This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft
File: B197F427572524588487CFDB163A9E512FAE4DF2.mft (raw, json)
Hash identifier: 61UaxDFS0usWFNr9RYz1m4nd2YfdYew2zep7BsXkBcs=
Subject key identifier: 41:35:54:4A:EE:F1:55:30:4D:FD:D3:80:86:8E:53:6E:F4:5D:CD:0D
Authority key identifier: B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2
Certificate issuer: /CN=B197F427572524588487CFDB163A9E512FAE4DF2
Certificate serial: 6D0897E86CBD266A89F949C16E39921C6D6C8BC7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft
Manifest number: 0268
Signing time: Sun 01 Feb 2026 14:41:36 +0000
Manifest this update: Sun 01 Feb 2026 14:36:36 +0000
Manifest next update: Wed 04 Feb 2026 22:20:36 +0000
Files and hashes: 1: 3130332e3135332e3234372e302f32342d3234203d3e20313430343735.roa (hash: 8ZWQPdcJgeKZrsbUmRYq2OzkrsqVWW52cECdkg/5pH0=)
2: 323430363a346563303a3a2f33322d3332203d3e20313430343735.roa (hash: sqH8mgq0fr+XiznMLTzogmtodA1+q341U0FlkHOzY5k=)
3: 3130332e3135332e3234362e302f32342d3234203d3e20313430343735.roa (hash: pc293ep/4fQQOE2DdqqWAYfU1Bh+ldyDqPDpR8SqPEU=)
4: B197F427572524588487CFDB163A9E512FAE4DF2.crl (hash: yARjGwDeI0J/w1sPPKEfIViMeJBhhPWPy7xIbNRTMrA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl
rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 22:20:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:08:97:e8:6c:bd:26:6a:89:f9:49:c1:6e:39:92:1c:6d:6c:8b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B197F427572524588487CFDB163A9E512FAE4DF2
Validity
Not Before: Feb 1 14:36:36 2026 GMT
Not After : Feb 4 22:20:36 2026 GMT
Subject: CN=4135544AEEF155304DFDD380868E536EF45DCD0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d1:14:9a:a4:7b:60:17:6d:1f:b8:f3:89:8b:
a8:dc:22:00:34:f5:c1:1d:1a:30:27:71:25:00:5f:
e3:df:b6:ed:f0:f9:9e:1a:d0:0e:c9:36:26:c6:c0:
40:e8:e0:96:48:9e:de:a5:8d:c4:80:21:f5:aa:60:
18:a6:67:76:99:12:1a:87:ac:c7:09:24:bb:c0:07:
19:f3:a9:a8:41:a8:4a:07:56:62:d1:8f:ee:da:09:
c3:f2:50:28:a2:c9:14:04:7e:7d:0c:d8:24:40:6d:
ac:30:ef:bf:50:3c:52:cd:ab:56:52:19:be:9a:d3:
11:72:02:db:d7:f3:95:bb:d0:ce:65:b7:01:c0:ce:
10:c5:bb:1a:6e:d3:1d:31:82:a7:d0:84:38:c9:d9:
5c:f2:65:50:d6:2d:0b:dc:51:7e:50:e6:e0:95:29:
65:6f:a1:97:68:e8:69:8a:18:6e:96:a0:c5:c1:d7:
5b:14:75:20:67:5c:7e:07:06:43:e7:ec:42:e6:71:
80:f1:d8:a1:0d:09:ee:e0:6d:35:c8:91:59:16:c2:
c3:b9:dd:d9:40:76:34:8b:82:99:73:fe:c2:4c:e4:
a8:8b:8e:1f:91:d0:3b:c8:e0:d7:95:36:db:d8:39:
73:4d:ef:94:da:fe:07:fa:39:d2:7f:b4:2b:a6:11:
c2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:35:54:4A:EE:F1:55:30:4D:FD:D3:80:86:8E:53:6E:F4:5D:CD:0D
X509v3 Authority Key Identifier:
keyid:B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:81:fb:cd:d7:d3:02:2d:67:d8:03:c0:d6:16:c5:3b:80:a4:
72:b0:36:29:9b:35:87:ff:68:c2:74:ff:e8:30:73:52:d5:31:
14:84:05:91:e9:8e:c9:db:41:63:48:db:93:ab:01:3f:3a:26:
a4:28:5e:02:59:85:2f:a9:ec:83:e3:08:b1:74:99:32:2e:09:
2e:58:84:93:34:e9:e9:af:26:af:ba:d0:ca:7d:9e:04:69:67:
52:26:80:c6:d7:b0:16:a0:e7:7f:96:f3:48:5f:89:40:74:d2:
91:e8:10:23:1b:2c:8a:46:ad:89:ad:71:4d:84:58:ce:6d:86:
7f:05:eb:2c:54:96:4d:b9:cb:04:b7:a5:63:9e:4d:3c:ae:31:
90:cf:35:20:b5:a3:8c:87:8f:e0:38:53:bc:34:2e:42:f8:4d:
f3:12:b4:cb:32:19:a0:0e:7f:16:cb:f3:6b:6c:ff:7d:2b:8d:
f2:59:e4:c5:29:04:3a:cd:79:04:73:fa:ee:56:a8:09:f3:1a:
6c:57:e0:54:9a:69:83:e4:a5:46:88:ab:ec:27:10:a6:c9:c3:
e3:84:2a:88:01:95:76:86:69:fa:0b:ee:1e:60:ec:8f:37:5d:
6a:e1:43:a8:bf:3f:ba:11:16:9b:6f:02:15:5a:ac:84:79:cf:
cb:ee:04:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 19:22:39 2026 by rpki-client