This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft
File: 86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft (raw, json)
Hash identifier: Ks1YJaJqUvEF8M5Kg2Yy5uwc5N6TbV2kjWBOlKuIXs0=
Subject key identifier: 16:11:93:41:AE:D6:8B:F5:75:18:0E:58:A7:61:6A:BB:13:90:0C:66
Authority key identifier: 86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58
Certificate issuer: /CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58
Certificate serial: 182B0FCD1E288F9D016069ABEED11D6A945DE030
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft
Manifest number: 01E8
Signing time: Mon 02 Feb 2026 01:20:50 +0000
Manifest this update: Mon 02 Feb 2026 01:15:50 +0000
Manifest next update: Thu 05 Feb 2026 06:29:50 +0000
Files and hashes: 1: 3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa (hash: p8Wpmus070CsJXDUA1KtLJSmqgm7fEGDDNW/LuX/AC4=)
2: 86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl (hash: /uwvpHidZ9EPZOUHg8kEqTiac0LVFO+7LGNk/BbGQdg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl
rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 06:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:2b:0f:cd:1e:28:8f:9d:01:60:69:ab:ee:d1:1d:6a:94:5d:e0:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58
Validity
Not Before: Feb 2 01:15:50 2026 GMT
Not After : Feb 5 06:29:50 2026 GMT
Subject: CN=16119341AED68BF575180E58A7616ABB13900C66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:77:3c:71:71:4b:f5:eb:7a:99:88:91:60:d9:
26:06:9a:f4:32:6a:57:e4:03:89:17:a1:ae:1f:39:
b6:1c:b0:08:86:0e:46:74:f4:8b:e2:25:92:2b:c4:
f0:b6:a4:63:6a:d5:a1:20:b6:11:1f:61:66:9c:22:
8d:96:23:4c:3c:73:2f:ff:df:e1:0f:03:f7:c3:41:
76:24:5e:3a:bc:8e:0a:04:67:86:9c:4e:33:64:e3:
7b:7e:a9:21:07:98:0f:f5:4b:b9:86:81:33:da:15:
74:08:c2:99:af:ae:24:fd:62:90:c0:65:cf:29:c8:
ad:0c:c0:7d:66:24:02:71:a3:40:2a:ce:ae:f4:70:
fc:08:be:05:a7:11:27:8e:18:b3:b2:a9:d5:3c:95:
d5:62:b7:73:a2:bf:74:5d:8e:cf:94:91:83:a1:15:
51:e7:d3:06:d3:8f:46:cc:eb:c7:1f:26:2b:57:42:
d5:be:44:51:d4:20:ca:53:87:22:c3:c9:41:64:fc:
60:3e:4a:d4:42:02:da:d5:1b:45:b8:ff:27:9a:53:
a0:21:d2:9d:98:0f:6b:ff:85:f5:5e:5c:6f:0e:1e:
09:aa:5f:dc:9a:95:af:b9:f5:51:75:9d:36:07:a0:
ec:0b:c0:5d:75:17:c3:17:14:bc:78:e8:7f:09:56:
0a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:11:93:41:AE:D6:8B:F5:75:18:0E:58:A7:61:6A:BB:13:90:0C:66
X509v3 Authority Key Identifier:
keyid:86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:52:68:38:d0:30:a5:fb:c2:35:0b:5b:85:1c:e6:43:8f:57:
bc:6c:c1:c3:79:3c:7a:b3:d1:b0:6a:cf:69:83:01:a6:f2:bd:
89:e9:2d:f9:31:b1:79:06:07:8d:9a:36:6b:a3:e8:4b:58:84:
cf:d5:f7:05:b2:61:10:c9:24:17:50:22:19:2e:61:28:69:38:
eb:b5:c5:d6:1e:27:25:14:93:ef:63:7b:27:f7:cb:31:c9:fd:
bc:6c:9a:7d:c0:8f:12:3e:0e:d2:7e:99:86:d1:14:74:ac:0c:
64:71:f6:cc:5f:88:c3:ed:95:c2:c3:9e:7c:40:5a:1a:57:23:
9c:89:1c:3f:fe:42:c9:01:55:a0:26:7a:2f:a9:ee:c6:dd:a8:
94:3a:16:a3:88:60:66:1b:c5:2b:dd:8c:d1:b2:62:d4:b2:bd:
a3:1a:ce:0d:49:e3:cf:6b:cb:28:1c:d7:2b:66:75:5f:f6:56:
70:ce:93:49:ad:e7:f3:ec:f7:7f:c0:c5:0d:2e:42:be:61:bf:
8b:74:c3:fd:dc:b3:6a:81:a8:d2:f8:21:39:98:19:d6:48:f8:
d9:b5:89:57:02:d1:60:4d:6e:a5:de:59:4e:28:94:be:b0:e8:
75:7e:35:8b:b9:1b:9b:20:c6:35:b9:a6:74:b3:7d:04:2e:d6:
49:d2:d6:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 17:23:44 2026 by rpki-client