This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft
File: F39284EDA8B81E5F498D167C4DB09075943DA23C.mft (raw, json)
Hash identifier: NhBjg6g3xwMIA4lIdw9l9pdUPnHdrFOWeYoBGTiJJEQ=
Subject key identifier: 12:4D:0A:2C:B0:12:77:03:9D:1C:CB:AF:33:64:B2:81:A8:A5:78:F1
Authority key identifier: F3:92:84:ED:A8:B8:1E:5F:49:8D:16:7C:4D:B0:90:75:94:3D:A2:3C
Certificate issuer: /CN=F39284EDA8B81E5F498D167C4DB09075943DA23C
Certificate serial: 03BFB9DE10CEF3C407FD5633C957168F86A5776F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft
Manifest number: 020F
Signing time: Sat 31 Jan 2026 05:42:08 +0000
Manifest this update: Sat 31 Jan 2026 05:37:08 +0000
Manifest next update: Tue 03 Feb 2026 13:29:08 +0000
Files and hashes: 1: F39284EDA8B81E5F498D167C4DB09075943DA23C.crl (hash: 3Zt27pnBs/iX2WewEvsl4BwsdJbtAgA5mW/TxL55hnE=)
2: 3130332e39342e3133332e302f32342d3234203d3e20313336313238.roa (hash: zkN9KM3zjX+gsUQDtCei38obRvmk7IKvdyrKuozTeis=)
3: 3130332e39342e3133322e302f32342d3234203d3e20313336313238.roa (hash: m+kNLMS39T1XrNLiDk6g1NJ5jtLDLBZdzAOZl+Ww9Ks=)
4: 323030313a6466313a363930303a3a2f34382d3438203d3e20313336313238.roa (hash: 1gzxa88JIBim0N0R/uC1nAl7S+pBY42/XBrZ+VIbBR0=)
5: 3130332e39342e3133322e302f32332d3233203d3e20313336313238.roa (hash: ZH95fzIk5wuuT+vd4hIsCcqQWDxd7AjWMS1Ri5F0arI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.crl
rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 13:29:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:bf:b9:de:10:ce:f3:c4:07:fd:56:33:c9:57:16:8f:86:a5:77:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F39284EDA8B81E5F498D167C4DB09075943DA23C
Validity
Not Before: Jan 31 05:37:08 2026 GMT
Not After : Feb 3 13:29:08 2026 GMT
Subject: CN=124D0A2CB01277039D1CCBAF3364B281A8A578F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fd:24:79:da:40:7a:7f:30:2b:f2:f3:1c:91:
b7:5a:9c:fb:74:54:f4:c2:12:71:5b:fd:41:c0:2b:
87:7e:99:f1:33:ad:8e:01:ce:53:d8:a6:5d:ba:7f:
71:cf:49:6f:2d:bb:d2:ae:28:1b:08:21:86:bc:be:
62:63:54:0c:30:a3:92:46:fe:70:f4:10:7e:ee:e0:
91:f2:1d:7d:57:52:03:b0:0b:56:84:45:03:13:5c:
21:24:37:b1:5a:ab:42:a4:77:e0:b9:14:c2:83:dd:
37:5d:8a:60:93:67:0a:b8:f5:3b:af:d9:a2:00:fa:
db:06:00:2e:0e:a1:77:da:c1:4f:c2:8a:d5:e9:91:
84:6d:e9:e5:29:3e:ee:2d:51:bd:c6:ee:2b:0a:ce:
23:c2:e5:da:7c:bb:bb:b7:72:fc:37:45:5b:8d:cc:
8a:b4:d6:79:ab:44:7b:38:43:bc:e4:27:29:9c:fd:
3d:b2:84:dd:62:8b:3b:50:c1:40:19:5c:fe:0b:7f:
63:f8:3b:7b:52:d4:18:8b:79:56:3c:d5:de:9f:c6:
d7:ac:a9:2d:92:f1:f2:ff:85:69:b6:be:d5:f8:ae:
ae:ec:e6:c8:0c:81:1f:92:12:3a:9a:47:90:c9:f3:
23:d5:64:de:68:64:a5:50:99:91:bc:56:fd:32:49:
0c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4D:0A:2C:B0:12:77:03:9D:1C:CB:AF:33:64:B2:81:A8:A5:78:F1
X509v3 Authority Key Identifier:
keyid:F3:92:84:ED:A8:B8:1E:5F:49:8D:16:7C:4D:B0:90:75:94:3D:A2:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a3:37:ad:24:76:fe:70:b9:8d:13:f2:e5:3e:bb:80:0b:83:
b8:ed:1d:1b:96:c5:17:6d:19:0c:4a:36:b6:7d:72:92:b2:55:
30:60:01:fb:81:b8:b0:18:a3:e0:d7:46:3f:96:10:4f:e9:41:
af:a1:82:dc:f9:87:69:fe:79:0e:56:4d:65:4d:61:5d:93:bf:
ec:5b:4d:10:19:bd:e9:79:79:dc:a5:87:ef:d0:2c:13:54:e3:
d0:6c:e5:b3:b8:16:0a:78:35:56:a2:5f:03:56:4d:26:67:c1:
1f:ca:40:c3:1a:de:43:00:4c:62:fd:e4:50:05:95:40:70:ce:
17:2d:f5:92:7a:24:43:76:3a:4c:0d:c7:23:87:0b:22:ed:af:
4c:d8:2e:a8:fc:63:27:55:a8:b0:5b:88:2d:6f:13:d8:ab:1b:
d9:0c:db:ff:f9:ee:c1:1c:31:ad:fa:9c:db:3b:86:73:e5:69:
a8:16:ab:f4:04:45:5f:54:be:f9:c1:67:a4:f0:b7:10:09:84:
08:69:20:37:6a:4a:cd:eb:41:1b:e2:b8:ea:ac:08:80:a0:ee:
40:7d:f3:02:1d:fb:1b:f5:f7:e9:55:6c:19:eb:81:0a:a8:8f:
96:e8:a1:04:21:1b:f7:3d:2a:5c:d6:37:95:90:f1:db:9d:ef:
e8:f7:da:0c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUA7+53hDO88QH/VYzyVcWj4ald28wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM5Mjg0RURBOEI4MUU1RjQ5OEQxNjdDNERCMDkwNzU5
NDNEQTIzQzAeFw0yNjAxMzEwNTM3MDhaFw0yNjAyMDMxMzI5MDhaMDMxMTAvBgNV
BAMTKDEyNEQwQTJDQjAxMjc3MDM5RDFDQ0JBRjMzNjRCMjgxQThBNTc4RjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD/SR52kB6fzAr8vMckbdanPt0
VPTCEnFb/UHAK4d+mfEzrY4BzlPYpl26f3HPSW8tu9KuKBsIIYa8vmJjVAwwo5JG
/nD0EH7u4JHyHX1XUgOwC1aERQMTXCEkN7Faq0Kkd+C5FMKD3TddimCTZwq49Tuv
2aIA+tsGAC4OoXfawU/CitXpkYRt6eUpPu4tUb3G7isKziPC5dp8u7u3cvw3RVuN
zIq01nmrRHs4Q7zkJymc/T2yhN1iiztQwUAZXP4Lf2P4O3tS1BiLeVY81d6fxtes
qS2S8fL/hWm2vtX4rq7s5sgMgR+SEjqaR5DJ8yPVZN5oZKVQmZG8Vv0ySQzTAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUEk0KLLASdwOdHMuvM2SygailePEwHwYDVR0j
BBgwFoAU85KE7ai4Hl9JjRZ8TbCQdZQ9ojwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
N2VkY2I3ZS1jMzhkLTRlNjctODJiZC00ZTgxNTBiODg1NjEvMC9GMzkyODRFREE4
QjgxRTVGNDk4RDE2N0M0REIwOTA3NTk0M0RBMjNDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjM5Mjg0RURBOEI4MUU1RjQ5OEQxNjdDNERCMDkwNzU5NDNE
QTIzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdlZGNiN2UtYzM4ZC00ZTY3LTgy
YmQtNGU4MTUwYjg4NTYxLzAvRjM5Mjg0RURBOEI4MUU1RjQ5OEQxNjdDNERCMDkw
NzU5NDNEQTIzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACqjN60kdv5wuY0T8uU+u4ALg7jtHRuWxRdt
GQxKNrZ9cpKyVTBgAfuBuLAYo+DXRj+WEE/pQa+hgtz5h2n+eQ5WTWVNYV2Tv+xb
TRAZvel5edylh+/QLBNU49Bs5bO4Fgp4NVaiXwNWTSZnwR/KQMMa3kMATGL95FAF
lUBwzhct9ZJ6JEN2OkwNxyOHCyLtr0zYLqj8YydVqLBbiC1vE9irG9kM2//57sEc
Ma36nNs7hnPlaagWq/QERV9UvvnBZ6TwtxAJhAhpIDdqSs3rQRviuOqsCICg7kB9
8wId+xv19+lVbBnrgQqoj5booQQhG/c9KlzWN5WQ8dud7+j32gw=
-----END CERTIFICATE-----
Generated at Mon Feb 2 09:47:08 2026 by rpki-client