This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft
File: 8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft (raw, json)
Hash identifier: SxYA6CCRpF66xQUm0VPmVCise+BUV696lLrPiCgs9OE=
Subject key identifier: E9:E5:8A:00:8F:7F:5D:5F:90:86:22:AF:86:9D:95:17:DC:89:5F:2B
Authority key identifier: 82:08:31:7A:24:AB:4C:D8:28:CD:88:55:F8:1F:3E:F2:B5:3C:C6:81
Certificate issuer: /CN=8208317A24AB4CD828CD8855F81F3EF2B53CC681
Certificate serial: 460B673EE40B3EB811D2BFE23233B835854BCD38
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8208317A24AB4CD828CD8855F81F3EF2B53CC681.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft
Manifest number: 01C0
Signing time: Sun 01 Feb 2026 15:22:16 +0000
Manifest this update: Sun 01 Feb 2026 15:17:16 +0000
Manifest next update: Wed 04 Feb 2026 15:40:16 +0000
Files and hashes: 1: 3130332e3131342e3134342e302f32342d3234203d3e20313337333531.roa (hash: ty2A/+XUIZKKt+5K+zVnVNMiG2s1JjDQEBRNkGaNrQE=)
2: 8208317A24AB4CD828CD8855F81F3EF2B53CC681.crl (hash: de2Auo0w2+fTgn+2wRx1MadCgiw7mExPWYn+g7gwbpA=)
3: 323030313a6466343a663930303a3a2f34382d3438203d3e20313337333531.roa (hash: b4NjxQmSbJ+wk760b/yGVrpvatI7XP4yXIQB6LdeYtw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.crl
rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8208317A24AB4CD828CD8855F81F3EF2B53CC681.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 15:40:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:0b:67:3e:e4:0b:3e:b8:11:d2:bf:e2:32:33:b8:35:85:4b:cd:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8208317A24AB4CD828CD8855F81F3EF2B53CC681
Validity
Not Before: Feb 1 15:17:16 2026 GMT
Not After : Feb 4 15:40:16 2026 GMT
Subject: CN=E9E58A008F7F5D5F908622AF869D9517DC895F2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:66:78:64:c5:39:7e:90:af:40:da:b0:6c:8d:
d2:ec:b2:a6:54:2a:32:74:e7:af:3f:bd:1e:48:ed:
bf:c8:5f:b6:f8:0f:a4:29:5c:9c:e8:b6:b6:58:47:
55:84:e3:37:fa:26:a7:d9:37:b8:5e:71:d2:7c:52:
aa:a8:9a:0e:fb:fa:0b:c7:7c:53:21:67:c5:95:ea:
50:ae:8a:aa:a8:f1:99:6b:34:6f:00:72:b8:34:04:
c8:ab:36:be:42:b3:5e:c4:9e:df:f3:17:60:da:86:
df:ad:ae:c3:13:23:3d:98:76:12:d3:a5:27:a4:08:
3d:ce:7f:95:d1:a7:ec:12:3e:9b:18:d4:60:13:92:
75:97:e3:84:4b:9c:54:9c:b7:f0:df:6e:86:02:e4:
05:0e:8a:46:19:d6:8a:22:89:e6:d7:29:70:b7:17:
c3:57:ac:30:7e:17:3e:40:48:14:41:35:08:36:4a:
af:93:72:f5:b7:2d:d7:2c:7d:e0:8d:8d:2f:26:2e:
f6:88:b9:ba:09:e6:41:cd:d1:f2:08:47:a4:20:0a:
80:39:13:59:ee:19:a8:95:79:f7:bf:ec:60:81:49:
4c:31:3f:02:fd:87:52:23:67:11:7d:e3:66:af:51:
71:5f:f8:12:dd:25:67:af:97:3f:8c:50:f3:20:87:
31:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E5:8A:00:8F:7F:5D:5F:90:86:22:AF:86:9D:95:17:DC:89:5F:2B
X509v3 Authority Key Identifier:
keyid:82:08:31:7A:24:AB:4C:D8:28:CD:88:55:F8:1F:3E:F2:B5:3C:C6:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8208317A24AB4CD828CD8855F81F3EF2B53CC681.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:72:a4:08:80:7c:6d:3a:3b:93:9d:f2:b8:2b:2a:41:8b:b0:
64:1c:09:b1:64:2f:fa:c1:7e:d2:8a:04:9b:ce:3b:34:d7:fc:
6a:ce:63:f0:ca:b6:e0:06:fd:5e:cf:38:55:80:8d:98:5a:dd:
68:d9:f4:cc:18:ed:5e:f3:e3:3d:55:5c:c8:d6:c7:5d:c7:2b:
3b:d7:ce:e9:6d:c4:b1:14:0c:ba:0b:4e:9c:65:b3:96:72:98:
72:91:15:ec:97:5c:23:92:ff:5c:df:91:ff:a1:a8:df:73:f1:
4e:fd:31:b5:fc:fa:81:0e:5f:21:58:1a:d7:d0:44:45:94:21:
24:0b:85:a5:f2:c6:be:2a:cb:1b:ce:62:cc:4d:23:22:d4:38:
71:24:fd:cd:d6:a0:d3:66:30:b0:e4:9e:6f:6e:a3:ab:fd:3b:
d0:3e:8b:da:16:d7:8d:e8:81:cd:38:14:1d:69:af:f7:23:02:
f8:e5:98:ce:4f:aa:ae:b0:0d:47:19:01:43:64:c1:cb:4f:09:
b5:96:cc:53:87:bf:bb:77:d7:ff:63:5e:e4:f1:d0:0e:f5:61:
34:95:7b:52:04:b3:4a:d3:52:d1:d0:04:49:89:e4:07:31:07:
c2:a3:6c:f7:2f:89:a0:c9:cf:f8:85:c3:8e:f2:e8:f4:92:a2:
c7:f2:44:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:42:07 2026 by rpki-client