This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft
File: 0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft (raw, json)
Hash identifier: C0rwLGNC7VLKNG/UNxWVRyR+KShDM8PvKbCVnZpSqrc=
Subject key identifier: B4:B6:E3:D5:75:5E:EF:9C:12:19:59:8F:7D:E1:54:B9:AD:02:5B:61
Authority key identifier: 0D:F8:1F:0E:E9:9B:2E:06:DB:6C:AE:E0:5C:C3:01:BE:3A:23:D1:37
Certificate issuer: /CN=0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137
Certificate serial: 4FE195BA32E8E5BF49DD7049002571A06E9B4FE3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft
Manifest number: 0549
Signing time: Mon 02 Feb 2026 01:52:03 +0000
Manifest this update: Mon 02 Feb 2026 01:47:03 +0000
Manifest next update: Thu 05 Feb 2026 11:51:03 +0000
Files and hashes: 1: 0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl (hash: 8nNqjUhax7SLH/5Fj3j1WgH5stys5jaWOwpZgkEFDWI=)
2: 3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa (hash: hqaKmxf71nI6HTBMvNY3G6OZQcwY11nDuhu6Wp5x5hA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl
rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:e1:95:ba:32:e8:e5:bf:49:dd:70:49:00:25:71:a0:6e:9b:4f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137
Validity
Not Before: Feb 2 01:47:03 2026 GMT
Not After : Feb 5 11:51:03 2026 GMT
Subject: CN=B4B6E3D5755EEF9C1219598F7DE154B9AD025B61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d4:4a:e1:dc:22:b8:c9:75:b0:a1:2c:c1:e1:
1a:5e:2b:da:86:75:e0:61:b1:bc:af:19:8c:fb:d8:
af:9e:6f:a0:c4:5e:e7:7b:c5:d9:5a:df:4f:53:2c:
6e:d9:c5:2c:fa:f8:dd:bc:71:dd:1a:ed:d0:1a:27:
c0:ed:98:9a:6f:be:bf:6c:63:a1:0d:36:04:63:32:
5a:e3:96:cd:ab:c3:77:03:85:57:48:84:d1:75:65:
3a:99:b9:5a:fd:86:05:4a:40:cc:dc:0f:b1:a8:0d:
4f:c1:8f:35:ac:1c:b8:1e:96:d6:e6:27:66:34:a9:
ab:d8:9c:c2:f7:82:b8:b4:f9:85:23:4a:76:95:10:
19:4b:b5:b5:9b:32:62:5f:b9:85:37:e9:d0:91:29:
9c:6e:df:eb:69:02:ad:c0:6e:4b:44:6a:ff:29:3d:
1e:44:d9:d3:19:80:ab:4b:cf:1d:a5:71:fe:bc:ed:
bc:9e:87:64:9d:5c:1e:05:79:f3:56:bd:14:f6:12:
6e:7d:c1:20:0a:6d:12:cd:43:70:7b:2b:ae:7c:8d:
e0:24:04:77:37:8b:b0:bd:56:6d:08:b9:23:23:02:
17:1e:61:ac:65:90:54:15:84:68:3b:4c:76:4a:4a:
7f:a6:51:6c:50:48:71:02:56:d7:2b:ad:f3:7a:f5:
5b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B6:E3:D5:75:5E:EF:9C:12:19:59:8F:7D:E1:54:B9:AD:02:5B:61
X509v3 Authority Key Identifier:
keyid:0D:F8:1F:0E:E9:9B:2E:06:DB:6C:AE:E0:5C:C3:01:BE:3A:23:D1:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c2:d0:4e:c9:53:da:81:8c:da:00:28:e5:4c:5a:b2:ba:62:
1b:75:f9:b4:53:e3:ac:c5:6a:91:67:cb:be:6b:26:02:4d:65:
30:18:5f:7d:df:fa:17:cf:48:86:e8:9e:1a:25:f8:2e:03:12:
73:ed:4d:eb:d8:1f:81:54:4a:e5:d8:53:ac:45:64:f0:a5:b3:
ee:71:46:0a:bf:cc:ef:26:0d:8b:49:f0:ca:d6:79:12:1b:28:
5c:ec:62:fc:1d:3b:01:99:cf:d7:da:47:b9:4b:93:f5:9b:ba:
5d:6e:f4:03:1a:f5:11:20:77:f6:f8:6a:d8:db:bf:06:98:7e:
3c:06:ff:ee:46:61:ad:52:6d:4c:40:0a:19:4d:ac:5e:07:46:
ba:7c:8e:c3:13:6a:2c:19:a3:57:6a:75:04:5f:d1:0d:72:0b:
e9:56:90:ad:8e:a9:1f:b4:6a:2a:57:37:83:d0:bd:eb:f4:35:
5b:e8:c3:89:fd:6e:78:9b:4e:de:dd:75:43:d3:4e:1e:b9:ee:
72:7e:fa:7e:6a:93:4a:ae:82:be:11:84:32:c8:96:49:ff:99:
c4:94:98:d1:ea:02:5f:4e:2c:d8:78:67:cf:49:51:7c:e0:fa:
bf:03:51:91:20:f8:0c:6e:b5:5f:19:57:f5:7c:a7:5d:0d:ec:
25:be:b1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:02:54 2026 by rpki-client