This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.mft
File: EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.mft (raw, json)
Hash identifier: 9pz5cgTs6uX+fG4z9/gHGo+dVlm5nxKUfKiLncJ4pYc=
Subject key identifier: 4E:C7:3C:ED:08:F0:B7:32:93:D0:12:10:7A:EE:C4:3F:4D:77:8B:F2
Authority key identifier: ED:BD:84:5A:95:97:FE:C4:AD:90:03:0F:90:18:E4:B8:B6:3F:CC:77
Certificate issuer: /CN=EDBD845A9597FEC4AD90030F9018E4B8B63FCC77
Certificate serial: 334FE17734180A292CC0A20B2B60CEDE540BC65B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.mft
Manifest number: 054B
Signing time: Sat 31 Jan 2026 11:01:59 +0000
Manifest this update: Sat 31 Jan 2026 10:56:59 +0000
Manifest next update: Tue 03 Feb 2026 20:04:59 +0000
Files and hashes: 1: 323030313a6466343a6530303a3a2f34382d3438203d3e20313335343731.roa (hash: PpwdW1Sh67VcI29Rs6SsVeiTKG/TdkizTmZ0n4tpRMU=)
2: 3130332e3133372e33372e302f32342d3234203d3e20313335343731.roa (hash: mC7pHV7NYsbpeeW0ZP+ibU3Ewbq2p4OfCkZ3LiVxhX4=)
3: EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.crl (hash: wjcUFFEpgrqB2rdN25cBTy+nKVk4lthNzRst4WSlAFQ=)
4: 3130332e37312e3235352e302f32342d3234203d3e20313335343731.roa (hash: gIKkIGkZm7OxQ7k8KYXU1OguRf76El1DoB7NPk29hSo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.crl
rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 20:04:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:4f:e1:77:34:18:0a:29:2c:c0:a2:0b:2b:60:ce:de:54:0b:c6:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDBD845A9597FEC4AD90030F9018E4B8B63FCC77
Validity
Not Before: Jan 31 10:56:59 2026 GMT
Not After : Feb 3 20:04:59 2026 GMT
Subject: CN=4EC73CED08F0B73293D012107AEEC43F4D778BF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6d:3e:88:8d:c8:ac:46:12:a4:62:7f:62:17:
64:f7:b5:de:63:3a:77:fb:9b:4d:d4:50:c6:b3:c2:
fd:b7:93:6e:b3:8b:22:f1:f5:5c:e6:3e:66:72:46:
d9:f5:89:ca:1b:d0:83:cf:65:f0:45:27:1c:ac:9b:
f0:92:03:ab:91:51:33:05:d7:ee:4b:d9:2a:7f:79:
03:04:4a:90:25:67:18:55:0c:87:72:31:30:64:6c:
1b:f5:a2:6d:67:b7:7e:99:8c:8c:b0:f3:b1:38:c2:
79:b2:7e:d7:2a:80:79:fb:55:5b:59:ac:5c:8f:fd:
3d:6a:eb:93:c2:6a:53:bf:86:65:87:f5:10:dc:cd:
1d:72:07:3b:74:b4:c2:33:6a:41:32:f6:b6:e6:51:
5f:20:9d:99:19:0d:80:50:ed:29:16:28:a0:80:c4:
14:64:98:28:31:cd:21:3b:8c:40:2d:de:18:40:37:
b8:c3:e4:45:5e:51:50:17:0b:5b:0e:e0:4c:a7:2e:
96:2e:1d:07:df:9c:e3:a2:32:01:a3:dd:8e:7d:48:
92:ec:14:47:33:a5:b6:44:41:27:6d:44:47:b8:e2:
d4:47:34:6c:5f:d8:03:f1:8c:cd:2f:ed:53:0c:23:
de:d1:0b:5e:f6:fe:19:9e:ae:a2:4b:11:d3:9b:ee:
29:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C7:3C:ED:08:F0:B7:32:93:D0:12:10:7A:EE:C4:3F:4D:77:8B:F2
X509v3 Authority Key Identifier:
keyid:ED:BD:84:5A:95:97:FE:C4:AD:90:03:0F:90:18:E4:B8:B6:3F:CC:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:f8:93:9b:44:bd:56:a1:61:a2:47:01:da:ee:55:be:0b:43:
8d:5e:1d:12:dd:d4:c1:3c:5b:3f:69:68:cb:1b:09:d1:bf:ab:
56:bb:5b:6d:cf:a1:e1:1d:f2:91:fb:59:6b:ef:bb:f3:62:b6:
76:af:96:1a:ae:22:73:a4:03:e0:8d:ea:7d:07:51:91:4b:b4:
ea:b7:6b:fa:c0:4e:a9:dd:1b:21:0f:a8:20:f5:11:59:6b:06:
9b:c9:6e:83:11:68:7e:e6:4b:ff:50:33:f6:22:35:e1:67:22:
f1:c2:56:8c:73:53:43:4e:74:08:b0:58:a5:93:f8:6f:10:52:
3a:64:ed:a6:74:f7:37:e8:20:7b:25:2a:51:0c:76:9b:9b:ff:
50:cb:cf:a4:b5:d1:8a:e9:bb:c8:68:10:73:81:30:79:99:62:
96:46:8f:d5:3b:0a:a1:38:f8:f4:4f:e6:a2:80:e6:29:d1:b2:
27:12:3e:2c:c0:52:29:cd:04:49:2e:f3:3b:4f:f7:da:af:10:
e6:a2:dd:42:eb:f9:81:99:0b:0a:a9:a4:a2:6b:69:78:8b:b5:
2e:27:5a:32:2e:d1:0f:9c:b9:34:31:03:e3:af:50:a7:23:f4:
12:e5:e1:ee:f1:0a:7a:81:55:33:35:dd:70:02:6c:b0:54:91:
cf:1d:80:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:44:01 2026 by rpki-client