This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/926C43E6DACC18978406A2C9C57272491FFF9536.mft
File: 926C43E6DACC18978406A2C9C57272491FFF9536.mft (raw, json)
Hash identifier: PfqGEULutBickDpoBvfY2CHBJxeQte1Uk91ncrM3O4Q=
Subject key identifier: 2C:B9:91:69:32:BE:AA:AB:D5:25:4E:35:31:8E:19:CA:42:D0:96:32
Authority key identifier: 92:6C:43:E6:DA:CC:18:97:84:06:A2:C9:C5:72:72:49:1F:FF:95:36
Certificate issuer: /CN=926C43E6DACC18978406A2C9C57272491FFF9536
Certificate serial: 2C0EFEAFB860EF7C2C4D139665A691A893BE299A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/926C43E6DACC18978406A2C9C57272491FFF9536.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/926C43E6DACC18978406A2C9C57272491FFF9536.mft
Manifest number: 0237
Signing time: Sat 31 Jan 2026 02:20:41 +0000
Manifest this update: Sat 31 Jan 2026 02:15:41 +0000
Manifest next update: Tue 03 Feb 2026 09:57:41 +0000
Files and hashes: 1: 323030313a6466343a646138303a3a2f34382d3438203d3e20313431303735.roa (hash: lah3Lsyh/1yic09nG6WnhdTFrE8YdyloOKzD5mHdMZ4=)
2: 926C43E6DACC18978406A2C9C57272491FFF9536.crl (hash: HHOuvaWQDXpH4lhXZJmSJcabxmFacBt3XDBjeaAf1gQ=)
3: 3130332e3135352e3232342e302f32332d3234203d3e20313431303735.roa (hash: A/rwCvV0N2IIi5162rcSMrNXLOVO+p2IOyLdZ8Vkj6A=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/926C43E6DACC18978406A2C9C57272491FFF9536.crl
rsync://repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/926C43E6DACC18978406A2C9C57272491FFF9536.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/926C43E6DACC18978406A2C9C57272491FFF9536.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 09:57:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:0e:fe:af:b8:60:ef:7c:2c:4d:13:96:65:a6:91:a8:93:be:29:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926C43E6DACC18978406A2C9C57272491FFF9536
Validity
Not Before: Jan 31 02:15:41 2026 GMT
Not After : Feb 3 09:57:41 2026 GMT
Subject: CN=2CB9916932BEAAABD5254E35318E19CA42D09632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:29:20:9c:83:01:79:df:ff:2d:bb:e4:c3:04:
40:63:0f:66:60:a3:81:50:54:fb:a6:81:58:4b:c3:
26:51:f5:b2:aa:7e:97:97:96:55:42:48:fb:ab:ca:
12:ae:09:35:b6:90:47:29:a0:21:ee:0f:a3:ec:e6:
66:28:d4:0b:ab:81:70:2c:fc:fa:48:07:37:7e:89:
0c:22:e9:06:ec:cf:7c:19:84:98:c4:75:20:76:6c:
39:22:5c:b5:ed:f9:06:dc:8e:ef:93:7d:20:8d:05:
f9:9c:80:26:6e:c3:94:07:7c:0b:6a:92:2c:f8:3b:
b4:41:20:7d:3d:8c:1a:3f:c0:8d:23:e0:70:c0:58:
7d:99:fe:f4:84:1c:56:55:be:06:54:be:d3:33:81:
11:a2:7e:a4:bb:b9:28:0c:29:86:9b:3e:e2:45:c8:
a1:49:b9:75:9c:5e:63:aa:c3:3e:cb:b7:0c:b1:45:
df:01:b6:e8:b1:76:e1:b6:52:e5:d7:ea:78:fb:93:
ed:33:c5:17:37:12:fd:c4:15:fe:dd:fb:d4:4f:b6:
80:8f:10:78:37:8b:b5:f2:0f:ce:3a:2c:51:ed:67:
a8:24:d4:70:b9:1b:ed:e8:ce:2c:48:a4:dd:6e:ae:
5b:d5:90:b8:0e:02:7f:20:ac:e8:ca:39:0a:75:d9:
54:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B9:91:69:32:BE:AA:AB:D5:25:4E:35:31:8E:19:CA:42:D0:96:32
X509v3 Authority Key Identifier:
keyid:92:6C:43:E6:DA:CC:18:97:84:06:A2:C9:C5:72:72:49:1F:FF:95:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/926C43E6DACC18978406A2C9C57272491FFF9536.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/926C43E6DACC18978406A2C9C57272491FFF9536.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/926C43E6DACC18978406A2C9C57272491FFF9536.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:16:b1:10:3b:1a:00:2b:c2:d6:94:22:f3:06:d3:c5:bf:1c:
bc:46:5c:29:31:37:15:46:6c:6b:94:55:d6:56:87:f8:27:55:
23:ae:49:16:60:b3:8a:d0:9d:af:72:e4:3c:b7:49:62:1e:6e:
36:f6:f6:2c:bb:73:d0:04:7d:1e:2a:09:02:0e:b1:a8:42:27:
7c:8f:a0:7f:91:44:e0:08:ee:d3:0f:eb:91:6a:a1:4a:1a:a5:
41:b7:85:6a:9c:4a:24:0d:b3:0e:45:1e:9d:38:66:5d:c5:aa:
0b:c6:77:2c:40:68:ec:68:22:ed:43:42:4d:62:3a:fe:d2:b7:
ee:8a:e7:6a:80:8d:04:df:43:6e:68:71:9b:e4:83:02:01:ba:
55:7d:75:ff:a0:3c:1d:b7:db:08:1b:14:40:ec:0d:e1:7c:f8:
fb:f6:df:43:4a:18:6d:02:b9:46:05:c6:c2:54:2e:25:f6:96:
6c:71:f0:59:01:1f:9f:51:60:f7:99:c4:45:89:dd:32:48:b7:
35:06:6f:3c:d4:63:ca:ee:4b:d7:e5:c0:d9:dc:97:af:0f:ea:
0f:85:f4:b0:3d:fd:19:46:52:8b:e9:a2:20:ef:9a:71:f9:1e:
9a:c7:a5:f5:44:c1:4d:a7:1c:73:b6:88:fe:87:b7:65:d9:00:
c8:91:6e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:45:09 2026 by rpki-client