This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft
File: C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft (raw, json)
Hash identifier: RNu2L46Jjy2giaoFQJm0pogLHYnwY6lAOR1HCuLz6DE=
Subject key identifier: 06:66:B0:89:05:E0:3B:B8:8E:26:66:E7:00:10:1D:18:D3:5A:B8:C0
Authority key identifier: C7:84:C8:EE:6F:7C:E3:C8:47:FC:BD:1C:CD:F2:32:72:00:EF:5C:70
Certificate issuer: /CN=C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70
Certificate serial: 7446B664E9FF5995E72B3D666B837B46A22D46B5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft
Manifest number: 01E4
Signing time: Sat 31 Jan 2026 11:51:05 +0000
Manifest this update: Sat 31 Jan 2026 11:46:05 +0000
Manifest next update: Tue 03 Feb 2026 20:25:05 +0000
Files and hashes: 1: 3130332e3137382e38332e302f32342d3234203d3e20313437313730.roa (hash: SPILoD0YuDgHkCG/UcROiBKV6NuzifUgiPor6w8kdtI=)
2: C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.crl (hash: RilXQfqf6z3CKY/DhyBjBA7q4VFz3Fosd3jguCuZMZA=)
3: 3130332e3137342e31332e302f32342d3234203d3e20313437313730.roa (hash: EANS/BbBSV3D2lqyFzIlb0gYJ6M3G6ZH8tGtZE5xhF4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.crl
rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 20:25:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:46:b6:64:e9:ff:59:95:e7:2b:3d:66:6b:83:7b:46:a2:2d:46:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70
Validity
Not Before: Jan 31 11:46:05 2026 GMT
Not After : Feb 3 20:25:05 2026 GMT
Subject: CN=0666B08905E03BB88E2666E700101D18D35AB8C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:42:97:86:d4:c8:8c:d3:cb:56:1b:61:14:3b:
ab:68:e6:b9:92:98:e0:19:5d:a6:22:1a:df:da:6b:
d6:fb:43:20:0a:05:0f:72:f0:27:26:b1:55:64:da:
9e:fc:a6:e3:69:13:7e:3b:15:08:19:2b:37:74:55:
12:08:63:6b:fd:46:11:d4:dc:fc:d0:b0:2a:aa:15:
b2:cc:95:9f:78:2b:31:4d:fc:d6:5e:0b:8a:17:54:
4d:07:3f:f1:25:d2:1b:57:ad:7e:51:85:e0:eb:69:
31:f6:a1:c2:7e:e2:01:47:c4:1d:6c:54:5e:d3:78:
b8:84:07:fe:7e:ed:b1:bc:82:f0:5e:6c:51:45:07:
7c:e2:e7:6a:b7:e3:bc:42:7f:f1:25:23:29:ec:e0:
06:5f:a1:0f:62:09:6c:87:b5:c6:1a:b8:94:4e:bc:
f4:e8:75:f3:28:7f:28:f1:67:87:cb:97:6b:95:c0:
12:1e:db:b8:88:ee:9b:b7:0d:0a:f6:44:ef:19:87:
af:7d:dc:40:11:1a:e5:2f:cc:64:2e:5d:26:14:0d:
14:ef:d4:06:06:ed:f0:b1:4f:38:ef:b3:df:e0:ce:
d7:80:71:96:b9:f9:81:36:23:e1:f0:cb:81:9b:90:
89:32:41:b8:76:6f:02:0e:71:df:ef:d8:7b:df:31:
13:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:66:B0:89:05:E0:3B:B8:8E:26:66:E7:00:10:1D:18:D3:5A:B8:C0
X509v3 Authority Key Identifier:
keyid:C7:84:C8:EE:6F:7C:E3:C8:47:FC:BD:1C:CD:F2:32:72:00:EF:5C:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:28:c4:11:bd:83:23:11:32:97:33:7b:90:c7:f5:0c:56:5e:
f7:66:c2:32:e4:8d:e7:da:ed:40:92:fd:98:91:81:a5:84:6f:
5b:a7:da:30:21:73:31:24:20:4d:79:bd:4c:21:3b:72:92:96:
e5:11:ff:c9:8e:f3:5b:b5:a8:b6:a3:2b:b2:90:ab:12:c5:35:
98:d4:7e:25:fa:1b:cd:13:d1:8f:87:7c:72:75:a4:b1:f4:6e:
a7:e6:1b:41:e0:38:0a:8b:17:10:de:b9:0a:04:80:b6:ed:8f:
19:9e:06:35:e9:78:bb:eb:8d:ca:11:7f:79:2f:a0:f0:62:ee:
31:3c:af:8e:1f:c1:51:4f:af:9c:15:a1:a7:75:28:8a:5c:48:
d9:e9:bc:f0:57:3d:49:3a:70:14:bd:9c:a7:a2:60:86:3d:a4:
a7:dc:1b:fb:f0:a8:ce:c8:f6:02:f5:e8:7e:a6:a6:88:0b:89:
ea:8f:aa:f5:78:57:2d:25:c0:1b:95:3c:82:0f:0b:30:98:22:
dd:72:17:b0:5a:96:f1:32:09:64:a7:ee:d6:a9:2b:e3:31:8c:
75:8d:63:8f:11:3e:dd:1f:c9:d4:fa:ef:3f:f8:c2:5b:69:bb:
28:42:ec:bb:5f:3b:27:06:7c:a9:4b:51:3d:b9:4f:46:dd:fb:
d8:e3:66:0a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUdEa2ZOn/WZXnKz1ma4N7RqItRrUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzc4NEM4RUU2RjdDRTNDODQ3RkNCRDFDQ0RGMjMyNzIw
MEVGNUM3MDAeFw0yNjAxMzExMTQ2MDVaFw0yNjAyMDMyMDI1MDVaMDMxMTAvBgNV
BAMTKDA2NjZCMDg5MDVFMDNCQjg4RTI2NjZFNzAwMTAxRDE4RDM1QUI4QzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzQpeG1MiM08tWG2EUO6to5rmS
mOAZXaYiGt/aa9b7QyAKBQ9y8CcmsVVk2p78puNpE347FQgZKzd0VRIIY2v9RhHU
3PzQsCqqFbLMlZ94KzFN/NZeC4oXVE0HP/El0htXrX5RheDraTH2ocJ+4gFHxB1s
VF7TeLiEB/5+7bG8gvBebFFFB3zi52q347xCf/ElIyns4AZfoQ9iCWyHtcYauJRO
vPTodfMofyjxZ4fLl2uVwBIe27iI7pu3DQr2RO8Zh6993EARGuUvzGQuXSYUDRTv
1AYG7fCxTzjvs9/gzteAcZa5+YE2I+Hwy4GbkIkyQbh2bwIOcd/v2HvfMRNpAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUBmawiQXgO7iOJmbnABAdGNNauMAwHwYDVR0j
BBgwFoAUx4TI7m9848hH/L0czfIycgDvXHAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
ZmRlMWYwZS0yMzFmLTQ0Y2UtOTBjMy0zMmFjZGY5ZDI2YzAvMC9DNzg0QzhFRTZG
N0NFM0M4NDdGQ0JEMUNDREYyMzI3MjAwRUY1QzcwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzc4NEM4RUU2RjdDRTNDODQ3RkNCRDFDQ0RGMjMyNzIwMEVG
NUM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWZkZTFmMGUtMjMxZi00NGNlLTkw
YzMtMzJhY2RmOWQyNmMwLzAvQzc4NEM4RUU2RjdDRTNDODQ3RkNCRDFDQ0RGMjMy
NzIwMEVGNUM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAD0oxBG9gyMRMpcze5DH9QxWXvdmwjLkjefa
7UCS/ZiRgaWEb1un2jAhczEkIE15vUwhO3KSluUR/8mO81u1qLajK7KQqxLFNZjU
fiX6G80T0Y+HfHJ1pLH0bqfmG0HgOAqLFxDeuQoEgLbtjxmeBjXpeLvrjcoRf3kv
oPBi7jE8r44fwVFPr5wVoad1KIpcSNnpvPBXPUk6cBS9nKeiYIY9pKfcG/vwqM7I
9gL16H6mpogLieqPqvV4Vy0lwBuVPIIPCzCYIt1yF7BalvEyCWSn7tapK+MxjHWN
Y48RPt0fydT67z/4wltpuyhC7LtfOycGfKlLUT25T0bd+9jjZgo=
-----END CERTIFICATE-----
Generated at Mon Feb 2 10:03:49 2026 by rpki-client