This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft
File: 8790EFE9518BF8664B34E1227585F3516FDC5367.mft (raw, json)
Hash identifier: MNMxFTOsITrPoIPK//+tWvdcnZinMOJaygghIqG01gc=
Subject key identifier: 08:B5:17:5B:38:CF:B1:DC:08:7A:C1:97:4A:6C:07:CC:2C:72:2B:CB
Authority key identifier: 87:90:EF:E9:51:8B:F8:66:4B:34:E1:22:75:85:F3:51:6F:DC:53:67
Certificate issuer: /CN=8790EFE9518BF8664B34E1227585F3516FDC5367
Certificate serial: 3232D337671EEE6271B08E66F354FF744756145A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8790EFE9518BF8664B34E1227585F3516FDC5367.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft
Manifest number: 0245
Signing time: Sun 01 Feb 2026 11:51:38 +0000
Manifest this update: Sun 01 Feb 2026 11:46:38 +0000
Manifest next update: Wed 04 Feb 2026 21:05:38 +0000
Files and hashes: 1: 8790EFE9518BF8664B34E1227585F3516FDC5367.crl (hash: G3oZWK2idSLgaxKQxH4psnSeEWssetCNf1uKx7dyeg8=)
2: 3130332e3136362e39302e302f32332d3234203d3e20313431393431.roa (hash: u/DfRKi6okqGd/2PRwDyTkJXR+LfAGJBXiMbBVUigkU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.crl
rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8790EFE9518BF8664B34E1227585F3516FDC5367.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 21:05:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:32:d3:37:67:1e:ee:62:71:b0:8e:66:f3:54:ff:74:47:56:14:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8790EFE9518BF8664B34E1227585F3516FDC5367
Validity
Not Before: Feb 1 11:46:38 2026 GMT
Not After : Feb 4 21:05:38 2026 GMT
Subject: CN=08B5175B38CFB1DC087AC1974A6C07CC2C722BCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:83:d3:27:4f:4e:4c:ee:22:18:81:e0:1b:84:
5c:ce:26:19:39:93:53:5a:c0:81:5a:dd:4e:21:a6:
49:c4:1e:f3:86:41:08:ed:ab:d5:77:1f:85:7a:e2:
4d:08:d1:45:91:a3:af:8e:0a:74:b7:cd:55:f5:e6:
3b:94:e5:b8:57:50:90:3a:1a:b3:72:b6:04:de:42:
e2:d2:42:90:96:44:12:78:c0:5e:2e:2b:d2:51:66:
d2:64:be:e0:50:9e:d1:09:90:5e:03:a8:6b:7e:0a:
5e:48:0e:cb:91:98:3e:33:d7:a6:aa:10:c1:0e:32:
1d:ba:4f:bf:66:33:76:ac:b0:11:96:d1:3a:fa:24:
ac:c8:5f:da:4f:0d:34:57:59:a2:f9:ef:1c:a7:2e:
f1:8d:ce:a3:ac:37:58:b2:77:bf:3f:2c:ac:e3:ec:
1e:7b:0f:16:bc:db:b6:da:8b:8f:86:f3:7a:8e:6b:
6b:dc:43:f0:18:99:86:56:d4:de:63:7b:b1:bd:d9:
a7:83:99:74:66:00:c9:6b:12:9f:6e:80:7d:1f:1e:
3b:ec:ad:86:28:d0:69:bf:72:d1:1b:85:2a:85:69:
66:aa:63:a5:8c:98:33:e7:d5:65:e2:43:f0:20:bf:
a5:ee:8a:cf:fd:e6:06:0a:a3:9f:ff:82:e0:fe:50:
40:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B5:17:5B:38:CF:B1:DC:08:7A:C1:97:4A:6C:07:CC:2C:72:2B:CB
X509v3 Authority Key Identifier:
keyid:87:90:EF:E9:51:8B:F8:66:4B:34:E1:22:75:85:F3:51:6F:DC:53:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8790EFE9518BF8664B34E1227585F3516FDC5367.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f9:06:de:84:7a:57:b0:14:fa:a6:48:44:9e:e8:da:7f:01:da:
3d:ec:95:44:dd:b6:e6:a1:5c:40:80:58:fe:4b:6f:b5:ac:04:
1b:3b:62:e4:68:c8:5f:1e:2a:36:60:32:59:6a:3e:5d:13:2c:
62:84:15:00:2c:a9:57:f0:c4:18:e7:69:f5:aa:79:eb:29:26:
3b:fa:8f:7e:8c:c5:87:94:81:ef:4b:d1:aa:a0:af:6a:2c:45:
4a:d6:0c:2e:0a:93:0c:62:89:a0:fb:22:9f:21:6e:5e:3b:82:
76:e0:5f:a9:02:d1:6b:5b:97:aa:89:4c:64:eb:90:7b:80:d0:
7b:70:b0:59:0f:49:ea:93:7b:fb:10:45:37:3c:b9:81:c5:b2:
a0:be:79:6c:34:24:b6:53:f7:5f:64:94:7f:43:cf:89:cb:eb:
49:8e:ae:79:42:2e:45:22:a9:a8:f5:c3:5b:b6:4d:4a:77:e4:
9d:bd:b3:09:f6:63:b9:38:32:27:54:ab:7e:a6:b5:be:b3:13:
c6:05:69:7a:22:de:be:38:5f:ec:5d:4d:bb:38:ab:e1:4a:7f:
01:28:f6:f9:c6:e8:74:5b:09:f3:11:26:c3:b9:8a:d0:07:33:
cd:09:f9:00:3a:c5:1f:ab:28:0d:8a:fa:25:ec:96:86:35:36:
a2:49:3b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:07 2026 by rpki-client