This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.mft
File: 26B04331F3DBA70B694F2FFF371C85EE023FB70F.mft (raw, json)
Hash identifier: S3PCO7PnCrQRcwcVMUnBYk6fhNWN/uD8blBV/bZotpI=
Subject key identifier: 8B:09:D8:28:82:20:57:92:DE:BF:40:9D:F0:4E:ED:B7:C1:83:AE:06
Authority key identifier: 26:B0:43:31:F3:DB:A7:0B:69:4F:2F:FF:37:1C:85:EE:02:3F:B7:0F
Certificate issuer: /CN=26B04331F3DBA70B694F2FFF371C85EE023FB70F
Certificate serial: 7FAF75F2612A0F1695DCCC12C958F88494B33FE9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26B04331F3DBA70B694F2FFF371C85EE023FB70F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.mft
Manifest number: 028B
Signing time: Sun 01 Feb 2026 09:50:42 +0000
Manifest this update: Sun 01 Feb 2026 09:45:42 +0000
Manifest next update: Wed 04 Feb 2026 20:52:42 +0000
Files and hashes: 1: 26B04331F3DBA70B694F2FFF371C85EE023FB70F.crl (hash: ECfhufasMSN75BvGtv9lkW6QfIu07jJTfcWobM1+SY4=)
2: 3130332e3138302e302e302f32332d3233203d3e2039333431.roa (hash: +s+ZoPDcwc45gGow9YdBPADqPzbPO8zvkcvI3KhfKWg=)
3: 3130332e3138302e302e302f32342d3234203d3e2039333431.roa (hash: 8QADEgAErVDYeQ0m0w7xjODJNew42ezz18E9+und7b8=)
4: 3130332e3138302e312e302f32342d3234203d3e2039333431.roa (hash: ikGxWPZOEbgUDak1S8/4CtTFLYGMeDrUhJdgA4v8gic=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.crl
rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26B04331F3DBA70B694F2FFF371C85EE023FB70F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 20:52:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:af:75:f2:61:2a:0f:16:95:dc:cc:12:c9:58:f8:84:94:b3:3f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26B04331F3DBA70B694F2FFF371C85EE023FB70F
Validity
Not Before: Feb 1 09:45:42 2026 GMT
Not After : Feb 4 20:52:42 2026 GMT
Subject: CN=8B09D82882205792DEBF409DF04EEDB7C183AE06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c5:34:28:d7:22:23:91:2e:0d:20:72:6f:17:
3c:5b:77:e0:e0:2e:e5:0f:88:70:2a:c8:4a:97:4c:
e7:8c:86:4a:7c:27:17:c0:72:fa:e2:61:35:e9:30:
e0:4d:c8:e4:9a:64:76:c2:40:4c:79:0d:c7:9d:23:
c4:c8:e6:c1:06:86:45:a2:bf:98:30:19:ce:a3:89:
b6:ae:90:37:78:14:74:69:74:b5:5a:52:02:0c:cc:
5b:62:8d:54:e3:4c:29:96:02:08:c9:3e:39:08:5b:
17:98:6d:d8:58:22:97:a1:97:9b:99:66:43:5b:5c:
a4:d8:f3:c2:0d:51:0e:ae:25:07:b2:1d:cf:54:1c:
9d:32:65:dd:e6:99:83:15:27:b2:98:88:ae:2e:3a:
32:ec:b8:52:87:2e:e0:c4:44:49:53:80:e2:e0:c7:
6d:9c:80:cd:c9:70:aa:57:8c:2a:bd:cd:0e:0d:a9:
e8:d9:e6:f7:96:9d:b4:39:e1:47:68:7a:d8:9e:b4:
d5:cc:93:97:ff:a5:4e:99:5b:3d:23:b9:8c:eb:b4:
35:b1:c8:01:d7:33:fd:da:79:03:87:82:c9:0b:31:
a1:b7:8a:9a:62:e4:39:9e:03:27:e2:2a:44:b4:0e:
94:0a:1d:54:ab:33:c8:2e:8f:54:39:c3:0a:ab:e5:
6a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:09:D8:28:82:20:57:92:DE:BF:40:9D:F0:4E:ED:B7:C1:83:AE:06
X509v3 Authority Key Identifier:
keyid:26:B0:43:31:F3:DB:A7:0B:69:4F:2F:FF:37:1C:85:EE:02:3F:B7:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26B04331F3DBA70B694F2FFF371C85EE023FB70F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:e6:bc:5a:7e:67:fa:f9:36:77:db:ee:2f:4c:3e:18:62:52:
3f:e6:05:fa:b1:44:21:7a:21:e6:4a:7f:0d:95:cc:6a:aa:89:
d4:21:37:c1:1f:2b:63:75:73:4c:78:ab:21:cd:4e:9b:e7:33:
d0:3c:46:80:f4:1c:6b:38:2e:40:f7:61:e8:f1:51:16:d6:b6:
03:a3:59:6a:66:72:3c:92:5b:a8:09:f3:ec:db:aa:89:8b:7c:
3e:c9:e8:e2:4f:c4:41:8b:e4:e8:6b:a4:11:98:6d:5a:76:e3:
a7:f4:d9:e0:a5:f3:4b:de:31:44:de:75:aa:56:62:96:ba:7f:
7c:89:d5:1f:cb:23:20:0a:3d:c3:00:b2:af:90:20:41:a9:da:
83:23:89:18:fe:20:9d:36:cb:7e:d6:e3:6b:75:6c:36:ac:54:
43:f1:fe:54:bd:5a:29:bb:56:d8:28:ae:42:5d:d1:a4:60:ff:
d3:a0:eb:a4:ee:3b:dd:00:c3:aa:4c:34:75:ed:3c:0a:40:6b:
c6:7b:ae:64:80:fe:23:87:81:92:90:bd:6b:64:ea:7c:9b:08:
06:e5:06:2c:69:fe:0f:e3:c1:4b:b7:b5:03:06:78:83:de:d9:
07:50:ff:8a:0a:02:8e:2f:ad:9c:bb:a4:a9:24:c2:42:2d:61:
a9:e9:50:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:05 2026 by rpki-client