This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft
File: 48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft (raw, json)
Hash identifier: Hd4lrHZjQ+VkYG7zrqN1OFR7/0kzNzHoJ4Hk6T4mKpA=
Subject key identifier: A6:B5:E6:3C:E4:D1:49:17:4A:5B:83:62:E8:B1:35:9B:19:E9:4B:35
Authority key identifier: 48:FC:01:22:D8:C8:42:BA:C1:37:11:F1:28:4D:1D:38:DE:36:EA:1B
Certificate issuer: /CN=48FC0122D8C842BAC13711F1284D1D38DE36EA1B
Certificate serial: 0FBD07A0F6B1749E9DC991465ECBBB436532A271
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft
Manifest number: 0149
Signing time: Sun 01 Feb 2026 10:31:20 +0000
Manifest this update: Sun 01 Feb 2026 10:26:20 +0000
Manifest next update: Wed 04 Feb 2026 21:45:20 +0000
Files and hashes: 1: 3230332e3136392e35352e302f32342d3234203d3e20313532303831.roa (hash: q6suRM1GDEk3DquWvwoiY8k1pPAMhJCE1PAKEv9TivM=)
2: 48FC0122D8C842BAC13711F1284D1D38DE36EA1B.crl (hash: AFuUauua+0eUU12BUD/8wDc9N+kvNRGhKS+dpFAEP84=)
3: 3230332e3136392e35342e302f32342d3234203d3e20313532303831.roa (hash: 65o0DOggNTjLHcFcDRlMhe0oYRHC/QwrSAVc9jQxyHo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.crl
rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 21:45:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:bd:07:a0:f6:b1:74:9e:9d:c9:91:46:5e:cb:bb:43:65:32:a2:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48FC0122D8C842BAC13711F1284D1D38DE36EA1B
Validity
Not Before: Feb 1 10:26:20 2026 GMT
Not After : Feb 4 21:45:20 2026 GMT
Subject: CN=A6B5E63CE4D149174A5B8362E8B1359B19E94B35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5c:8e:29:0a:81:52:f7:a7:02:88:2b:f2:d0:
42:50:89:1c:3b:5e:50:20:46:5f:ab:35:5c:cc:c7:
59:d7:32:7d:a7:22:93:1e:90:d6:3d:38:7b:19:06:
45:57:31:4c:eb:02:c9:f9:74:e8:39:a1:62:2f:90:
62:a8:e5:fd:8b:d4:61:6e:57:f2:15:4a:56:e7:92:
c2:53:2a:90:d7:f0:2d:17:c6:f7:e3:f4:57:27:0f:
32:16:ab:c7:80:9f:b7:ce:60:cf:0d:24:41:01:01:
1e:cd:e8:c5:13:da:06:cb:7a:18:24:92:89:27:0d:
13:c3:98:1e:8a:ff:4d:18:97:ae:ab:00:96:cc:c0:
02:ff:bc:3a:95:56:2e:46:b2:4d:fa:bb:cf:a7:20:
01:eb:2a:be:5d:11:35:b5:6e:ce:1e:b4:9d:d9:8e:
76:6c:1e:b0:93:0c:ad:5e:78:5e:93:16:96:ca:3c:
a9:d4:ed:41:bb:32:56:22:2d:80:47:82:4b:e0:36:
ab:ff:9d:3f:cd:5a:d8:05:7d:39:b4:5e:a6:07:b1:
63:01:6c:13:16:ef:d1:51:11:c9:7c:37:ab:a4:5a:
75:74:31:46:2b:02:7b:36:97:e1:06:51:ee:0d:15:
39:f6:a8:7a:4f:9f:c7:16:3e:09:04:91:1d:98:30:
2a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B5:E6:3C:E4:D1:49:17:4A:5B:83:62:E8:B1:35:9B:19:E9:4B:35
X509v3 Authority Key Identifier:
keyid:48:FC:01:22:D8:C8:42:BA:C1:37:11:F1:28:4D:1D:38:DE:36:EA:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:48:64:22:1d:c4:8c:65:2f:61:16:f5:23:37:e1:90:49:38:
36:f9:3f:0b:70:65:64:72:3f:51:b9:f6:a2:68:b2:30:b8:d2:
08:bd:2d:a2:8a:79:6e:f6:02:ad:32:e9:69:b9:67:50:2d:09:
1c:72:a0:87:4a:95:5d:7d:f6:f2:95:56:c9:f5:c3:82:42:23:
3c:90:2b:1f:82:2e:00:5e:74:35:dc:94:d9:2e:93:bc:69:86:
5b:1e:3b:0c:34:6d:94:9f:03:99:a2:f9:a6:f7:00:21:b0:7e:
31:8b:ef:e6:ec:38:80:e4:17:84:de:cc:11:d0:68:0b:ec:85:
89:b9:81:e2:e5:20:26:69:44:3b:08:24:eb:18:31:66:4d:70:
a4:fc:c4:1f:92:b4:5c:57:c4:e8:37:76:2f:82:eb:53:d7:b0:
2e:24:97:75:de:4c:86:69:70:82:f5:50:e7:0d:f5:30:08:ca:
a5:77:94:47:ea:77:53:87:52:d4:81:9c:00:94:b5:4c:1d:08:
9b:14:6f:e7:10:4d:34:69:c6:e3:bc:0d:f3:69:94:2f:74:0a:
cd:a1:22:2a:26:40:42:e6:d2:7c:b6:9a:ab:c8:c5:c8:d4:0a:
cc:55:8b:76:3b:56:b1:69:ab:8a:a8:5c:bd:f1:0c:e7:de:2f:
1d:41:23:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:06:35 2026 by rpki-client