This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft
File: 408585C1D62A4F618C0424E9BEDC3B91411C2276.mft (raw, json)
Hash identifier: OuUafwe/cRJP/0p29432TtdBxb/MZv0sB8wZkkcjjq8=
Subject key identifier: 39:94:1C:4E:B2:9D:4B:C4:F3:56:78:8F:7F:93:8E:98:57:0C:1E:3D
Authority key identifier: 40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76
Certificate issuer: /CN=408585C1D62A4F618C0424E9BEDC3B91411C2276
Certificate serial: 61DB342B82795BF3EAA50650CF8CC2E7EC67D91C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft
Manifest number: 0258
Signing time: Sat 31 Jan 2026 23:22:14 +0000
Manifest this update: Sat 31 Jan 2026 23:17:14 +0000
Manifest next update: Wed 04 Feb 2026 03:04:14 +0000
Files and hashes: 1: 408585C1D62A4F618C0424E9BEDC3B91411C2276.crl (hash: /6Kd/wwV2CFea8+qIgE2KeJwssZj5nz/G78H0CtQCX0=)
2: 3130332e3132322e3132312e302f32342d3234203d3e20313338303836.roa (hash: NWTKjHM3PgU/D8DgzFheKr586Q+n/qcGSV1ZOdpOXco=)
3: 323030313a6466363a616630303a3a2f34382d3438203d3e20313338303836.roa (hash: pJzBSpecNdGxtRhriNjcTDwpDG6NNdRtxmQUp3nGEzE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.crl
rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 03:04:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:db:34:2b:82:79:5b:f3:ea:a5:06:50:cf:8c:c2:e7:ec:67:d9:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408585C1D62A4F618C0424E9BEDC3B91411C2276
Validity
Not Before: Jan 31 23:17:14 2026 GMT
Not After : Feb 4 03:04:14 2026 GMT
Subject: CN=39941C4EB29D4BC4F356788F7F938E98570C1E3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:33:a8:d7:3f:72:6d:4f:b1:55:9f:34:a7:04:
39:8d:d3:94:d7:71:2e:1f:94:e5:75:e7:62:f5:5a:
a4:12:4e:9e:6c:c6:65:fd:9e:65:46:7f:eb:39:b8:
87:92:10:8e:19:4c:29:75:cb:41:89:41:5e:ed:de:
14:9b:bd:3e:09:05:21:7d:88:96:7a:14:68:1e:63:
5f:06:50:bf:db:73:9d:7b:c8:80:cd:18:30:bb:ac:
ac:62:9d:24:06:33:fa:7e:30:cd:66:83:d7:86:06:
5e:98:14:58:d6:10:cd:2d:d0:07:d2:23:de:b9:3f:
42:38:06:40:23:b7:02:b8:1a:d4:88:6e:d1:a3:49:
76:1a:c4:e0:2d:ab:a7:03:0a:2f:17:d1:f5:ad:46:
b4:e3:0a:24:d0:c2:38:79:f1:7e:2b:26:de:7b:37:
5d:25:a6:03:53:3c:53:25:b2:dc:98:77:74:af:cb:
a1:69:60:3c:1c:f1:e3:87:d8:e6:cf:6f:de:a3:f5:
0f:37:b1:38:00:a7:3a:a7:c8:03:d6:7a:a6:3f:75:
4e:bb:21:e5:ed:5e:dd:4c:f3:97:69:b5:d1:fe:05:
1d:5c:f2:7a:04:36:46:5c:9f:86:b8:39:8f:36:58:
d7:d2:84:07:1e:10:79:70:ac:31:f4:21:87:be:a4:
a6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:94:1C:4E:B2:9D:4B:C4:F3:56:78:8F:7F:93:8E:98:57:0C:1E:3D
X509v3 Authority Key Identifier:
keyid:40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:64:45:20:f2:f7:75:bb:db:af:1c:d8:89:c6:dd:8d:bd:ab:
d2:41:0a:d0:f9:be:ad:5c:ca:88:fd:ac:11:e8:82:da:05:c3:
de:bd:b2:c9:3e:1a:65:1f:30:df:9d:ac:00:5c:86:2d:9f:e2:
86:56:0d:8a:43:df:9e:43:1c:b8:33:36:7d:dc:e2:42:1d:ab:
4e:d7:42:71:ca:ae:f0:6d:f8:35:2e:07:82:91:e7:a5:dc:6c:
c0:56:84:32:f8:7b:8e:70:aa:48:e4:d1:da:91:47:0e:1c:d6:
f8:a1:bb:32:67:54:10:61:4f:47:b6:f9:21:cc:be:14:c4:56:
1a:93:9a:8b:a8:8b:f8:5b:2e:cc:aa:b8:32:07:34:90:0b:a3:
8b:41:b6:6a:d5:65:a8:b9:c5:c6:5f:e9:e2:43:0b:f2:29:f1:
c0:88:fa:4a:aa:2c:75:53:8d:fd:6c:62:59:b6:f2:ca:d2:98:
9a:88:ba:bd:fb:c1:a3:de:43:c2:f1:04:a0:07:78:7f:6d:40:
5b:82:82:c2:c6:55:32:88:14:9c:95:73:26:da:b6:38:a0:f1:
0b:fd:cb:80:34:33:b3:88:1d:9d:0b:86:ce:fe:3b:37:79:36:
08:e3:d2:68:40:cd:34:22:ea:40:e0:b7:35:26:cd:a3:ae:4c:
ad:8d:b4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:42 2026 by rpki-client