This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft
File: 1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft (raw, json)
Hash identifier: s6Bfl83WgCc4mYwBEMz6G30kS5Ny0urC4kFSw9DB+RE=
Subject key identifier: F4:61:2B:52:DB:F2:4A:10:31:90:EE:C3:7A:20:C9:24:BE:77:2F:FE
Authority key identifier: 1F:D7:CE:EC:69:DE:A7:83:83:83:31:7F:FB:0D:4A:10:7A:F4:57:2A
Certificate issuer: /CN=1FD7CEEC69DEA7838383317FFB0D4A107AF4572A
Certificate serial: 17AF41EB04DA254A684371E6F5193701EF97660D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft
Manifest number: 04B8
Signing time: Mon 02 Feb 2026 03:32:22 +0000
Manifest this update: Mon 02 Feb 2026 03:27:22 +0000
Manifest next update: Thu 05 Feb 2026 13:14:22 +0000
Files and hashes: 1: 1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl (hash: sq5bIs9T2uzbiJRB2yNJmriI30qZ0ZHhQOo4fX83zx0=)
2: 3230322e392e36392e302f32342d3234203d3e203436303437.roa (hash: 52WZwGRv+Wo5hswd/uRmdKS5RbkBGKSp3qw8Zcv5xAA=)
3: 3130332e3232352e3137302e302f32342d3234203d3e203436303437.roa (hash: Puzw6btCdPQ2KOCDFFaL2opEFaU1YVpimShuXfVUo3Y=)
4: 323430353a316463303a3a2f33322d3438203d3e203436303437.roa (hash: ygjycUROLuuycgQmlGFdBviRnTHP36unF91EN7REwu4=)
5: 3130332e3139352e3136382e302f32332d3234203d3e203436303437.roa (hash: 5tvhyREjxfe/DJlZ9wBpFrEXCdu8eQWjVSLlHduznyg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl
rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:af:41:eb:04:da:25:4a:68:43:71:e6:f5:19:37:01:ef:97:66:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1FD7CEEC69DEA7838383317FFB0D4A107AF4572A
Validity
Not Before: Feb 2 03:27:22 2026 GMT
Not After : Feb 5 13:14:22 2026 GMT
Subject: CN=F4612B52DBF24A103190EEC37A20C924BE772FFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e3:04:7a:72:04:75:27:8f:0d:85:0e:df:7b:
27:4e:1b:c3:84:26:6c:a2:da:a4:e4:51:3a:02:24:
24:77:c2:b1:55:07:27:d4:b0:b6:aa:bc:ec:af:1f:
2a:70:ac:66:19:62:4c:9a:9c:c7:75:f4:35:81:68:
7e:b4:1d:88:4b:82:bb:42:c0:f1:63:f3:da:40:3e:
5e:62:53:df:db:e3:c6:3d:eb:3e:83:2b:54:49:00:
a2:e7:33:c4:b7:12:40:4d:30:b3:0b:4e:5b:62:f4:
da:38:5d:a9:72:a8:e6:e8:de:72:2f:8a:f0:7c:92:
e9:d8:e3:2f:6c:e1:b2:47:9a:62:f5:bc:13:70:af:
af:b2:f2:5a:56:20:a9:12:e0:74:5d:33:dd:fb:94:
3b:67:1d:5c:23:bb:59:a8:bf:fb:ed:52:94:36:b2:
a0:a2:43:b7:ca:f0:5b:68:49:2a:7b:cb:f2:8e:a4:
a5:21:17:a4:2e:aa:ec:04:7e:77:88:9f:c8:43:66:
ac:0f:07:4f:60:49:88:ca:c0:28:7b:e1:4f:b8:fa:
06:a9:30:b9:15:57:34:fa:d4:56:e4:14:5e:e5:6b:
8d:f8:eb:80:de:e4:8a:7c:de:0c:28:f0:a5:9e:c6:
8a:40:6b:7e:89:97:10:2a:47:f1:a6:e2:2f:17:f1:
87:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:61:2B:52:DB:F2:4A:10:31:90:EE:C3:7A:20:C9:24:BE:77:2F:FE
X509v3 Authority Key Identifier:
keyid:1F:D7:CE:EC:69:DE:A7:83:83:83:31:7F:FB:0D:4A:10:7A:F4:57:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:f6:8a:9e:92:3f:0c:eb:35:3c:7c:1c:4a:51:53:33:b5:8e:
a9:08:26:9e:49:38:c1:da:63:e8:a7:83:26:de:dc:60:dc:39:
11:28:8b:76:76:41:9c:b9:8b:63:19:22:34:e8:24:78:5c:62:
37:61:6f:38:74:3c:aa:62:42:9e:76:1e:16:4d:c7:a2:2a:30:
18:f8:4a:e6:44:33:66:f4:ff:93:59:d9:5b:c2:07:5c:8d:27:
fa:06:25:e2:b9:ea:db:d3:b2:d6:1d:60:0d:79:05:10:d8:25:
70:c2:ac:9e:01:1c:53:f0:5a:ab:60:59:ab:a3:d3:cb:9e:f4:
17:cb:1b:15:0b:98:56:9c:1b:e4:58:08:d5:17:61:07:ad:7a:
d5:99:20:81:da:36:30:5d:69:f7:22:1f:79:a5:d8:1c:e3:de:
bb:de:53:ed:a8:5b:d5:67:1f:1c:e8:1f:9a:d5:10:b9:06:11:
d5:69:f1:7e:14:2a:69:23:a5:73:5e:d1:97:1f:3f:5a:33:d3:
58:11:0f:66:17:dd:29:86:9a:30:83:bb:aa:c7:4c:14:70:96:
df:9d:d0:8e:bd:f6:4d:ff:e3:ef:96:64:ef:23:8e:12:30:ac:
37:1c:ee:80:c1:fe:3e:ff:0a:a7:c0:1e:a3:83:81:8f:26:fb:
7f:e4:62:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:52 2026 by rpki-client