This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft
File: 45422D0C59556C680872F58CC42068EF3ED1BA2E.mft (raw, json)
Hash identifier: 3jRbtBe9RdtSfbhpuL1Mld3vWzziAii0OQnXRAcTI/I=
Subject key identifier: 37:ED:AD:B0:37:14:F5:7A:40:DE:33:77:4F:8C:53:29:0C:DE:78:09
Authority key identifier: 45:42:2D:0C:59:55:6C:68:08:72:F5:8C:C4:20:68:EF:3E:D1:BA:2E
Certificate issuer: /CN=45422D0C59556C680872F58CC42068EF3ED1BA2E
Certificate serial: 38BDAB214A4AE483DBCC4368F0DF0D67A78685C6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45422D0C59556C680872F58CC42068EF3ED1BA2E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft
Manifest number: 0274
Signing time: Sun 01 Feb 2026 17:31:07 +0000
Manifest this update: Sun 01 Feb 2026 17:26:07 +0000
Manifest next update: Wed 04 Feb 2026 19:14:07 +0000
Files and hashes: 1: 3130332e3137322e3132302e302f32332d3234203d3e20313432333938.roa (hash: cguq4oNr1TGal57sKoh6yP2CeznnB5jHxZL1G1cEH1E=)
2: 45422D0C59556C680872F58CC42068EF3ED1BA2E.crl (hash: i+drhKvCqblzEs7fe3ckUlhQEaUDNNSclYT1ekDoEe8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.crl
rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45422D0C59556C680872F58CC42068EF3ED1BA2E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 19:14:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:bd:ab:21:4a:4a:e4:83:db:cc:43:68:f0:df:0d:67:a7:86:85:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45422D0C59556C680872F58CC42068EF3ED1BA2E
Validity
Not Before: Feb 1 17:26:07 2026 GMT
Not After : Feb 4 19:14:07 2026 GMT
Subject: CN=37EDADB03714F57A40DE33774F8C53290CDE7809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ed:13:99:51:d8:18:25:43:1d:8a:56:27:4c:
20:26:c5:53:6b:79:e5:5d:cb:0b:4a:2b:f1:51:b5:
cb:5e:5a:d3:8c:7c:df:4d:f4:a9:d5:1f:31:0d:50:
8d:b2:00:7b:2b:1d:cf:19:a4:6a:d4:c3:56:2b:0f:
a0:5c:0a:4a:2a:bf:09:28:02:20:95:fe:b2:51:b4:
52:1f:9e:ab:e4:c1:be:f0:bb:8e:e3:03:7b:c7:a5:
e5:cd:9a:d6:2c:fd:0f:f5:c6:91:f7:6c:a3:d3:25:
fe:52:34:b4:65:5d:59:ec:6a:63:ca:1e:50:9e:90:
4b:7b:f3:76:cf:72:71:d4:99:c3:05:b8:9a:73:28:
bd:eb:a3:19:db:dc:a1:17:cb:d6:04:76:94:2e:6d:
e6:c6:8c:9f:15:d7:fb:c9:4c:7d:e6:fc:f2:a1:85:
52:e5:d1:c3:c2:01:ca:72:99:28:41:78:da:b0:cf:
f5:46:eb:77:6d:c5:0e:17:63:e8:17:cc:bb:83:52:
51:97:5b:66:6d:38:2d:eb:a1:20:aa:e4:17:d0:0c:
b0:b1:d4:f9:c9:7b:26:ea:a1:ba:44:60:e0:97:19:
98:b2:1d:ad:7c:cd:a1:58:20:d6:b3:8e:c0:52:ee:
d8:e7:a4:0c:5e:9b:c1:b4:29:ba:e1:1e:bb:b5:76:
ba:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:ED:AD:B0:37:14:F5:7A:40:DE:33:77:4F:8C:53:29:0C:DE:78:09
X509v3 Authority Key Identifier:
keyid:45:42:2D:0C:59:55:6C:68:08:72:F5:8C:C4:20:68:EF:3E:D1:BA:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45422D0C59556C680872F58CC42068EF3ED1BA2E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:b9:19:5d:c7:28:83:4a:19:4b:57:d0:81:da:63:4c:db:29:
b1:57:b1:46:aa:52:b8:bd:c9:bb:b7:df:ed:79:9c:54:42:53:
16:f1:f4:13:db:b7:00:ac:a7:3f:93:60:eb:91:bb:0e:b9:57:
6a:6d:e0:ca:b7:b7:98:9c:1c:aa:91:22:c1:31:5f:4c:67:db:
e1:49:0d:a4:1d:a2:f0:a7:08:2a:1a:18:ac:ce:0a:2c:82:11:
36:e0:6e:63:dd:6c:eb:76:bc:1a:41:1b:d5:48:f0:06:bd:46:
d6:76:77:0f:8d:86:33:32:a9:8e:0f:26:29:29:5f:f9:79:40:
40:3a:36:0d:f1:5b:42:c7:ff:91:44:e0:0a:f1:35:d9:df:44:
a2:e6:a7:a6:eb:df:5d:e8:46:25:55:4e:7d:0f:30:de:d1:e4:
eb:aa:ed:a8:89:ec:38:b2:18:00:ac:ee:7c:56:51:8c:ec:aa:
f1:2f:57:ad:4c:c3:2d:9a:6c:34:4a:44:28:89:da:3a:08:a4:
4c:bc:52:23:ed:f0:f1:7e:35:43:60:43:97:d6:b9:8f:5d:6e:
ed:32:bc:8c:ff:0b:b2:2c:3c:41:8e:0d:a3:d0:32:47:0c:01:
42:94:7b:7a:8d:e7:ed:6a:9e:43:2c:c3:b1:e7:2a:6a:8d:6f:
07:c6:49:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:47:00 2026 by rpki-client