This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.mft
File: 8E5335B45EE371DC463E5C65783A244FD1846656.mft (raw, json)
Hash identifier: yNj+CYsfqK6tIb8NxtSCxEyAHGE7Z/Qf6LM4z7jnGbk=
Subject key identifier: EA:29:A0:BC:F4:B0:C8:30:E5:18:78:61:DD:18:EE:CA:D6:3A:44:85
Authority key identifier: 8E:53:35:B4:5E:E3:71:DC:46:3E:5C:65:78:3A:24:4F:D1:84:66:56
Certificate issuer: /CN=8E5335B45EE371DC463E5C65783A244FD1846656
Certificate serial: 3FE13CD5E99C8F850A3F434B7736A2F501EA9BF1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E5335B45EE371DC463E5C65783A244FD1846656.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.mft
Manifest number: 012A
Signing time: Sat 31 Jan 2026 20:21:37 +0000
Manifest this update: Sat 31 Jan 2026 20:16:37 +0000
Manifest next update: Tue 03 Feb 2026 23:16:37 +0000
Files and hashes: 1: 3130332e3138302e39352e302f32342d3234203d3e20313439333538.roa (hash: gZ7MIdwunPoLq27viYGE8zwAvrRl3NrvQYfYS07O7wA=)
2: 8E5335B45EE371DC463E5C65783A244FD1846656.crl (hash: D+Da/BCKUsj3bNL7zqEjaHyz9uHU4lsgAWi2SNIwSnY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.crl
rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E5335B45EE371DC463E5C65783A244FD1846656.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 23:16:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:e1:3c:d5:e9:9c:8f:85:0a:3f:43:4b:77:36:a2:f5:01:ea:9b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E5335B45EE371DC463E5C65783A244FD1846656
Validity
Not Before: Jan 31 20:16:37 2026 GMT
Not After : Feb 3 23:16:37 2026 GMT
Subject: CN=EA29A0BCF4B0C830E5187861DD18EECAD63A4485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:74:38:24:7f:82:4f:dd:fe:49:d0:b9:e7:52:
d8:0d:4e:19:e2:66:9e:a7:f2:16:55:d4:f3:77:a6:
17:a9:59:82:86:f3:27:dd:81:8f:37:79:20:67:7a:
63:0b:b0:76:23:c6:78:18:bf:8b:24:6a:33:48:eb:
fe:a5:f9:b5:59:c0:44:8e:b7:9c:02:68:c6:91:2e:
61:39:7e:1b:d7:eb:7b:dc:09:3b:01:c9:d1:04:c4:
54:5d:37:e0:83:9c:d0:ee:f8:6a:95:f7:5f:a2:a5:
e9:64:1b:26:09:c1:ff:16:33:c8:01:8b:14:c1:11:
0a:e7:01:2e:99:52:01:cd:b8:8d:43:14:c6:2b:da:
05:5f:66:9b:ac:73:64:32:68:8c:24:4a:98:36:5c:
d5:28:79:42:83:99:aa:f3:18:46:78:c4:ce:86:54:
a9:34:fb:46:48:e7:64:d1:ee:f1:c7:22:41:41:5a:
0d:1d:cb:51:53:f5:2a:d9:f3:af:64:fd:14:01:50:
15:13:5b:aa:36:03:be:08:f3:1d:54:6c:dd:91:d4:
68:10:00:a8:e8:12:4b:54:74:fc:14:45:23:ac:f1:
36:32:6c:7b:e6:50:59:22:17:ba:4f:8d:ce:82:15:
c7:59:c0:b0:01:d2:92:5b:30:a3:8d:4a:ac:d3:ca:
7a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:29:A0:BC:F4:B0:C8:30:E5:18:78:61:DD:18:EE:CA:D6:3A:44:85
X509v3 Authority Key Identifier:
keyid:8E:53:35:B4:5E:E3:71:DC:46:3E:5C:65:78:3A:24:4F:D1:84:66:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E5335B45EE371DC463E5C65783A244FD1846656.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:bd:3b:00:cb:31:d0:90:44:27:24:7b:e2:99:9c:a7:99:d1:
25:bf:b6:e5:68:7f:89:40:93:53:a5:5e:51:16:b1:8a:53:ae:
3c:40:c4:7e:dc:ac:9a:27:3a:e5:82:6a:a6:5b:08:3c:20:61:
22:49:32:34:22:82:41:9d:97:c4:90:62:96:45:ed:55:eb:7a:
62:65:57:2c:a1:f4:5c:19:44:56:5c:44:3c:f1:2d:21:c8:20:
10:80:a7:59:5e:ea:7a:80:98:9e:aa:08:04:b7:bf:df:7f:b7:
9f:dd:1b:17:1b:37:1b:d9:3b:ba:c8:c5:04:4e:24:4a:08:7d:
80:79:7d:73:f3:de:34:51:2c:74:ab:3d:56:19:d4:e7:73:e3:
12:2e:98:0b:9f:8e:76:3e:6e:78:d8:6d:db:c3:93:27:4c:75:
0d:07:0c:05:ec:1f:7e:a8:7c:c8:0d:3c:86:d3:a7:4d:4d:30:
81:30:33:d4:1d:8c:91:96:f5:f8:71:91:c0:b6:3e:cd:ee:ba:
2c:89:d3:72:bb:05:01:14:f0:b1:ac:c7:e1:fa:5b:e1:af:88:
a1:f5:5b:44:f8:ab:1a:5f:01:ec:5d:b1:65:0c:01:fa:b5:d3:
72:3e:5d:22:2d:cd:c4:66:ab:c7:e1:83:dc:fb:95:9c:41:c2:
af:a2:2d:ac
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUP+E81emcj4UKP0NLdzai9QHqm/EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU1MzM1QjQ1RUUzNzFEQzQ2M0U1QzY1NzgzQTI0NEZE
MTg0NjY1NjAeFw0yNjAxMzEyMDE2MzdaFw0yNjAyMDMyMzE2MzdaMDMxMTAvBgNV
BAMTKEVBMjlBMEJDRjRCMEM4MzBFNTE4Nzg2MUREMThFRUNBRDYzQTQ0ODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfdDgkf4JP3f5J0LnnUtgNThni
Zp6n8hZV1PN3phepWYKG8yfdgY83eSBnemMLsHYjxngYv4skajNI6/6l+bVZwESO
t5wCaMaRLmE5fhvX63vcCTsBydEExFRdN+CDnNDu+GqV91+ipelkGyYJwf8WM8gB
ixTBEQrnAS6ZUgHNuI1DFMYr2gVfZpusc2QyaIwkSpg2XNUoeUKDmarzGEZ4xM6G
VKk0+0ZI52TR7vHHIkFBWg0dy1FT9SrZ869k/RQBUBUTW6o2A74I8x1UbN2R1GgQ
AKjoEktUdPwURSOs8TYybHvmUFkiF7pPjc6CFcdZwLAB0pJbMKONSqzTynrnAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU6imgvPSwyDDlGHhh3RjuytY6RIUwHwYDVR0j
BBgwFoAUjlM1tF7jcdxGPlxleDokT9GEZlYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
OWNjMmU1Yi0zYjkxLTQyYWYtODIwMy01ZTNiOTE3MDQ4NDMvMC84RTUzMzVCNDVF
RTM3MURDNDYzRTVDNjU3ODNBMjQ0RkQxODQ2NjU2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOEU1MzM1QjQ1RUUzNzFEQzQ2M0U1QzY1NzgzQTI0NEZEMTg0
NjY1Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTljYzJlNWItM2I5MS00MmFmLTgy
MDMtNWUzYjkxNzA0ODQzLzAvOEU1MzM1QjQ1RUUzNzFEQzQ2M0U1QzY1NzgzQTI0
NEZEMTg0NjY1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAMS9OwDLMdCQRCcke+KZnKeZ0SW/tuVof4lA
k1OlXlEWsYpTrjxAxH7crJonOuWCaqZbCDwgYSJJMjQigkGdl8SQYpZF7VXremJl
Vyyh9FwZRFZcRDzxLSHIIBCAp1le6nqAmJ6qCAS3v99/t5/dGxcbNxvZO7rIxQRO
JEoIfYB5fXPz3jRRLHSrPVYZ1Odz4xIumAufjnY+bnjYbdvDkydMdQ0HDAXsH36o
fMgNPIbTp01NMIEwM9QdjJGW9fhxkcC2Ps3uuiyJ03K7BQEU8LGsx+H6W+GviKH1
W0T4qxpfAexdsWUMAfq103I+XSItzcRmq8fhg9z7lZxBwq+iLaw=
-----END CERTIFICATE-----
Generated at Mon Feb 2 09:44:52 2026 by rpki-client