This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.mft
File: F52826976E7EBDBF89B93A42A1682E42B84289FB.mft (raw, json)
Hash identifier: mF40xSakQJaS+1D9QW5JoTaA9Ae59KSd6h21zVsmMCM=
Subject key identifier: 7C:B7:2C:0F:D1:E8:FA:FE:96:4F:9C:3D:47:42:DF:A8:31:36:D2:ED
Authority key identifier: F5:28:26:97:6E:7E:BD:BF:89:B9:3A:42:A1:68:2E:42:B8:42:89:FB
Certificate issuer: /CN=F52826976E7EBDBF89B93A42A1682E42B84289FB
Certificate serial: 63AA3B4F8982FFE173547B0C76F52DAC272E1345
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F52826976E7EBDBF89B93A42A1682E42B84289FB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.mft
Manifest number: 0104
Signing time: Mon 02 Feb 2026 05:12:15 +0000
Manifest this update: Mon 02 Feb 2026 05:07:15 +0000
Manifest next update: Thu 05 Feb 2026 13:19:15 +0000
Files and hashes: 1: F52826976E7EBDBF89B93A42A1682E42B84289FB.crl (hash: rNVI7jS97+Odu9RYXxqtRe7PeM6z668uKxgcIhnEoe8=)
2: 323430313a613565303a3a2f33322d3438203d3e20313532383130.roa (hash: P+pivHFq6sWXzePMBy9uzAKbTKafmuscGwm8u/xXNts=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.crl
rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F52826976E7EBDBF89B93A42A1682E42B84289FB.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:aa:3b:4f:89:82:ff:e1:73:54:7b:0c:76:f5:2d:ac:27:2e:13:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F52826976E7EBDBF89B93A42A1682E42B84289FB
Validity
Not Before: Feb 2 05:07:15 2026 GMT
Not After : Feb 5 13:19:15 2026 GMT
Subject: CN=7CB72C0FD1E8FAFE964F9C3D4742DFA83136D2ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b1:45:69:9f:4d:64:26:01:a0:1b:dc:aa:68:
51:1d:1f:e0:67:89:84:56:09:6a:b3:19:df:63:71:
5b:b4:9a:fb:2b:ba:bd:12:a2:0c:2d:5c:1b:75:6f:
22:19:e1:e7:c4:0b:5f:11:72:e1:19:73:67:e2:36:
b9:dc:17:55:53:85:b4:00:e1:c1:83:62:83:03:f1:
08:55:d6:0c:81:65:dc:36:e2:ce:b1:62:65:5d:34:
62:9a:62:3f:04:02:ff:94:54:66:ab:a3:cb:35:fd:
5e:a5:cd:0c:79:fd:b0:7c:a7:07:46:e5:a6:3f:2f:
c1:80:08:0c:68:f9:a1:ad:2e:af:c4:59:ff:b5:df:
39:79:5d:56:4b:ac:52:8e:c1:fd:9d:57:97:4f:4b:
5a:d2:c0:de:d2:c7:b9:54:18:81:cf:0a:66:b9:bf:
85:4d:c7:27:46:a3:c3:45:c4:24:00:73:05:43:cc:
e8:c5:db:fd:8e:1d:b3:77:b9:1e:c5:8d:11:07:04:
cd:df:56:3f:de:f2:93:5c:e0:68:53:21:6f:59:b5:
7d:68:91:36:b9:91:a5:99:af:b2:4f:eb:c5:b9:ca:
93:52:43:95:0c:1e:64:67:0f:01:ac:3d:9b:cc:39:
0a:c3:02:db:04:3b:93:0d:8a:1a:87:f3:23:5a:32:
6d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B7:2C:0F:D1:E8:FA:FE:96:4F:9C:3D:47:42:DF:A8:31:36:D2:ED
X509v3 Authority Key Identifier:
keyid:F5:28:26:97:6E:7E:BD:BF:89:B9:3A:42:A1:68:2E:42:B8:42:89:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F52826976E7EBDBF89B93A42A1682E42B84289FB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f1:0c:b6:ff:15:13:45:c1:1b:b5:fa:7b:ad:73:ab:e3:e4:
ea:16:74:e3:6d:37:80:5e:be:87:ae:4f:f5:aa:c9:51:a1:cf:
8b:4d:d4:c6:62:92:93:95:92:cd:29:79:bd:fc:87:38:ee:83:
88:0c:97:11:50:b2:c6:0c:1e:1b:c2:7d:4a:62:e0:a0:58:01:
e8:df:7d:26:2e:ef:af:74:f4:55:33:3c:9f:8d:de:21:ab:29:
40:ad:18:14:f4:9c:7a:7b:dd:61:f7:f2:95:fb:71:5c:26:8c:
90:71:40:93:78:73:c9:e8:1f:b4:50:a0:b2:ef:a4:a6:ca:17:
97:f6:f1:5b:c4:a2:e9:2a:1d:3b:4c:ea:00:7b:07:88:50:e2:
9d:49:5c:7e:d8:f5:0b:60:e0:45:5d:6a:d5:2d:85:ec:ae:44:
d4:de:0c:1b:1c:08:fc:2d:9a:f4:9f:7c:b0:68:4c:d2:6a:7e:
dd:bb:59:07:4e:fc:8e:92:07:80:0c:50:10:5e:9b:8f:64:ec:
a7:e5:7c:55:1c:63:cf:3b:3a:62:e1:85:77:bd:2b:5c:11:bb:
bf:d2:7c:15:01:af:9f:29:70:20:d0:56:14:73:cd:56:46:c7:
fc:30:63:6a:3d:a9:6d:7b:a5:9d:e3:b7:dd:bd:a8:89:d2:76:
9f:bb:31:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:03:42 2026 by rpki-client