This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft
File: 28612772543E43335B080C32808B7FDC277E71E4.mft (raw, json)
Hash identifier: 1JkuAQTuxcTpGknD5B+/cnkETLcr8oCRcRXSPQCsPQM=
Subject key identifier: 71:6B:A5:5A:DF:BF:F2:86:AD:4F:48:6E:C8:95:3B:84:33:B7:95:32
Authority key identifier: 28:61:27:72:54:3E:43:33:5B:08:0C:32:80:8B:7F:DC:27:7E:71:E4
Certificate issuer: /CN=28612772543E43335B080C32808B7FDC277E71E4
Certificate serial: 54436E1CDB8EF13D06C834F9094BFE55B6C15B1A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft
Manifest number: 0180
Signing time: Sun 01 Feb 2026 11:51:12 +0000
Manifest this update: Sun 01 Feb 2026 11:46:12 +0000
Manifest next update: Wed 04 Feb 2026 18:58:12 +0000
Files and hashes: 1: 3130332e3133332e35362e302f32342d3234203d3e20313338313331.roa (hash: RAlnEnom5DxgyjJGz4HMb0m9LakHmzQTvYvsB15UJ40=)
2: 3130332e3134322e32312e302f32342d3234203d3e20313338313331.roa (hash: xGMt/qz2gLSpF2/GLoO76XEkXVnWKO075lHn2nkpucQ=)
3: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: eKlNzLcXtNJ6j9o2YNvxo9gNUcarXxr4w6XmmCIYGdU=)
4: 3130332e3134322e32312e302f32342d3234203d3e20313339393536.roa (hash: oosppneRoSbmwD3s+VWSjVI8PDvHs2L2ec3h4IZjW/8=)
5: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: Gn1y+vGI1pMr1RUP5Xcp6ZX24+/thjU5EMlcN69zymE=)
6: 28612772543E43335B080C32808B7FDC277E71E4.crl (hash: NSE2TGpCjLYK1YaoGIbzxomC9APyKeFLgWaYAXLdpt8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.crl
rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 18:58:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:43:6e:1c:db:8e:f1:3d:06:c8:34:f9:09:4b:fe:55:b6:c1:5b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28612772543E43335B080C32808B7FDC277E71E4
Validity
Not Before: Feb 1 11:46:12 2026 GMT
Not After : Feb 4 18:58:12 2026 GMT
Subject: CN=716BA55ADFBFF286AD4F486EC8953B8433B79532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9f:0e:38:7b:3f:32:4c:1e:1e:b2:e2:37:c6:
6c:76:e9:c2:42:f3:39:9f:dd:c1:64:86:69:0c:7c:
fa:47:0f:5b:d8:c0:f5:21:df:ad:7f:90:9a:e5:8b:
77:06:79:e4:a8:4b:8d:00:d0:51:bb:72:14:85:6b:
00:9d:70:82:c6:b7:29:59:f6:09:39:87:f3:e2:91:
47:75:34:63:60:56:bc:b5:f7:cc:7c:69:d3:7d:fb:
12:ee:73:62:b3:97:bc:eb:aa:d8:4a:cb:ec:a1:d0:
b2:ea:35:a2:4c:0f:98:fa:a3:eb:03:ca:84:d6:98:
88:c5:eb:30:f7:45:c2:7a:ae:65:17:bf:9f:02:34:
32:60:32:00:ef:ca:b4:0e:27:5c:ba:61:98:60:b3:
82:73:c8:69:2b:2a:85:a2:75:35:eb:23:8e:59:cb:
87:74:e2:1e:86:c3:52:1b:7e:cd:bb:ab:9c:2d:be:
bc:84:4c:97:61:f0:1a:af:04:e1:d4:b9:af:71:b7:
f0:45:7d:26:79:8a:fe:8f:69:01:46:cc:94:0f:d4:
73:6c:a4:e2:c6:ee:32:fb:35:d2:b1:f2:45:f8:d3:
c7:7d:1c:d9:9e:83:67:e0:fa:fd:12:c1:ee:f4:44:
95:8c:cb:bc:be:48:96:84:35:9e:b9:28:d1:9d:ba:
f8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:6B:A5:5A:DF:BF:F2:86:AD:4F:48:6E:C8:95:3B:84:33:B7:95:32
X509v3 Authority Key Identifier:
keyid:28:61:27:72:54:3E:43:33:5B:08:0C:32:80:8B:7F:DC:27:7E:71:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:91:bb:36:d7:1e:e4:d8:29:0b:95:18:0b:88:3f:ca:f9:ab:
7e:b1:7f:b0:29:e2:c2:cd:b1:e0:4f:15:e7:e5:88:7c:3c:b7:
c3:74:ea:d8:7b:cd:c0:a5:b3:b0:38:cf:41:34:91:bd:a5:06:
f7:82:6b:0b:12:e8:f4:ae:89:7e:93:33:b0:4c:36:71:92:26:
9f:92:25:b7:4e:e1:7d:87:12:b8:bc:04:fd:7a:35:91:14:23:
32:1d:ff:85:9c:e5:ff:dd:8b:a4:c0:a7:81:17:84:8a:f9:56:
d7:a7:46:b4:b0:7f:3a:b6:15:1e:db:50:92:bd:6a:02:75:e1:
f6:27:36:86:ad:8d:88:19:53:66:48:5b:7a:26:7e:00:e8:83:
81:9d:c1:36:0e:bf:38:2b:86:a2:99:d2:7d:97:76:bb:91:3e:
b0:57:3f:ea:b8:2f:ac:ad:d7:99:45:eb:cc:fa:14:e4:bd:5a:
cc:5a:89:66:a4:b1:3d:e7:94:b6:24:23:09:02:8c:4a:8d:6c:
b3:e9:96:0e:c2:40:84:99:8a:59:55:3d:54:d8:a6:2c:59:d3:
10:9e:33:07:81:c9:b7:a9:02:7c:6a:8c:06:52:2a:b7:19:ac:
b3:82:f4:27:5a:0c:13:62:48:12:4a:30:19:14:c2:9a:93:12:
2b:fa:d0:7d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUVENuHNuO8T0GyDT5CUv+VbbBWxowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjg2MTI3NzI1NDNFNDMzMzVCMDgwQzMyODA4QjdGREMy
NzdFNzFFNDAeFw0yNjAyMDExMTQ2MTJaFw0yNjAyMDQxODU4MTJaMDMxMTAvBgNV
BAMTKDcxNkJBNTVBREZCRkYyODZBRDRGNDg2RUM4OTUzQjg0MzNCNzk1MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMnw44ez8yTB4esuI3xmx26cJC
8zmf3cFkhmkMfPpHD1vYwPUh361/kJrli3cGeeSoS40A0FG7chSFawCdcILGtylZ
9gk5h/PikUd1NGNgVry198x8adN9+xLuc2Kzl7zrqthKy+yh0LLqNaJMD5j6o+sD
yoTWmIjF6zD3RcJ6rmUXv58CNDJgMgDvyrQOJ1y6YZhgs4JzyGkrKoWidTXrI45Z
y4d04h6Gw1Ibfs27q5wtvryETJdh8BqvBOHUua9xt/BFfSZ5iv6PaQFGzJQP1HNs
pOLG7jL7NdKx8kX408d9HNmeg2fg+v0Swe70RJWMy7y+SJaENZ65KNGduviDAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUcWulWt+/8oatT0huyJU7hDO3lTIwHwYDVR0j
BBgwFoAUKGEnclQ+QzNbCAwygIt/3Cd+ceQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
YjEzMGI3NS00NTkzLTQxNDEtYTA2Zi01N2EyMmEwMjNkZDAvMC8yODYxMjc3MjU0
M0U0MzMzNUIwODBDMzI4MDhCN0ZEQzI3N0U3MUU0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjg2MTI3NzI1NDNFNDMzMzVCMDgwQzMyODA4QjdGREMyNzdF
NzFFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2IxMzBiNzUtNDU5My00MTQxLWEw
NmYtNTdhMjJhMDIzZGQwLzAvMjg2MTI3NzI1NDNFNDMzMzVCMDgwQzMyODA4QjdG
REMyNzdFNzFFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHaRuzbXHuTYKQuVGAuIP8r5q36xf7Ap4sLN
seBPFefliHw8t8N06th7zcCls7A4z0E0kb2lBveCawsS6PSuiX6TM7BMNnGSJp+S
JbdO4X2HEri8BP16NZEUIzId/4Wc5f/di6TAp4EXhIr5VtenRrSwfzq2FR7bUJK9
agJ14fYnNoatjYgZU2ZIW3omfgDog4GdwTYOvzgrhqKZ0n2XdruRPrBXP+q4L6yt
15lF68z6FOS9WsxaiWaksT3nlLYkIwkCjEqNbLPplg7CQISZillVPVTYpixZ0xCe
MweBybepAnxqjAZSKrcZrLOC9CdaDBNiSBJKMBkUwpqTEiv60H0=
-----END CERTIFICATE-----
Generated at Mon Feb 2 09:44:49 2026 by rpki-client