This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft
File: DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft (raw, json)
Hash identifier: kuS0ifCvbAl3pAJcL8UOCQRXXRsto4/ST1/+nE1SXK4=
Subject key identifier: A5:84:CB:83:BB:62:EC:6E:E2:94:96:52:82:8A:A3:87:7C:20:FE:65
Authority key identifier: DA:8C:84:0C:B4:1D:26:68:58:19:83:C2:C4:E9:64:E6:7E:F2:D6:A1
Certificate issuer: /CN=DA8C840CB41D2668581983C2C4E964E67EF2D6A1
Certificate serial: 033CDCA247AA4D7EC7A3ACCDE967869D538000D2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft
Manifest number: 029B
Signing time: Sat 31 Jan 2026 15:41:49 +0000
Manifest this update: Sat 31 Jan 2026 15:36:49 +0000
Manifest next update: Tue 03 Feb 2026 21:22:49 +0000
Files and hashes: 1: DA8C840CB41D2668581983C2C4E964E67EF2D6A1.crl (hash: hJ6+ebBWa8zIpNPL4p/qlQ0x1US8WeWLONL3uCBfI6I=)
2: 3130332e3137392e3231342e302f32332d3234203d3e20313439333735.roa (hash: 7mSy93JyGfuZLtTA89nmtcGQjqdRbUslrbNWczBJpGo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.crl
rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 21:22:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:3c:dc:a2:47:aa:4d:7e:c7:a3:ac:cd:e9:67:86:9d:53:80:00:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA8C840CB41D2668581983C2C4E964E67EF2D6A1
Validity
Not Before: Jan 31 15:36:49 2026 GMT
Not After : Feb 3 21:22:49 2026 GMT
Subject: CN=A584CB83BB62EC6EE2949652828AA3877C20FE65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:47:4a:56:f5:3b:87:99:33:56:ee:58:30:7a:
21:b0:db:b5:76:a6:4e:cc:20:c0:fd:74:4e:4c:76:
50:4e:e8:22:a7:0e:47:b0:9a:c2:71:4a:03:df:e8:
8d:a1:5e:5d:0a:e1:1e:b4:bc:22:a7:37:45:5e:36:
ab:0a:cb:c7:7b:d9:2a:92:aa:56:4c:ba:a5:ca:c7:
2a:8c:ab:5a:af:dc:b5:06:74:1a:ab:c5:83:cc:7a:
77:15:10:88:ad:dd:d7:c9:d6:42:86:0c:08:40:d6:
c9:a7:b9:bb:4f:f9:1c:14:22:ad:8d:1a:8e:e0:ef:
ca:82:34:c6:c4:ed:d0:31:b8:9d:f0:c7:58:f0:3b:
1d:81:b8:08:fb:76:ad:de:07:14:e2:d3:fa:e9:93:
fa:0f:68:51:90:35:bc:ce:0a:bd:27:81:49:39:ed:
58:35:5d:33:e2:2b:00:3b:32:e1:47:bf:7e:9e:ad:
c9:0a:c1:a7:5f:1c:f4:c0:83:44:a3:bc:ac:8c:57:
b5:c1:ff:cc:b0:3f:b7:c8:a6:50:04:67:b4:52:16:
b0:93:01:d3:47:66:ac:58:fc:8f:70:74:2f:b0:12:
91:08:fd:b5:d9:68:33:71:41:bd:e3:05:f5:75:17:
ce:f8:50:f7:5a:00:c5:86:63:bf:40:64:37:e1:fa:
06:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:84:CB:83:BB:62:EC:6E:E2:94:96:52:82:8A:A3:87:7C:20:FE:65
X509v3 Authority Key Identifier:
keyid:DA:8C:84:0C:B4:1D:26:68:58:19:83:C2:C4:E9:64:E6:7E:F2:D6:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:61:e3:45:cf:07:6f:53:aa:39:9f:b8:f9:af:44:f2:e9:a7:
41:be:f0:7d:a6:16:33:1d:77:21:ef:fe:b9:51:f9:80:13:9c:
7a:ec:20:9f:28:e4:83:8f:5c:ef:e7:67:9f:4f:f4:2e:ad:fa:
a1:50:f4:fc:6b:d8:6b:65:d3:ab:f8:6f:f7:f7:5b:86:a1:e2:
e3:ce:4a:b0:f7:0e:eb:51:53:6e:bc:7c:5c:f0:ed:e1:82:9a:
27:d3:57:5b:d2:99:3d:d5:7a:32:db:dc:b3:0c:e2:e8:7c:cc:
83:f4:bc:1d:42:2b:b8:45:a1:28:77:3a:df:0e:4c:8e:1a:e0:
91:e2:b4:90:46:98:0a:9e:b1:e6:fc:d5:31:99:2b:ec:45:4c:
c9:c6:18:28:d4:7f:4f:43:e7:66:14:bf:85:41:7d:9c:12:ec:
a9:eb:c2:4f:ef:97:dc:86:a1:3b:f8:6d:92:92:d4:48:ce:7d:
e9:87:a5:b9:98:9b:fe:ec:3e:59:46:4d:aa:06:85:ea:68:e1:
0c:57:9b:28:6d:7a:fc:62:9e:54:79:7b:86:f6:58:cb:f9:cc:
fd:09:a3:ea:0b:a3:7d:08:42:46:8a:70:bc:26:f7:34:9e:1e:
f7:9f:0c:7f:e3:26:02:fd:ab:90:75:98:67:75:59:71:8e:c7:
5c:d5:15:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:44:48 2026 by rpki-client