This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.mft
File: DE4325727D17555F6DABCC72788E361C741D47CF.mft (raw, json)
Hash identifier: z712fPdVEwhdn+aK9szSdUCO8ITo6/Mmh4fZnuUVDUU=
Subject key identifier: B4:3D:69:48:7B:73:4C:F6:17:BE:EB:A5:19:9D:44:46:94:80:A8:85
Authority key identifier: DE:43:25:72:7D:17:55:5F:6D:AB:CC:72:78:8E:36:1C:74:1D:47:CF
Certificate issuer: /CN=DE4325727D17555F6DABCC72788E361C741D47CF
Certificate serial: 4FE4AC5E3DB2D55A7BE6778FCFB1294FBC358F07
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.mft
Manifest number: 0206
Signing time: Sun 01 Feb 2026 16:30:03 +0000
Manifest this update: Sun 01 Feb 2026 16:25:03 +0000
Manifest next update: Thu 05 Feb 2026 00:30:03 +0000
Files and hashes: 1: DE4325727D17555F6DABCC72788E361C741D47CF.crl (hash: IBmkYsfOygIXQLbnp3uBGrO/g00QZVu1OuMvTZX31a4=)
2: 3130332e3135352e32342e302f32332d3233203d3e20313431303734.roa (hash: 6aU9uz5CHHldU1HIevUJsAf5erVKI657uWFvNEr+ic0=)
3: 3130332e3135352e32342e302f32342d3234203d3e20313431303734.roa (hash: frVX3KU+95dnNdoEu8zY99nlhl5o8DK8rzkyAoketnM=)
4: 323430363a363263303a3a2f33322d3332203d3e20313431303734.roa (hash: 2Lk6auTAFU1KMFXNa9pRSBxyYyKqC713tFzsVGAw9EU=)
5: 3130332e3135352e32352e302f32342d3234203d3e20313431303734.roa (hash: G51YluNBJVnWJJLUM3oLTxL1SDaPjGOTZwYfGpp2BCE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.crl
rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 00:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:e4:ac:5e:3d:b2:d5:5a:7b:e6:77:8f:cf:b1:29:4f:bc:35:8f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE4325727D17555F6DABCC72788E361C741D47CF
Validity
Not Before: Feb 1 16:25:03 2026 GMT
Not After : Feb 5 00:30:03 2026 GMT
Subject: CN=B43D69487B734CF617BEEBA5199D44469480A885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d0:5c:7a:9f:ac:10:2e:18:0d:52:66:40:db:
b1:c4:0f:69:ce:89:ac:a0:74:c9:1d:25:5b:b3:a8:
59:de:ad:73:67:a1:db:6e:d4:2b:a0:4d:29:3b:52:
c6:31:29:a7:f1:7c:91:20:dc:f7:27:18:2f:a3:5c:
c1:7b:17:24:18:b0:d2:b8:61:c2:25:c2:0f:08:ce:
06:ea:73:45:94:28:24:9f:45:8a:28:7a:ad:98:d5:
28:8a:39:53:77:40:d4:28:16:db:6b:c1:15:27:b3:
c4:0b:a7:72:93:36:1b:70:b7:7d:84:1b:b4:04:f4:
14:2e:d2:dd:9f:b7:d8:78:62:55:9a:d4:b0:01:2c:
77:f2:34:0d:ea:e7:ee:8c:2e:36:b7:e6:e1:18:96:
1c:02:0a:81:a0:24:fe:b8:05:56:40:79:b5:51:7f:
12:17:b7:0f:84:ba:43:cf:25:0f:a8:fd:3d:de:47:
f8:b3:72:da:20:5f:65:9e:1a:87:3a:2c:56:cf:ea:
19:e8:7c:d4:c4:a7:69:eb:67:8f:2c:29:41:63:2b:
24:5a:d0:22:0d:32:0f:83:bb:c8:43:eb:46:df:5a:
d7:2a:26:43:2a:87:04:84:e1:44:74:57:24:3b:c9:
e4:99:0d:34:69:7f:e1:1e:b2:52:7e:3e:27:e0:8b:
36:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:3D:69:48:7B:73:4C:F6:17:BE:EB:A5:19:9D:44:46:94:80:A8:85
X509v3 Authority Key Identifier:
keyid:DE:43:25:72:7D:17:55:5F:6D:AB:CC:72:78:8E:36:1C:74:1D:47:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:e5:63:6a:99:7a:1d:d9:af:ac:90:12:7b:73:fa:8a:f2:fe:
f5:54:40:00:17:1a:e1:49:fd:85:04:a6:4f:d4:a1:8f:ad:a4:
4c:96:71:15:73:e8:59:6a:da:53:9f:8e:26:16:1c:34:11:52:
20:31:5a:d5:6d:05:c7:5f:db:1a:1a:7d:a7:50:8d:30:5b:47:
eb:32:a2:04:75:5c:84:14:11:1d:b9:ac:20:29:e6:52:41:ff:
8a:7b:71:6f:f8:cd:9e:0a:25:fd:be:36:13:3b:2f:06:55:7d:
90:70:50:a2:7e:9b:f3:d9:8f:fa:f4:a9:d9:ed:85:4b:fe:bf:
c3:e1:15:28:af:60:9e:7d:43:8c:f1:41:e1:95:ba:37:17:02:
96:ad:1b:78:c6:49:db:9a:21:19:61:a7:b0:04:a3:2e:ab:ba:
3e:b4:0f:93:9d:07:a2:5f:e0:ff:97:b8:7e:87:23:1b:8c:ad:
6f:0b:4c:84:a3:b7:10:d6:13:2d:2f:48:fb:58:18:c3:1e:3e:
b8:5d:2b:02:c4:06:87:f3:ec:17:e7:a8:98:42:db:c2:8a:8a:
6c:37:2b:c2:a2:8e:de:16:80:66:8c:11:90:20:9d:72:9a:2d:
26:74:40:30:d4:3d:71:75:a9:b4:7f:63:75:0e:4c:d7:5f:4c:
87:52:dd:e6
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUT+SsXj2y1Vp75nePz7EpT7w1jwcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREU0MzI1NzI3RDE3NTU1RjZEQUJDQzcyNzg4RTM2MUM3
NDFENDdDRjAeFw0yNjAyMDExNjI1MDNaFw0yNjAyMDUwMDMwMDNaMDMxMTAvBgNV
BAMTKEI0M0Q2OTQ4N0I3MzRDRjYxN0JFRUJBNTE5OUQ0NDQ2OTQ4MEE4ODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM0Fx6n6wQLhgNUmZA27HED2nO
iaygdMkdJVuzqFnerXNnodtu1CugTSk7UsYxKafxfJEg3PcnGC+jXMF7FyQYsNK4
YcIlwg8Izgbqc0WUKCSfRYooeq2Y1SiKOVN3QNQoFttrwRUns8QLp3KTNhtwt32E
G7QE9BQu0t2ft9h4YlWa1LABLHfyNA3q5+6MLja35uEYlhwCCoGgJP64BVZAebVR
fxIXtw+EukPPJQ+o/T3eR/izctogX2WeGoc6LFbP6hnofNTEp2nrZ48sKUFjKyRa
0CINMg+Du8hD60bfWtcqJkMqhwSE4UR0VyQ7yeSZDTRpf+EeslJ+PifgizZVAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUtD1pSHtzTPYXvuulGZ1ERpSAqIUwHwYDVR0j
BBgwFoAU3kMlcn0XVV9tq8xyeI42HHQdR88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
MDc2MDhjZS1jM2Y4LTQ0ZWItYWVlNy1iNzg0YWUyMGM5YzcvMC9ERTQzMjU3MjdE
MTc1NTVGNkRBQkNDNzI3ODhFMzYxQzc0MUQ0N0NGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvREU0MzI1NzI3RDE3NTU1RjZEQUJDQzcyNzg4RTM2MUM3NDFE
NDdDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTA3NjA4Y2UtYzNmOC00NGViLWFl
ZTctYjc4NGFlMjBjOWM3LzAvREU0MzI1NzI3RDE3NTU1RjZEQUJDQzcyNzg4RTM2
MUM3NDFENDdDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJXlY2qZeh3Zr6yQEntz+ory/vVUQAAXGuFJ
/YUEpk/UoY+tpEyWcRVz6Flq2lOfjiYWHDQRUiAxWtVtBcdf2xoafadQjTBbR+sy
ogR1XIQUER25rCAp5lJB/4p7cW/4zZ4KJf2+NhM7LwZVfZBwUKJ+m/PZj/r0qdnt
hUv+v8PhFSivYJ59Q4zxQeGVujcXApatG3jGSduaIRlhp7AEoy6ruj60D5OdB6Jf
4P+XuH6HIxuMrW8LTISjtxDWEy0vSPtYGMMePrhdKwLEBofz7BfnqJhC28KKimw3
K8Kijt4WgGaMEZAgnXKaLSZ0QDDUPXF1qbR/Y3UOTNdfTIdS3eY=
-----END CERTIFICATE-----
Generated at Mon Feb 2 10:06:09 2026 by rpki-client