This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft
File: F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft (raw, json)
Hash identifier: EcHyBicW0FGQz11Pj57DojAKJUFhQgycl0n/HkRhRJE=
Subject key identifier: C4:0C:80:3D:84:E5:51:82:42:78:EF:07:F4:42:0D:2D:2A:BD:0A:AF
Authority key identifier: F2:28:6B:78:D2:C9:6C:F3:CD:F0:67:A8:9D:3F:54:81:59:1C:FE:3F
Certificate issuer: /CN=F2286B78D2C96CF3CDF067A89D3F5481591CFE3F
Certificate serial: 65476312B88FC7C822B285A26BEE6BBA507D078D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft
Manifest number: 054D
Signing time: Sat 31 Jan 2026 22:21:17 +0000
Manifest this update: Sat 31 Jan 2026 22:16:17 +0000
Manifest next update: Wed 04 Feb 2026 09:54:17 +0000
Files and hashes: 1: 323030313a6466343a616138303a3a2f34382d3438203d3e20313431303537.roa (hash: tTehZh9UKuAWzLXm3C0kYFHgqql5m+DDpx9m9vm/Bjg=)
2: 3130332e3135352e32362e302f32342d3234203d3e20313431303537.roa (hash: zvD1gWyZUcS44IboIaWL1frQd2y5H3jWJXa/wy/mGcM=)
3: F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.crl (hash: feVijwCplCcH1N3vCpO2/j4BLrcM5r9deWX44yWhny4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.crl
rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 09:54:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:47:63:12:b8:8f:c7:c8:22:b2:85:a2:6b:ee:6b:ba:50:7d:07:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F2286B78D2C96CF3CDF067A89D3F5481591CFE3F
Validity
Not Before: Jan 31 22:16:17 2026 GMT
Not After : Feb 4 09:54:17 2026 GMT
Subject: CN=C40C803D84E551824278EF07F4420D2D2ABD0AAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b5:52:52:a3:68:a9:e8:ee:8d:23:9a:3d:cb:
d2:7e:e5:cc:73:61:ba:32:93:0e:93:ad:c2:52:91:
76:6f:7b:b8:e7:20:88:9c:7b:0b:9b:09:88:70:17:
f3:88:68:46:f8:6f:a1:34:ec:6f:30:22:de:97:20:
e3:94:7d:d7:60:f2:0b:13:2a:2a:cf:a4:13:84:63:
fb:8f:a5:01:db:82:92:73:e3:92:d3:d8:04:12:3b:
aa:1b:18:e9:01:fe:0d:4e:04:5b:d0:81:32:c1:ac:
e9:7a:19:96:a0:4b:2c:9c:49:43:2a:42:ce:b4:88:
29:01:10:4f:a6:0a:c0:54:e3:c3:16:3f:9e:47:51:
4a:d4:04:3b:c0:1e:81:07:a9:40:d6:fa:fb:c5:2d:
8f:17:5c:14:4b:f1:ac:c6:22:66:db:78:be:a3:25:
b5:54:61:a4:35:45:5b:67:9d:f6:53:6a:30:3a:96:
b9:e7:75:11:7b:d5:83:e6:ba:07:e8:a7:94:a0:16:
ea:3d:f3:43:cf:82:0d:37:f8:68:e1:dc:22:0a:74:
d8:b6:ee:d3:a8:97:96:8c:96:1b:c0:4a:0b:76:ff:
60:08:a5:80:07:27:52:25:55:8b:e5:ea:6c:d2:47:
6b:a2:71:b5:41:64:de:03:9f:2e:32:55:43:52:b6:
47:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0C:80:3D:84:E5:51:82:42:78:EF:07:F4:42:0D:2D:2A:BD:0A:AF
X509v3 Authority Key Identifier:
keyid:F2:28:6B:78:D2:C9:6C:F3:CD:F0:67:A8:9D:3F:54:81:59:1C:FE:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:28:21:ab:90:6c:b6:b7:93:a0:cf:cb:45:23:7e:73:21:bc:
23:9c:f7:8d:a4:89:30:56:e3:b3:72:45:44:31:87:98:36:dc:
21:c3:9f:1d:fc:d9:be:81:f2:22:3f:44:a3:64:07:5b:2a:74:
1b:e3:dd:b5:ac:1f:9c:2e:09:08:c9:10:29:13:24:dc:e2:9d:
ea:ed:b8:f6:05:0b:4e:83:52:24:45:9a:07:02:c3:7c:9d:9b:
b5:df:cf:d2:15:d0:c3:f2:53:c6:a0:03:1e:be:bc:75:6c:32:
de:95:58:02:fe:f0:a2:00:b1:1a:67:bd:b4:47:7b:18:6c:3a:
01:ab:f4:c9:85:03:69:c2:a1:58:41:60:7c:57:0b:9f:33:d7:
39:97:d5:a9:2c:85:74:77:20:62:4b:36:ff:c6:68:a7:73:66:
38:8c:6f:18:5a:3e:4d:e1:9a:1c:67:36:0f:30:4e:94:80:f1:
b3:94:b7:99:78:61:a0:9e:50:14:63:51:94:18:1e:05:c7:d6:
f8:78:65:7b:4d:ef:44:f9:c8:46:6b:23:bf:39:ee:af:ec:7a:
b5:51:28:1d:45:0e:32:ab:19:f9:ab:e2:17:a9:a3:a7:84:1d:
58:b0:28:10:f7:72:3b:e5:2b:82:44:c9:41:fd:cb:be:ad:fe:
95:dc:9c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:44:08 2026 by rpki-client