This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft
File: 20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft (raw, json)
Hash identifier: as++aV8YWPQHM2lR0ExQheHwOJvZq0JQwSPMgURG/cI=
Subject key identifier: A8:73:29:0C:1F:FA:7B:C7:48:47:39:5B:13:1F:CB:9D:50:58:A0:AD
Authority key identifier: 20:FD:16:65:50:36:93:52:D6:C4:C8:AB:8E:9E:42:03:C5:D9:AB:EE
Certificate issuer: /CN=20FD166550369352D6C4C8AB8E9E4203C5D9ABEE
Certificate serial: 0FCAF9CF943A990B00CE47CCA7BECF442A3025C9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft
Manifest number: 0239
Signing time: Mon 02 Feb 2026 01:00:50 +0000
Manifest this update: Mon 02 Feb 2026 00:55:50 +0000
Manifest next update: Thu 05 Feb 2026 06:46:50 +0000
Files and hashes: 1: 3130332e3135362e3134362e302f32332d3234203d3e20313431303933.roa (hash: m4Ck3HJw6h63iOESyQS/p69JGf3Gj+AMerXfQa9rjpw=)
2: 20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.crl (hash: 5sJlPjNxSK73luHO0GlYYDeJB5bgxHnJbn3ZdLifagQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.crl
rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:ca:f9:cf:94:3a:99:0b:00:ce:47:cc:a7:be:cf:44:2a:30:25:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20FD166550369352D6C4C8AB8E9E4203C5D9ABEE
Validity
Not Before: Feb 2 00:55:50 2026 GMT
Not After : Feb 5 06:46:50 2026 GMT
Subject: CN=A873290C1FFA7BC74847395B131FCB9D5058A0AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:86:9a:ea:e6:44:7f:50:fb:a8:23:33:76:73:
7a:9d:e4:38:3f:b7:92:b7:0b:0d:1a:e6:71:f5:96:
49:64:34:09:f7:97:b9:31:cc:0d:c7:8f:5c:a3:57:
a5:f0:69:8e:ab:db:0b:07:1a:08:ed:9a:3f:a3:b3:
96:ec:a5:84:b5:df:1f:fb:2d:2b:ed:fd:aa:55:29:
69:59:00:f2:c6:58:26:6f:bc:35:43:27:22:7b:4e:
34:6d:ac:54:26:93:3a:cf:7a:b8:08:3a:a0:f5:6e:
e2:7f:0e:8d:5d:59:4a:45:da:f7:5a:d6:ba:15:ef:
37:e1:fc:ee:e7:58:a0:09:61:e3:33:4b:ee:3c:3d:
43:92:b8:eb:68:98:ef:b9:b0:01:e9:5d:d4:2a:d5:
e2:1b:00:bf:54:bd:0f:05:bd:d5:56:73:d2:59:11:
23:d4:00:78:f6:0d:c6:6f:22:a2:d2:d3:d7:e3:59:
de:92:1c:7d:8f:2c:2b:c6:53:14:54:bb:f1:44:6d:
c5:22:a5:99:2a:86:32:b7:4b:7c:b7:5e:5b:4f:fe:
0a:bd:8f:9f:5f:9c:01:b1:bf:53:13:fb:ce:38:58:
ac:61:be:c7:b7:d0:ed:13:07:66:87:d5:18:0f:88:
a3:b0:ad:39:77:d0:a7:08:15:8c:d0:77:c4:dd:7d:
22:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:73:29:0C:1F:FA:7B:C7:48:47:39:5B:13:1F:CB:9D:50:58:A0:AD
X509v3 Authority Key Identifier:
keyid:20:FD:16:65:50:36:93:52:D6:C4:C8:AB:8E:9E:42:03:C5:D9:AB:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:5e:e0:32:f8:65:5e:89:40:60:e9:76:84:f8:95:12:91:87:
7a:ae:81:24:ec:5f:46:5a:1a:22:09:2e:a1:5f:b0:80:df:16:
a4:30:11:53:06:ba:cd:4f:65:7c:d1:e7:d1:e4:3f:ac:6f:9a:
8b:4d:42:a9:70:6f:fc:fa:b8:d4:e3:87:fa:d8:5a:de:f7:e6:
03:3b:c2:64:1b:23:aa:b5:7f:74:47:55:17:e2:da:2e:34:63:
1a:97:8e:91:70:a7:eb:74:ca:b0:6f:a2:37:a3:19:af:d3:17:
68:c5:da:b7:22:75:df:b0:4d:32:a3:7f:ee:f1:90:aa:db:37:
d9:b8:e7:b5:fe:75:29:8e:22:65:7e:34:de:d0:ad:5d:af:9b:
63:a9:78:5f:64:18:fe:7d:96:0e:34:09:07:80:a2:54:44:c1:
20:de:8e:4b:f1:83:d6:e1:05:f1:d6:44:35:21:92:64:52:e4:
0c:c7:b4:59:01:36:b3:c7:51:8d:5b:94:a8:3d:91:c9:cf:b5:
93:fe:f1:5a:5e:dd:08:d3:f0:ef:3d:60:09:3d:87:78:85:a4:
6d:d7:d3:25:ab:20:85:fd:80:e7:5e:f0:1a:5e:a0:80:89:e5:
3d:e9:b3:e2:05:ca:71:94:bc:4c:4d:50:ba:b2:2a:18:98:ec:
c9:9a:ab:e3
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUD8r5z5Q6mQsAzkfMp77PRCowJckwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBGRDE2NjU1MDM2OTM1MkQ2QzRDOEFCOEU5RTQyMDND
NUQ5QUJFRTAeFw0yNjAyMDIwMDU1NTBaFw0yNjAyMDUwNjQ2NTBaMDMxMTAvBgNV
BAMTKEE4NzMyOTBDMUZGQTdCQzc0ODQ3Mzk1QjEzMUZDQjlENTA1OEEwQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkhprq5kR/UPuoIzN2c3qd5Dg/
t5K3Cw0a5nH1lklkNAn3l7kxzA3Hj1yjV6XwaY6r2wsHGgjtmj+js5bspYS13x/7
LSvt/apVKWlZAPLGWCZvvDVDJyJ7TjRtrFQmkzrPergIOqD1buJ/Do1dWUpF2vda
1roV7zfh/O7nWKAJYeMzS+48PUOSuOtomO+5sAHpXdQq1eIbAL9UvQ8FvdVWc9JZ
ESPUAHj2DcZvIqLS09fjWd6SHH2PLCvGUxRUu/FEbcUipZkqhjK3S3y3XltP/gq9
j59fnAGxv1MT+844WKxhvse30O0TB2aH1RgPiKOwrTl30KcIFYzQd8TdfSI/AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUqHMpDB/6e8dIRzlbEx/LnVBYoK0wHwYDVR0j
BBgwFoAUIP0WZVA2k1LWxMirjp5CA8XZq+4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
ODk5YTE1Yi1kNWFlLTQ1ZWMtODAxMi1hNmNhYWIzZGQ4OGIvMC8yMEZEMTY2NTUw
MzY5MzUyRDZDNEM4QUI4RTlFNDIwM0M1RDlBQkVFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjBGRDE2NjU1MDM2OTM1MkQ2QzRDOEFCOEU5RTQyMDNDNUQ5
QUJFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg5OWExNWItZDVhZS00NWVjLTgw
MTItYTZjYWFiM2RkODhiLzAvMjBGRDE2NjU1MDM2OTM1MkQ2QzRDOEFCOEU5RTQy
MDNDNUQ5QUJFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKNe4DL4ZV6JQGDpdoT4lRKRh3qugSTsX0Za
GiIJLqFfsIDfFqQwEVMGus1PZXzR59HkP6xvmotNQqlwb/z6uNTjh/rYWt735gM7
wmQbI6q1f3RHVRfi2i40YxqXjpFwp+t0yrBvojejGa/TF2jF2rcidd+wTTKjf+7x
kKrbN9m457X+dSmOImV+NN7QrV2vm2OpeF9kGP59lg40CQeAolREwSDejkvxg9bh
BfHWRDUhkmRS5AzHtFkBNrPHUY1blKg9kcnPtZP+8Vpe3QjT8O89YAk9h3iFpG3X
0yWrIIX9gOde8BpeoICJ5T3ps+IFynGUvExNULqyKhiY7Mmaq+M=
-----END CERTIFICATE-----
Generated at Mon Feb 2 12:48:58 2026 by rpki-client