This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft
File: A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft (raw, json)
Hash identifier: 2rmdEZHNxRkvolEpT1ej58uGBdxv4tjkX54Memaun9Q=
Subject key identifier: BB:B7:2E:14:36:8F:30:A5:0A:52:16:3F:5C:A9:3E:CC:A3:DA:6E:F4
Authority key identifier: A4:AC:49:C4:F5:5B:F5:D4:AF:3D:42:10:4A:8A:5E:C1:F2:12:3E:6F
Certificate issuer: /CN=A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F
Certificate serial: 4CC2910F9E246CE1A661B6DD3188779D3B5790A5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft
Manifest number: 01D7
Signing time: Sun 01 Feb 2026 09:50:44 +0000
Manifest this update: Sun 01 Feb 2026 09:45:44 +0000
Manifest next update: Wed 04 Feb 2026 19:50:44 +0000
Files and hashes: 1: 3130332e38312e36342e302f32342d3234203d3e20313336303535.roa (hash: ELk6/6IWDK4cOkAhqxagMF7RU6tMeOE1ofhJAKCHKqk=)
2: 3130332e38312e36352e302f32342d3234203d3e20313336303535.roa (hash: u8jL1wvQ3N2/+7j20g3WIVxFeVvx0q2WU+pz5MDhyKI=)
3: 3130332e38312e36372e302f32342d3234203d3e20313336303535.roa (hash: sMqZuUQ3TUwiAl7c3vFGsavhFRoJNzCv4yEgkQl+sQs=)
4: A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl (hash: pyDCKKZLtb/9Ll4j+Jfq6f85mVH7a+ty/J1hkN25OMA=)
5: 3130332e38312e36342e302f32322d3234203d3e20313336303535.roa (hash: G2lV5U9+p39d6xSgHB2TJ310g1uTGGU7EbB7g2ly4zQ=)
6: 323430303a363463303a3a2f33322d3438203d3e20313336303535.roa (hash: lkJMOSpD6CK+vqFIQ+W4fJTKxjWnPx2rZSDGiMaIa7Q=)
7: 3130332e38312e36362e302f32342d3234203d3e20313336303535.roa (hash: ATuxXOYK3e/3Ld+KeMllvgXdJfLA5B6FogxB4ZqIC5o=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl
rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 19:50:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:c2:91:0f:9e:24:6c:e1:a6:61:b6:dd:31:88:77:9d:3b:57:90:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F
Validity
Not Before: Feb 1 09:45:44 2026 GMT
Not After : Feb 4 19:50:44 2026 GMT
Subject: CN=BBB72E14368F30A50A52163F5CA93ECCA3DA6EF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5e:2a:d2:35:69:30:18:b8:6b:c0:81:38:98:
22:d6:8a:b6:2c:2b:a3:c7:ee:10:28:e0:57:f3:13:
be:49:0a:ff:7c:ee:78:d2:f6:d0:aa:19:ef:ff:fd:
c0:dc:9a:29:71:bd:49:28:cd:20:71:09:31:ba:4a:
1a:13:0f:a4:bb:e2:29:3d:06:ea:38:34:1d:16:e5:
e7:f6:ca:50:08:8b:97:3d:54:7f:14:1c:a2:22:97:
1b:57:5d:0c:ec:83:a3:c9:35:92:8b:c2:f9:a7:d3:
ef:27:df:5e:e2:14:62:04:80:5e:fb:bb:9d:0d:e0:
17:fa:d2:ce:e2:5e:2d:a9:c4:e8:d9:48:81:60:83:
37:9b:aa:93:41:9b:8a:4b:4a:88:88:d6:2d:10:43:
53:fc:e3:09:76:b8:6e:6d:e0:cb:be:e9:dd:b0:b3:
f9:50:35:10:bd:e9:e5:03:09:e7:e3:91:cf:3c:44:
da:65:58:72:d7:c0:f6:3a:22:c3:28:74:c1:13:f5:
43:9d:ec:84:02:75:b8:c3:ff:eb:71:61:0a:5f:7e:
4f:f2:01:8f:d5:f4:ae:d8:5b:50:ca:8c:be:e9:da:
e3:31:10:29:ec:a7:15:ae:70:3c:0f:13:e8:12:6a:
bf:e8:07:3e:4d:93:ef:64:7a:4e:64:23:c3:49:f9:
37:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B7:2E:14:36:8F:30:A5:0A:52:16:3F:5C:A9:3E:CC:A3:DA:6E:F4
X509v3 Authority Key Identifier:
keyid:A4:AC:49:C4:F5:5B:F5:D4:AF:3D:42:10:4A:8A:5E:C1:F2:12:3E:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a1:43:7f:e7:34:ce:7a:e8:20:cf:b0:84:4a:a5:eb:93:35:
31:6f:48:54:cc:11:62:d4:87:3c:fd:f0:55:a0:9c:df:53:d8:
91:a2:86:b1:31:4d:4d:ab:41:bb:e6:0b:f1:e5:15:7c:08:f9:
3d:9a:a8:8b:52:08:8a:98:3d:1c:cb:ac:23:e6:0e:e6:8b:8d:
2f:58:f8:81:04:cb:e7:4c:dd:51:19:f0:39:24:54:72:e6:7e:
bc:39:dc:ad:7b:a9:17:8e:39:6a:5c:21:23:48:52:6e:11:02:
02:bc:0a:d1:b1:33:27:b3:32:34:04:38:bb:3e:70:7a:6c:1a:
73:bd:15:d7:f7:14:16:48:be:40:44:3c:77:28:ba:7f:bb:cc:
a9:b1:5a:77:52:6d:21:35:4e:0a:97:e1:62:83:1d:d6:3b:c6:
e3:da:3b:2e:fc:c7:4f:2a:9d:e9:b0:08:f4:99:8e:46:2c:f3:
10:58:fd:17:7a:a0:05:ba:1d:a2:7f:39:08:72:06:fd:94:85:
dd:f8:29:bd:a0:da:c5:1d:5d:e7:b6:21:f7:3e:a8:43:da:a8:
87:1c:b1:70:6b:e8:e7:b4:80:73:f0:1d:51:a6:df:29:39:b5:
71:f6:e9:3e:18:06:43:41:cb:6a:c2:77:82:45:7c:fd:47:d1:
64:ed:c6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:03:39 2026 by rpki-client