This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft
File: 581E644EEC44F9523CF189893E102BCC6008F9BE.mft (raw, json)
Hash identifier: Li50gE/VUlocIbwkE9tYbgxPvkyCITZiC9GPiQHyplU=
Subject key identifier: 7B:0A:5A:D4:67:81:4C:01:EF:FA:DA:3B:26:37:8E:73:41:12:1F:89
Authority key identifier: 58:1E:64:4E:EC:44:F9:52:3C:F1:89:89:3E:10:2B:CC:60:08:F9:BE
Certificate issuer: /CN=581E644EEC44F9523CF189893E102BCC6008F9BE
Certificate serial: 5B72AC9AE8D82C935B9D1BD50677D66BC4443DD6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/581E644EEC44F9523CF189893E102BCC6008F9BE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft
Manifest number: 0211
Signing time: Mon 02 Feb 2026 04:20:01 +0000
Manifest this update: Mon 02 Feb 2026 04:15:01 +0000
Manifest next update: Thu 05 Feb 2026 05:23:01 +0000
Files and hashes: 1: 581E644EEC44F9523CF189893E102BCC6008F9BE.crl (hash: utvks5xOIfmkzqWb85WZRhBT/1Mr+Nei4EN1j0dAVK4=)
2: 3130332e3138392e3132302e302f32332d3234203d3e20313338383836.roa (hash: BD1xmKcIfvv53+qbSsqU41j3RH48RKcR2IUwYcDCVHU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.crl
rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/581E644EEC44F9523CF189893E102BCC6008F9BE.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:23:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:72:ac:9a:e8:d8:2c:93:5b:9d:1b:d5:06:77:d6:6b:c4:44:3d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=581E644EEC44F9523CF189893E102BCC6008F9BE
Validity
Not Before: Feb 2 04:15:01 2026 GMT
Not After : Feb 5 05:23:01 2026 GMT
Subject: CN=7B0A5AD467814C01EFFADA3B26378E7341121F89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e3:a2:03:6c:0c:4d:23:4a:10:58:03:83:ef:
4a:51:32:c7:e1:19:8b:ad:b3:16:45:94:5d:e6:5b:
00:4e:f9:cf:09:fc:37:77:89:77:4e:22:d4:e2:e1:
0b:8c:fa:bf:be:3c:4a:1d:5d:6c:1a:9a:7d:b4:eb:
eb:a5:d1:f4:2b:45:83:07:15:6b:20:e8:c7:12:c0:
ae:db:73:00:8e:c7:a6:7d:73:dd:d3:41:fd:7c:37:
40:38:00:61:81:3d:d4:89:95:46:8f:3d:47:01:c9:
d0:7e:56:9b:6b:a3:ac:63:9c:1a:d7:aa:f1:c1:5a:
48:75:9e:79:3b:6f:8c:7c:be:60:73:72:40:20:88:
f9:3a:1a:03:da:55:16:a8:bb:9c:5e:50:64:f9:44:
a9:68:e1:6e:08:eb:f7:b3:8b:27:7b:e9:9a:84:8a:
28:61:66:36:4b:7b:f0:8b:c2:25:45:be:49:44:4d:
5c:e5:45:63:92:be:95:a7:ac:8e:0e:82:62:f6:cb:
3b:6a:69:13:d5:85:23:cf:9d:f9:67:9b:0a:7b:3c:
9a:e0:5f:5a:97:ab:a8:63:e9:27:4b:37:fe:4d:96:
cb:f9:d5:56:1c:b5:af:df:9c:67:a4:5c:86:10:c9:
f4:c8:0b:24:bc:81:ef:9f:27:b2:ab:37:98:f3:cf:
7c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0A:5A:D4:67:81:4C:01:EF:FA:DA:3B:26:37:8E:73:41:12:1F:89
X509v3 Authority Key Identifier:
keyid:58:1E:64:4E:EC:44:F9:52:3C:F1:89:89:3E:10:2B:CC:60:08:F9:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/581E644EEC44F9523CF189893E102BCC6008F9BE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ad:77:67:30:ac:ea:53:32:fc:e5:79:d1:7e:d4:02:09:2b:
91:08:6c:0f:0d:15:f8:d3:28:89:d8:4e:b8:84:37:fb:7c:8a:
8e:c5:3b:81:ab:37:0c:0c:96:03:c0:c2:f9:63:be:40:31:6c:
a1:56:75:85:17:cb:95:df:39:7c:aa:98:aa:f0:d9:ed:a5:1e:
23:f1:cb:3b:a5:4b:05:d3:67:6a:64:27:59:0e:7c:8e:ea:34:
8f:3b:51:fe:22:29:47:47:b4:72:0d:0d:03:d5:38:f9:fb:fb:
98:aa:0b:26:bf:4a:86:1d:db:85:42:68:1b:7f:e9:13:d0:38:
13:a5:4f:3d:aa:a0:87:22:85:65:0d:91:de:6b:1c:2a:be:27:
b9:4f:96:97:1e:16:33:d5:5e:e2:52:c6:7e:60:ce:89:0a:da:
09:cb:74:3a:85:dc:2e:a8:42:0e:85:ae:05:c1:24:a6:1f:92:
44:1c:84:01:93:f5:97:ff:c3:23:fc:ea:3d:3d:d1:ff:97:2c:
4c:d7:73:2c:0f:6d:9e:61:16:d9:ad:02:f0:98:33:2a:37:2b:
54:8a:b1:7a:cc:d0:dd:24:c2:e3:de:dd:e2:9d:1d:ea:2d:e6:
c1:2e:25:98:ca:3f:fe:58:b5:6a:95:11:98:2c:ef:fd:c4:62:
80:ee:c1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 14:29:14 2026 by rpki-client