This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.mft
File: 52145183B5BE1A663FBC5C228102541AC61F9F86.mft (raw, json)
Hash identifier: K/9NxfCurHAagkS+xKiBr+MkoOcLCZWBCNRGusI4XkQ=
Subject key identifier: 51:04:47:EF:61:42:66:52:E3:C4:11:88:47:8F:00:58:14:24:E1:E7
Authority key identifier: 52:14:51:83:B5:BE:1A:66:3F:BC:5C:22:81:02:54:1A:C6:1F:9F:86
Certificate issuer: /CN=52145183B5BE1A663FBC5C228102541AC61F9F86
Certificate serial: 39D9031AA083DDFA254961BC11165DDD6E5C843B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52145183B5BE1A663FBC5C228102541AC61F9F86.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.mft
Manifest number: 0503
Signing time: Mon 02 Feb 2026 01:31:48 +0000
Manifest this update: Mon 02 Feb 2026 01:26:48 +0000
Manifest next update: Thu 05 Feb 2026 04:34:48 +0000
Files and hashes: 1: 3130332e3135372e37382e302f32332d3234203d3e20313431313134.roa (hash: ejH4Jptb2+nXxwdyhxr2eLVcxmTdzu5eDGJeQynArtM=)
2: 52145183B5BE1A663FBC5C228102541AC61F9F86.crl (hash: 4P9f68ZeFcIz2/XNjz31rEEnkTuNPy8lsGKOB3RRy74=)
3: 323430363a396163303a3a2f33322d3438203d3e20313431313134.roa (hash: I8J+VKjZlzAYUjuoXbFTNBgkY4GMxQkjdom4zb/4W0c=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.crl
rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52145183B5BE1A663FBC5C228102541AC61F9F86.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 04:34:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:d9:03:1a:a0:83:dd:fa:25:49:61:bc:11:16:5d:dd:6e:5c:84:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52145183B5BE1A663FBC5C228102541AC61F9F86
Validity
Not Before: Feb 2 01:26:48 2026 GMT
Not After : Feb 5 04:34:48 2026 GMT
Subject: CN=510447EF61426652E3C41188478F00581424E1E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e3:37:68:0f:d4:46:56:42:23:ac:3f:29:b3:
f0:53:da:79:23:8f:43:6e:a1:06:26:9c:a9:68:9e:
ab:ee:9b:f9:1c:e0:b1:19:b8:fd:0c:c0:e6:2c:6e:
24:c8:fe:aa:74:9c:3e:82:89:37:ca:52:d1:c3:4e:
43:0d:7c:c9:15:db:96:b7:02:b3:ee:97:a8:ca:62:
d3:dc:ec:b0:7f:f9:3d:de:44:05:fb:e1:d4:0e:1c:
97:0f:ab:54:7e:55:ad:3e:7d:2c:86:5a:5f:2f:79:
b3:e3:d5:05:aa:bd:17:20:9e:17:0f:2c:00:62:a9:
aa:40:f3:cb:d4:d4:1f:83:2f:e7:c9:d4:a1:5c:f2:
7c:74:30:bc:cd:fd:b8:b3:dc:7f:66:d6:73:83:b2:
32:dd:cf:9e:32:6d:1b:40:8b:fe:3d:d8:29:85:7b:
6d:67:57:26:72:68:3a:b5:87:33:66:fa:5b:e5:5a:
a2:6a:b6:df:b6:e1:f1:16:22:b7:2c:f8:6a:06:72:
ee:22:c5:e7:12:90:77:b2:9f:d5:44:bb:b6:04:01:
4c:65:39:33:f5:7d:af:82:4e:03:0c:b0:29:3b:e8:
e4:31:cf:cb:59:6f:d8:e7:2e:f5:bb:93:62:af:8d:
f1:21:01:60:ad:20:cf:ed:e2:ca:50:8c:54:5f:a4:
1a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:04:47:EF:61:42:66:52:E3:C4:11:88:47:8F:00:58:14:24:E1:E7
X509v3 Authority Key Identifier:
keyid:52:14:51:83:B5:BE:1A:66:3F:BC:5C:22:81:02:54:1A:C6:1F:9F:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52145183B5BE1A663FBC5C228102541AC61F9F86.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:46:3b:6b:66:9a:ab:bd:46:84:8c:45:f0:82:99:3a:08:c0:
99:b5:58:43:39:ae:c3:61:a1:ab:ae:31:00:4b:28:ef:27:3d:
2e:e7:b9:62:d9:da:65:40:3b:16:4e:17:c0:17:e6:a0:f3:16:
ad:8c:20:b7:62:0f:c4:73:a8:61:15:da:54:03:3b:f9:69:93:
b4:35:17:3a:2f:0a:d4:b1:7e:02:13:4e:aa:86:15:67:1b:30:
41:ca:86:57:d3:64:67:97:7f:42:93:4e:3f:05:55:3f:22:f1:
6d:ac:f0:b1:47:8a:23:92:c4:a0:91:11:dc:17:1a:a3:25:8f:
c7:cc:f9:1e:eb:ed:9d:31:8f:a0:52:87:4a:18:bc:4a:e0:6e:
bb:51:ce:68:9f:ac:a1:bb:f1:08:88:20:1a:70:7a:da:aa:32:
5b:e5:a0:53:2c:33:48:60:f7:7e:2c:d3:b7:8e:de:28:28:1e:
7c:50:58:84:3a:4d:de:1b:c4:dc:fe:13:64:5b:0f:1f:22:3f:
06:04:63:c8:7a:0e:4d:59:ca:77:dd:04:6e:8d:bc:8a:75:5f:
fc:c7:ee:e2:00:01:51:91:d0:8e:7b:23:94:08:5e:0b:85:5c:
ad:0a:ca:a1:27:57:24:f8:6d:03:12:ff:0c:bc:db:9a:0b:7c:
6b:4c:12:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:48:56 2026 by rpki-client