This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft
File: 03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft (raw, json)
Hash identifier: 0Ys5TGYtsp/BMtbzVa1k9O6op4nduTvvSVz0kIFDBxg=
Subject key identifier: A3:F7:B4:DD:04:2C:7A:53:CB:67:D7:4E:23:12:3A:41:A3:FD:DF:6F
Authority key identifier: 03:EF:41:49:C5:DB:07:AC:34:8E:58:E4:DA:39:BD:DD:97:14:26:FE
Certificate issuer: /CN=03EF4149C5DB07AC348E58E4DA39BDDD971426FE
Certificate serial: 28DF84000FFCBDCB21B142227037A973E487F6E6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft
Manifest number: 03C5
Signing time: Sun 01 Feb 2026 04:51:03 +0000
Manifest this update: Sun 01 Feb 2026 04:46:03 +0000
Manifest next update: Wed 04 Feb 2026 10:40:03 +0000
Files and hashes: 1: 03EF4149C5DB07AC348E58E4DA39BDDD971426FE.crl (hash: 9mEs7JIxCRmvhgwnX9IywD24qI/Q54iP+D40z+J0/Eo=)
2: 3130332e3136362e36362e302f32332d3234203d3e203137393935.roa (hash: LeAX921PuFORgks79ePG8mv8iLwlKYZRHuQBuRA29no=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.crl
rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 10:40:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:df:84:00:0f:fc:bd:cb:21:b1:42:22:70:37:a9:73:e4:87:f6:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03EF4149C5DB07AC348E58E4DA39BDDD971426FE
Validity
Not Before: Feb 1 04:46:03 2026 GMT
Not After : Feb 4 10:40:03 2026 GMT
Subject: CN=A3F7B4DD042C7A53CB67D74E23123A41A3FDDF6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f3:6f:c3:3a:39:82:e8:56:6a:ef:7f:4e:3d:
ff:79:e5:99:4f:b9:f6:4d:2a:08:4f:6b:9a:a5:cb:
61:43:87:2e:b8:87:b7:77:ec:50:ab:57:f6:35:6d:
1f:d1:d1:16:f3:af:4c:f0:a3:2a:fc:2c:fc:07:6b:
ce:a7:ac:a8:1f:7a:cb:fe:47:41:0c:b5:fd:b5:15:
fd:41:8b:50:1e:cc:f9:c0:3c:c2:e5:d9:b1:00:5f:
57:0f:0d:3a:76:58:3b:46:21:19:b7:a0:dd:75:c0:
b1:b0:e3:80:c7:48:6f:77:df:66:1f:71:92:b6:4c:
c8:3e:92:8d:a3:0f:e7:8c:f4:24:4e:ed:62:53:37:
6d:53:eb:f9:bc:61:5a:53:08:53:28:fc:1d:54:0f:
1d:2b:58:c5:2a:3c:61:7b:10:75:fc:96:e9:65:2f:
99:fd:44:2d:34:fa:9f:8e:7f:c8:2c:53:6a:58:c1:
97:9c:59:be:a5:c8:f7:e0:7a:68:09:96:78:e2:c8:
f3:91:9c:60:84:43:b0:67:a5:da:a2:37:5b:13:e4:
26:02:af:cd:aa:cc:60:e5:1c:c2:d0:93:f0:de:5e:
95:f3:98:29:4b:ce:9e:0a:eb:26:66:54:09:00:20:
26:79:36:f7:ba:23:df:23:ba:ca:94:65:25:bb:77:
16:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F7:B4:DD:04:2C:7A:53:CB:67:D7:4E:23:12:3A:41:A3:FD:DF:6F
X509v3 Authority Key Identifier:
keyid:03:EF:41:49:C5:DB:07:AC:34:8E:58:E4:DA:39:BD:DD:97:14:26:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:1c:b6:b7:b1:72:d5:03:3e:66:e5:88:54:3e:b5:a8:95:b7:
c7:06:b2:24:66:c6:19:77:68:e1:5a:6b:ab:26:bf:bf:57:e3:
2c:9f:e2:d5:58:d1:81:8f:b5:c0:10:6d:cb:82:25:52:91:9e:
03:43:a6:2b:20:5d:49:40:94:cd:6d:9b:16:4d:22:73:51:d6:
3b:b5:02:ea:0a:93:cd:d9:cb:a9:6c:47:fd:33:22:08:bc:a6:
9a:a7:56:5b:af:90:4a:81:33:8d:27:f9:3e:01:65:3c:79:be:
d2:52:69:f6:3f:3a:bc:46:ba:78:77:b9:f2:89:b0:62:a1:62:
97:62:73:51:31:57:e1:c8:16:1e:5a:59:27:96:c3:96:b6:7c:
48:bd:4c:c5:03:4e:d4:11:a5:3c:2a:cd:2a:1a:34:6f:fe:d7:
03:25:00:45:74:13:9e:d4:b7:31:5f:9c:e8:0d:03:5f:ca:4b:
45:28:19:20:77:6f:c6:1d:b7:2e:83:9a:08:f0:13:db:56:d0:
48:92:d2:cb:3a:73:c9:80:d4:f2:6a:c8:85:27:b8:aa:69:68:
37:2b:3e:3a:2d:47:01:09:7e:80:7c:83:60:32:f5:27:e8:89:
47:e3:f2:11:59:3c:9a:50:80:4e:68:c7:4a:a9:c9:e6:8f:ce:
bb:4c:4c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:47 2026 by rpki-client