This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/DA3283EBD45CCF7056D92A914183FB7825C66692.mft
File: DA3283EBD45CCF7056D92A914183FB7825C66692.mft (raw, json)
Hash identifier: oyh9eV5KpudNLQWrZZNu4fqeRvBKvn0EoXqIKdmbaM0=
Subject key identifier: 2B:C8:22:EB:6D:E9:C7:12:08:5E:8B:B2:F6:61:52:ED:EC:24:F3:5E
Authority key identifier: DA:32:83:EB:D4:5C:CF:70:56:D9:2A:91:41:83:FB:78:25:C6:66:92
Certificate issuer: /CN=DA3283EBD45CCF7056D92A914183FB7825C66692
Certificate serial: 12778FE9AB71334024A824CE1D455FB84023D783
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA3283EBD45CCF7056D92A914183FB7825C66692.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/DA3283EBD45CCF7056D92A914183FB7825C66692.mft
Manifest number: 03C4
Signing time: Sat 31 Jan 2026 16:21:24 +0000
Manifest this update: Sat 31 Jan 2026 16:16:24 +0000
Manifest next update: Wed 04 Feb 2026 00:18:24 +0000
Files and hashes: 1: 3130332e3136362e33362e302f32332d3234203d3e203137393935.roa (hash: EATIBsyZSn7WKWmqFnQ9A4zCQGUX3rLtKm9XeWUjlEU=)
2: DA3283EBD45CCF7056D92A914183FB7825C66692.crl (hash: cQgrt2BMgyqSGvcJk9dFONAZ1v47iaVKht+dZfXfDCY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/DA3283EBD45CCF7056D92A914183FB7825C66692.crl
rsync://repo-rpki.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/DA3283EBD45CCF7056D92A914183FB7825C66692.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA3283EBD45CCF7056D92A914183FB7825C66692.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 00:18:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:77:8f:e9:ab:71:33:40:24:a8:24:ce:1d:45:5f:b8:40:23:d7:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA3283EBD45CCF7056D92A914183FB7825C66692
Validity
Not Before: Jan 31 16:16:24 2026 GMT
Not After : Feb 4 00:18:24 2026 GMT
Subject: CN=2BC822EB6DE9C712085E8BB2F66152EDEC24F35E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:40:98:77:d9:9b:df:67:6d:0a:c9:b9:9f:b5:
99:72:e6:d6:5f:d4:10:86:50:6f:73:7d:ff:aa:5e:
3c:8e:49:1e:78:4d:00:88:ae:c9:85:20:65:b3:f6:
97:2c:18:10:66:bf:bb:e4:4d:2a:df:7c:dd:81:15:
d6:2d:32:58:a7:53:1b:b1:f3:bd:72:28:3a:95:31:
26:8f:c9:a1:0a:94:f4:57:89:24:5d:7e:cf:ee:e2:
7f:70:31:6b:c8:ef:95:91:2a:a3:3f:25:a6:11:59:
48:6f:fd:64:51:f9:1c:2d:c9:45:29:8d:33:55:c5:
4c:71:41:ff:f9:90:a5:73:7d:44:c6:eb:40:34:73:
20:e0:08:ed:62:66:44:ea:92:d2:f4:6d:35:15:7d:
ef:29:24:7a:31:10:eb:6d:29:b8:e0:0a:98:04:81:
94:5e:30:ef:6f:0a:e0:94:6f:3a:c8:12:43:27:78:
22:d9:a8:56:96:90:58:68:9b:40:26:52:a0:fa:84:
46:00:f4:59:c8:a5:f3:77:bb:1c:ab:76:81:12:9a:
92:4c:5e:67:9c:7c:48:15:5b:a5:38:9d:66:3f:a7:
08:fd:bd:5b:a9:5e:d4:8f:0b:fc:03:08:0f:1b:6d:
e6:6d:11:df:e0:75:d5:0f:38:0c:af:66:d1:f4:6a:
0c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C8:22:EB:6D:E9:C7:12:08:5E:8B:B2:F6:61:52:ED:EC:24:F3:5E
X509v3 Authority Key Identifier:
keyid:DA:32:83:EB:D4:5C:CF:70:56:D9:2A:91:41:83:FB:78:25:C6:66:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/DA3283EBD45CCF7056D92A914183FB7825C66692.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA3283EBD45CCF7056D92A914183FB7825C66692.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/DA3283EBD45CCF7056D92A914183FB7825C66692.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:dd:67:85:2d:c0:07:fe:f7:15:3d:05:69:73:38:e2:8b:c9:
33:eb:12:bc:79:c8:9d:f8:48:03:1f:65:88:60:b9:73:cf:85:
92:a9:88:d3:51:e7:3b:d6:0b:11:c3:34:8c:b6:e0:0d:55:db:
b9:8a:92:ce:0f:34:83:f0:77:5f:65:06:26:11:e4:0f:11:7b:
89:f2:ef:d4:4d:e4:96:6d:bc:4d:d7:d4:7f:76:15:47:2e:d1:
44:cd:6b:86:a5:0c:89:80:f7:cc:36:9c:45:b1:78:ad:92:ec:
04:c9:ae:8b:ed:43:7f:b6:a3:ec:4e:af:cf:53:40:3b:e6:e1:
5f:ea:cb:69:aa:62:aa:59:f3:b8:26:e5:68:ec:c3:77:e5:8c:
e4:04:3c:5e:7d:c6:da:73:27:c8:da:a7:13:2e:3a:60:7c:ca:
47:bb:50:96:b7:5d:e9:68:d1:d8:ad:2e:fc:7a:2b:17:84:2d:
8b:65:53:c0:da:de:bc:24:b7:08:99:02:0f:49:8c:8b:4c:3c:
48:13:6d:32:11:e1:2c:25:03:61:24:50:95:c3:f1:d4:14:ef:
45:fd:64:4b:f0:83:d1:7c:65:c0:b2:1e:1d:fe:5e:d7:cd:40:
21:42:a5:55:07:9c:e7:d4:d5:4a:80:2d:1f:06:7e:cb:32:55:
68:dd:19:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:05:06 2026 by rpki-client