This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft
File: 597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft (raw, json)
Hash identifier: /O46UP/YdG9qT77fWEYT+26JH8zTG1dHUewePzoEeGw=
Subject key identifier: E4:DD:70:BB:40:6C:28:3B:AB:97:CD:03:D5:B2:AE:45:D5:1D:46:1C
Authority key identifier: 59:77:34:A2:61:58:D7:7A:6E:D0:22:22:DF:93:D1:CE:2B:D6:EA:03
Certificate issuer: /CN=597734A26158D77A6ED02222DF93D1CE2BD6EA03
Certificate serial: 3146D3555765A2355A39A5D4F3766FB17F2E1475
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/597734A26158D77A6ED02222DF93D1CE2BD6EA03.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft
Manifest number: 011F
Signing time: Sat 31 Jan 2026 16:11:00 +0000
Manifest this update: Sat 31 Jan 2026 16:06:00 +0000
Manifest next update: Tue 03 Feb 2026 17:19:00 +0000
Files and hashes: 1: 3130332e3137302e3139382e302f32342d3234203d3e20313530343634.roa (hash: 0bZb0428Qs9WgXKe/lQqf94hdv+XNfzIhYjEupAnHpI=)
2: 597734A26158D77A6ED02222DF93D1CE2BD6EA03.crl (hash: bAYHxSh3fuLRGimHKrKZFv5YlpVCbx9oDp5LQtQnroA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.crl
rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/597734A26158D77A6ED02222DF93D1CE2BD6EA03.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 17:19:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:46:d3:55:57:65:a2:35:5a:39:a5:d4:f3:76:6f:b1:7f:2e:14:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597734A26158D77A6ED02222DF93D1CE2BD6EA03
Validity
Not Before: Jan 31 16:06:00 2026 GMT
Not After : Feb 3 17:19:00 2026 GMT
Subject: CN=E4DD70BB406C283BAB97CD03D5B2AE45D51D461C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3b:19:d1:5f:b2:af:67:a0:61:52:1b:db:2e:
49:13:f3:58:f7:80:7e:fe:a0:69:a2:61:7c:15:8d:
0b:b3:ad:be:17:72:69:73:82:19:17:f2:7b:f6:97:
0e:90:00:20:6d:06:d4:02:e3:43:04:77:84:86:52:
fe:f7:b3:2e:1f:b2:cb:80:43:3e:0f:13:3e:bc:bc:
43:dd:39:01:e2:11:98:32:e9:a3:04:e5:0a:86:94:
14:79:75:5f:d8:47:38:5f:cf:8d:ea:c1:d5:d2:6a:
07:b0:84:27:7d:38:05:ae:6d:24:dd:50:a0:0f:26:
ec:cd:d2:45:d7:0f:24:b7:12:99:0d:87:42:4b:53:
ac:e5:0d:fe:31:15:fb:f2:95:13:6e:4a:35:0b:38:
06:7f:fa:dd:f6:e6:1d:2a:6d:1f:58:09:ca:6c:9a:
82:29:3b:6e:43:ff:f2:11:4a:ba:4e:f3:99:da:c7:
54:46:81:11:0c:f4:c0:dd:26:83:05:8b:38:79:52:
7a:a6:8d:d1:ae:96:eb:6b:a6:28:33:e9:de:34:de:
05:47:33:ee:a4:9f:8a:78:4f:87:4b:a8:70:b8:0e:
fd:2c:fe:f4:1b:83:ac:0a:27:64:18:7a:a9:25:48:
50:96:f1:ec:7f:37:aa:9e:35:70:e8:b6:55:13:d5:
99:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:DD:70:BB:40:6C:28:3B:AB:97:CD:03:D5:B2:AE:45:D5:1D:46:1C
X509v3 Authority Key Identifier:
keyid:59:77:34:A2:61:58:D7:7A:6E:D0:22:22:DF:93:D1:CE:2B:D6:EA:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/597734A26158D77A6ED02222DF93D1CE2BD6EA03.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:9c:5b:ad:50:d4:97:a2:04:1a:45:29:89:0c:de:3a:e3:95:
dc:86:d9:f1:9a:0c:55:95:8e:48:6d:b8:9d:37:b0:52:a0:84:
57:7a:e7:21:56:7a:a5:e1:e0:a6:36:2a:6d:fa:e9:fe:1f:b9:
6c:57:50:1c:4f:95:de:4c:46:24:3e:ac:9b:f3:09:06:02:bd:
19:cf:41:63:4e:25:52:24:77:44:ff:ec:2a:ee:39:14:19:b4:
e5:88:64:2b:6d:ba:36:16:f3:8a:6e:fc:e5:c7:1c:10:a1:2e:
2a:33:16:59:74:2b:be:21:4f:8b:4c:c9:27:66:7d:34:fd:0e:
14:64:15:cf:89:5d:cb:79:cf:13:54:35:dc:aa:f0:3c:e6:2b:
f2:50:bf:2c:23:12:f7:17:e7:9e:46:d9:dd:9d:8b:7b:17:4f:
8a:c2:7e:3e:a6:c7:aa:1b:00:f0:6f:1b:1b:b1:81:44:40:be:
73:08:58:ea:8f:42:11:87:40:c3:ab:09:29:79:f4:ab:8a:62:
55:44:18:17:9a:1f:0f:b6:c9:8a:ff:48:a4:aa:f5:84:fc:77:
f0:5f:10:8a:aa:22:ae:1e:bc:e8:d2:e8:1b:02:b6:35:9d:36:
03:82:09:6d:46:2b:2e:1d:89:3a:3e:2a:f9:1d:b6:77:7f:72:
bc:16:82:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:53:50 2026 by rpki-client