This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.mft
File: 40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.mft (raw, json)
Hash identifier: 7n++CEvfGtkoV6A6nHbb5a0NPNtKwqkYQOhedrM+gfs=
Subject key identifier: EE:3D:56:8B:6A:B1:4E:4C:B9:4F:D7:52:58:AB:69:F7:42:A3:EF:48
Authority key identifier: 40:70:6A:5C:CF:A8:96:C8:EE:0C:1F:9A:5B:6D:CD:A1:91:5A:C7:6D
Certificate issuer: /CN=40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D
Certificate serial: 04DDB8235CA5EF865D42A3E92CB09E979C3A520E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.mft
Manifest number: 0237
Signing time: Mon 02 Feb 2026 03:51:28 +0000
Manifest this update: Mon 02 Feb 2026 03:46:28 +0000
Manifest next update: Thu 05 Feb 2026 08:10:28 +0000
Files and hashes: 1: 40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.crl (hash: Jypr5qkug0lxLjtF/gMAnm4e7hvw61Y+xMFhCw6UiT0=)
2: 3130332e31342e3233312e302f32342d3234203d3e20313439393435.roa (hash: hy+/jpVeqW5ZdBPpsEQxih0c4zQVAJjPaRw4KAPp/Ro=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.crl
rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:dd:b8:23:5c:a5:ef:86:5d:42:a3:e9:2c:b0:9e:97:9c:3a:52:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D
Validity
Not Before: Feb 2 03:46:28 2026 GMT
Not After : Feb 5 08:10:28 2026 GMT
Subject: CN=EE3D568B6AB14E4CB94FD75258AB69F742A3EF48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8d:8a:97:f9:2e:28:96:9b:e4:ee:f7:28:20:
51:b2:03:a7:4b:14:76:78:02:06:b4:d6:7f:9a:8e:
e4:7f:fc:56:e2:0e:00:e1:09:b5:57:b0:cd:c7:b1:
d6:a8:cd:cf:29:66:b4:35:ba:5d:eb:30:96:55:24:
e5:5f:76:3a:c8:76:cb:79:68:d6:ff:66:3a:e7:0e:
43:43:71:f9:ae:47:a8:a1:df:08:87:83:59:6f:7a:
95:d5:80:10:cb:dd:08:7a:6c:ef:eb:77:8c:a2:4b:
d5:3b:f8:c1:27:87:e6:07:1f:30:9f:e2:ab:41:c6:
00:5a:53:a2:9c:22:41:38:16:55:85:db:06:ce:2a:
78:69:dc:4d:89:f7:60:fd:58:fc:6d:7a:bb:c5:f0:
18:ea:d7:b4:f7:db:16:48:98:2e:86:35:02:67:07:
85:d4:91:94:c8:e3:48:90:5e:ce:21:f1:49:02:ab:
5e:f2:b7:e7:fc:3b:aa:5a:ff:20:17:21:8e:f3:ce:
b7:7f:dd:96:bf:b9:bd:e6:cc:ac:da:a3:a5:6e:e3:
28:3d:1e:e7:93:09:4d:42:9b:73:b8:d4:1e:f8:d9:
8a:6b:43:00:18:ea:2a:6b:cf:17:d0:a0:7d:50:6b:
bb:02:eb:fb:22:f1:ef:cf:67:e6:75:0a:47:db:31:
4c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:3D:56:8B:6A:B1:4E:4C:B9:4F:D7:52:58:AB:69:F7:42:A3:EF:48
X509v3 Authority Key Identifier:
keyid:40:70:6A:5C:CF:A8:96:C8:EE:0C:1F:9A:5B:6D:CD:A1:91:5A:C7:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:37:0c:8d:bd:44:f6:35:bd:ba:ad:2f:01:71:88:3c:48:87:
f9:02:bf:95:ce:fa:49:cb:28:41:7e:3d:36:6a:bd:71:d2:b5:
86:cb:2d:3b:09:6c:db:2c:85:ca:fa:6e:89:f5:dc:fe:d7:0d:
42:b6:5d:df:d0:26:00:6d:a8:32:35:c7:03:80:e2:19:4c:66:
96:81:61:36:05:68:00:0d:5f:30:af:ea:d2:db:ea:6f:c0:e6:
5e:50:19:97:a3:19:cd:68:f8:a6:60:09:6c:e4:c4:2d:f6:e5:
a2:37:7b:97:dd:62:4e:94:80:f5:3b:07:b4:fb:02:4f:f7:a5:
3d:1c:be:95:fa:d5:75:e5:9b:93:79:e2:6d:20:f1:ef:16:5e:
95:07:11:29:35:1b:f0:10:51:48:46:31:ce:0a:25:ad:5b:b2:
32:41:37:7e:9b:e7:49:b1:f9:06:1b:0c:72:30:b5:e1:5c:b4:
bb:4b:3b:b6:aa:4e:89:c1:90:80:c7:fc:a4:f6:aa:38:78:15:
09:fd:73:20:b9:49:39:dd:f8:e3:3d:ce:07:57:51:ff:91:40:
a1:eb:39:b0:7d:74:98:cc:16:a5:7f:23:f3:ce:3b:eb:71:b3:
b8:ca:8f:8f:8c:a3:8a:98:0a:9c:9d:43:cb:03:48:b0:4a:62:
d7:c2:95:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:02:17 2026 by rpki-client