This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft
File: AD2137BA5758D926364E9E038F19A65DC3F1846E.mft (raw, json)
Hash identifier: 6SApUZ04OgRoY0QZ9XAf2U1WH6XbWobe/y7gK04XvIA=
Subject key identifier: 14:5B:2F:B9:FE:16:C4:14:74:48:A2:AC:75:D4:BB:4A:B4:42:DC:2A
Authority key identifier: AD:21:37:BA:57:58:D9:26:36:4E:9E:03:8F:19:A6:5D:C3:F1:84:6E
Certificate issuer: /CN=AD2137BA5758D926364E9E038F19A65DC3F1846E
Certificate serial: 19FAF4A40FAA8CB349F5E1AD34A42AE914CF74E1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2137BA5758D926364E9E038F19A65DC3F1846E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft
Manifest number: 0289
Signing time: Sun 01 Feb 2026 10:12:15 +0000
Manifest this update: Sun 01 Feb 2026 10:07:15 +0000
Manifest next update: Wed 04 Feb 2026 11:33:15 +0000
Files and hashes: 1: AD2137BA5758D926364E9E038F19A65DC3F1846E.crl (hash: QN+pYazvUyZuYJyMa47zxwHve0j9d2c145esd/jv5/M=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.crl
rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2137BA5758D926364E9E038F19A65DC3F1846E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 11:33:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:fa:f4:a4:0f:aa:8c:b3:49:f5:e1:ad:34:a4:2a:e9:14:cf:74:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD2137BA5758D926364E9E038F19A65DC3F1846E
Validity
Not Before: Feb 1 10:07:15 2026 GMT
Not After : Feb 4 11:33:15 2026 GMT
Subject: CN=145B2FB9FE16C4147448A2AC75D4BB4AB442DC2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:02:ad:06:c1:95:db:42:b5:04:44:6b:42:66:
02:ea:74:b6:11:69:b2:fd:36:9d:ed:9f:b4:1e:fe:
71:fe:9d:44:31:1d:9d:70:cc:d9:17:05:14:d3:54:
f8:a1:6a:ea:e6:1a:08:98:db:dd:61:c2:d1:5a:c4:
65:95:62:4c:b7:54:e1:1b:ff:18:e2:12:5d:1a:c6:
47:6c:6d:56:b3:e4:b7:51:65:2b:a0:d6:ac:ea:22:
4d:5e:a3:54:32:d7:c4:b4:26:ab:fd:2c:de:b5:b2:
38:ed:72:2a:9e:f3:cc:fb:e0:32:d5:97:3d:fa:e3:
2b:d6:57:ca:37:b2:4e:87:77:8d:ff:5c:d7:26:69:
fc:5a:4b:15:a2:d9:dc:dd:8a:f3:55:78:76:fe:98:
07:98:a4:44:04:b7:c8:54:26:67:6a:49:ad:0b:72:
95:c7:ec:4b:1e:c7:b0:ef:32:1e:a6:49:58:c9:4a:
da:39:95:c4:15:22:5a:7f:4a:fd:40:5e:6e:ad:79:
59:8c:ae:76:c2:3c:66:b5:99:e4:59:56:ca:09:51:
4b:0d:a0:9a:60:8c:e9:1a:51:de:b8:dc:e7:9b:93:
38:d4:f1:5c:52:fd:e4:d5:96:f6:9a:61:08:04:20:
39:48:9d:69:d5:60:8e:f5:28:45:50:09:ec:4c:ab:
36:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:5B:2F:B9:FE:16:C4:14:74:48:A2:AC:75:D4:BB:4A:B4:42:DC:2A
X509v3 Authority Key Identifier:
keyid:AD:21:37:BA:57:58:D9:26:36:4E:9E:03:8F:19:A6:5D:C3:F1:84:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2137BA5758D926364E9E038F19A65DC3F1846E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:5a:d0:27:3e:de:7b:0c:58:cd:2b:99:e2:15:b5:b3:f4:bd:
92:2d:f5:31:d5:d8:c3:20:e9:75:76:1f:a3:21:5f:b8:e5:ca:
58:60:d0:32:57:1b:9c:c1:cb:b5:5b:57:41:6e:9f:8e:13:d0:
ff:c7:9e:35:3d:25:a9:f0:e4:a6:f3:cf:f4:44:92:51:4b:1c:
51:b0:3a:cb:89:b3:c8:e9:24:3b:19:0f:36:6d:d6:c4:09:11:
74:73:69:1e:4c:21:ec:99:5f:9c:31:cf:bb:66:2f:0b:b3:8f:
c5:83:0d:73:d3:dc:d2:87:83:e5:11:91:b9:61:29:d2:e4:0b:
ed:58:71:ff:4c:9e:c2:b8:1d:2c:b8:44:64:e9:e4:57:3b:29:
7a:b6:e2:78:6d:8b:6e:bd:b3:5d:38:99:33:f7:9d:40:6f:2f:
a9:c0:ec:96:39:9b:2e:0b:90:23:5b:14:a6:37:12:5f:15:87:
f5:08:c5:a5:9d:a6:11:99:5d:e6:ef:64:36:85:7e:3f:85:28:
f6:3a:2b:ea:33:45:75:82:8c:8b:25:ca:72:50:fa:e0:99:1e:
e3:19:55:a8:27:46:d2:dd:d1:c9:82:9f:6b:0f:a2:c4:0c:37:
19:54:6a:6d:c4:c4:91:3a:03:63:8c:ad:1f:60:ae:9b:f9:26:
e1:ce:d4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:44:06 2026 by rpki-client