32:7f:39:eb:68:ea:1a:96:69:fb:fb:67:1f:39:88:
44:de:1b:51:b0:38:9e:79:5d:03:07:be:d7:11:51:
60:4c:ee:81:9e:46:c6:66:5b:19:8a:f5:4c:f3:ad:
8d:23:b5:89:7f:b8:54:eb:89:b3:6b:d0:18:28:f3:
44:75:d0:2e:8b:cf:f1:5a:ec:f0:b1:44:5b:a4:1b:
13:50:28:1b:73:bd:13:82:63:69:62:e5:e3:04:8e:
09:ad:72:0d:0f:0b:fe:eb:1e:63:5e:c8:9a:5e:25:
93:7c:87:af:e2:98:2b:1d:bd:27:40:c6:98:4f:2f:
a3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:88:E5:23:D4:61:22:05:18:18:AD:05:98:11:4C:B3:A0:0F:DD:B7
X509v3 Authority Key Identifier:
keyid:F4:0A:3B:69:8C:29:24:62:E4:AF:86:2C:69:FB:24:2F:66:E5:61:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F40A3B698C292462E4AF862C69FB242F66E56191.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:09:f2:d7:ba:a3:03:a4:44:45:ff:ee:35:24:61:81:63:e8:
77:d3:53:88:56:8b:40:08:ab:2a:6e:2b:0d:15:a6:62:07:6a:
f8:06:82:dd:ec:2e:9f:72:9f:26:3e:da:26:f5:aa:98:25:d7:
61:47:10:dd:14:d8:61:4f:a6:9e:d4:7a:9e:3a:e7:61:ed:d2:
bf:98:81:f1:4f:88:ba:33:ff:a5:78:8a:39:41:d2:91:a8:48:
16:3b:8f:d4:3f:29:2f:ec:b5:9d:75:11:bb:91:74:d3:4c:36:
d0:be:fd:d1:1b:d0:62:b5:2d:68:cf:5a:d3:40:6c:59:c5:5e:
9e:fa:b7:71:26:b0:51:b8:86:c7:45:df:20:86:9a:5d:f9:fd:
1e:e6:79:84:ee:cc:df:58:25:06:e2:f7:bb:bf:57:42:5f:06:
da:1e:98:e0:87:53:b3:62:e0:07:46:7f:15:14:d5:1c:67:93:
46:4d:62:7a:f9:09:ab:b3:1b:0b:29:32:ba:99:61:00:c7:a6:
3f:1d:bf:8f:b7:08:58:a4:86:2a:70:14:f5:70:1f:7f:5a:42:
8d:a6:b7:3e:80:1d:bc:9c:6b:91:2f:e9:13:2b:58:2d:2d:6c:
45:53:be:21:b2:f3:51:53:8d:62:56:77:5b:8c:34:13:b0:1e:
83:30:ec:5c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUclf3ewfbtr+LdWtqZiBoGsjEM1kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjQwQTNCNjk4QzI5MjQ2MkU0QUY4NjJDNjlGQjI0MkY2
NkU1NjE5MTAeFw0yNjAxMzExMDU1NTNaFw0yNjAyMDMxNzM4NTNaMDMxMTAvBgNV
BAMTKEU0ODhFNTIzRDQ2MTIyMDUxODE4QUQwNTk4MTE0Q0IzQTAwRkREQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLSTu0gYBL875nNcdbiEvAOnMu
WaZ4Tr3nkUzcKJJv2gV7XdZy6Ai7TO09tyDk9qugtLVSXQeFG8quxKNyoIdl6IKg
XUZQiWX3Iu5DLrGuCTVsnt4xeOM3hF6ciSba/TwzALhEpM2nYlHCKEivNsn9S2JQ
vHsU96E1+kwraheEKfM6zzAL8zJ/Oeto6hqWafv7Zx85iETeG1GwOJ55XQMHvtcR
UWBM7oGeRsZmWxmK9UzzrY0jtYl/uFTribNr0Bgo80R10C6Lz/Fa7PCxRFukGxNQ
KBtzvROCY2li5eMEjgmtcg0PC/7rHmNeyJpeJZN8h6/imCsdvSdAxphPL6OvAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU5IjlI9RhIgUYGK0FmBFMs6AP3bcwHwYDVR0j
BBgwFoAU9Ao7aYwpJGLkr4YsafskL2blYZEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
NGEyM2M0ZS0zOTMyLTQzYmQtODE3Ni1mNjI1MWRkZWE4NDIvMC9GNDBBM0I2OThD
MjkyNDYyRTRBRjg2MkM2OUZCMjQyRjY2RTU2MTkxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjQwQTNCNjk4QzI5MjQ2MkU0QUY4NjJDNjlGQjI0MkY2NkU1
NjE5MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzRhMjNjNGUtMzkzMi00M2JkLTgx
NzYtZjYyNTFkZGVhODQyLzAvRjQwQTNCNjk4QzI5MjQ2MkU0QUY4NjJDNjlGQjI0
MkY2NkU1NjE5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAI0J8te6owOkREX/7jUkYYFj6HfTU4hWi0AI
qypuKw0VpmIHavgGgt3sLp9ynyY+2ib1qpgl12FHEN0U2GFPpp7Uep4652Ht0r+Y
gfFPiLoz/6V4ijlB0pGoSBY7j9Q/KS/stZ11EbuRdNNMNtC+/dEb0GK1LWjPWtNA
bFnFXp76t3EmsFG4hsdF3yCGml35/R7meYTuzN9YJQbi97u/V0JfBtoemOCHU7Ni
4AdGfxUU1Rxnk0ZNYnr5CauzGwspMrqZYQDHpj8dv4+3CFikhipwFPVwH39aQo2m
tz6AHbyca5Ev6RMrWC0tbEVTviGy81FTjWJWd1uMNBOwHoMw7Fw=
-----END CERTIFICATE-----
Generated at Mon Feb 2 09:44:03 2026 by rpki-client