This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft
File: 4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft (raw, json)
Hash identifier: G4ozrhcUzCb2rx3W2OZxOKZH4Pf6G98tpIgKZ9ZuskU=
Subject key identifier: 46:B2:3E:79:72:CC:89:D4:CB:B5:24:47:75:37:7D:80:65:ED:E0:20
Authority key identifier: 4C:34:08:B6:E0:82:54:22:DC:2D:07:1E:49:0B:D7:CB:1F:BD:2A:3F
Certificate issuer: /CN=4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F
Certificate serial: 2F8FA808A65271B28D7133C58374BC4E5A16DEED
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft
Manifest number: 04C1
Signing time: Sat 31 Jan 2026 03:22:27 +0000
Manifest this update: Sat 31 Jan 2026 03:17:27 +0000
Manifest next update: Tue 03 Feb 2026 08:42:27 +0000
Files and hashes: 1: 4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl (hash: JNgEKowHA6ymfiPsQxWVihMCW/4Vc/zBNWWuj6+77pU=)
2: 3130332e37312e34342e302f32332d3233203d3e203436303232.roa (hash: V3QHQK/gWQFy09rLOPxob5SyVyg/wx9t2yimUS9bwPY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl
rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 08:42:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:8f:a8:08:a6:52:71:b2:8d:71:33:c5:83:74:bc:4e:5a:16:de:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F
Validity
Not Before: Jan 31 03:17:27 2026 GMT
Not After : Feb 3 08:42:27 2026 GMT
Subject: CN=46B23E7972CC89D4CBB5244775377D8065EDE020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:77:37:fc:01:3f:8f:d2:a7:ea:b6:ea:28:b6:
c8:ed:e8:a0:ff:00:29:81:40:65:9b:5b:c7:12:8b:
6f:d4:b2:b4:de:da:98:36:a1:56:d9:c4:25:53:ae:
46:ce:56:18:1c:cd:bf:36:9a:0c:86:d3:51:1d:29:
73:10:93:0d:d5:0e:aa:39:54:d2:24:bc:aa:d5:5e:
84:8a:19:c0:6d:8f:54:0d:05:75:b8:01:4d:9f:d6:
13:94:4e:3c:5b:d7:ec:f1:13:a6:1e:9c:26:1e:0d:
a1:6a:49:da:f1:76:46:5b:49:d6:e7:e1:ee:73:54:
dd:8d:49:bb:4b:d3:e1:82:ce:df:ee:a9:89:6c:58:
bc:1d:b4:49:e6:20:4f:23:70:20:fa:64:31:ea:f5:
f2:39:16:49:9b:9d:af:b9:be:83:64:62:1d:23:01:
6e:4a:5b:ff:d9:ad:42:93:ea:2f:c6:34:2d:92:91:
b1:92:e6:7a:af:46:e2:e9:82:69:89:15:07:da:cb:
fb:16:d5:df:6a:8c:6f:9f:d2:f6:a9:ec:24:81:e8:
e6:10:7e:5c:ee:5e:81:0d:ed:dc:46:9d:83:e4:83:
cb:a2:53:c9:74:80:1e:d5:6d:a3:40:db:01:96:87:
2f:e2:d4:b6:cb:25:08:a3:b2:e7:ca:9d:68:30:04:
96:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B2:3E:79:72:CC:89:D4:CB:B5:24:47:75:37:7D:80:65:ED:E0:20
X509v3 Authority Key Identifier:
keyid:4C:34:08:B6:E0:82:54:22:DC:2D:07:1E:49:0B:D7:CB:1F:BD:2A:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:58:36:5f:4c:43:6f:ec:be:c4:44:24:cc:22:e1:cd:81:31:
16:62:5b:0f:b0:c3:21:27:d5:60:96:1f:0c:53:5b:d9:0a:90:
83:ea:dc:b2:c3:f7:4f:a8:bd:bf:78:2e:4b:29:eb:40:ee:0d:
2f:34:11:be:08:d7:f0:60:0f:b6:7e:90:4d:8e:ee:df:60:28:
38:fc:8a:74:e2:b7:b7:ae:82:90:a6:13:3b:fd:f9:9c:5e:80:
86:66:dc:f7:4b:eb:57:af:37:fa:55:1c:57:ed:2f:27:35:8d:
1a:9d:9c:06:22:16:1e:2e:cc:51:73:50:bd:05:4c:8a:c9:79:
ce:76:c4:04:46:4a:b1:e5:6a:69:d1:4a:2c:aa:21:5e:64:c2:
f5:91:29:eb:9f:0a:c3:1e:cf:df:c8:08:4c:d1:91:ef:61:fd:
58:75:97:d9:f7:f0:7e:6e:f0:78:95:d8:9e:8f:7d:50:34:19:
97:5e:a3:d5:56:b4:41:53:48:8f:21:d5:a9:97:c2:57:2a:e6:
e6:27:34:5d:48:82:e7:ae:94:25:88:d6:5b:11:4d:fa:72:06:
db:2c:22:31:51:8c:a8:3e:e9:65:3f:36:97:80:1c:93:ec:09:
00:c6:af:10:8f:04:fd:bf:2c:23:2b:7e:49:e6:0a:9a:ce:e7:
83:00:06:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:06:56 2026 by rpki-client