This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.mft
File: 08A94FD7F0E8A287AD318D7A26254192431E175F.mft (raw, json)
Hash identifier: TXk5d83rdBpnD3LwZlVfcgK6NBXb4sfhVWehr8Hl9Hw=
Subject key identifier: 3B:45:52:F2:BB:49:6D:DC:6D:14:97:D0:1A:DC:D9:88:22:07:46:F9
Authority key identifier: 08:A9:4F:D7:F0:E8:A2:87:AD:31:8D:7A:26:25:41:92:43:1E:17:5F
Certificate issuer: /CN=08A94FD7F0E8A287AD318D7A26254192431E175F
Certificate serial: 035F82E6F2F7F85E50815633E0D82937BDF0E7FA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08A94FD7F0E8A287AD318D7A26254192431E175F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.mft
Manifest number: 020C
Signing time: Sun 01 Feb 2026 18:30:42 +0000
Manifest this update: Sun 01 Feb 2026 18:25:42 +0000
Manifest next update: Thu 05 Feb 2026 05:16:42 +0000
Files and hashes: 1: 08A94FD7F0E8A287AD318D7A26254192431E175F.crl (hash: 3gQ3mqtcYJXn6AdAt92LoatCR9qTZhbXFXh8wVEAqRQ=)
2: 3130332e34332e32352e302f32342d3234203d3e20313339343139.roa (hash: VVwVAHNIOyaNlg3HmkibvzkBQxyuJMfLw9qgXP2WedI=)
3: 3130332e34332e32342e302f32342d3234203d3e20313339343139.roa (hash: n37UknBhv1+9WuSxzltTO8fZT8WF7d4rSmL/iPmFdNo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.crl
rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08A94FD7F0E8A287AD318D7A26254192431E175F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:16:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:5f:82:e6:f2:f7:f8:5e:50:81:56:33:e0:d8:29:37:bd:f0:e7:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08A94FD7F0E8A287AD318D7A26254192431E175F
Validity
Not Before: Feb 1 18:25:42 2026 GMT
Not After : Feb 5 05:16:42 2026 GMT
Subject: CN=3B4552F2BB496DDC6D1497D01ADCD988220746F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7d:53:c2:79:54:12:82:0a:57:b6:7b:b0:22:
59:63:fe:94:f8:88:7b:52:7a:53:54:43:55:42:53:
4b:e2:94:10:e3:a3:0d:e3:f0:b0:5a:70:11:ed:e1:
1f:09:de:a3:89:9e:82:b0:43:7d:93:e2:6f:8b:51:
43:c1:ec:a5:e5:f2:45:45:c5:dc:59:5a:0e:54:8c:
72:5d:9b:27:f1:09:9b:23:5d:fb:b5:75:f8:c2:49:
e9:43:6b:3f:65:75:17:8f:b0:c9:cb:de:dd:c6:03:
d4:50:12:d0:59:2d:7d:99:f5:41:9a:ed:09:03:8f:
32:8d:ba:66:e0:e3:22:29:59:78:4a:cc:80:95:c9:
e5:f7:c7:60:c7:f0:fb:9b:75:41:c0:19:5d:b7:b6:
a9:83:be:c4:a0:f8:e0:a1:09:92:6b:90:46:89:b2:
39:16:2b:9d:18:03:ce:47:4b:34:77:48:98:c5:a5:
f4:0f:ba:6d:17:3d:80:6b:af:05:3b:dc:65:ea:25:
3d:da:ff:78:2f:b0:56:d7:17:9e:d0:cf:c1:24:af:
c9:75:cf:1e:10:ee:a2:0b:e7:b7:22:31:4e:42:2b:
f7:e2:18:d7:bf:74:27:2f:37:77:12:9b:f2:59:ad:
bf:f1:a0:f0:0a:17:c0:3f:e9:00:c5:66:58:46:77:
99:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:45:52:F2:BB:49:6D:DC:6D:14:97:D0:1A:DC:D9:88:22:07:46:F9
X509v3 Authority Key Identifier:
keyid:08:A9:4F:D7:F0:E8:A2:87:AD:31:8D:7A:26:25:41:92:43:1E:17:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08A94FD7F0E8A287AD318D7A26254192431E175F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:6d:dd:59:ae:42:82:6d:cf:3c:2b:10:d4:b7:d3:47:51:66:
76:a3:fa:3e:e3:aa:38:44:7f:10:49:f2:81:ea:c1:34:dd:bd:
ae:31:0d:0f:47:f6:bd:f3:d6:a9:f7:f8:cf:61:1e:9c:89:28:
9b:c0:34:bc:99:b4:c0:98:50:a5:06:38:4a:4c:86:55:4e:94:
74:ac:87:9a:35:a0:9b:9a:03:44:1b:3a:12:76:a7:3a:b6:c8:
8d:7d:94:8c:d7:87:71:d3:72:14:0b:da:bb:06:32:5c:93:fd:
09:05:a7:8b:ea:53:07:08:5e:7c:fd:c7:83:97:81:ef:66:e9:
77:09:0b:db:18:c1:9b:a2:f7:e7:6b:ed:a5:81:92:5e:b9:bf:
89:c6:5a:94:bd:cd:e7:02:87:ac:8e:a6:4e:99:ad:25:86:fe:
e4:eb:74:fd:f8:fc:33:bf:e3:74:2a:db:00:52:9e:a1:d3:e3:
ae:23:5d:80:82:88:21:9b:da:9c:fc:20:36:dd:e0:9b:51:b1:
50:05:c2:44:80:52:5f:3c:db:b7:5a:b8:24:d8:48:2f:ff:5c:
31:dc:bc:bd:ff:bc:85:cd:20:20:1d:74:a5:74:c8:10:7f:d5:
36:b1:6f:25:ef:fc:e9:50:48:22:7a:04:d5:6e:ac:11:26:e1:
4a:33:36:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:45:03 2026 by rpki-client