This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft
File: 4F40845626DE4E373F550B654EA4E833B6EB4D27.mft (raw, json)
Hash identifier: QIcuUqXrUohPqtxuTDx7K6IgkU4TMlrPW0YuEM1MkbU=
Subject key identifier: 8D:0D:4A:E8:8F:4E:C6:32:04:9F:BD:13:DD:D1:92:3A:E7:52:FE:FA
Authority key identifier: 4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27
Certificate issuer: /CN=4F40845626DE4E373F550B654EA4E833B6EB4D27
Certificate serial: 0B1A86C88B44D69066F6D9592533DD57425740EF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft
Manifest number: 03EE
Signing time: Sun 01 Feb 2026 16:00:01 +0000
Manifest this update: Sun 01 Feb 2026 15:55:01 +0000
Manifest next update: Wed 04 Feb 2026 21:01:01 +0000
Files and hashes: 1: 4F40845626DE4E373F550B654EA4E833B6EB4D27.crl (hash: r07ZtqVKeiPDvUxeRErJlEPZ3NXsZe03c5n/LzhacwE=)
2: 3130332e3136382e3134362e302f32342d3234203d3e20313430343433.roa (hash: 6CnrGX1LrXJO/2xiSh7/WQeAAu4zVMBvJoPd9Ck/Xbs=)
3: 3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa (hash: qE8KSOdMtc/r9rxeBM2pwg3ZFTLF2GFJiqstVLHlsTo=)
4: 3130332e3136382e3134372e302f32342d3234203d3e20313430343433.roa (hash: 8U1YdeabpMcYCkPujQ3tfYK2Gg3om+TR67FcBFNrj1s=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl
rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:1a:86:c8:8b:44:d6:90:66:f6:d9:59:25:33:dd:57:42:57:40:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F40845626DE4E373F550B654EA4E833B6EB4D27
Validity
Not Before: Feb 1 15:55:01 2026 GMT
Not After : Feb 4 21:01:01 2026 GMT
Subject: CN=8D0D4AE88F4EC632049FBD13DDD1923AE752FEFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b7:78:d4:e9:1c:c2:17:98:68:ed:02:dc:df:
a0:a3:6a:f0:fa:8e:c1:54:19:fe:67:b0:9b:b2:60:
3c:1e:0d:2b:06:9d:ef:ea:59:2f:fb:71:4a:ed:3c:
95:e6:0e:98:d5:62:65:0f:ab:f3:3c:41:ec:ed:1d:
e4:8d:0e:65:b4:24:3f:8e:e8:28:4c:46:6a:e5:ce:
85:eb:02:7c:00:49:c6:e0:f1:53:76:a9:10:75:40:
22:a6:db:14:52:4e:cd:ec:bd:49:58:d7:8a:a5:6b:
15:ec:64:b2:a1:04:06:8d:25:72:cd:34:63:15:5c:
37:c0:c6:dc:aa:93:9c:6c:13:f9:4b:8d:5d:55:72:
14:47:bd:25:ac:18:45:4b:6a:95:4c:62:1a:da:51:
2f:aa:d9:f2:68:e4:9e:24:79:e2:10:e3:6c:be:a4:
c8:57:08:c4:f2:c1:f6:62:ba:35:24:05:38:7b:9e:
7c:4a:85:bb:90:70:a3:42:4d:7c:95:4b:19:65:82:
35:de:3f:55:08:e1:8c:b6:72:3a:84:f9:bc:c7:c1:
8e:17:d2:1b:22:a9:89:78:91:20:9b:64:d9:75:cd:
db:f4:f3:32:67:e7:7f:03:6f:6e:8f:64:f0:61:35:
ad:5a:e3:ed:6e:c6:fc:90:99:e5:26:15:4b:d2:56:
9b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0D:4A:E8:8F:4E:C6:32:04:9F:BD:13:DD:D1:92:3A:E7:52:FE:FA
X509v3 Authority Key Identifier:
keyid:4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:3f:be:b7:b5:78:ba:32:04:34:7c:6e:67:92:38:d3:a0:85:
9f:ce:ab:0a:4b:51:f5:17:2c:ac:5e:46:e3:bb:85:86:a1:c5:
51:ed:78:f2:38:04:04:a0:af:85:9f:45:b5:aa:70:f4:8e:15:
bf:f1:e2:49:70:ca:19:f8:1d:e8:2d:a3:67:16:95:ae:1e:0b:
11:b1:1a:c6:86:cd:ff:6e:7d:94:60:e3:25:94:48:98:c9:56:
f2:80:95:9c:03:65:06:40:7d:36:da:79:1f:c0:d4:be:8f:7a:
c1:19:bb:7b:8a:33:38:41:19:b8:a3:21:9a:d1:28:7b:a1:4e:
52:7a:83:81:25:a4:22:59:e8:b4:51:0e:00:56:53:ac:61:db:
9c:04:57:f6:40:cf:8d:76:bc:60:bb:6e:05:20:e7:32:3f:61:
83:12:1e:19:82:48:19:e7:87:63:35:59:cd:a1:27:39:bb:5a:
9d:3d:33:87:12:e6:45:80:b8:13:bc:71:ba:69:6e:68:27:40:
3c:53:d8:7c:49:30:a5:63:e6:b2:4f:b6:66:55:d6:ca:b3:0f:
7b:4c:c0:7a:fe:e0:02:af:2a:36:b3:65:cf:83:78:75:22:d5:
15:94:06:24:d3:de:93:45:85:78:3e:1c:27:c8:ef:02:83:20:
fb:19:fc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 16:00:38 2026 by rpki-client