This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft
File: 8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft (raw, json)
Hash identifier: uFginV92C47T4PuZzDN1f4p0L/kQpdK47bjwXPRg4Mg=
Subject key identifier: 3E:65:94:04:61:46:AA:69:DF:4C:2C:87:7E:F0:D5:0B:2A:05:E7:31
Authority key identifier: 8B:7B:64:8E:54:AB:C4:F4:35:64:B6:B7:D8:EC:6C:A2:5E:B6:C6:5C
Certificate issuer: /CN=8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C
Certificate serial: 513EC40E9067B7F488B6D6DA0B80D6163342F568
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft
Manifest number: 0253
Signing time: Sun 01 Feb 2026 00:20:49 +0000
Manifest this update: Sun 01 Feb 2026 00:15:49 +0000
Manifest next update: Wed 04 Feb 2026 09:13:49 +0000
Files and hashes: 1: 3130332e3138362e36302e302f32332d3234203d3e20313439363932.roa (hash: D3mhXulAOJ2gHffXQf0w0aMiyDfxmDOfLqbB+xIObN4=)
2: 8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl (hash: DSDW4IJXRbwLVmeoFJXaAh6LmBkVnY9rnqo2ZQCOYaw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl
rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 09:13:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:3e:c4:0e:90:67:b7:f4:88:b6:d6:da:0b:80:d6:16:33:42:f5:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C
Validity
Not Before: Feb 1 00:15:49 2026 GMT
Not After : Feb 4 09:13:49 2026 GMT
Subject: CN=3E6594046146AA69DF4C2C877EF0D50B2A05E731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a9:42:c7:5e:c0:95:8b:c0:94:c5:d6:56:85:
14:33:9a:3a:5f:01:1b:c1:3e:03:2b:91:3a:8e:bc:
c8:35:c7:91:0e:47:4d:0f:46:8e:b8:fb:03:c8:9c:
34:d5:34:37:b4:ed:7b:c9:f1:f7:74:ee:44:eb:0f:
41:af:94:64:16:fd:fe:a5:81:09:e1:13:e8:06:8b:
c9:b6:54:1c:fc:67:dc:83:22:9d:b9:80:ef:03:97:
38:db:e0:80:c1:4d:75:1a:2f:77:87:6d:2b:ce:12:
c4:b2:1c:90:77:65:15:29:2f:10:f8:70:6b:b0:71:
2a:2b:22:a8:1b:75:2e:d4:78:38:61:76:eb:5a:34:
98:19:2f:e9:a8:f7:9a:65:3c:e9:a8:f1:84:9a:ad:
35:3f:60:de:76:9e:e6:03:83:d4:b7:1f:f8:0d:00:
42:1c:d8:1b:84:07:9e:b0:64:92:2c:20:e5:2c:8f:
bd:57:18:f9:b9:e2:f4:3b:21:ae:c6:75:96:29:2f:
ab:96:ec:f7:3c:ee:77:eb:97:a6:97:c2:1f:c8:96:
42:d3:9e:f0:bd:58:0b:18:18:ae:f6:e0:ff:02:59:
95:98:4e:d0:a0:5b:63:a4:c9:ce:43:0d:46:db:12:
16:36:c4:5a:e7:aa:77:16:57:0b:d9:e6:cb:e4:08:
3f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:65:94:04:61:46:AA:69:DF:4C:2C:87:7E:F0:D5:0B:2A:05:E7:31
X509v3 Authority Key Identifier:
keyid:8B:7B:64:8E:54:AB:C4:F4:35:64:B6:B7:D8:EC:6C:A2:5E:B6:C6:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:5a:76:ae:eb:5b:f5:d8:60:e9:ca:12:5c:55:b9:a8:70:80:
73:9a:58:fd:cf:e5:41:f6:8a:6a:c4:94:86:04:b0:8c:dd:e5:
ba:aa:17:9b:67:14:45:d6:33:07:c7:c6:0c:c0:91:33:49:a0:
98:2d:c8:c6:9e:e2:d1:39:0c:90:90:91:43:cb:6a:ec:16:9a:
6d:c0:c1:2d:2d:70:7e:15:43:a0:a0:17:10:67:d1:df:26:f2:
90:b5:f8:9b:19:37:33:fd:a3:18:31:8c:70:b8:4d:e7:fc:1c:
46:04:5b:f9:cb:76:88:53:07:6e:90:1b:a2:9b:59:f5:7c:4d:
bd:b6:f0:94:77:ad:95:85:1e:33:6a:4c:be:b8:46:c8:fe:d3:
52:b9:04:ca:23:13:4c:3d:98:fe:96:c4:33:66:7f:6e:43:bf:
76:00:3c:8d:a1:a7:66:e2:6a:b0:17:fb:93:23:01:e7:dd:40:
8a:9e:6b:8b:3c:e3:e8:da:ca:95:e1:d1:25:eb:d8:89:6d:13:
c1:bb:08:6c:b6:cc:6f:71:be:88:e0:55:35:66:63:c5:9e:fa:
6a:2c:85:9c:bd:02:1c:51:25:08:1d:35:31:9b:23:ed:e1:05:
ac:6f:67:52:22:56:4a:2b:1e:ec:59:91:e5:a5:f7:d5:5a:25:
0e:11:39:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:05:07 2026 by rpki-client