This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft
File: C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft (raw, json)
Hash identifier: jRaqOzPjZJg7a6ASmXnTPy2Rhmy4BQ+Eo4RQfLxhQK4=
Subject key identifier: 89:C6:1A:D8:2D:D2:71:A9:51:31:ED:BB:EE:9C:A7:17:D7:97:89:D6
Authority key identifier: C0:C8:E7:24:3E:4E:8D:EC:D7:A8:EA:1D:61:FD:42:41:08:E8:D3:D5
Certificate issuer: /CN=C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5
Certificate serial: 3E2AA22DE46A9CF85EFE3872BCB2B5845178143C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft
Manifest number: E2
Signing time: Sat 31 Jan 2026 22:51:29 +0000
Manifest this update: Sat 31 Jan 2026 22:46:29 +0000
Manifest next update: Wed 04 Feb 2026 08:14:29 +0000
Files and hashes: 1: C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.crl (hash: MbGs84uIX8MoiOfIF0jiqwPXXKY2Fx/kjqdW5/U6VgE=)
2: 3130332e37352e3233372e302f32342d3234203d3e203634333130.roa (hash: WLCShlxfdsF203Qx2wOYYjy6P8cT8pTLxL//5fp4yiA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.crl
rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 08:14:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:2a:a2:2d:e4:6a:9c:f8:5e:fe:38:72:bc:b2:b5:84:51:78:14:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5
Validity
Not Before: Jan 31 22:46:29 2026 GMT
Not After : Feb 4 08:14:29 2026 GMT
Subject: CN=89C61AD82DD271A95131EDBBEE9CA717D79789D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:80:6c:e7:d7:6e:9b:76:f7:f5:6b:9b:49:b1:
57:33:73:29:9d:9d:d2:d2:9e:17:ed:c3:21:fc:29:
9b:ef:f6:fc:81:17:56:1a:73:3e:31:bf:9e:e5:d5:
a4:ec:1b:18:51:9c:8f:48:73:97:36:a2:05:ad:87:
a9:76:54:29:4e:0c:03:16:5c:1d:2e:1d:b9:e7:0e:
93:fd:b4:dd:e2:1d:8d:c5:e6:c8:05:41:54:35:d4:
07:58:85:20:9e:52:c0:95:57:12:7e:9a:1a:2d:bf:
7c:bc:3d:fd:fb:42:a2:bd:74:f1:0c:d2:06:38:94:
2f:cd:21:c9:4a:18:ea:6b:99:38:ba:2f:99:ba:70:
5a:6b:d0:05:7e:35:5d:a8:fd:a9:de:f8:e0:e9:9f:
7e:8d:52:4e:f7:c8:fe:ef:c3:01:50:44:01:d8:8f:
87:a4:62:93:96:94:27:c3:5d:a4:55:3b:48:3a:4f:
18:0b:48:03:11:fe:0b:d1:a3:60:bd:06:e4:f4:dd:
08:58:ef:39:2c:65:2e:84:ba:3a:55:84:8e:55:b1:
54:30:89:4a:bf:17:72:c3:2a:7b:9f:11:2d:c9:65:
37:d6:8a:f8:8f:43:b6:a3:ba:0e:2c:98:97:1c:c1:
b2:e1:06:3c:1f:7c:18:8a:9d:32:83:6b:c8:8e:de:
49:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C6:1A:D8:2D:D2:71:A9:51:31:ED:BB:EE:9C:A7:17:D7:97:89:D6
X509v3 Authority Key Identifier:
keyid:C0:C8:E7:24:3E:4E:8D:EC:D7:A8:EA:1D:61:FD:42:41:08:E8:D3:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:f6:68:e1:10:3d:c8:7b:ba:f2:39:44:cc:1f:be:7e:25:50:
6f:91:73:9a:a6:40:ee:61:81:6c:a6:b6:21:00:79:4c:6c:5c:
aa:bf:ad:1b:09:b0:ae:65:49:24:38:28:12:2c:8f:2c:d5:90:
4e:f3:14:62:cf:33:2b:7e:0a:38:1d:4e:bd:e8:0f:24:69:6d:
73:c3:3e:74:1f:66:4e:f0:5b:29:5e:f4:e7:f8:2e:dd:98:83:
5c:aa:96:af:2b:4a:76:f7:49:81:69:f9:7d:c2:8e:9b:ca:08:
cc:a2:54:ef:f3:b2:64:07:5c:dd:7d:a4:ad:ae:63:a3:ff:c4:
73:ed:83:f1:ae:18:50:dd:37:84:a3:71:3d:c9:6f:0a:43:b6:
e6:18:b5:91:66:25:ea:af:fb:a5:2d:3e:50:d0:ec:0e:df:3e:
09:53:6d:51:4d:de:b6:67:2b:33:e9:2d:a9:4d:7d:29:1b:cb:
6d:0f:70:09:3f:95:d8:78:3b:f9:d7:b1:c4:c3:d0:d0:76:ae:
67:83:53:61:26:c8:2a:c0:41:a7:32:4d:43:c9:be:7c:ad:64:
8b:95:64:2b:3e:6b:c9:2d:0d:96:8d:e8:34:3d:19:5c:ec:46:
d8:c7:8c:90:89:58:93:f6:06:07:af:d1:07:e7:f5:d7:e4:53:
0d:f1:47:c9
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUPiqiLeRqnPhe/jhyvLK1hFF4FDwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzBDOEU3MjQzRTRFOERFQ0Q3QThFQTFENjFGRDQyNDEw
OEU4RDNENTAeFw0yNjAxMzEyMjQ2MjlaFw0yNjAyMDQwODE0MjlaMDMxMTAvBgNV
BAMTKDg5QzYxQUQ4MkREMjcxQTk1MTMxRURCQkVFOUNBNzE3RDc5Nzg5RDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEgGzn126bdvf1a5tJsVczcymd
ndLSnhftwyH8KZvv9vyBF1Yacz4xv57l1aTsGxhRnI9Ic5c2ogWth6l2VClODAMW
XB0uHbnnDpP9tN3iHY3F5sgFQVQ11AdYhSCeUsCVVxJ+mhotv3y8Pf37QqK9dPEM
0gY4lC/NIclKGOprmTi6L5m6cFpr0AV+NV2o/ane+ODpn36NUk73yP7vwwFQRAHY
j4ekYpOWlCfDXaRVO0g6TxgLSAMR/gvRo2C9BuT03QhY7zksZS6EujpVhI5VsVQw
iUq/F3LDKnufES3JZTfWiviPQ7ajug4smJccwbLhBjwffBiKnTKDa8iO3kmXAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUicYa2C3ScalRMe277pynF9eXidYwHwYDVR0j
BBgwFoAUwMjnJD5OjezXqOodYf1CQQjo09UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
MTE2ZmJjOS1iMzFjLTQyMjUtYTY5Ny00ZmVkYmMyMzRkYjYvMC9DMEM4RTcyNDNF
NEU4REVDRDdBOEVBMUQ2MUZENDI0MTA4RThEM0Q1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzBDOEU3MjQzRTRFOERFQ0Q3QThFQTFENjFGRDQyNDEwOEU4
RDNENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODExNmZiYzktYjMxYy00MjI1LWE2
OTctNGZlZGJjMjM0ZGI2LzAvQzBDOEU3MjQzRTRFOERFQ0Q3QThFQTFENjFGRDQy
NDEwOEU4RDNENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABn2aOEQPch7uvI5RMwfvn4lUG+Rc5qmQO5h
gWymtiEAeUxsXKq/rRsJsK5lSSQ4KBIsjyzVkE7zFGLPMyt+CjgdTr3oDyRpbXPD
PnQfZk7wWyle9Of4Lt2Yg1yqlq8rSnb3SYFp+X3CjpvKCMyiVO/zsmQHXN19pK2u
Y6P/xHPtg/GuGFDdN4SjcT3JbwpDtuYYtZFmJeqv+6UtPlDQ7A7fPglTbVFN3rZn
KzPpLalNfSkby20PcAk/ldh4O/nXscTD0NB2rmeDU2EmyCrAQacyTUPJvnytZIuV
ZCs+a8ktDZaN6DQ9GVzsRtjHjJCJWJP2Bgev0Qfn9dfkUw3xR8k=
-----END CERTIFICATE-----
Generated at Mon Feb 2 10:05:13 2026 by rpki-client