This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft
File: F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft (raw, json)
Hash identifier: IOfFMpBBeADxU6V/43/AU/WWW8vNsIr/5PgdckSQ77A=
Subject key identifier: 40:AC:FA:A6:A3:35:97:80:4B:ED:65:EA:36:0A:BB:EA:42:27:B3:28
Authority key identifier: F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B
Certificate issuer: /CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B
Certificate serial: 615B5EDD569C476E576F1A32C1EF95AFAE8104AC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft
Manifest number: 0224
Signing time: Sat 31 Jan 2026 04:41:34 +0000
Manifest this update: Sat 31 Jan 2026 04:36:34 +0000
Manifest next update: Tue 03 Feb 2026 11:52:34 +0000
Files and hashes: 1: 3130332e31332e3230342e302f32342d3234203d3e203438343635.roa (hash: WBg+Oj5FDShLbz1I5ijbkQnlP4hqNRkJwhL0ngYl8bg=)
2: 3130332e31332e3230352e302f32342d3234203d3e203438343635.roa (hash: /BkZhdhHuWpr0COSSqEa5xQ/tUEnJqvOpL9FKXE/Mm4=)
3: 3130332e31332e3230342e302f32332d3233203d3e203634333030.roa (hash: 2AxkviF5pv7j1kTQ3v8XjI6k7pg1zXnW3iJ2qwjQWV0=)
4: 3130332e31332e3230352e302f32342d3234203d3e20313532333636.roa (hash: bNck8LpKpp26kW2UN16eMZ1fOvjILY8XEu10GDGQj+I=)
5: 3130332e31332e3230342e302f32342d3234203d3e203634333030.roa (hash: aoGZEwGfwxorrH0vm0ZUZnYbhYMMuOl+o+RcX6GAvoE=)
6: F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl (hash: w8b51+8MGf9SZHaTVpwi0n4xcgY1F0yyV1a6lKzC6DE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl
rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 11:52:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:5b:5e:dd:56:9c:47:6e:57:6f:1a:32:c1:ef:95:af:ae:81:04:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B
Validity
Not Before: Jan 31 04:36:34 2026 GMT
Not After : Feb 3 11:52:34 2026 GMT
Subject: CN=40ACFAA6A33597804BED65EA360ABBEA4227B328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6b:1d:63:21:3c:f9:d7:eb:c2:6c:31:91:b8:
d9:f1:45:ab:ad:22:22:9b:48:20:6a:06:1b:ce:9b:
19:b5:5d:a2:90:f8:a9:5a:01:bf:95:13:57:c3:b1:
e5:cc:b3:42:69:23:98:2b:bf:d5:66:c6:32:fe:8d:
ad:e7:6e:e7:53:94:60:2e:25:ca:8f:af:28:a1:19:
b9:a6:33:e5:bd:6a:35:c4:73:c3:20:3e:f5:18:1e:
ea:b7:ab:ee:92:4b:93:f2:e3:02:4a:47:c1:bb:1c:
b3:10:e1:62:f4:80:2a:ce:f1:2e:45:2c:06:eb:11:
ef:f9:82:6a:4b:33:9f:23:71:a8:cd:ae:68:c4:1f:
c7:85:d2:f1:36:e6:21:f9:2d:c0:f1:7b:9e:7a:4e:
42:5d:f8:d5:f8:70:76:e5:0c:c6:0d:7b:37:5d:2d:
a7:7f:4d:e1:07:08:c9:74:fd:c5:d9:b3:28:4b:fe:
b8:9e:f8:e0:58:46:fc:6c:91:ea:61:94:dd:68:19:
47:3f:f5:ed:b2:49:e9:f6:1b:a7:33:6d:4f:31:a6:
3e:c7:76:ba:81:b1:b6:3d:1b:d0:24:ac:5c:3b:6f:
6f:45:af:1f:3a:69:fc:72:53:cb:1d:2a:36:c1:13:
03:2d:9b:e7:b4:1d:ff:c0:ff:ac:c4:5a:90:22:c5:
5d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AC:FA:A6:A3:35:97:80:4B:ED:65:EA:36:0A:BB:EA:42:27:B3:28
X509v3 Authority Key Identifier:
keyid:F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:d0:4d:59:f2:66:94:49:58:d9:a1:4a:79:6f:02:2f:be:0e:
4a:9b:63:7b:b6:f7:cd:79:a2:4a:60:b5:56:a0:37:b4:75:82:
52:d2:ce:3e:48:d1:f8:a5:c6:2c:64:61:f8:f8:5b:1c:6f:c0:
a9:28:05:26:b7:29:7c:7b:08:b4:32:38:97:fb:b4:c3:7c:dd:
a1:0e:ef:78:1f:78:e4:00:05:b7:bc:74:f5:61:7a:95:73:fa:
cc:02:c0:56:66:5a:bd:84:54:ae:0b:c0:22:c0:94:49:54:fd:
00:31:b6:74:04:66:17:a5:28:6c:86:2c:43:b0:51:14:f2:9c:
5c:ea:bf:cf:5f:c6:3b:e0:7d:65:ca:bf:77:c8:ce:ba:cc:c5:
01:03:31:6b:d2:cc:fe:bf:4e:cb:f6:cb:bc:c5:22:c4:a8:90:
a5:36:fa:be:8f:38:c4:3e:2b:0a:54:81:c5:ce:78:93:ca:32:
0b:a3:75:5c:d7:f9:9d:f9:ed:05:74:c3:e6:18:4c:d4:88:82:
d5:67:86:65:8d:0c:c9:e0:2d:49:41:54:e3:37:cb:c7:5b:7c:
ee:d7:d6:ac:47:9c:12:4d:dd:51:af:80:21:c2:d8:6f:5c:d9:
72:74:fe:37:4d:14:34:2e:bd:16:cd:5b:b2:17:1d:83:9e:47:
f4:ef:20:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:05:27 2026 by rpki-client