This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft
File: 3703AC4154F05B1E642F31DEF71A238407E82D59.mft (raw, json)
Hash identifier: aKoGUnQk9pDF1cZRvsRAEgoNzCY6R2izVeOUlZrF0Wc=
Subject key identifier: B9:F0:A3:D4:DD:24:68:BC:F9:38:66:27:05:24:CB:64:7D:DF:88:DB
Authority key identifier: 37:03:AC:41:54:F0:5B:1E:64:2F:31:DE:F7:1A:23:84:07:E8:2D:59
Certificate issuer: /CN=3703AC4154F05B1E642F31DEF71A238407E82D59
Certificate serial: 764A985C344280CE21B35B42FB8B9B5CDBA75C10
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3703AC4154F05B1E642F31DEF71A238407E82D59.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft
Manifest number: 04EE
Signing time: Sun 01 Feb 2026 06:50:54 +0000
Manifest this update: Sun 01 Feb 2026 06:45:54 +0000
Manifest next update: Wed 04 Feb 2026 18:22:54 +0000
Files and hashes: 1: 3130332e3136302e34302e302f32332d3233203d3e20313431353936.roa (hash: RNQYxKN0Nubn/ygqO8rH37j/P4lI+9FQ1kXn5iYtC0w=)
2: 3703AC4154F05B1E642F31DEF71A238407E82D59.crl (hash: 8U6W5W5KHf7eIhmADco3y5rR+w7twy9EuzI8tUVWc2g=)
3: 3130332e3136302e34302e302f32342d3234203d3e20313431353936.roa (hash: /26G7paj90BYpA/7obbRkQ0e5IpXJm+V8bRm2IMmu/M=)
4: 3130332e3136302e34312e302f32342d3234203d3e20313431353936.roa (hash: hTOnvJY78aaZJU0V/ewFlrDahpGLWlt1kXeTr26Q6jE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.crl
rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3703AC4154F05B1E642F31DEF71A238407E82D59.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 18:22:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:4a:98:5c:34:42:80:ce:21:b3:5b:42:fb:8b:9b:5c:db:a7:5c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3703AC4154F05B1E642F31DEF71A238407E82D59
Validity
Not Before: Feb 1 06:45:54 2026 GMT
Not After : Feb 4 18:22:54 2026 GMT
Subject: CN=B9F0A3D4DD2468BCF93866270524CB647DDF88DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fe:8e:fb:f3:c8:f1:12:0c:27:73:8e:d9:05:
5c:f5:8b:a5:14:f8:57:83:18:a9:b2:e3:e9:a1:84:
56:d0:0a:a9:a9:c3:e1:f1:1e:c7:aa:c5:c5:f1:40:
80:06:f8:4b:bf:ca:1f:ba:aa:7f:40:be:1d:e1:71:
d7:aa:15:1c:d2:a2:8e:06:52:7e:d6:42:36:a2:ae:
83:50:33:88:49:f3:c4:7c:6d:be:f7:4a:3a:3a:33:
e8:a6:db:59:9a:9e:7a:68:3a:6e:bf:b2:dc:e6:53:
07:6e:10:bb:e0:84:8c:9f:f1:be:c7:a9:5b:a0:49:
01:aa:1d:36:c2:29:f8:b9:e7:7f:65:95:95:f6:bc:
7e:da:df:5e:6f:cb:cd:86:04:70:2f:a2:db:75:fa:
26:90:69:2a:26:86:39:40:29:92:2b:72:13:cc:70:
25:c7:0e:f1:d3:de:46:d9:6e:d1:68:e9:17:b3:dc:
f8:9c:74:40:c5:15:8c:ed:cc:30:0b:81:9f:1f:3c:
de:52:71:b3:26:98:89:be:56:ac:9e:06:da:45:16:
43:37:12:cf:3c:fe:f1:26:e9:d8:ba:0f:3b:a2:c4:
69:95:9b:71:53:56:50:22:41:c7:84:eb:df:8f:fc:
c5:99:84:54:bc:03:68:84:1f:a2:79:57:94:cf:06:
9c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F0:A3:D4:DD:24:68:BC:F9:38:66:27:05:24:CB:64:7D:DF:88:DB
X509v3 Authority Key Identifier:
keyid:37:03:AC:41:54:F0:5B:1E:64:2F:31:DE:F7:1A:23:84:07:E8:2D:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3703AC4154F05B1E642F31DEF71A238407E82D59.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:70:51:5e:95:6d:62:60:3e:6b:ee:d4:4f:5e:ec:a0:3e:df:
23:ee:8d:f9:5c:9e:31:68:72:37:3d:33:a4:7d:a6:9b:4d:32:
4e:5e:a9:0a:5a:fb:71:7a:15:c9:16:99:ad:ee:d1:ae:15:ab:
2f:56:01:17:2a:80:b2:d0:f1:c6:8c:8c:f2:14:6b:48:22:f3:
76:f4:07:4c:d7:8a:d3:af:76:89:b0:7a:0d:a0:47:0b:9a:ce:
ca:ad:4c:47:ae:cb:4d:cc:f9:a1:e7:02:36:7c:2d:70:a5:e4:
c0:b5:64:1d:56:31:e8:ac:7a:89:b4:9e:fa:64:58:ca:13:37:
49:7a:b7:16:c1:18:a7:c2:de:b9:20:db:d4:d9:8c:e5:f5:99:
71:86:58:f5:1d:a8:e2:be:59:ec:b3:b8:bf:24:f9:f8:12:3e:
d7:31:5d:1c:2b:75:34:2a:f0:c6:b9:52:f1:ea:0e:d4:fa:6d:
7c:bb:aa:c8:23:92:8e:e5:91:35:59:74:dd:f1:e2:fb:02:e1:
92:1e:2f:ff:b6:95:a5:20:28:64:b5:3e:fe:47:af:4c:bc:dd:
9e:c2:fb:81:01:25:82:2a:58:7b:78:2f:48:52:b4:76:d7:fb:
cb:bc:67:cf:66:58:32:f1:d1:8b:81:bd:70:de:ad:2f:48:6d:
3d:4e:36:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:05:11 2026 by rpki-client