This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft
File: 1DE04B1502D06C1C133ACE901223884FB36B2638.mft (raw, json)
Hash identifier: wBbdSU/emBpKW2OGCdvrbpbhmu2bsW0KyCfnRzdOi4Q=
Subject key identifier: 38:C6:A5:38:3D:30:A7:DD:D5:70:76:1A:D7:F8:C4:25:9F:A0:83:76
Authority key identifier: 1D:E0:4B:15:02:D0:6C:1C:13:3A:CE:90:12:23:88:4F:B3:6B:26:38
Certificate issuer: /CN=1DE04B1502D06C1C133ACE901223884FB36B2638
Certificate serial: 110C92701D098FACAFBD5216150257EEA175F20E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DE04B1502D06C1C133ACE901223884FB36B2638.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft
Manifest number: 0249
Signing time: Mon 02 Feb 2026 02:41:13 +0000
Manifest this update: Mon 02 Feb 2026 02:36:13 +0000
Manifest next update: Thu 05 Feb 2026 13:56:13 +0000
Files and hashes: 1: 1DE04B1502D06C1C133ACE901223884FB36B2638.crl (hash: xBmCHZk5VCZiou4hhLoYGocK4qWdGXGob7yXZty5Hqg=)
2: 3130332e3138372e3131342e302f32342d3234203d3e203633383738.roa (hash: Dbua1W+dq/k6Z9uQfXqPhRIcFQdPJ4Cp3vbD2GRN4CU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.crl
rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DE04B1502D06C1C133ACE901223884FB36B2638.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:0c:92:70:1d:09:8f:ac:af:bd:52:16:15:02:57:ee:a1:75:f2:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1DE04B1502D06C1C133ACE901223884FB36B2638
Validity
Not Before: Feb 2 02:36:13 2026 GMT
Not After : Feb 5 13:56:13 2026 GMT
Subject: CN=38C6A5383D30A7DDD570761AD7F8C4259FA08376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:da:32:47:da:a8:9f:41:bd:eb:3e:e4:4d:b1:
45:97:a1:3b:25:c7:6a:a6:e5:51:0d:85:ba:c4:9a:
60:2f:34:0b:89:73:fd:82:1c:17:44:47:9b:7d:c4:
a2:ec:e4:1b:1b:a4:ec:bd:88:da:3d:e5:dc:5a:c0:
2c:e4:ca:73:21:34:0a:15:30:05:5e:de:3f:73:f4:
ee:c3:a7:2c:50:e4:15:42:60:db:06:1f:be:17:b4:
47:ef:8c:23:2b:ed:cd:52:a8:37:2f:2d:d1:12:83:
28:50:eb:50:d6:8a:00:87:17:18:44:33:47:86:67:
f8:59:9a:4e:31:d9:4b:a3:af:f5:40:29:2a:25:7f:
2a:72:11:6e:cf:0d:00:ce:6b:e8:b8:21:23:5f:00:
86:79:5c:f9:6c:66:0e:4f:82:af:1e:ba:60:f1:31:
8e:c8:a3:16:ce:f9:a3:70:3f:73:c0:b0:c6:14:c6:
f2:ea:16:26:ef:ea:07:5e:80:a6:76:7f:a5:53:b1:
68:cc:e5:dd:65:41:5a:ec:43:0b:18:f0:07:9e:ab:
ec:af:d8:fc:30:22:ac:3a:74:17:aa:f9:e1:a9:3b:
90:5b:84:35:29:9c:d7:a3:04:c5:f3:30:c4:e4:56:
31:51:85:08:0b:99:f3:de:05:77:50:25:4c:55:f2:
e7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C6:A5:38:3D:30:A7:DD:D5:70:76:1A:D7:F8:C4:25:9F:A0:83:76
X509v3 Authority Key Identifier:
keyid:1D:E0:4B:15:02:D0:6C:1C:13:3A:CE:90:12:23:88:4F:B3:6B:26:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DE04B1502D06C1C133ACE901223884FB36B2638.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:78:a9:da:22:7b:e6:fe:79:60:eb:90:3a:72:16:7c:9c:a1:
a2:ab:5e:59:1e:1b:dc:b7:8c:5c:13:83:99:9f:89:a9:af:81:
11:ca:69:31:07:ba:0c:b4:36:4c:1a:22:f3:8b:a8:68:63:95:
49:27:97:ff:e5:d6:dd:b2:92:ce:44:82:5f:f0:a6:2e:20:6c:
2e:e5:a8:55:5d:22:ff:03:95:6c:72:df:5d:a9:72:f1:ba:42:
79:cb:3b:d2:03:8c:27:0f:a7:a9:9b:39:86:72:32:e5:28:74:
86:d6:b6:f8:bc:e5:80:df:50:a0:58:b1:6b:93:98:18:da:4e:
a7:a5:f6:11:84:70:9f:84:c7:78:c9:db:ec:93:c0:75:e9:8d:
c1:60:10:1f:4c:f1:3b:47:94:2b:78:2d:70:ab:f4:89:56:14:
1b:d1:7e:f1:fd:b7:61:7e:3b:37:f0:1b:c5:d7:12:03:00:02:
25:02:a7:97:50:fe:2f:d3:68:ac:58:76:61:7b:ee:98:6c:df:
ed:9e:de:6e:1f:b0:64:ba:13:8b:0c:b7:f4:9b:35:42:4b:70:
9e:0b:f6:aa:0c:f5:bf:ae:12:6d:40:80:e5:8f:cf:6a:5b:8a:
76:0c:69:74:d2:b3:43:9a:83:77:14:40:ba:7c:0e:8d:4b:31:
c9:b2:b4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:06:08 2026 by rpki-client