This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.mft
File: 26AE16DF2BF0FD5184FEC655250D244739FA9FC4.mft (raw, json)
Hash identifier: rmPOiB5jIa9ERVmzGQYyUg4i+8TZ9puEBEhJRMaZ2vk=
Subject key identifier: C7:1B:5C:D5:40:E2:1C:72:AD:54:5F:B3:E2:D9:96:61:49:1E:A0:21
Authority key identifier: 26:AE:16:DF:2B:F0:FD:51:84:FE:C6:55:25:0D:24:47:39:FA:9F:C4
Certificate issuer: /CN=26AE16DF2BF0FD5184FEC655250D244739FA9FC4
Certificate serial: 253B588E1664B71492279A7E8D1123E2217A9122
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.mft
Manifest number: 033D
Signing time: Mon 01 Dec 2025 05:30:51 +0000
Manifest this update: Mon 01 Dec 2025 05:25:51 +0000
Manifest next update: Thu 04 Dec 2025 17:12:51 +0000
Files and hashes: 1: 26AE16DF2BF0FD5184FEC655250D244739FA9FC4.crl (hash: HpZH37BZt45twD19xyC/alRpb2TbGXQmNUGeo4+cYA4=)
2: 3130332e3137332e3133332e302f32342d3234203d3e20313437303834.roa (hash: RhPETTtt6gaQ4OMJ7F1vFmkR8a1hA84ISSi5ZYyEB1o=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.crl
rsync://repo-rpki.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Dec 2025 17:12:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:3b:58:8e:16:64:b7:14:92:27:9a:7e:8d:11:23:e2:21:7a:91:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26AE16DF2BF0FD5184FEC655250D244739FA9FC4
Validity
Not Before: Dec 1 05:25:51 2025 GMT
Not After : Dec 4 17:12:51 2025 GMT
Subject: CN=C71B5CD540E21C72AD545FB3E2D99661491EA021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:86:9b:11:87:cb:e2:db:e3:8e:74:0d:47:98:
1d:de:d6:96:d0:6e:e8:20:83:4f:94:94:eb:a5:11:
98:af:0e:83:ac:0c:b6:b6:92:df:38:7e:43:31:d9:
3d:13:d8:6c:93:c4:58:5a:25:ea:87:2e:d5:8d:b2:
e0:5c:63:f6:53:a8:a9:16:8c:0e:b3:f5:32:10:d1:
d3:e4:90:27:b2:84:4b:fe:25:59:c8:1a:7a:d2:88:
5c:a6:cc:d0:0b:6b:f3:a4:e4:a3:53:0a:fe:cb:1b:
8f:4d:32:b9:51:f3:bd:f3:12:34:5b:f0:b4:a3:e7:
4a:5b:c8:98:d3:1a:16:87:2d:9c:dd:e5:32:c7:8b:
d2:e8:1c:93:b8:e2:f5:af:50:4e:e9:6c:3c:cc:d0:
17:c2:57:f3:89:df:98:7d:c4:78:ad:34:06:09:a9:
6f:15:fe:0a:01:00:ee:ba:d6:98:e9:71:ba:f1:19:
67:be:cc:be:22:90:a6:f9:28:33:92:a7:07:35:74:
3e:fa:cb:f3:51:58:db:ea:15:47:cd:2e:73:58:98:
b8:bc:38:e9:3e:18:67:e4:23:fd:29:08:20:4d:f2:
be:bb:b3:15:ca:80:58:bf:6c:d5:a6:d4:97:56:bc:
c3:a1:46:2a:1d:4b:3a:72:10:74:80:0a:a6:27:e2:
bd:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1B:5C:D5:40:E2:1C:72:AD:54:5F:B3:E2:D9:96:61:49:1E:A0:21
X509v3 Authority Key Identifier:
keyid:26:AE:16:DF:2B:F0:FD:51:84:FE:C6:55:25:0D:24:47:39:FA:9F:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:31:19:f8:ba:a8:21:4c:aa:b1:19:e3:d8:70:76:50:37:67:
3d:8b:9c:22:20:48:45:14:b5:3f:c8:20:fc:7a:8f:54:ef:8f:
8f:8b:88:a1:12:9f:7d:0e:8c:44:68:5c:a6:e4:1f:69:da:be:
92:cb:08:39:e9:45:52:fb:69:dc:93:80:a1:cc:3d:2f:5c:36:
e0:77:45:14:6f:c7:0e:b6:f0:73:d0:30:05:0e:30:d3:9b:52:
73:4d:d7:3b:99:dd:55:5a:9d:04:d6:83:53:55:3d:71:d4:32:
2a:a6:7e:88:ee:a1:73:49:a5:de:cc:62:1f:99:e0:4e:66:bc:
ae:dc:06:39:33:19:04:94:d7:c7:c1:89:22:b7:7b:0e:81:ce:
7d:e0:18:4d:7f:f7:ef:84:bd:90:da:aa:2a:f4:37:e9:7a:6f:
8b:84:07:25:7e:09:fa:59:a7:be:3d:9c:e1:78:3c:a7:9b:1f:
1f:02:2b:10:41:ca:94:dd:0c:ca:96:4b:b3:7e:ad:99:85:ab:
ba:bb:d3:0f:e7:d2:50:c1:1f:a7:89:1b:d1:b0:b9:f8:8a:9d:
56:b8:a4:17:5a:16:d1:03:bc:6d:8e:98:d9:8a:ad:fe:05:5f:
28:b8:01:97:9e:9b:fb:c3:3a:25:fc:e9:ff:89:f7:7f:35:1d:
fa:19:7a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:45:43 2025 by rpki-client