This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft
File: A61585874729C58BB62740692BA8FA6ED286FDC9.mft (raw, json)
Hash identifier: rSeXe9UaVlj1u4k/KNLWGK6xRPm0PV2jFgK4Es9J63M=
Subject key identifier: 5F:15:01:05:AD:49:C6:D1:EE:D3:9D:A5:F7:5A:8C:0E:0C:D5:1C:2A
Authority key identifier: A6:15:85:87:47:29:C5:8B:B6:27:40:69:2B:A8:FA:6E:D2:86:FD:C9
Certificate issuer: /CN=A61585874729C58BB62740692BA8FA6ED286FDC9
Certificate serial: 0AC8BDE8BB47B3A33F77DCCE14E5ADCC309F53BC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft
Manifest number: 0229
Signing time: Sun 01 Feb 2026 12:32:05 +0000
Manifest this update: Sun 01 Feb 2026 12:27:05 +0000
Manifest next update: Wed 04 Feb 2026 19:28:05 +0000
Files and hashes: 1: A61585874729C58BB62740692BA8FA6ED286FDC9.crl (hash: f2Q0EiXv2/OjHcR0vJPSrk0XXZ8+EPvW9RlIPM9cy1w=)
2: 3130332e3234352e3137382e302f32342d3234203d3e2039333431.roa (hash: OVp41P8XiusORgDYjhyG3tIoN5ypPHdHjH6RGxbqADk=)
3: 3130332e3234352e3137382e302f32332d3233203d3e2039333431.roa (hash: 3t8POxW2mcQ/nvjJPU9gXim41a5qa0GKDf3HQqW/V6Y=)
4: 3130332e3234352e3137392e302f32342d3234203d3e2039333431.roa (hash: e1O7IFU9uCaYA+jMLBiE2GdFukypRRniAf+RRVQm+So=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.crl
rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 19:28:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:c8:bd:e8:bb:47:b3:a3:3f:77:dc:ce:14:e5:ad:cc:30:9f:53:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A61585874729C58BB62740692BA8FA6ED286FDC9
Validity
Not Before: Feb 1 12:27:05 2026 GMT
Not After : Feb 4 19:28:05 2026 GMT
Subject: CN=5F150105AD49C6D1EED39DA5F75A8C0E0CD51C2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:52:62:d6:78:23:e7:a4:18:a4:7d:00:b8:aa:
7f:c8:29:3a:be:5f:60:e2:f8:bb:46:68:b0:a9:19:
43:b9:d8:20:c4:e0:e7:56:8a:e9:29:e9:8e:e6:ba:
3e:e9:bd:4d:fc:81:ef:ad:94:cc:14:be:b1:13:2e:
95:4a:eb:2e:bc:38:36:27:9c:b9:3e:80:1f:1a:01:
d4:67:58:26:81:a7:83:a5:3b:d0:74:72:99:75:28:
39:54:d5:00:9a:22:d7:9c:b4:80:d9:25:9f:59:f0:
58:7c:09:c6:ab:7c:67:53:e8:f1:0d:1f:35:1b:6a:
c1:6a:08:60:71:b4:24:08:4f:13:11:ca:36:19:38:
3b:99:79:f3:87:56:e0:7c:e1:d9:29:78:23:81:b8:
97:75:05:8b:6f:98:b6:5f:7a:09:32:c6:2c:ee:e4:
14:fe:94:08:71:4f:bc:8d:6e:12:73:92:c2:49:73:
c7:5c:1f:e9:64:33:78:8d:3e:fa:d2:01:8d:f1:0f:
99:14:c9:ef:68:82:40:61:75:d9:61:9e:9a:95:1f:
b0:5f:bb:41:0e:d3:8f:7a:73:85:d0:95:61:cd:4b:
ab:37:69:48:e5:6f:69:4c:fc:aa:a7:6a:01:b8:8a:
d1:1a:15:64:8a:2d:75:5a:0d:ea:6b:cf:7e:22:dd:
c8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:15:01:05:AD:49:C6:D1:EE:D3:9D:A5:F7:5A:8C:0E:0C:D5:1C:2A
X509v3 Authority Key Identifier:
keyid:A6:15:85:87:47:29:C5:8B:B6:27:40:69:2B:A8:FA:6E:D2:86:FD:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:d1:38:bd:7e:4d:6b:71:50:64:c8:8b:27:9b:cd:f7:60:71:
3d:84:4b:7d:de:c7:9b:d2:73:ef:38:97:e4:16:ea:14:4c:e1:
73:42:53:ca:7d:f7:52:4a:7f:80:2f:24:5b:89:e8:5a:8d:31:
69:fd:5e:1a:c7:51:2e:73:00:aa:aa:d4:6b:2d:63:1f:b6:13:
d9:14:a7:72:a0:f5:bb:40:1f:45:a4:96:b9:15:d3:64:63:1a:
e0:31:d9:8f:10:1a:0d:33:82:12:f1:1f:11:7e:72:85:68:f2:
26:f0:64:e4:07:8f:46:2d:e7:a4:dd:da:56:f4:4f:15:7b:b2:
52:83:40:ea:23:45:72:61:c6:dc:09:ca:3b:e4:68:5b:e5:64:
5b:42:3c:65:81:9e:b3:15:d9:eb:fb:a6:bd:0b:32:8c:10:f9:
a0:88:6f:b3:10:8b:b2:f0:b2:cf:3a:bb:e1:b8:b1:18:c1:f3:
0f:30:4c:8d:f8:12:bc:03:a9:4c:4b:16:5e:d8:3e:a9:50:89:
ae:9e:67:90:ad:02:e4:38:31:dc:56:0d:1c:cc:2c:c1:e9:67:
12:fe:12:89:24:aa:8f:a1:83:42:98:95:8f:8c:9e:d2:53:a7:
72:f9:4d:56:2b:62:3f:ac:e1:3c:f4:ca:64:9b:28:16:26:6d:
2e:fc:8b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 15:48:33 2026 by rpki-client