This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.mft
File: 2E55483B906244D2DA357F014F9AFA606D95C345.mft (raw, json)
Hash identifier: 6LWTvqexfQO6FMVHUo5DjQNgSwvYqfO20zvZmHqQOyI=
Subject key identifier: C7:1D:8D:59:D5:14:E8:AB:A9:12:3A:E5:DC:A3:66:75:A7:CC:3F:20
Authority key identifier: 2E:55:48:3B:90:62:44:D2:DA:35:7F:01:4F:9A:FA:60:6D:95:C3:45
Certificate issuer: /CN=2E55483B906244D2DA357F014F9AFA606D95C345
Certificate serial: 489C68371B093AB5865888D534A12DF13D826CA5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E55483B906244D2DA357F014F9AFA606D95C345.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.mft
Manifest number: 011A
Signing time: Sat 31 Jan 2026 11:21:16 +0000
Manifest this update: Sat 31 Jan 2026 11:16:16 +0000
Manifest next update: Tue 03 Feb 2026 16:23:16 +0000
Files and hashes: 1: 3230322e35322e35382e302f32332d3233203d3e203436303538.roa (hash: d6+MpeOwnH/agtVVZkfqBxwK6cPDeJjFB6fgvTWTTwY=)
2: 3230322e35322e35382e302f32342d3234203d3e203436303538.roa (hash: UMm8CVytUz3mnXPaURu9cvBWCMEG+/Kh9q1dvGzVdN0=)
3: 3230322e35322e35392e302f32342d3234203d3e203436303538.roa (hash: Du41YA1NCiK2HlEV88F/QDnyK1sLmVF33xCMfe54rMI=)
4: 2E55483B906244D2DA357F014F9AFA606D95C345.crl (hash: kbw/GLMh+TbvwrxZ2kwYxiLm4jGgby4T5r73sau57RM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.crl
rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E55483B906244D2DA357F014F9AFA606D95C345.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 16:23:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:9c:68:37:1b:09:3a:b5:86:58:88:d5:34:a1:2d:f1:3d:82:6c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E55483B906244D2DA357F014F9AFA606D95C345
Validity
Not Before: Jan 31 11:16:16 2026 GMT
Not After : Feb 3 16:23:16 2026 GMT
Subject: CN=C71D8D59D514E8ABA9123AE5DCA36675A7CC3F20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:68:a7:8d:da:4a:a4:d5:76:a5:7b:67:44:4b:
03:9d:8e:68:ca:fc:13:00:ae:e0:86:b3:41:8f:10:
13:46:d9:dd:67:b3:c6:45:c3:f3:a7:84:c4:11:06:
51:da:eb:8c:d4:14:42:62:14:a0:cc:cf:ef:86:c3:
d5:89:cc:75:28:75:1c:9d:50:59:3d:28:00:8b:86:
ad:09:e8:1e:ae:85:93:0e:9c:16:7c:fb:ea:74:f7:
12:10:76:e6:2a:cb:c1:95:d7:a8:92:38:2e:ca:10:
5a:3b:8d:7c:b8:f6:ba:aa:13:36:16:f3:d4:e1:5e:
21:05:4b:0b:7f:4c:3a:7d:53:78:26:18:d6:91:f0:
c2:2f:1a:90:3c:3b:79:ba:78:09:5f:32:82:1f:a9:
94:42:33:5c:98:0c:88:27:a1:57:20:f4:5f:e1:95:
94:38:43:2c:a9:87:e7:23:cf:4d:0f:47:5d:f4:2c:
a5:a0:4b:d5:cf:47:06:19:97:69:00:4b:34:a9:6a:
4e:6e:74:f5:c3:f1:cc:74:c4:a6:54:fe:78:dd:da:
e6:07:fd:a9:32:5f:54:b4:17:8b:43:10:17:bf:0f:
b5:e4:80:f1:b6:9d:38:15:79:75:7c:4e:3d:a6:9d:
43:a9:6d:5c:0f:5d:d3:b3:3d:39:42:c5:a3:c1:bb:
55:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1D:8D:59:D5:14:E8:AB:A9:12:3A:E5:DC:A3:66:75:A7:CC:3F:20
X509v3 Authority Key Identifier:
keyid:2E:55:48:3B:90:62:44:D2:DA:35:7F:01:4F:9A:FA:60:6D:95:C3:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E55483B906244D2DA357F014F9AFA606D95C345.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:dd:90:95:e5:40:c2:03:e9:91:01:e5:f4:7b:0f:b6:1a:c9:
3c:50:9b:55:e6:ce:cd:d9:e5:87:ce:4d:9d:ed:88:b3:a9:f6:
a4:71:81:1b:68:ad:1c:32:a7:e3:24:e1:83:0d:b9:0d:8c:03:
cd:b8:26:76:78:4d:55:5e:a4:3a:56:2d:95:37:3a:2f:58:68:
74:a3:13:b1:cf:60:7b:2e:5a:ef:8e:b1:97:5e:8b:56:87:2a:
35:51:66:28:5c:75:8f:ea:a9:77:bf:9d:c3:00:34:47:27:cc:
3a:73:51:b1:e6:d4:49:72:09:55:6b:52:31:50:3c:cc:83:24:
44:5e:e7:63:f3:9b:ed:bc:aa:e2:b8:7f:db:fc:8f:c6:40:47:
6c:af:b7:1b:19:0e:84:65:b2:17:bb:59:a9:5e:9c:82:bd:91:
32:ab:bc:c4:4b:87:74:6f:af:d5:4e:e8:e1:a1:ff:5b:de:08:
51:c4:2e:56:77:2d:a8:98:11:dd:6d:b7:b0:d1:1a:06:9e:fa:
57:3f:23:5e:5e:33:6d:8e:05:f5:7a:dd:da:b8:80:31:00:25:
60:cd:10:58:b1:06:50:c0:95:e0:fc:78:a6:d6:ca:a5:34:2a:
75:f3:70:f7:83:53:43:41:28:0f:87:d7:14:6f:a6:fa:45:bf:
8f:9f:a9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:46:59 2026 by rpki-client