This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
File: 8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft (raw, json)
Hash identifier: 4FZPI+3omryhzAP6+eRCSgsKSUbZX3DK/9nNsx2Hq8w=
Subject key identifier: D0:D2:03:BD:C8:0D:0D:1F:E0:BF:1C:9A:58:69:BD:AD:22:4F:AC:28
Authority key identifier: 8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F
Certificate issuer: /CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F
Certificate serial: 53B7AE3C3CC76A8FD79BAF00C70B0360999A40BE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
Manifest number: 055D
Signing time: Sun 01 Feb 2026 04:01:50 +0000
Manifest this update: Sun 01 Feb 2026 03:56:50 +0000
Manifest next update: Wed 04 Feb 2026 05:41:50 +0000
Files and hashes: 1: 3231302e3234372e3235302e302f32342d3234203d3e20313331373435.roa (hash: UaBtRg3Pe7eF6qAh+L1uU3ib10+G/2GiDGDbWzNrJJQ=)
2: 3231302e3234372e3234372e302f32342d3234203d3e20313331373435.roa (hash: exFF47IhXFNrUrw6HPUoTvZWZdOLZc/bApdp77HMNNg=)
3: 3231302e3234372e3234352e302f32342d3234203d3e20313331373435.roa (hash: kHHBOgtxtA2O4NSmNMgW2PeMrc26bvv8HtnzwONr0bg=)
4: 3231302e3234372e3235322e302f32342d3234203d3e20313331373435.roa (hash: 0G3umGSNIafLUyMMJjc+XpTQjFcLRIMU7BoomAPsjew=)
5: 3231302e3234372e3234382e302f32342d3234203d3e20313331373435.roa (hash: fEAII0Y1Y5OrJRrreDOapy9Xzh9eNqz/FB7+aD7tXRA=)
6: 3231302e3234372e3234342e302f32342d3234203d3e20313331373435.roa (hash: dBLrElsxS7m32RqtK+bS83Eb5ZTI1r6yldhEY0SWU34=)
7: 323430363a376530303a35393a3a2f34382d3438203d3e20313430343035.roa (hash: gnvURXZkhn/FEj22B4ytqTMsZk8ZLC9E8Tq6VbTdHlg=)
8: 3231302e3234372e3234332e302f32342d3234203d3e20313331373435.roa (hash: lzhEeQ6DAkKFZoSDXb/ij7h8jtExSjFLGzcvwIopMPE=)
9: 3231302e3234372e3235342e302f32342d3234203d3e20313331373435.roa (hash: 8bH62zhwf0kgF3amh047ZVAlbr2i3orRPBn9qkRCMJk=)
10: 8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl (hash: c4MhDdyk3zkXdEyCkuVgPXL8+sg8pK3u0Ik4IIzfCG8=)
11: 3231302e3234372e3234302e302f32342d3234203d3e20313331373435.roa (hash: 6Xt6BmWqNlJ2rgGnrh/8HdtB+svaXm043WhGiQr8wxY=)
12: 3231302e3234372e3234312e302f32342d3234203d3e20313430343035.roa (hash: M3nv0mC0g0dVK72c2OJ01BOoKTGk3r0NAIb60MF1lcw=)
13: 3231302e3234372e3234362e302f32342d3234203d3e20313331373435.roa (hash: FN3CKjxRonayrnINYbudYXLP7jZ9/YnqEvFYbd9U1hM=)
14: 3231302e3234372e3235312e302f32342d3234203d3e20313331373435.roa (hash: P6u7QjpJVBQpJpJ2dL4GKUXqC1XLtlIwog/7NL3QJe0=)
15: 3231302e3234372e3234322e302f32342d3234203d3e20313331373435.roa (hash: D991UEHbv0mT0xjDcSLCu5iaTm6ib67YwDcjKkL5vPw=)
16: 3231302e3234372e3235332e302f32342d3234203d3e20313331373435.roa (hash: SDQ6xpzFoeg0lTwEJkVJ2YC5ntC/O8NvcqwJeEYUXmo=)
17: 3231302e3234372e3235352e302f32342d3234203d3e20313331373435.roa (hash: RS4Z5hPliFofbuZy6siMGSvvq53kTGe3aDopkAMtX7s=)
18: 3231302e3234372e3234392e302f32342d3234203d3e20313331373435.roa (hash: 4G4aZfFUqaHECTTNNiBKb2BiuB7CRoLOY6G0O5P5Xsk=)
19: 34392e3132382e3138342e302f32322d3234203d3e20313331373435.roa (hash: b1YIXb394hbQaEvgUpDDWq1EiTyAhc+KvTRls7LdNdE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl
rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 05:41:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:b7:ae:3c:3c:c7:6a:8f:d7:9b:af:00:c7:0b:03:60:99:9a:40:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F
Validity
Not Before: Feb 1 03:56:50 2026 GMT
Not After : Feb 4 05:41:50 2026 GMT
Subject: CN=D0D203BDC80D0D1FE0BF1C9A5869BDAD224FAC28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:50:95:d7:43:59:b4:84:60:f5:24:28:71:63:
9d:29:ab:23:b8:f5:6a:5e:02:bb:d3:ed:f8:4c:78:
b7:26:85:2d:55:43:03:b4:d9:35:0c:9a:7f:92:36:
71:52:d3:be:30:ee:94:ce:aa:7e:f3:2d:9d:08:7b:
0e:af:dd:70:71:48:8c:58:c0:62:ca:bd:0c:9a:43:
32:a2:ef:90:ab:d5:94:8e:24:85:02:f8:f5:27:bb:
62:56:a6:a5:fd:7b:13:06:36:73:6d:3a:86:1e:32:
a0:1e:d9:b8:95:2f:9f:a8:67:dc:10:5c:3e:98:7c:
9f:af:b1:23:7d:eb:b2:7d:6f:88:39:7d:72:04:80:
17:71:28:ac:c1:ad:7e:8f:48:52:54:fe:c0:b0:ca:
4b:98:53:51:b2:62:9e:d3:16:a0:0d:7a:19:a3:12:
bc:cc:28:4b:76:ad:f3:62:f1:1c:6b:26:37:5e:04:
68:53:95:9b:44:7c:c3:6b:dc:bb:3b:1d:d1:2c:72:
4a:ba:fd:dc:d1:ed:5a:ca:b1:61:8e:df:87:83:44:
3f:e5:a9:8e:21:d4:e8:1d:30:11:4b:b0:17:14:6b:
85:7d:80:c3:41:8d:83:ab:6e:98:22:ea:bd:0a:46:
f5:e2:63:5b:68:72:16:9a:39:39:77:96:78:f3:21:
0c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D2:03:BD:C8:0D:0D:1F:E0:BF:1C:9A:58:69:BD:AD:22:4F:AC:28
X509v3 Authority Key Identifier:
keyid:8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:2f:d0:7e:17:ad:14:de:c0:f4:ca:f5:8b:33:84:d4:f5:c7:
0f:23:ac:a3:df:c9:3c:ed:a2:1d:c0:5e:6c:2b:ce:86:1f:dc:
4d:8b:1f:07:ef:60:7e:00:8d:0d:1a:90:88:a8:99:ac:8f:e8:
52:75:5b:2e:2f:14:a6:97:c1:8c:68:69:95:95:27:e0:d0:53:
c4:b0:29:11:b2:bc:63:ef:f5:66:ae:a0:57:ff:21:ac:b7:87:
4f:26:fc:34:9d:71:03:65:ce:02:57:69:da:17:82:2e:d5:ec:
c7:c0:50:1b:26:a7:1a:af:7c:ee:f7:24:6a:73:c9:b3:c7:36:
41:c1:71:e1:76:2e:01:04:a2:ce:79:23:00:19:c8:cc:3e:27:
ad:67:06:09:af:d4:5d:93:ea:69:2e:43:67:d8:c1:8a:2e:eb:
3c:9c:28:7a:0c:c0:65:88:4f:35:1e:d7:0c:c7:8b:e0:d5:b4:
39:0c:60:70:ea:57:2e:b6:f8:30:a2:48:81:6d:71:71:62:34:
63:09:3d:14:be:48:da:8d:66:44:8b:88:33:4f:2a:b1:63:ba:
3b:2d:09:60:86:75:ce:a3:3e:01:0a:55:90:88:9a:97:26:8e:
87:50:40:d8:51:f8:e5:95:ec:d4:ce:72:cf:c2:22:ee:23:a7:
cb:49:b0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:45:06 2026 by rpki-client