This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft
File: A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft (raw, json)
Hash identifier: iAeWPRT/zFTI9C0/GBh9CjeurcRvpYB/u8JORV5h4sY=
Subject key identifier: 60:6C:E0:E4:72:4F:46:A5:49:9B:22:BD:25:37:76:E2:B8:CE:9F:2B
Authority key identifier: A4:A4:C4:26:A4:F4:2A:29:82:96:36:FB:32:23:FA:7F:5C:68:50:9A
Certificate issuer: /CN=A4A4C426A4F42A29829636FB3223FA7F5C68509A
Certificate serial: 6A12FE70E044C3800520DFE599DF8EC5065531C2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4A4C426A4F42A29829636FB3223FA7F5C68509A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft
Manifest number: 026E
Signing time: Sun 01 Feb 2026 00:11:59 +0000
Manifest this update: Sun 01 Feb 2026 00:06:59 +0000
Manifest next update: Wed 04 Feb 2026 01:36:59 +0000
Files and hashes: 1: A4A4C426A4F42A29829636FB3223FA7F5C68509A.crl (hash: jKHcFKy0ADxoti9tt/AR5SlYDmRy5KvreaSicYa1Ehk=)
2: 3130332e31332e33362e302f32342d3234203d3e20313331373231.roa (hash: vgTgBTNTJydGtVf4bKSxwWlbjZECM4zNCEv4WqlYb9U=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.crl
rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4A4C426A4F42A29829636FB3223FA7F5C68509A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 01:36:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:12:fe:70:e0:44:c3:80:05:20:df:e5:99:df:8e:c5:06:55:31:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A4A4C426A4F42A29829636FB3223FA7F5C68509A
Validity
Not Before: Feb 1 00:06:59 2026 GMT
Not After : Feb 4 01:36:59 2026 GMT
Subject: CN=606CE0E4724F46A5499B22BD253776E2B8CE9F2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:70:70:7f:3c:39:e5:e2:41:6c:23:fd:54:1f:
ab:53:96:50:44:49:dc:f9:1b:3e:31:31:6f:f5:fb:
0b:a6:fe:bf:4f:9d:5e:da:dd:94:61:84:aa:68:01:
ec:d6:08:ab:7e:90:ff:7d:ba:3e:b5:8e:17:ca:00:
e0:c5:2e:ae:1a:2b:28:72:4c:49:05:a3:0c:2b:51:
f1:e2:ea:79:7d:4c:1e:e5:6d:05:82:99:35:5b:3b:
da:24:83:48:28:90:13:70:da:f2:3c:a7:b7:5f:d5:
15:65:0c:fb:9f:1d:f5:ad:86:ae:91:2e:c5:94:9d:
75:4f:15:66:9f:0a:c0:c7:c6:6d:50:91:d4:28:94:
f2:74:13:13:64:39:8f:ce:a1:9b:0e:06:b1:f3:c1:
55:d1:32:a3:56:5c:21:41:27:b1:a9:25:35:8f:09:
dc:3b:97:29:34:5d:ef:3e:dc:55:66:6e:67:59:b1:
ea:ab:f2:05:37:08:57:4f:5f:a6:ac:19:46:c5:fd:
62:96:42:e1:94:53:ce:7f:83:73:94:51:d5:e0:80:
ca:f9:a3:ae:fe:ae:fd:81:93:fd:c4:34:c0:a8:cc:
2c:53:c5:02:5f:ac:48:13:91:02:32:c1:0f:d8:27:
0e:ae:01:a0:b5:df:47:2f:bd:46:2e:cd:51:f0:de:
98:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:6C:E0:E4:72:4F:46:A5:49:9B:22:BD:25:37:76:E2:B8:CE:9F:2B
X509v3 Authority Key Identifier:
keyid:A4:A4:C4:26:A4:F4:2A:29:82:96:36:FB:32:23:FA:7F:5C:68:50:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4A4C426A4F42A29829636FB3223FA7F5C68509A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b7:d1:3e:23:03:2c:70:4d:db:02:fd:87:a4:4c:5c:67:1b:
39:7e:ab:e0:ba:03:29:a2:a6:45:78:c5:c7:5f:9d:16:56:88:
d8:de:49:ed:95:14:d2:ac:10:27:03:62:d0:5d:f1:f8:ad:42:
83:2b:3d:23:5c:77:eb:a6:75:1c:1a:f4:6d:00:76:cf:f8:a2:
97:31:ad:3a:33:70:29:f9:fe:94:6b:3d:34:26:bf:fc:22:67:
6a:48:68:af:95:76:b7:7b:63:3e:2b:f1:4d:98:ea:48:82:bb:
d0:de:f3:24:cd:ee:2e:05:77:c5:d8:da:6a:35:dd:af:f5:18:
6e:bc:69:e1:85:23:a4:7c:df:8c:74:4d:95:4c:52:fe:a9:b5:
73:18:54:57:76:21:45:68:92:86:9c:08:4b:c6:9b:d4:89:0c:
91:a6:c9:91:f6:9b:8c:e2:f4:bb:1c:a9:4a:5e:13:38:5b:6b:
03:21:c2:41:d7:05:cd:f0:c1:bd:87:80:3d:c6:ef:73:4d:e9:
0d:dd:e8:3a:9f:05:51:de:d2:85:cd:cd:01:2f:8e:4d:4d:22:
7c:b8:7d:ae:5e:9c:e3:e5:d8:8a:c3:3b:8a:3c:26:41:49:04:
a5:e6:94:91:28:17:1e:6f:5d:3b:3a:96:a4:a5:b0:d0:40:09:
ba:39:ee:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:03:44 2026 by rpki-client