This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft
File: 2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft (raw, json)
Hash identifier: TifdoIxO8NiVyZiRQ52k8uGVIDFc1BXror3wsW5g6tA=
Subject key identifier: 5E:A8:2D:54:27:DF:CA:EE:57:F4:93:88:3F:78:30:4E:B9:9D:28:5A
Authority key identifier: 2F:24:A2:04:48:06:30:1E:B7:FA:6C:E5:C8:52:1F:E0:39:41:B7:BA
Certificate issuer: /CN=2F24A2044806301EB7FA6CE5C8521FE03941B7BA
Certificate serial: 2FB5888F7CEF33B28B5A435DA8EAF995A3C4065E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft
Manifest number: 0149
Signing time: Mon 02 Feb 2026 00:31:27 +0000
Manifest this update: Mon 02 Feb 2026 00:26:27 +0000
Manifest next update: Thu 05 Feb 2026 04:04:27 +0000
Files and hashes: 1: 2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl (hash: R9Oud0qRP59Ez9AzJXe0ydQUYSIpoN6yGZtqVJ5kerg=)
2: 3130332e3138342e35372e302f32342d3234203d3e20313532333532.roa (hash: bpEdGaau57Ls0LX+FXCrBVL5qcwulWWQkMdNRaMhV9U=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl
rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 04:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:b5:88:8f:7c:ef:33:b2:8b:5a:43:5d:a8:ea:f9:95:a3:c4:06:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F24A2044806301EB7FA6CE5C8521FE03941B7BA
Validity
Not Before: Feb 2 00:26:27 2026 GMT
Not After : Feb 5 04:04:27 2026 GMT
Subject: CN=5EA82D5427DFCAEE57F493883F78304EB99D285A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:34:22:b9:04:02:dd:64:20:48:6e:d0:35:d5:
52:9f:10:a5:81:0c:8c:a6:bf:1e:fe:0b:2f:29:23:
fb:c0:ba:d8:94:ee:eb:10:7a:c1:30:50:1c:47:2d:
54:1b:e0:11:4c:75:7a:98:cb:ce:69:04:06:ee:ba:
4b:4c:82:29:f2:9e:f5:d0:02:13:89:a2:97:0e:a4:
74:4b:44:5e:e7:88:64:51:07:aa:1b:d9:dd:6b:de:
fa:54:83:75:3d:2a:8f:50:3c:af:42:fd:93:0f:f1:
32:1a:c6:90:ad:53:e8:84:cf:07:81:8d:15:b9:d9:
4c:30:59:2c:9c:f3:11:ac:98:33:81:52:dc:45:3c:
f4:cd:8b:9f:9c:49:65:33:61:5f:45:b8:41:ec:99:
a8:8c:69:98:67:fd:f7:d6:4f:2e:e0:78:92:d5:26:
ca:23:5a:b1:93:1a:4e:1f:28:af:81:15:25:aa:3d:
92:c4:66:31:bd:70:63:0b:ab:da:85:6b:41:26:71:
92:8c:4c:8d:d6:ba:56:1b:7b:88:a1:18:dd:54:c5:
da:ec:47:ae:0a:62:f6:21:38:89:dd:b0:36:6d:64:
b8:4b:dc:e5:c2:f1:29:ff:da:6c:ac:67:ca:e5:e8:
a1:ee:6e:58:2e:32:3e:02:30:6a:15:25:1e:6e:c3:
a9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A8:2D:54:27:DF:CA:EE:57:F4:93:88:3F:78:30:4E:B9:9D:28:5A
X509v3 Authority Key Identifier:
keyid:2F:24:A2:04:48:06:30:1E:B7:FA:6C:E5:C8:52:1F:E0:39:41:B7:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b7:31:0c:78:ef:f7:13:d3:01:91:fc:bc:e2:9b:58:6a:96:
2c:b7:bc:92:f4:10:a1:c6:99:5f:82:ae:8a:89:d3:6b:68:06:
60:2c:fb:03:3e:e0:b9:21:87:f1:0a:fd:f2:d3:76:22:1c:b6:
0c:17:e5:55:ba:3c:75:f3:05:d4:7c:70:23:2d:a3:a5:3e:6c:
7c:90:11:9c:3a:f5:d8:fa:c1:8e:f2:dd:8e:35:d3:68:3d:3c:
4a:9b:ec:0f:b2:b9:cc:52:59:87:5b:d2:46:d8:39:47:a8:16:
79:3b:1b:1b:28:f4:ee:25:6d:b8:50:86:03:61:14:b8:11:13:
57:58:0e:51:6a:d7:4b:28:7a:69:58:52:67:ef:ee:5e:59:cd:
da:97:08:36:4b:58:33:1d:35:b7:aa:bc:f2:f3:05:8a:03:bf:
b9:1d:8a:07:9b:98:2d:49:8d:64:94:f3:f8:d1:cc:a3:e1:ec:
a4:5e:2d:4b:0e:52:d4:3c:e0:5b:81:d6:64:67:16:f5:67:35:
08:57:f9:6c:6b:d2:81:f3:60:3a:3d:8f:37:e8:2a:37:05:73:
b5:6e:7d:1d:65:82:0e:4c:aa:0d:83:50:cd:93:a2:e8:0a:32:
f5:34:de:c7:59:ad:cc:04:e3:63:e1:7e:b7:3d:a5:3e:1d:02:
00:ce:34:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:05:30 2026 by rpki-client