This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft
File: E42B0752D5FFAB254C3F0E221499F67420870FEB.mft (raw, json)
Hash identifier: hKY/5gzm2BmLircTvINJKHS3FehZ9YaWt+6T45CGhv8=
Subject key identifier: 74:68:46:69:98:50:26:60:F7:64:77:8C:46:2D:75:09:E7:9E:DC:1E
Authority key identifier: E4:2B:07:52:D5:FF:AB:25:4C:3F:0E:22:14:99:F6:74:20:87:0F:EB
Certificate issuer: /CN=E42B0752D5FFAB254C3F0E221499F67420870FEB
Certificate serial: 26A6BF572ACD50117E3883326DDE3136A9A3DA8C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E42B0752D5FFAB254C3F0E221499F67420870FEB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft
Manifest number: 04CC
Signing time: Sat 31 Jan 2026 08:51:18 +0000
Manifest this update: Sat 31 Jan 2026 08:46:18 +0000
Manifest next update: Tue 03 Feb 2026 13:44:18 +0000
Files and hashes: 1: 3230322e35382e3137362e302f32312d3234203d3e203234353236.roa (hash: TiBDscIwDM8LXa+oZsdSozLCIgCynFE1SJZ86LD1GBs=)
2: E42B0752D5FFAB254C3F0E221499F67420870FEB.crl (hash: sUizQtJBPUUJ7bDyOfr9LZJRedZKbIURsrSmxip2L9U=)
3: 3230322e35382e3136302e302f32302d3234203d3e203234353236.roa (hash: U5G6WyuhUeeAyAkhv6VtLWLCxLc3eTUGqsMy7Fb3zes=)
4: 323430323a646130303a3a2f33322d3438203d3e203234353236.roa (hash: KXkQEzDE7eAOGwkwjqYSUBJ2gO8yBncemPnpiy3ztzA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.crl
rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E42B0752D5FFAB254C3F0E221499F67420870FEB.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 13:44:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:a6:bf:57:2a:cd:50:11:7e:38:83:32:6d:de:31:36:a9:a3:da:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E42B0752D5FFAB254C3F0E221499F67420870FEB
Validity
Not Before: Jan 31 08:46:18 2026 GMT
Not After : Feb 3 13:44:18 2026 GMT
Subject: CN=7468466998502660F764778C462D7509E79EDC1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:e1:cf:d8:b9:1c:7d:48:f5:56:67:05:af:18:
dc:b8:42:a2:8d:67:94:ed:d9:6e:3f:30:16:71:68:
88:67:10:48:dc:bf:8c:75:7c:e2:9c:7d:10:93:da:
60:eb:c3:78:c0:9e:15:1e:54:70:5a:df:c9:e9:95:
f4:e7:05:73:7c:63:2c:19:52:55:da:62:36:70:6c:
9c:ff:e9:ab:a1:00:b0:df:fc:76:d6:a4:5c:cd:83:
f8:50:f0:d3:6e:c1:b0:e3:af:d2:32:91:05:8e:f5:
3a:7c:df:b8:1d:8c:9b:70:13:53:f6:bf:9d:42:5b:
f8:8e:0b:5e:2a:95:03:df:6a:bd:df:9e:28:7f:39:
4c:02:5f:40:8e:87:d0:d8:05:e2:da:8e:e6:b8:23:
98:3f:a5:6b:25:8b:00:71:ae:7a:bc:81:79:b7:3e:
64:89:a5:14:6c:54:eb:34:fd:e9:70:97:cd:7b:e7:
bc:d1:59:2a:9a:e2:13:d0:cc:d0:91:fe:96:92:ba:
d9:3f:43:f8:f7:ad:33:8b:e8:ec:81:44:48:4c:c6:
7f:c7:f8:7f:bb:81:c4:a3:4e:6f:fc:9c:ea:a7:d2:
a8:77:3f:8f:7f:f9:0d:10:44:10:7b:35:c2:63:e2:
46:69:20:8a:ef:90:c8:11:54:89:7e:10:d1:31:9a:
73:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:68:46:69:98:50:26:60:F7:64:77:8C:46:2D:75:09:E7:9E:DC:1E
X509v3 Authority Key Identifier:
keyid:E4:2B:07:52:D5:FF:AB:25:4C:3F:0E:22:14:99:F6:74:20:87:0F:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E42B0752D5FFAB254C3F0E221499F67420870FEB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:3f:b9:ef:5b:c2:db:71:ad:36:d9:40:dd:e6:28:12:45:f1:
b1:4e:a4:6d:d5:7b:bc:1a:e6:3b:23:4c:52:6a:ea:e4:3a:d4:
6d:e6:13:cf:87:fd:f1:dc:d9:88:91:10:d8:89:b2:9f:08:16:
56:c9:90:29:4d:89:53:80:cd:a8:71:ef:d8:33:54:4c:3d:17:
97:4f:fe:f0:fe:61:fd:c1:08:c3:33:a6:38:63:20:87:95:36:
8a:5f:e9:c9:af:40:ba:34:5c:f2:c6:a8:79:60:50:89:2a:c1:
e0:57:94:ae:02:a1:98:3d:6d:fc:ec:1f:82:6b:fd:66:f0:40:
76:0f:ff:87:21:d6:76:e2:14:ae:ce:b5:8f:58:09:c0:6a:ad:
00:bf:ea:1d:7a:4f:0f:91:38:e0:42:31:b2:0a:47:19:bb:da:
2d:ed:47:87:c9:32:91:62:c1:26:1e:b2:eb:d7:fe:49:fb:04:
45:65:c3:5f:80:db:74:87:df:e9:42:5c:f2:31:0e:4e:50:3d:
00:7c:71:87:a1:90:92:c2:28:fb:ef:42:b2:02:71:8e:b6:ba:
30:8e:f3:40:f8:ee:67:ea:39:2a:04:cc:70:79:b0:5e:12:dc:
7e:86:b4:be:bc:f4:ca:d6:8c:df:3a:94:4a:ef:67:c9:bf:7b:
39:ea:8b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:55:38 2026 by rpki-client