This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.mft
File: 170364F664BF0A4CDB9EEC7A8C1282D0B314F186.mft (raw, json)
Hash identifier: tkfbW1qkmENK8nroTeJQDTrRqbUwiZYRY1O8KEujVUA=
Subject key identifier: 2C:45:98:E1:3C:85:2E:73:C5:A5:68:79:6B:A3:34:9D:0E:F4:F2:1C
Authority key identifier: 17:03:64:F6:64:BF:0A:4C:DB:9E:EC:7A:8C:12:82:D0:B3:14:F1:86
Certificate issuer: /CN=170364F664BF0A4CDB9EEC7A8C1282D0B314F186
Certificate serial: 564343E475538EAED3B9A9AD17F81130517FD7C1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.mft
Manifest number: 015A
Signing time: Sat 31 Jan 2026 16:11:52 +0000
Manifest this update: Sat 31 Jan 2026 16:06:52 +0000
Manifest next update: Tue 03 Feb 2026 19:34:52 +0000
Files and hashes: 1: 3130332e332e34372e302f32342d3234203d3e203536323338.roa (hash: R9+89SgRY/t0tmu72BY2SfLfNg/9wdtNupYFgMHeobM=)
2: 170364F664BF0A4CDB9EEC7A8C1282D0B314F186.crl (hash: r1SYM83+KkVdVq4g26yihlV522mhJxjp/JI83vNWRbw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.crl
rsync://repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 19:34:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:43:43:e4:75:53:8e:ae:d3:b9:a9:ad:17:f8:11:30:51:7f:d7:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=170364F664BF0A4CDB9EEC7A8C1282D0B314F186
Validity
Not Before: Jan 31 16:06:52 2026 GMT
Not After : Feb 3 19:34:52 2026 GMT
Subject: CN=2C4598E13C852E73C5A568796BA3349D0EF4F21C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:dd:01:05:15:fa:81:dd:68:43:fb:81:b9:b2:
39:ae:27:de:7f:e9:44:0a:ec:a0:e1:10:d9:e5:75:
57:62:29:d6:d4:01:68:df:a6:51:f8:3a:1e:d1:ee:
d2:ac:2e:3c:73:20:9d:cc:db:3d:78:34:b6:b1:f6:
c6:71:94:d1:08:c9:fa:d8:7f:0c:ac:11:07:b6:4a:
58:0d:74:2f:68:fb:f5:7a:e7:80:d3:99:6b:ba:c0:
a9:b7:8c:e3:ab:f1:27:00:03:8f:0d:92:9d:a0:96:
cd:40:89:0a:ad:8d:1d:b2:6f:ac:6f:95:21:26:f4:
c8:de:da:98:6a:dc:26:87:7e:81:d4:0e:9c:a3:7d:
3e:b2:43:2e:f7:72:f3:86:54:59:15:31:23:fa:c3:
93:c5:f2:68:e2:9b:43:ef:32:a7:bb:cb:b6:d5:2d:
ff:cd:a4:4a:4c:72:23:94:a8:31:4a:3a:11:4a:69:
6b:be:09:39:27:40:b5:51:2b:46:21:86:ae:4a:f3:
c9:ac:2f:6c:7c:3b:c2:af:da:b8:a0:51:6d:58:d6:
cc:55:17:be:96:06:9f:19:e8:bb:5c:77:62:9e:23:
ee:9b:47:d2:c1:52:68:68:60:1a:79:14:87:67:ef:
98:a6:af:be:77:01:0a:a5:26:1d:fb:f7:0b:b6:dd:
e7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:45:98:E1:3C:85:2E:73:C5:A5:68:79:6B:A3:34:9D:0E:F4:F2:1C
X509v3 Authority Key Identifier:
keyid:17:03:64:F6:64:BF:0A:4C:DB:9E:EC:7A:8C:12:82:D0:B3:14:F1:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ea:ee:02:91:65:7d:79:ee:f2:0b:29:fe:35:30:9d:0a:d7:
ca:65:96:4d:5d:16:99:d8:97:b9:b5:65:04:2c:ba:44:c1:5d:
30:8e:56:29:fa:16:a4:b4:0b:1e:29:bc:25:05:47:04:dc:f4:
18:e9:d7:2a:ec:ee:1a:84:12:3d:bb:04:9f:c8:0f:71:47:90:
ed:e0:ab:4d:c7:e1:be:b4:28:e9:21:a6:06:89:7d:de:e4:d2:
84:29:bb:70:68:f8:01:45:41:bd:02:7e:96:93:89:7d:68:4c:
b9:93:7c:a1:12:40:7a:74:67:64:8b:e7:97:3b:56:2b:ae:96:
67:90:02:82:72:d1:26:d9:bb:ee:c8:aa:c1:98:d5:7a:c1:21:
bb:31:12:c3:98:6c:7e:75:9c:45:47:b0:44:31:ba:c7:c4:ad:
b7:da:13:ba:da:e4:4e:0e:7f:5a:d0:f3:d7:fd:39:71:2b:9e:
17:c6:84:03:10:62:f9:d1:c3:0d:ce:8e:16:33:7a:4d:82:53:
02:68:42:92:1b:bc:6a:20:4d:e3:49:65:50:22:db:df:b9:94:
02:f9:4e:e6:b0:ef:99:0e:db:6c:df:9d:01:02:69:21:26:28:
48:53:25:35:0b:19:01:84:8d:16:50:25:86:02:8e:b9:dc:51:
29:4b:4b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:45:12 2026 by rpki-client