This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft
File: 8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft (raw, json)
Hash identifier: uMwkgJtKLtupdRo1EeWKZrmlZQYi+kOG7FaWsJ436pg=
Subject key identifier: F0:E9:D8:B3:0F:C2:EB:E6:31:30:02:26:2A:B7:BA:E6:BE:5E:DD:E5
Authority key identifier: 8B:19:AC:E0:A7:39:14:92:B1:8B:E2:7A:C0:1D:2A:60:28:72:BF:C0
Certificate issuer: /CN=8B19ACE0A7391492B18BE27AC01D2A602872BFC0
Certificate serial: 1C5A88905892A69948A1AAE1CE41551BEA929F16
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft
Manifest number: 01CB
Signing time: Sun 01 Feb 2026 11:20:04 +0000
Manifest this update: Sun 01 Feb 2026 11:15:04 +0000
Manifest next update: Wed 04 Feb 2026 19:39:04 +0000
Files and hashes: 1: 8B19ACE0A7391492B18BE27AC01D2A602872BFC0.crl (hash: 5KYWROPQQpd1p3M2d6Ytn2RvkFbkBj1vnvgWvz9QjGo=)
2: 3130332e3132322e392e302f32342d3234203d3e20313530393635.roa (hash: QeU0/vEBTo6jIDTAqgbH9ossdE4o8/cj7giBqcJ2VYs=)
3: 3130332e3132322e382e302f32342d3234203d3e20313530393635.roa (hash: OBSu5NWIqhavEgs//Z/O6dTCa3LFoSwUa21LGk85Vss=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.crl
rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 19:39:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:5a:88:90:58:92:a6:99:48:a1:aa:e1:ce:41:55:1b:ea:92:9f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B19ACE0A7391492B18BE27AC01D2A602872BFC0
Validity
Not Before: Feb 1 11:15:04 2026 GMT
Not After : Feb 4 19:39:04 2026 GMT
Subject: CN=F0E9D8B30FC2EBE6313002262AB7BAE6BE5EDDE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:55:e2:83:f5:98:2b:c1:ea:80:8c:43:60:a3:
24:8d:22:f1:ca:be:51:f3:03:25:1e:b3:d6:08:42:
40:fe:cf:24:20:e7:dc:36:0a:33:d5:ce:0b:9b:95:
cc:78:e4:9c:91:a2:b2:45:b7:b4:bb:fb:67:73:28:
de:66:b2:c9:28:26:05:a0:c7:0c:4f:af:d0:e3:88:
d4:83:e8:da:56:36:5c:ce:c6:a5:18:33:52:0e:92:
49:2d:13:6e:c0:18:c0:08:d8:e5:93:57:cf:86:c3:
ed:54:cd:b9:45:22:8c:d1:57:59:8f:4f:8c:e8:bf:
6f:3e:02:fa:34:95:26:09:14:cd:cf:2c:fa:c1:dc:
77:19:35:24:c5:bc:55:ae:5e:e7:c5:61:62:d6:4c:
ac:33:6f:13:28:e5:dc:91:ca:3b:ba:eb:b2:cf:5c:
db:e9:d0:44:f6:50:43:c7:85:c0:a6:d4:4c:2c:fd:
74:70:18:ae:f6:18:ea:39:8e:47:f6:13:16:1f:88:
3f:98:46:30:d0:c1:0b:de:59:63:71:71:f4:be:a5:
dc:98:8b:bb:96:34:bf:ce:fa:ce:f0:b7:8f:61:7e:
cd:ba:cd:6b:e9:be:a4:d0:84:e3:66:7a:84:dd:e6:
2f:f5:9c:54:20:b3:40:d5:24:11:f0:8d:2b:eb:e2:
23:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E9:D8:B3:0F:C2:EB:E6:31:30:02:26:2A:B7:BA:E6:BE:5E:DD:E5
X509v3 Authority Key Identifier:
keyid:8B:19:AC:E0:A7:39:14:92:B1:8B:E2:7A:C0:1D:2A:60:28:72:BF:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:27:d4:d4:c2:e2:ce:98:3b:cc:2a:84:50:67:41:af:b9:72:
1a:cf:5c:4b:e1:22:e8:95:07:1f:6c:da:c7:63:23:44:a9:fc:
3f:b1:9a:6a:ce:1c:12:5a:9e:7d:12:6e:91:a3:be:d4:1e:1e:
81:e2:ec:51:05:ba:84:d3:12:7d:bc:47:8d:df:cd:02:a5:3c:
e5:97:cc:0f:98:37:62:22:92:cc:d2:3d:f6:67:aa:93:bd:23:
46:59:8d:98:b2:d2:d1:1e:44:5a:6c:a7:c0:c5:26:dc:16:70:
b2:c4:01:44:fc:cb:aa:b4:96:a8:47:53:dd:2b:1e:3f:50:17:
7a:0e:6d:55:bc:59:b6:55:41:79:c9:bc:33:ce:2b:2b:a2:75:
24:d7:20:a4:37:8c:2f:2c:81:45:73:8f:63:15:ce:bc:23:25:
55:2a:51:3a:15:d9:4f:88:3b:25:da:2e:96:8b:42:0d:e5:08:
d1:41:dd:ea:83:17:da:24:b2:d0:03:07:1c:af:05:85:76:36:
b3:f0:40:60:36:42:92:ce:49:78:4b:9b:b0:ec:c4:a7:06:5c:
d1:9c:81:94:e4:12:d0:bd:bc:de:39:ad:46:8c:45:be:63:86:
b0:e0:2b:81:78:66:77:f6:68:8d:ca:1e:e0:4e:69:47:31:46:
2c:ea:05:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:42:18 2026 by rpki-client