This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft
File: 215123CDB8D789B3519CFF4175FFDD832853F5BE.mft (raw, json)
Hash identifier: 0xLUv0eb9mHQrea7xSddIXH5k/e6vEfsr7JPTlj8/Mg=
Subject key identifier: 9A:43:A8:9F:6A:DF:EB:4E:38:D5:1B:AD:F8:14:A9:A2:D5:67:A1:AE
Authority key identifier: 21:51:23:CD:B8:D7:89:B3:51:9C:FF:41:75:FF:DD:83:28:53:F5:BE
Certificate issuer: /CN=215123CDB8D789B3519CFF4175FFDD832853F5BE
Certificate serial: 148584124362A13B70E48EDD5662501224DB891C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft
Manifest number: 0161
Signing time: Tue 10 Feb 2026 07:21:07 +0000
Manifest this update: Tue 10 Feb 2026 07:16:07 +0000
Manifest next update: Fri 13 Feb 2026 14:01:07 +0000
Files and hashes: 1: 3130332e3234352e3232362e302f32342d3234203d3e203233363739.roa (hash: qKtc40b4lQF3hAURWdkBNRY70djjte8YqcsMlRaaEzM=)
2: 215123CDB8D789B3519CFF4175FFDD832853F5BE.crl (hash: VRz8RPUVnBd2odEKnYs1QSGHvtk9XBgkGNull2Ce1y4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.crl
rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Feb 2026 14:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:85:84:12:43:62:a1:3b:70:e4:8e:dd:56:62:50:12:24:db:89:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215123CDB8D789B3519CFF4175FFDD832853F5BE
Validity
Not Before: Feb 10 07:16:07 2026 GMT
Not After : Feb 13 14:01:07 2026 GMT
Subject: CN=9A43A89F6ADFEB4E38D51BADF814A9A2D567A1AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:be:79:a4:4e:ef:a8:95:b9:1f:73:f7:2c:7d:
ca:15:f9:1a:d6:4a:7a:fa:46:0b:65:00:97:72:9a:
1d:7f:b5:6c:6f:d1:3d:14:6e:9a:67:d3:2c:d9:30:
ac:41:44:fc:7d:d0:e0:d1:88:ef:90:25:05:4d:3d:
9c:c6:3a:8d:98:3c:d5:be:70:b5:c5:b4:7c:fe:36:
b3:6d:3b:5b:10:72:60:ce:ff:2d:a7:8b:d2:7e:f0:
93:dc:5b:a1:02:a3:26:09:bd:ee:98:0d:de:f4:d4:
6a:92:bb:3f:8b:09:49:b6:ad:dd:90:7d:b5:1f:61:
09:e1:c2:37:a7:57:16:5a:b9:37:62:2c:d4:4a:d6:
f7:5d:27:ee:c2:d8:1c:81:74:75:9d:2c:26:93:2a:
b0:40:74:bb:97:3f:32:e8:8f:9b:75:68:c0:85:0b:
d4:62:97:d9:3c:84:97:7f:cf:f6:2e:fe:32:6b:d9:
4f:80:11:70:2b:94:09:d0:bb:42:00:85:da:0b:98:
8a:8a:56:75:23:80:6e:f4:39:00:25:9b:4b:58:4f:
f5:3c:64:b3:5b:d0:4d:2e:92:16:fe:f4:f8:47:92:
93:45:57:97:97:58:7d:bf:8e:55:a2:57:5b:47:fe:
82:af:00:e3:a3:13:e3:07:8c:a0:a1:83:32:47:59:
9f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:43:A8:9F:6A:DF:EB:4E:38:D5:1B:AD:F8:14:A9:A2:D5:67:A1:AE
X509v3 Authority Key Identifier:
keyid:21:51:23:CD:B8:D7:89:B3:51:9C:FF:41:75:FF:DD:83:28:53:F5:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:57:f3:08:86:b3:30:9f:14:36:63:a0:4c:54:85:bd:e8:ca:
46:98:4c:ec:08:54:69:56:17:43:a4:75:0e:dc:7b:35:b3:ee:
e9:80:dc:b9:f7:cc:e9:c4:04:d0:47:15:76:ee:48:86:4f:5f:
43:0e:f3:61:1f:a1:de:88:06:0e:35:99:bb:75:6d:c3:30:21:
4f:d0:14:54:fc:a2:fc:45:a9:1b:28:e4:a4:25:4f:c1:bb:c7:
b8:4d:58:e3:0b:58:81:95:cb:b7:cd:d5:22:89:94:e2:2a:a5:
d1:74:79:b5:11:6c:43:85:23:dc:f9:94:4c:e5:26:d5:f0:f4:
ab:65:51:01:19:1e:b5:4b:ca:4e:24:fc:24:1b:46:94:b4:4e:
76:63:b1:58:14:89:da:9d:3c:f9:c5:1f:bf:11:ca:f0:70:89:
b9:7b:b5:a7:1a:56:94:e2:15:7c:67:b0:80:99:c7:b5:3d:6a:
bc:0a:fd:5c:c0:3b:ab:09:2c:3d:aa:01:cf:f4:93:8b:dc:20:
29:a8:32:76:c1:9c:b6:7e:02:f6:d0:ef:86:72:a9:b5:78:20:
d6:86:99:49:ea:07:80:6d:58:11:54:c1:99:e3:dc:52:c6:dc:
da:c4:43:57:7e:c0:5a:91:78:75:80:4a:30:6a:8b:96:8a:29:
78:1a:da:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 14:58:39 2026 by rpki-client