This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft
File: 4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft (raw, json)
Hash identifier: Ulu2eWVdMtpYW8wPdY/phltdX8i16vaL15nxMDMpWHY=
Subject key identifier: 77:95:89:05:A5:68:FF:07:9B:D4:6B:81:84:42:7D:98:F7:7F:94:51
Authority key identifier: 4D:D0:C9:5B:43:B8:B6:53:60:1F:ED:39:AB:01:0E:1D:D0:DC:17:F2
Certificate issuer: /CN=4DD0C95B43B8B653601FED39AB010E1DD0DC17F2
Certificate serial: 111B772B8435C6A5D56E1D6F087325108D3C8F43
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft
Manifest number: 0548
Signing time: Sun 01 Feb 2026 04:41:12 +0000
Manifest this update: Sun 01 Feb 2026 04:36:12 +0000
Manifest next update: Wed 04 Feb 2026 09:18:12 +0000
Files and hashes: 1: 4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl (hash: v5GSnvStL74TfDC+/VN1ihbXOFvE0NZmCG3r+IiOiHs=)
2: 3130332e36362e35352e302f32342d3234203d3e20313335343537.roa (hash: ljnKYF4WQqtb0yfOcUdymtJM6+GnXJyNyFLsK7GZ494=)
3: 34352e3132302e3234342e302f32322d3234203d3e20313335343537.roa (hash: PuA0O7on+Tv+yi4m5sFC8JVnpsZv77062xaCNSQ10PY=)
4: 323030313a6466323a626530303a3a2f34382d3438203d3e20313335343537.roa (hash: Y9NxdO2uUmExgp5HT4f9RxRPtt01n/EQdy4OmAOBACk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl
rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 09:18:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:1b:77:2b:84:35:c6:a5:d5:6e:1d:6f:08:73:25:10:8d:3c:8f:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4DD0C95B43B8B653601FED39AB010E1DD0DC17F2
Validity
Not Before: Feb 1 04:36:12 2026 GMT
Not After : Feb 4 09:18:12 2026 GMT
Subject: CN=77958905A568FF079BD46B8184427D98F77F9451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0b:33:39:78:dd:06:86:88:4b:09:00:36:f1:
e6:6f:7b:2f:76:0f:4b:02:59:72:5b:4f:48:92:cf:
30:d6:f1:90:ad:cf:5e:28:fa:89:86:cf:2d:ac:ea:
b1:7f:d6:4d:84:fa:bf:11:d8:bf:79:56:0f:0f:7a:
c3:1d:59:79:02:7f:d9:0b:11:62:2e:3b:f9:dd:76:
68:3f:91:53:a6:e9:4c:29:8c:bf:74:1f:1b:eb:17:
54:c1:df:9c:58:3b:e1:e3:1b:cf:f3:6f:d0:5a:29:
e2:52:8f:b8:59:47:a8:5d:cf:1a:43:cc:80:9c:73:
6d:34:8b:06:e3:bc:e4:fb:15:29:b4:d0:6e:8a:35:
cb:9d:e2:4f:05:4e:45:d8:8c:a2:44:6d:1a:31:4a:
ad:7b:ab:af:77:05:a0:bd:19:91:d8:30:ca:8c:6d:
c8:9d:f0:55:0e:fe:d0:20:f0:4f:20:fd:03:36:86:
5e:af:35:c1:46:ea:ca:bd:83:bc:20:d8:d9:f0:33:
7d:6e:8e:15:26:1b:6a:3a:a4:94:f7:d0:e7:d6:4f:
8a:b6:98:81:27:38:75:4b:ad:ab:86:8b:ba:cb:50:
c7:51:d9:c9:a4:7c:b7:91:3e:0a:1b:f5:90:da:bc:
3c:12:f0:a2:fe:f6:e3:db:21:20:88:b4:eb:5c:08:
86:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:95:89:05:A5:68:FF:07:9B:D4:6B:81:84:42:7D:98:F7:7F:94:51
X509v3 Authority Key Identifier:
keyid:4D:D0:C9:5B:43:B8:B6:53:60:1F:ED:39:AB:01:0E:1D:D0:DC:17:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:69:e3:0c:d7:dc:97:dd:cf:06:c2:df:02:d2:5d:b2:85:77:
e5:17:ab:a0:c4:b4:af:17:15:00:f1:7e:aa:86:9c:65:12:d2:
81:62:fc:ab:83:a7:2c:cf:55:3a:7f:07:d5:c9:64:61:d7:be:
a0:ad:8a:dc:5f:f4:d8:da:0f:44:a9:d8:05:af:c1:73:37:cf:
2d:3a:c5:f7:76:14:47:a4:16:09:d0:b3:53:6b:26:f0:61:d5:
50:1c:1b:08:87:cb:b4:b5:81:44:af:21:03:73:b5:ce:15:68:
25:9e:d8:0c:f8:c8:48:40:0f:d1:91:42:9b:95:16:40:84:57:
87:e5:db:ca:90:e3:d3:79:01:34:8e:2f:97:f8:1b:b4:d7:4b:
3a:8e:ae:dd:8e:ab:fa:7c:16:11:88:1c:5d:b4:6b:28:41:c7:
4e:d3:e6:11:94:ec:ba:33:99:c1:25:b5:be:43:c3:34:49:ae:
29:cf:23:ea:d3:d2:d4:bc:81:e0:b6:e6:64:65:d6:73:39:9d:
5a:c1:44:48:48:1f:22:f1:b9:2f:97:45:32:f7:83:2d:32:62:
90:f7:6a:15:32:e8:62:37:70:16:08:09:59:1a:cd:0b:1f:c5:
80:be:8f:0b:20:be:4f:4c:36:22:9c:ad:2e:6e:76:1e:53:63:
88:6d:e3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:02:53 2026 by rpki-client