This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft
File: 1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft (raw, json)
Hash identifier: FVzq9sKXgTcM92mTM9451NL/hgZorB6JpDcgzyQBqzY=
Subject key identifier: 95:F9:43:94:45:4C:48:48:7C:62:58:81:84:9B:BA:BB:91:83:9B:43
Authority key identifier: 1F:CD:47:FB:4B:D7:29:E2:2E:4F:EE:FC:E5:B6:1B:4E:1C:7F:E9:46
Certificate issuer: /CN=1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946
Certificate serial: 338E64275BA67DA29ACDA3916186F1968A6F5C38
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft
Manifest number: 0511
Signing time: Sat 31 Jan 2026 04:40:45 +0000
Manifest this update: Sat 31 Jan 2026 04:35:45 +0000
Manifest next update: Tue 03 Feb 2026 10:14:45 +0000
Files and hashes: 1: 3230322e36372e382e302f32312d3234203d3e203234313935.roa (hash: B+C/2EohdvfSLSdEWCv4uFVDG8om8Pw0dnsHmi+NJ9Y=)
2: 323430313a343230303a3a2f33322d3438203d3e203234313935.roa (hash: xPjBnSpHmpcu0qAxiY2wE80xegcTsRNtPEAJ6PwASdw=)
3: 3131382e39312e3132382e302f32312d3234203d3e203234313935.roa (hash: yiPIGsDISayK97qWqm2UWsTxEHdxKETOsL8gSiwFMjA=)
4: 1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl (hash: rWgKS2huq0BIlcACF22TqnJmGVVVXMlL0IsXElEWLA0=)
5: 3131382e39312e3134302e302f32322d3234203d3e203633353032.roa (hash: XlrHKxvILobzAM8qX1Td9F4llGO1s7dDnxuDShAIB6Q=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl
rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 10:14:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:8e:64:27:5b:a6:7d:a2:9a:cd:a3:91:61:86:f1:96:8a:6f:5c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946
Validity
Not Before: Jan 31 04:35:45 2026 GMT
Not After : Feb 3 10:14:45 2026 GMT
Subject: CN=95F94394454C48487C625881849BBABB91839B43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4a:a6:b7:92:f5:ca:45:0c:83:81:89:d5:ba:
e6:28:3e:7e:7b:bb:28:dc:55:d3:cb:76:51:96:6f:
30:20:de:d9:f5:30:cc:da:79:7d:ff:8d:86:09:16:
bb:75:f3:84:3b:6d:8e:39:80:f7:12:22:0a:d6:c6:
e2:df:ee:63:5f:2a:de:9b:b3:c9:44:e6:c9:32:3a:
cd:9d:ec:33:85:b9:47:5a:26:44:ca:36:09:f4:c1:
48:71:2c:01:06:19:b5:d0:8f:23:17:ff:a2:a9:15:
bf:9f:d8:15:ac:50:9c:de:a0:26:30:0b:99:32:1d:
70:a5:a0:10:b1:36:d9:21:4e:2e:f6:b8:fc:da:aa:
7f:29:d5:36:46:84:70:7e:4e:ca:ce:c6:05:ba:02:
f0:fc:3a:8d:de:74:9d:a6:d6:48:23:a6:25:88:d0:
9c:20:05:1a:08:05:a6:57:c2:55:ae:93:97:27:2d:
24:b1:ae:c2:bc:87:98:ed:22:0d:84:95:8f:e6:43:
b1:ca:51:c2:d9:37:03:01:cc:87:13:f9:4f:b0:83:
6f:66:fc:bb:93:3c:a4:17:33:10:0b:98:7d:fc:c8:
a3:1f:e2:2a:3f:4e:6d:34:f6:fe:89:12:0e:08:43:
ed:e7:9c:10:73:d3:48:23:b9:88:23:7b:cd:e1:43:
0e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F9:43:94:45:4C:48:48:7C:62:58:81:84:9B:BA:BB:91:83:9B:43
X509v3 Authority Key Identifier:
keyid:1F:CD:47:FB:4B:D7:29:E2:2E:4F:EE:FC:E5:B6:1B:4E:1C:7F:E9:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:19:26:9b:d2:4c:ed:e6:80:7b:e4:45:c3:e8:47:a4:6b:fd:
27:57:45:26:b9:74:b2:c4:f0:db:40:06:5c:e8:ac:41:1e:23:
bc:71:ce:1a:c5:4a:ad:11:5d:e7:62:70:04:50:0d:23:88:6c:
b3:78:1b:7c:86:e5:74:4b:b1:a7:ae:db:dc:4f:08:5f:2a:02:
5f:6b:50:36:5a:fc:72:0c:79:3f:ef:cf:b6:65:6b:65:d4:65:
b8:e9:0c:0b:21:2c:f5:16:71:be:c5:26:12:a2:63:9a:da:6d:
b7:d5:c2:a7:2b:a0:1a:87:55:25:9e:71:9d:8f:d3:ee:25:fd:
32:6f:df:8e:54:c8:79:61:f2:48:58:22:69:65:b2:98:d2:24:
da:7d:ef:4b:b1:80:02:13:37:57:12:54:9f:c1:3e:c7:66:f4:
53:ad:84:19:5f:c5:79:8e:54:1e:fc:04:16:56:8f:b3:76:98:
36:d7:ff:cf:db:4f:a5:ba:ec:41:f9:e5:60:50:1a:36:01:69:
38:d2:4d:d0:f2:55:87:15:20:1d:f6:f7:74:66:dd:bf:f5:76:
2d:89:32:17:6d:f0:b8:f1:32:dc:42:3c:9c:09:1e:99:d6:4c:
47:34:c0:02:9a:1e:42:74:a7:c8:e7:1e:d7:1f:8b:90:87:6d:
65:ff:ae:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:02:17 2026 by rpki-client