This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft
File: 3128E543B078826F9B4F23328CA84782DE7AAE6D.mft (raw, json)
Hash identifier: w3aZSNjGw93NwzGbJEckDhP+zAkijjF2UxitZayH0l4=
Subject key identifier: 95:E3:C9:44:3E:65:D9:EB:58:20:63:FD:81:2E:D0:0F:E1:29:DA:C1
Authority key identifier: 31:28:E5:43:B0:78:82:6F:9B:4F:23:32:8C:A8:47:82:DE:7A:AE:6D
Certificate issuer: /CN=3128E543B078826F9B4F23328CA84782DE7AAE6D
Certificate serial: 35D623BDCD60187B10FA50D1723F2E73F58AE116
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3128E543B078826F9B4F23328CA84782DE7AAE6D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft
Manifest number: 0548
Signing time: Mon 02 Feb 2026 06:30:03 +0000
Manifest this update: Mon 02 Feb 2026 06:25:03 +0000
Manifest next update: Thu 05 Feb 2026 17:22:03 +0000
Files and hashes: 1: 3130332e3132342e3131322e302f32342d3234203d3e20313331313131.roa (hash: xMhopN6RhUrQr0UoQBGVj4pnpruAcIyICHzqvwrwDho=)
2: 3128E543B078826F9B4F23328CA84782DE7AAE6D.crl (hash: +L2cF5eHJdUAEVpqacdniGcaQvkhLJxY/QEMbNIivHY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.crl
rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3128E543B078826F9B4F23328CA84782DE7AAE6D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:d6:23:bd:cd:60:18:7b:10:fa:50:d1:72:3f:2e:73:f5:8a:e1:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3128E543B078826F9B4F23328CA84782DE7AAE6D
Validity
Not Before: Feb 2 06:25:03 2026 GMT
Not After : Feb 5 17:22:03 2026 GMT
Subject: CN=95E3C9443E65D9EB582063FD812ED00FE129DAC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:76:de:4d:23:00:22:d6:08:4b:ac:79:6a:2b:
f4:25:31:b0:35:03:5c:12:f0:16:6b:20:fd:c3:19:
d9:c0:10:89:f1:f8:60:e2:5c:ca:3e:90:34:99:8f:
98:8a:cc:e9:8b:59:63:f5:0d:4f:18:87:bc:81:62:
8d:f7:85:1a:80:88:a1:a3:be:f4:4f:45:99:5c:28:
98:ce:6d:6f:9a:56:e1:27:42:1b:f9:4e:92:cd:3a:
36:24:d7:14:80:76:ca:2b:eb:cc:12:f9:a1:4b:65:
49:4b:b9:24:fe:28:23:23:a6:39:5e:b2:e4:92:d6:
2c:6d:52:ff:44:f5:17:a1:77:3e:12:58:6c:22:da:
6f:8a:65:96:28:98:bf:75:2b:79:db:e6:4b:54:77:
ae:32:6a:6f:99:eb:2f:b8:e5:60:17:24:a0:1c:9e:
7a:e0:8e:72:5b:b7:07:02:5d:d8:fa:53:fe:32:a3:
29:6d:ad:f2:eb:5b:4e:86:91:3a:c1:1a:f3:b3:e9:
e5:29:04:1d:01:95:93:ad:4c:83:9a:7a:4f:1b:65:
27:3b:01:08:ba:86:0f:5d:a7:d4:2a:78:3c:73:8b:
71:cb:e4:22:e9:fc:e8:29:d1:20:b1:05:a0:f5:a6:
e3:70:0d:b0:8f:a5:34:fa:ee:6e:b7:b1:40:e9:28:
2a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E3:C9:44:3E:65:D9:EB:58:20:63:FD:81:2E:D0:0F:E1:29:DA:C1
X509v3 Authority Key Identifier:
keyid:31:28:E5:43:B0:78:82:6F:9B:4F:23:32:8C:A8:47:82:DE:7A:AE:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3128E543B078826F9B4F23328CA84782DE7AAE6D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a0:6a:c0:0a:eb:6e:93:46:04:a7:91:27:e2:29:bc:2f:ab:
15:44:4c:8f:11:06:0c:0f:d6:fe:d4:5a:31:26:f5:de:85:47:
fb:4d:e4:d9:70:26:37:6a:c4:23:a5:0c:39:48:b8:e1:1d:86:
eb:79:87:f0:b8:0b:47:9f:da:f6:98:10:dc:e1:dd:8c:b3:a6:
8e:88:ce:45:9d:de:fc:a7:92:c6:65:2c:4e:90:e6:ca:ea:f3:
b4:b8:35:b4:1e:6b:b0:6d:f4:15:ed:71:cb:98:f7:e4:19:86:
6c:65:e8:6e:ea:5e:0c:be:44:ac:7d:af:6d:ba:e6:eb:4e:28:
bb:71:eb:f6:38:1b:cb:70:9f:24:90:8d:44:c1:6c:ac:b4:a6:
75:5e:5c:6e:b2:57:2b:a9:ba:f3:0b:19:cb:c0:6a:e6:ac:f0:
6e:3e:1f:e4:88:7c:f5:9a:d6:d9:e6:1d:a4:68:44:68:9c:1e:
8d:e2:68:1e:8a:c9:e5:a3:a1:24:18:e6:02:73:6e:1b:26:07:
db:10:ff:b0:7b:1e:c7:64:26:ee:19:30:00:e3:40:a3:66:15:
b1:2a:bf:12:83:ef:2d:dc:ba:b3:be:40:45:47:38:77:86:78:
53:66:4b:bc:4f:45:b1:88:12:01:fc:f5:1f:fc:5c:69:30:a7:
7b:91:c6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:06:06 2026 by rpki-client