This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft
File: E89C93F089A07D03B5794B0C02239EF67E1D721C.mft (raw, json)
Hash identifier: QJLhVgZz+JHYch1V0luul2wDX9DzXI6OACO/+pGbq3s=
Subject key identifier: 24:AD:EC:86:0B:67:0E:B6:CF:77:86:5D:8E:8A:06:0E:F5:54:EA:DD
Authority key identifier: E8:9C:93:F0:89:A0:7D:03:B5:79:4B:0C:02:23:9E:F6:7E:1D:72:1C
Certificate issuer: /CN=E89C93F089A07D03B5794B0C02239EF67E1D721C
Certificate serial: 47866BE3BE9D1C85E1CCF5213A5D855B19675F8A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft
Manifest number: CE
Signing time: Sat 31 Jan 2026 07:12:06 +0000
Manifest this update: Sat 31 Jan 2026 07:07:06 +0000
Manifest next update: Tue 03 Feb 2026 12:27:06 +0000
Files and hashes: 1: E89C93F089A07D03B5794B0C02239EF67E1D721C.crl (hash: pTCcSFRs6+qIfACVtg5Q1wdZzjtB+NBuaZx+hUYX3U8=)
2: 3230322e37302e3133362e302f32342d3234203d3e203436303334.roa (hash: /rrVT8+7vMAShEA29/a83w5natJXQZ8dbakSMPveJCo=)
3: 3130332e37342e3136342e302f32342d3234203d3e203436303334.roa (hash: qP5p1JtLajQU4tMkK8i4H4Q7vMTKK0pWmbujRAH0CW4=)
4: 3130332e37342e3134332e302f32342d3234203d3e203436303334.roa (hash: D1j1lCivRx4MpFMf1wJtpmY2c2+VbcHJ9Y4DtgTsc+k=)
5: 3130332e35332e32302e302f32342d3234203d3e203436303334.roa (hash: R0jNeZREOH7PdH08cIX9FXJ07BU9g/y14/QiKIW3zDQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.crl
rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 12:27:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:86:6b:e3:be:9d:1c:85:e1:cc:f5:21:3a:5d:85:5b:19:67:5f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E89C93F089A07D03B5794B0C02239EF67E1D721C
Validity
Not Before: Jan 31 07:07:06 2026 GMT
Not After : Feb 3 12:27:06 2026 GMT
Subject: CN=24ADEC860B670EB6CF77865D8E8A060EF554EADD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:18:fe:9f:60:b1:93:77:ad:15:22:8a:59:cc:
95:cf:aa:1d:1d:4d:a6:4f:97:2e:e4:c4:43:b0:de:
36:40:e8:c3:ff:ba:32:2c:94:5f:84:67:34:69:60:
d2:09:35:82:ea:3a:1b:a4:d0:a7:1f:54:2f:2a:b9:
51:b9:6c:86:86:02:b9:ce:01:13:e6:01:82:10:ec:
62:9b:e8:b3:66:3c:3a:55:73:35:2e:dc:26:81:4f:
e4:f8:3d:c8:1c:c9:7b:5e:6d:13:0e:49:b6:4d:8d:
f3:d7:dc:b4:3c:86:7b:6d:69:3f:5e:a9:b1:9f:7f:
b2:4c:21:fd:61:65:b2:bd:bc:01:20:95:f3:b1:b2:
e8:95:15:c9:da:11:10:7b:62:9a:0f:a9:8e:ec:56:
d8:c4:65:53:c8:50:85:cb:28:b3:8b:2f:2b:d0:7e:
fe:de:62:48:53:a1:d1:b1:04:5a:b4:ea:32:59:7a:
56:c9:97:1e:49:29:66:22:d6:81:ae:67:60:53:fc:
9b:ca:75:18:bc:9f:2b:ef:2c:e2:28:b1:67:7b:9d:
62:51:8d:fb:33:9a:09:f9:98:1f:89:9e:a8:51:06:
cd:88:ea:08:c2:0b:b0:3a:8c:9b:47:d1:fe:25:48:
a5:9f:c2:77:53:10:7e:6d:c6:ad:db:5d:8c:7e:50:
27:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:AD:EC:86:0B:67:0E:B6:CF:77:86:5D:8E:8A:06:0E:F5:54:EA:DD
X509v3 Authority Key Identifier:
keyid:E8:9C:93:F0:89:A0:7D:03:B5:79:4B:0C:02:23:9E:F6:7E:1D:72:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:ed:c2:45:74:fb:65:73:1e:7c:8c:d0:1c:ec:8e:f3:58:4b:
47:ee:ec:0e:6f:40:4e:9d:d2:41:c2:ff:19:a1:1a:5e:37:77:
9b:05:53:11:92:2d:e3:df:60:be:95:13:53:55:6e:13:3c:3e:
81:ea:81:a5:58:c4:8a:ed:47:1b:7f:26:18:8a:2b:9e:76:0e:
6e:5b:34:3c:1f:04:bc:e5:6a:3e:8b:7c:cc:9a:4d:df:16:db:
4c:77:2d:ca:0f:c5:a6:57:93:6e:0b:d8:f1:e3:c1:96:d8:ae:
82:7d:07:71:46:a9:57:29:cb:80:61:3d:46:5c:66:98:ad:f7:
97:41:85:92:77:1c:4a:a9:b6:16:c4:37:6d:58:77:19:6e:ee:
00:e7:c6:9e:68:b8:ad:5e:66:d9:d7:56:ac:92:c0:dd:06:1a:
93:2f:9f:93:dd:47:cf:5b:1f:dc:c7:76:cd:b2:67:60:9c:13:
b6:20:a6:37:f6:9f:39:84:71:b8:d8:62:b0:90:98:63:e5:dc:
99:21:79:c2:4e:64:9f:91:9a:79:90:5f:0e:66:60:13:9c:fb:
00:12:5c:a0:8e:53:bc:8b:99:63:28:da:77:59:3c:1f:12:05:
3e:fe:ad:da:fb:7f:b5:1d:82:fe:82:7e:5b:58:c0:9d:10:91:
99:a1:fd:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:06:54 2026 by rpki-client