This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft
File: 8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft (raw, json)
Hash identifier: bmmjTlEf7abYtq0HcejV7mIZqebQq1kTO2dpehd3PbQ=
Subject key identifier: BA:16:18:E9:6B:C2:A6:34:39:0A:35:38:B7:CB:C9:5A:36:F4:E7:36
Authority key identifier: 8D:ED:AB:AD:21:AD:1A:6B:EF:27:E9:1F:CE:E3:04:65:56:3D:FE:72
Certificate issuer: /CN=8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72
Certificate serial: 6C23011B3D3B2C0AB08E56E3CCA199814A7E8DF4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft
Manifest number: 0545
Signing time: Sun 01 Feb 2026 19:22:19 +0000
Manifest this update: Sun 01 Feb 2026 19:17:19 +0000
Manifest next update: Wed 04 Feb 2026 21:38:19 +0000
Files and hashes: 1: 8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.crl (hash: lqrATZckIogBVe7uSmzdnEfkl5Z29S3Dn/bIjFygLao=)
2: 3132312e3130312e3132382e302f32312d3234203d3e20313331373036.roa (hash: LxNIC9GUMk4NDV//CAiwhidJ9aXKaAFBBW+ysgKoUy0=)
3: 323430323a653330303a3a2f33322d3438203d3e20313331373036.roa (hash: EV88jOIELhWBAVSmJqvptwA4m5UyL3dS/vav1cA94d8=)
4: 3130332e3234372e31322e302f32322d3234203d3e20313331373036.roa (hash: mWjb/DW+b3X3xyLO8KMUDwzQ73HydHkJibyBar99dKU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.crl
rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 21:38:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:23:01:1b:3d:3b:2c:0a:b0:8e:56:e3:cc:a1:99:81:4a:7e:8d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72
Validity
Not Before: Feb 1 19:17:19 2026 GMT
Not After : Feb 4 21:38:19 2026 GMT
Subject: CN=BA1618E96BC2A634390A3538B7CBC95A36F4E736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e0:92:d3:ed:26:8c:92:81:e2:88:78:5b:de:
3d:a5:bb:1e:48:37:4c:d9:b7:9b:2b:4d:a4:0d:73:
25:5e:13:20:75:b4:10:7f:42:39:d9:cf:af:8a:88:
4e:b5:98:06:e9:2c:30:d7:08:02:b7:1b:dc:9a:41:
72:b7:28:df:b9:3f:24:e5:7c:ec:c3:d6:7a:34:ea:
1a:eb:ca:7f:a6:03:93:8c:54:d7:ee:1e:f2:1f:59:
98:ca:8e:77:b0:8c:f2:20:7f:6f:fa:8e:ed:62:9d:
f0:60:aa:db:ae:5d:ed:38:d5:54:10:81:b7:00:4d:
6e:62:5e:0e:6e:94:6a:f0:3e:4d:b2:7c:3a:ef:c0:
a7:fe:e1:ee:8e:09:b0:7a:1a:5c:4c:ed:cf:5c:cb:
e8:04:65:c6:85:46:d4:a7:18:37:92:09:4c:a7:1c:
6d:d9:dd:f7:38:cf:b1:c8:5f:80:6d:3a:ec:42:4f:
81:ac:f3:92:29:a1:a6:17:91:b5:65:a6:13:71:b9:
a8:76:fb:14:ff:77:28:c6:51:24:f5:fe:aa:bd:a1:
03:b0:8d:f6:53:d3:cf:16:83:38:1c:13:01:5c:35:
7e:1e:97:cd:1d:df:e9:0e:2a:3f:09:93:83:7c:2f:
8b:ab:c3:d9:2f:9d:93:1a:99:45:8f:63:56:11:14:
11:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:16:18:E9:6B:C2:A6:34:39:0A:35:38:B7:CB:C9:5A:36:F4:E7:36
X509v3 Authority Key Identifier:
keyid:8D:ED:AB:AD:21:AD:1A:6B:EF:27:E9:1F:CE:E3:04:65:56:3D:FE:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:af:15:dc:4f:91:ee:09:d6:9c:fd:ce:59:23:08:21:e7:95:
57:95:66:a8:2e:51:99:9b:0a:dd:a2:f5:d4:15:c4:e0:a3:a0:
76:f5:60:ec:35:f4:f4:7a:ea:ef:1f:3c:c4:b4:ed:f7:6c:5d:
58:01:e9:3b:54:78:b8:16:10:39:2d:ba:b5:c6:91:63:92:41:
a5:57:7a:50:69:f1:fe:90:26:ef:ce:f8:d2:f5:8d:65:5d:ed:
0e:e6:2a:fc:12:2b:60:fc:47:13:db:4a:04:7e:49:33:7a:05:
fe:ba:c0:62:c1:56:6f:c8:12:d9:3c:f8:32:bb:1e:b3:84:0d:
9f:91:60:7e:15:40:7a:2a:4e:42:1e:c6:4b:9b:fc:b2:bb:c2:
4d:bb:04:90:c0:e3:96:6c:1b:6d:f3:22:9b:f9:66:f3:e0:91:
4b:7e:8b:04:ac:ca:b3:d3:11:c5:5c:db:78:af:29:73:98:fd:
81:cf:a0:b8:85:81:d3:25:29:7b:bb:5f:fa:80:01:ab:e2:11:
f9:5a:76:1d:9b:4f:e2:62:bc:ae:d3:ce:92:72:aa:0f:47:13:
e8:3d:58:76:b3:df:50:79:3a:84:5f:49:46:6e:ef:07:bf:02:
7f:0d:3e:4e:81:af:01:73:ba:9f:33:b9:8c:49:39:df:21:ca:
ab:55:73:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:02:17 2026 by rpki-client