This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft
File: 3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft (raw, json)
Hash identifier: jnKr8OmFufjRzzfXxjJ7miG3GGHN1OlsNPrbpXVtqLU=
Subject key identifier: 2E:A6:2E:7D:E4:FD:03:DA:ED:E6:52:11:45:44:52:4A:D2:4B:C9:E2
Authority key identifier: 3E:DD:CA:40:C3:F0:CF:91:2B:00:3B:B1:9F:9C:03:E4:8B:43:F7:27
Certificate issuer: /CN=3EDDCA40C3F0CF912B003BB19F9C03E48B43F727
Certificate serial: 1F9C5A63E4F90794041FAB7D10F3A000B01ACCC2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft
Manifest number: 0218
Signing time: Sat 31 Jan 2026 17:10:05 +0000
Manifest this update: Sat 31 Jan 2026 17:05:05 +0000
Manifest next update: Tue 03 Feb 2026 23:17:05 +0000
Files and hashes: 1: 3130332e31392e3135382e302f32332d3234203d3e20313530323339.roa (hash: 2pmnEjpV6xKfD9pUClZgIAGRZy9Yz1iTckvB+l+9+U4=)
2: 3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.crl (hash: qW5a8n3iZa4w7xw17KWCgI4cvIm9U1OgELs/SCodMgg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.crl
rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 23:17:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:9c:5a:63:e4:f9:07:94:04:1f:ab:7d:10:f3:a0:00:b0:1a:cc:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3EDDCA40C3F0CF912B003BB19F9C03E48B43F727
Validity
Not Before: Jan 31 17:05:05 2026 GMT
Not After : Feb 3 23:17:05 2026 GMT
Subject: CN=2EA62E7DE4FD03DAEDE652114544524AD24BC9E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:84:8d:3e:ff:98:f3:94:d6:8f:46:d3:9b:cc:
5c:c9:ec:2b:a4:fc:80:f6:89:6b:c9:26:6b:91:61:
d5:a9:3a:35:57:03:f2:0c:84:62:9e:8a:4d:bc:12:
0b:69:74:83:63:8e:30:49:0e:2a:71:10:1e:05:bc:
60:35:81:97:82:0c:00:dc:46:37:ee:2a:97:43:ae:
5a:95:a8:de:5a:68:5e:5d:28:b6:1e:b3:c5:cd:96:
9b:8d:c5:3d:0b:b9:00:a1:fb:fc:43:19:99:79:53:
a3:06:c3:1e:64:7c:03:3e:8c:c2:5a:97:f9:c0:74:
fd:62:54:c7:e3:bf:17:81:53:d4:db:8b:7a:12:00:
d1:30:18:88:9f:f7:25:0c:25:f6:d0:a3:56:bf:63:
8e:99:51:4f:61:5a:0c:fa:e1:c3:5d:67:2f:86:68:
43:93:25:0e:27:29:88:15:3d:83:de:3f:09:6a:19:
d4:09:3a:a4:d9:0b:6a:e6:e6:f7:56:56:c0:e2:32:
75:af:c3:84:61:00:ff:a9:32:19:53:5e:4d:8c:d4:
19:74:a4:a0:71:6f:3d:47:1e:04:39:c0:27:c7:3c:
8f:98:88:bd:e5:eb:52:0e:de:0f:92:1d:aa:ce:78:
bb:5f:ff:60:fe:04:35:f7:de:55:4a:0a:6c:1a:4a:
4a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A6:2E:7D:E4:FD:03:DA:ED:E6:52:11:45:44:52:4A:D2:4B:C9:E2
X509v3 Authority Key Identifier:
keyid:3E:DD:CA:40:C3:F0:CF:91:2B:00:3B:B1:9F:9C:03:E4:8B:43:F7:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:5a:ea:2b:5e:d2:12:c2:a8:97:a0:6c:c9:22:03:4c:de:3a:
bc:93:3a:21:19:f3:19:5d:86:42:8c:6e:41:33:ba:a0:42:12:
d9:46:49:bb:95:55:38:e2:80:7c:34:c4:8f:14:70:33:f0:d7:
90:90:e8:61:46:a1:b8:73:09:18:88:ac:65:30:4d:6a:94:33:
32:3a:7e:38:5c:77:24:82:90:38:39:1b:8b:f2:f8:9b:df:3d:
20:51:a4:fe:d8:d0:98:fd:0c:8f:36:9c:fb:e6:29:53:37:6a:
25:5d:ce:a9:f8:a4:df:4c:3e:14:ef:35:73:b6:28:9d:6a:d8:
61:e1:44:3b:06:9f:48:bd:a5:ed:f4:a4:b5:39:e4:79:de:61:
d0:a9:60:30:74:04:60:f8:e4:0f:0d:b0:50:58:01:8c:41:c3:
88:0b:26:01:d8:9b:37:b7:54:3b:36:be:fa:37:30:dc:f1:c4:
06:d9:b3:f4:a6:38:ca:52:e4:1a:aa:60:45:a5:db:77:d2:b8:
71:b4:38:04:df:e1:18:4c:59:12:76:79:67:6f:be:f0:b1:f1:
84:b9:71:2a:6c:98:9f:25:13:66:e0:07:79:c3:12:2a:d1:70:
9f:99:24:35:8a:d2:f6:8b:d1:0b:36:68:1f:f5:86:b4:3b:fa:
f3:21:bb:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:06 2026 by rpki-client