This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft
File: 849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft (raw, json)
Hash identifier: ZX61dnzylCx5fepzjM2AgAERcQGTc47BISG5DtfwgOg=
Subject key identifier: D1:E1:C8:A6:2F:71:F7:A6:F9:74:72:18:95:74:86:51:69:58:69:A5
Authority key identifier: 84:9E:9E:24:0A:6B:F4:42:3B:1E:7D:22:05:D4:1E:C8:0D:6E:AB:4F
Certificate issuer: /CN=849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F
Certificate serial: 7C9D7A69C32A21D18FA17DD44197D4ED414F2D40
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft
Manifest number: 020C
Signing time: Sat 31 Jan 2026 12:22:07 +0000
Manifest this update: Sat 31 Jan 2026 12:17:07 +0000
Manifest next update: Tue 03 Feb 2026 20:34:07 +0000
Files and hashes: 1: 849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.crl (hash: 434bFRd1pxeRFP0h+21Ad7YmuATq5JTSNtsmYZ2TgJw=)
2: 3130332e362e3136362e302f32342d3234203d3e20313439393335.roa (hash: qsAO4cOsO4ax3oPbTen8Sd837s3C+50yjyG9ueyoUI8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.crl
rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 20:34:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:9d:7a:69:c3:2a:21:d1:8f:a1:7d:d4:41:97:d4:ed:41:4f:2d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F
Validity
Not Before: Jan 31 12:17:07 2026 GMT
Not After : Feb 3 20:34:07 2026 GMT
Subject: CN=D1E1C8A62F71F7A6F974721895748651695869A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:48:9d:bf:4b:7b:5a:77:a3:9d:e2:ee:88:18:
88:d0:0c:23:3d:18:95:02:0e:09:13:bd:4f:30:88:
5c:e5:f7:36:e9:13:36:b7:c9:07:d4:50:02:51:ef:
f7:fb:c3:76:89:4e:e3:bb:27:d1:91:74:09:30:c1:
31:cb:14:6c:d9:95:25:12:af:44:9d:55:bb:e0:57:
bb:79:75:37:df:6a:b7:30:be:7a:99:c6:84:df:cf:
67:f3:30:2c:16:f2:8a:fe:26:ba:69:43:02:36:05:
fc:56:55:33:1f:b8:a6:0b:97:d6:d9:e7:08:62:3a:
1b:c5:93:f3:57:a6:ee:e7:06:d7:80:f8:65:e6:62:
86:4a:f3:d0:87:d8:29:40:b0:de:62:20:72:1b:69:
4d:f1:e3:77:db:11:c8:41:46:42:72:ff:71:ee:1f:
b5:79:1e:8c:1a:c8:f2:95:6e:52:da:80:de:78:23:
cd:12:eb:e1:10:e8:95:59:f1:9e:a8:ed:4e:43:a6:
d4:ee:32:17:a4:a3:07:df:bc:b4:a0:1a:59:ef:89:
93:a1:96:38:8e:0b:0a:a1:fa:49:9e:8e:fc:c2:85:
68:37:32:b7:06:ae:a0:40:94:6e:13:b2:cc:bf:74:
79:00:24:5f:91:f8:78:45:6d:85:b0:26:01:13:65:
c5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E1:C8:A6:2F:71:F7:A6:F9:74:72:18:95:74:86:51:69:58:69:A5
X509v3 Authority Key Identifier:
keyid:84:9E:9E:24:0A:6B:F4:42:3B:1E:7D:22:05:D4:1E:C8:0D:6E:AB:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:4c:27:83:57:65:34:c0:75:6e:62:93:ca:ae:cc:8a:40:0f:
20:40:f8:9e:37:3f:e9:1d:c7:8f:c2:ed:10:00:68:2f:9a:cd:
f0:58:02:ed:63:4e:ab:5d:60:ef:41:73:8a:07:6c:a6:39:84:
70:4c:52:19:fc:9a:51:17:d3:f3:b3:00:69:e0:63:a9:bc:5d:
c4:cc:84:15:87:5a:a1:40:72:70:b0:83:fe:3c:84:fd:78:22:
a7:5c:c9:e6:1f:c7:8c:02:01:62:75:36:2c:fe:91:7d:1c:5c:
df:e6:91:2d:4d:1e:07:8c:67:8e:09:a9:08:a5:8c:e7:4d:b8:
71:8f:19:9c:a8:8e:f8:42:f0:84:4a:67:b1:39:80:c4:c7:96:
58:05:0d:e3:84:85:cf:98:33:dc:6d:5f:ee:b7:70:68:6c:0a:
56:8a:50:39:42:d3:7f:39:87:b9:37:19:57:cd:58:26:3b:30:
9e:18:bd:33:ed:11:aa:00:1f:f5:80:3d:bc:39:f4:55:06:a1:
9f:7d:63:c2:77:db:8a:8a:16:b2:90:cb:19:38:d5:96:00:b2:
ff:98:f8:49:5c:90:a6:85:96:24:83:82:32:c1:fc:f6:69:58:
41:d0:b5:01:7c:0b:5d:5b:38:14:ed:41:d1:b9:29:27:54:a3:
8a:c4:cb:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:03:40 2026 by rpki-client