This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft
File: 29A4AE587F980E73A344FD1ED55C47566E609511.mft (raw, json)
Hash identifier: /gx8WzGc95rj+XD0jrfoKQNZHTa+mDGwleU5QEb0/Kc=
Subject key identifier: E5:B9:81:B6:EF:E6:52:DB:19:23:0A:13:39:E8:6C:72:C5:81:0B:EC
Authority key identifier: 29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11
Certificate issuer: /CN=29A4AE587F980E73A344FD1ED55C47566E609511
Certificate serial: 4012C234F5293493603004DA66CFCF4A54DA661D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft
Manifest number: 0211
Signing time: Sat 31 Jan 2026 19:41:02 +0000
Manifest this update: Sat 31 Jan 2026 19:36:02 +0000
Manifest next update: Wed 04 Feb 2026 03:42:02 +0000
Files and hashes: 1: 3231302e35372e3230382e302f32342d3234203d3e203338313432.roa (hash: 5KJPXKO+YgVPDp5/Lxph27ikYeC7tlibyzTKvb+xH+U=)
2: 3231302e35372e3231332e302f32342d3234203d3e203338313432.roa (hash: vcvaF7qLrZfF67W9/bH4Pv9+bQ+VrLBZL/jJ0+fbzRQ=)
3: 3231302e35372e3232332e302f32342d3234203d3e203338313432.roa (hash: lpKbOrbrhT2vlvAJL98reUqD6vC4IeP7PUgmebV+YgY=)
4: 29A4AE587F980E73A344FD1ED55C47566E609511.crl (hash: MC0nzEd9SIS/VvWOfKJ7/f0YUq5KqA7+qtZ+G5/FVBQ=)
5: 3231302e35372e3231302e302f32342d3234203d3e203338313432.roa (hash: s4sdV2zqNMH3fGcBnDuis8aX3mvXYgrOkNmd2MBCpEo=)
6: 3231302e35372e3230382e302f32302d3234203d3e203338313432.roa (hash: kYJzUEQcWnyFZnM0+lqlLEcfPB6UOEcJYBSDjGHXeZQ=)
7: 3231302e35372e3231342e302f32342d3234203d3e203338313432.roa (hash: CNjjCjswWd58cFSAK67rKA8R6XX41IvI3hykr65lfAk=)
8: 3231302e35372e3231372e302f32342d3234203d3e203338313432.roa (hash: OeDxmQiYfJ+Kuyw0E4mlOqMrTAjgkpNdl0ffvHuVyVk=)
9: 3231302e35372e3232322e302f32342d3234203d3e203338313432.roa (hash: LtP1kQmMGBD8rNYEzlai6KwmPf3m3u3XHD/epMWL5xk=)
10: 3231302e35372e3231322e302f32342d3234203d3e203338313432.roa (hash: duc90GFuNbL5017UYKgzCGWcF8U4EsnoqNIvTSG815o=)
11: 3231302e35372e3231312e302f32342d3234203d3e203338313432.roa (hash: A2F1GbTYlcEIUwvBTPhQfv0VuBBIuBdZuIee8bvl4wQ=)
12: 3231302e35372e3230392e302f32342d3234203d3e203338313432.roa (hash: rcQy9K6A496g9N3vwW/BVEMEh81ubo325Yhstno8ULI=)
13: 3231302e35372e3231392e302f32342d3234203d3e203338313432.roa (hash: CtnAA9scsnBm9yBtcf3dh5QpYIx2D3sLFM+gjP0S/X0=)
14: 3231302e35372e3232302e302f32342d3234203d3e203338313432.roa (hash: jQ9xqnz2BbrO2Re14MPLZ4EX0mN0DnJymhawCVrzhBE=)
15: 3231302e35372e3232312e302f32342d3234203d3e203338313432.roa (hash: WS/P4TpGYsCeXm+bcL5xnvrovJjYUoIR2jeGTVeT3mU=)
16: 3231302e35372e3231382e302f32342d3234203d3e203338313432.roa (hash: ibgEML1LWV3GcYP6GRvOjjWRG6RzbhDfHX86QAq91qs=)
17: 3231302e35372e3231362e302f32342d3234203d3e203338313432.roa (hash: FYQ4GgoWT79qHp4XxDTgktT9zjmOHOsSmJwwOMQ1oFw=)
18: 3231302e35372e3231352e302f32342d3234203d3e203338313432.roa (hash: EXLASj8PVKKJwsREbqBWd6a8fmdAbHcB/DzU2bmTOyA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl
rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 03:42:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:12:c2:34:f5:29:34:93:60:30:04:da:66:cf:cf:4a:54:da:66:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29A4AE587F980E73A344FD1ED55C47566E609511
Validity
Not Before: Jan 31 19:36:02 2026 GMT
Not After : Feb 4 03:42:02 2026 GMT
Subject: CN=E5B981B6EFE652DB19230A1339E86C72C5810BEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:77:80:51:bc:a6:8a:ad:6f:76:2c:88:fa:0d:
d4:7f:16:a3:db:a2:ce:cc:68:ae:b4:d5:64:e8:f8:
fb:c8:4b:46:b0:c2:7b:1d:e4:8f:1f:94:5f:47:8f:
19:28:8a:3b:56:e8:f3:1d:81:5d:b0:39:6e:f0:61:
86:56:a2:83:93:9f:6d:9a:91:5d:20:92:58:40:1a:
38:b9:76:75:7d:2a:f7:cd:1c:2f:10:40:29:4a:6f:
80:4a:a1:f1:8c:b7:b0:fc:29:ac:ce:bb:1c:87:74:
c8:b4:7f:01:28:3f:e6:8e:6b:73:75:83:e9:45:7f:
3b:e7:bd:a4:9f:f1:8a:82:8b:60:76:b0:e4:a7:5c:
5a:53:c5:bf:1e:b5:89:73:d9:39:14:45:6b:8b:68:
c4:2e:40:f3:c1:5b:32:22:b5:90:08:f0:44:a1:1a:
7f:99:ef:c5:80:70:28:e9:bb:e2:c4:43:81:64:15:
7e:c2:6f:b9:4b:45:c8:3b:95:9d:77:e2:fb:ef:d3:
02:b6:51:85:53:48:03:50:d5:34:0e:0c:37:ce:e7:
f1:48:17:05:38:c4:a7:6e:9d:0c:5e:8c:5f:55:55:
c8:e0:72:aa:b6:9d:b5:4f:14:66:99:d6:62:6e:fb:
b8:2f:57:8b:d2:52:98:4b:78:bd:fc:e3:7f:b5:61:
3c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B9:81:B6:EF:E6:52:DB:19:23:0A:13:39:E8:6C:72:C5:81:0B:EC
X509v3 Authority Key Identifier:
keyid:29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:0c:ff:48:6a:19:f1:39:e9:db:92:be:46:d2:84:32:62:9c:
39:56:2a:61:e8:1d:6f:84:b6:87:b2:ac:aa:23:2a:86:34:b0:
b5:f3:16:e0:2e:21:57:64:ba:de:d2:a4:ed:f1:9c:3c:52:8d:
34:21:f1:65:e5:59:50:07:26:ce:3e:29:8e:14:e3:c2:db:e9:
b1:4d:69:90:be:62:32:8d:ba:f2:03:f9:ee:2d:63:37:5b:92:
f7:c5:e7:20:6c:b3:34:6b:bf:cd:e6:22:ff:46:59:9c:e8:9f:
c5:de:48:26:7a:81:55:d3:1a:eb:85:d6:b8:ae:55:f6:d0:b3:
e4:10:db:ae:90:88:58:45:5b:89:c5:e1:e2:94:42:6b:29:2c:
5d:19:64:36:79:fa:e3:f0:bb:7e:ab:16:79:ee:e2:c9:81:f1:
dd:e4:6f:63:8f:26:46:8b:e9:d6:c7:8c:2e:85:88:04:0e:78:
95:a4:2e:63:9c:f2:20:01:2e:30:98:43:83:59:88:e2:de:2e:
e3:f2:67:a4:42:48:76:f9:18:46:43:85:c1:17:44:f0:f5:58:
78:8e:c9:b8:af:71:ed:07:74:c3:82:29:e4:b2:70:2b:fe:4a:
d4:a7:5e:31:2d:74:7b:38:ca:59:be:75:ea:e2:24:24:bc:e6:
d6:91:33:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:06:32 2026 by rpki-client