This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft
File: 89402655017312B8CFCB367BA82966AA21E11F90.mft (raw, json)
Hash identifier: ep6Ha6EbzkNS5csJ4vJ5Y5XMkJSKn4QibVtvOdCePls=
Subject key identifier: 44:6E:CB:28:1D:24:07:56:C9:78:FD:D8:86:42:83:BF:C3:66:3A:95
Authority key identifier: 89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90
Certificate issuer: /CN=89402655017312B8CFCB367BA82966AA21E11F90
Certificate serial: 593039829E8E56E743B8AF33F067C76599FB7EDB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft
Manifest number: 051E
Signing time: Sun 01 Feb 2026 12:01:59 +0000
Manifest this update: Sun 01 Feb 2026 11:56:59 +0000
Manifest next update: Wed 04 Feb 2026 18:15:59 +0000
Files and hashes: 1: 323430343a623238303a3a2f33322d3438203d3e203137363730.roa (hash: S1hTgzRInefDZ+nv4OU9cj+WPrGD6wknjfAjdl1JFoo=)
2: 3131302e35302e38302e302f32312d3234203d3e203137363730.roa (hash: ENs+ad22cCNfPNiUGh8Crfa5TLmxtOCxc9FzlyRTptI=)
3: 3230322e3134372e3139322e302f32302d3234203d3e203137363730.roa (hash: WsFr0RE3ZnujNzg56bjhtSV6UHqOuDU5rMSYq/HFAbw=)
4: 3132332e3235332e3233322e302f32322d3234203d3e203137363730.roa (hash: R1hpl90tpuGr3S7MM3M7sdpYxwM9mEKg6oXY2ZteCXg=)
5: 323430303a313838303a3a2f33322d3438203d3e203137363730.roa (hash: FP8IqHLkyX7Qj2+QyPrsBYEPwMn3gsRtfyfeKNBNdEg=)
6: 3130332e3231332e3132382e302f32322d3234203d3e203137363730.roa (hash: LCi1weYpsHjqbHjmDdoyI35l96+t96YsB4f16htlxbU=)
7: 89402655017312B8CFCB367BA82966AA21E11F90.crl (hash: kRXqrqlbZ3KLLqyeIEWlVTqPryrxubOtK9SVi3mRE/c=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl
rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 18:15:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:30:39:82:9e:8e:56:e7:43:b8:af:33:f0:67:c7:65:99:fb:7e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89402655017312B8CFCB367BA82966AA21E11F90
Validity
Not Before: Feb 1 11:56:59 2026 GMT
Not After : Feb 4 18:15:59 2026 GMT
Subject: CN=446ECB281D240756C978FDD8864283BFC3663A95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5d:f6:80:64:2a:ae:b5:41:30:3f:2a:e2:92:
fb:52:72:1b:59:57:ca:ed:10:b5:6e:d9:02:d3:e3:
ad:0e:4b:8b:93:a3:04:71:0d:65:f0:58:ed:9f:ad:
71:0b:3b:e9:0b:62:47:7d:36:96:23:d8:73:58:cd:
d6:2b:14:c5:b6:a6:5b:b7:de:1d:58:6e:66:92:1c:
8a:f1:c1:83:54:b8:31:cd:c2:62:2c:b9:25:7c:ab:
40:2d:6c:39:60:e3:21:d7:ea:06:2e:6e:5b:c2:2d:
78:95:a5:47:60:e9:e8:49:83:66:3b:fe:d5:ba:d8:
ca:8a:bc:64:c6:aa:b3:f5:27:bc:29:5f:da:0d:03:
16:78:37:9c:99:de:7d:93:b6:62:65:c3:98:33:ae:
ff:a0:10:73:e4:69:c8:c7:9f:05:c6:f3:5d:b6:8b:
bd:35:24:71:95:e5:3e:37:fc:62:d6:7e:8a:06:48:
ab:63:b3:d9:f3:64:87:aa:8c:bd:ef:e9:88:f1:a4:
07:43:7a:92:0b:f5:fc:99:f3:8e:b6:40:01:59:a5:
1f:df:ab:bf:39:51:c5:e1:5f:83:00:06:83:7f:e1:
37:c3:89:c5:41:28:43:00:ca:dc:f8:1a:e0:3a:73:
9d:5e:46:d7:0e:dd:5b:2f:28:2b:28:89:e7:2d:51:
32:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6E:CB:28:1D:24:07:56:C9:78:FD:D8:86:42:83:BF:C3:66:3A:95
X509v3 Authority Key Identifier:
keyid:89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:f7:18:77:98:cd:72:16:5a:0f:15:cb:cc:ad:76:d6:88:b4:
a3:62:56:38:8f:ac:cd:fc:cf:5d:89:62:1f:0c:1d:c1:e5:e6:
62:2b:f7:3a:c7:fb:53:1d:ce:dc:48:9b:8d:46:f6:ce:5e:79:
fb:9b:fd:ba:62:f5:12:e3:3e:52:a3:1b:70:f5:ef:71:0b:96:
64:ef:96:19:73:d6:ad:fa:66:2c:eb:dd:7d:f5:df:71:d9:00:
4d:e0:00:7e:16:39:54:a1:54:51:a5:60:5a:0a:ae:2e:66:03:
cf:e9:9d:5d:30:59:e4:a5:a9:03:b3:24:5d:9e:35:9c:93:b3:
c8:92:a9:e2:f1:3e:b9:1a:72:a8:42:c9:c9:7b:34:3d:61:37:
fc:ba:83:8d:a3:57:b0:95:44:00:25:6c:d5:3f:ef:f5:02:ca:
fd:33:92:37:29:7a:24:7d:30:84:d9:e1:99:25:37:2b:5f:ff:
81:ac:a7:70:db:c8:c5:8a:be:32:d3:be:32:0d:54:a2:76:7a:
4f:45:b2:5a:39:31:c1:6e:32:69:ee:bb:bf:31:05:b6:59:a4:
80:13:29:8d:da:60:6c:e6:c8:95:67:40:8d:4e:87:cc:fb:8a:
9d:1f:5c:e1:7b:d0:5f:ad:85:2a:86:62:a7:47:b4:00:e6:67:
7c:95:61:e7
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUWTA5gp6OVudDuK8z8GfHZZn7ftswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2QUEy
MUUxMUY5MDAeFw0yNjAyMDExMTU2NTlaFw0yNjAyMDQxODE1NTlaMDMxMTAvBgNV
BAMTKDQ0NkVDQjI4MUQyNDA3NTZDOTc4RkREODg2NDI4M0JGQzM2NjNBOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNXfaAZCqutUEwPyrikvtSchtZ
V8rtELVu2QLT460OS4uTowRxDWXwWO2frXELO+kLYkd9NpYj2HNYzdYrFMW2plu3
3h1YbmaSHIrxwYNUuDHNwmIsuSV8q0AtbDlg4yHX6gYublvCLXiVpUdg6ehJg2Y7
/tW62MqKvGTGqrP1J7wpX9oNAxZ4N5yZ3n2TtmJlw5gzrv+gEHPkacjHnwXG8122
i701JHGV5T43/GLWfooGSKtjs9nzZIeqjL3v6YjxpAdDepIL9fyZ8462QAFZpR/f
q785UcXhX4MABoN/4TfDicVBKEMAytz4GuA6c51eRtcO3VsvKCsoiectUTJ5AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQURG7LKB0kB1bJeP3YhkKDv8NmOpUwHwYDVR0j
BBgwFoAUiUAmVQFzErjPyzZ7qClmqiHhH5AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
ZmIxYzgwYy00ZDZjLTQ0MDgtODk0Ny1mYmE2ZTdjNGJlN2MvMC84OTQwMjY1NTAx
NzMxMkI4Q0ZDQjM2N0JBODI5NjZBQTIxRTExRjkwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2QUEyMUUx
MUY5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWZiMWM4MGMtNGQ2Yy00NDA4LTg5
NDctZmJhNmU3YzRiZTdjLzAvODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2
QUEyMUUxMUY5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKH3GHeYzXIWWg8Vy8ytdtaItKNiVjiPrM38
z12JYh8MHcHl5mIr9zrH+1MdztxIm41G9s5eefub/bpi9RLjPlKjG3D173ELlmTv
lhlz1q36Zizr3X3133HZAE3gAH4WOVShVFGlYFoKri5mA8/pnV0wWeSlqQOzJF2e
NZyTs8iSqeLxPrkacqhCycl7ND1hN/y6g42jV7CVRAAlbNU/7/UCyv0zkjcpeiR9
MITZ4ZklNytf/4Gsp3DbyMWKvjLTvjINVKJ2ek9Fslo5McFuMmnuu78xBbZZpIAT
KY3aYGzmyJVnQI1Oh8z7ip0fXOF70F+thSqGYqdHtADmZ3yVYec=
-----END CERTIFICATE-----
Generated at Mon Feb 2 10:06:52 2026 by rpki-client