This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft
File: C70A343932991281F91796DB87B011987603BBF4.mft (raw, json)
Hash identifier: bRbbx4kdnpCA3mYIA3USw7OWC1uP+p6a73BBhkIQjgs=
Subject key identifier: F2:29:5F:FA:E3:AC:17:6A:95:EA:46:6D:41:A1:96:CA:CA:5E:26:FA
Authority key identifier: C7:0A:34:39:32:99:12:81:F9:17:96:DB:87:B0:11:98:76:03:BB:F4
Certificate issuer: /CN=C70A343932991281F91796DB87B011987603BBF4
Certificate serial: 0A8BAB792D82E4B1500F66975E5D84E775460748
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C70A343932991281F91796DB87B011987603BBF4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft
Manifest number: 0269
Signing time: Sat 31 Jan 2026 13:31:38 +0000
Manifest this update: Sat 31 Jan 2026 13:26:38 +0000
Manifest next update: Tue 03 Feb 2026 21:02:38 +0000
Files and hashes: 1: 3130332e3138342e3132312e302f32342d3234203d3e20313439363633.roa (hash: 8nVSKMfLnOq7H4iVikz3GDhFqGNUP7VsOtUfQqLc1tA=)
2: 3130332e3138342e3132302e302f32332d3233203d3e20313439363633.roa (hash: crc7GhKn9AnYAlLeRPgUvImKVvVRpJeq2KkcRuzsk7I=)
3: C70A343932991281F91796DB87B011987603BBF4.crl (hash: PuzSZYPlABZ3aXhqGyIH7vww71Ge41eSa8ug9aP8b8E=)
4: 3130332e3138342e3132302e302f32342d3234203d3e20313439363633.roa (hash: LB2GT5oCXXjegdmKuSVpDwI+w3SC+aDFAkzGg3DL2X4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.crl
rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C70A343932991281F91796DB87B011987603BBF4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 21:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:8b:ab:79:2d:82:e4:b1:50:0f:66:97:5e:5d:84:e7:75:46:07:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C70A343932991281F91796DB87B011987603BBF4
Validity
Not Before: Jan 31 13:26:38 2026 GMT
Not After : Feb 3 21:02:38 2026 GMT
Subject: CN=F2295FFAE3AC176A95EA466D41A196CACA5E26FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:17:da:55:ad:cf:47:37:c3:a5:5b:e4:1b:79:
3a:ac:e4:fe:5f:69:a6:4d:70:90:17:db:00:0e:8b:
3f:85:de:18:63:92:87:43:6a:48:57:55:1f:8f:15:
7d:e5:6b:29:7f:be:b7:da:71:a2:a2:57:6c:1c:3b:
b1:c6:e6:fd:09:a7:29:74:93:77:a8:d2:61:1b:75:
68:58:f5:6d:cc:51:eb:fa:32:a4:8b:90:86:88:fe:
77:f7:17:d2:73:5a:d3:58:34:cc:01:db:8d:1f:20:
e5:25:aa:b9:1c:ff:95:c3:b8:10:b9:9a:6f:43:79:
3f:75:b3:ba:d6:3c:c2:28:e0:5d:5c:b0:46:b0:f5:
7b:00:0d:5a:08:fe:56:dc:04:1f:d4:94:ea:a3:13:
00:85:67:59:a6:5c:c0:17:8b:ee:9d:3b:e0:d0:2c:
38:22:5c:ce:43:c0:f7:41:4c:21:14:10:5a:25:38:
21:7b:2c:ee:d6:27:ac:5a:06:94:2c:58:2e:63:f0:
80:a1:fe:cd:32:44:cf:31:bf:b2:fb:12:3f:0b:a6:
0c:84:6f:f8:20:ab:75:a7:16:fb:b9:d7:93:f6:bd:
95:7e:01:58:c1:e5:52:78:48:e0:ec:9c:5d:b2:a6:
ac:d5:9f:2a:fd:c8:2d:1e:bb:f2:9d:b1:06:b1:86:
26:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:29:5F:FA:E3:AC:17:6A:95:EA:46:6D:41:A1:96:CA:CA:5E:26:FA
X509v3 Authority Key Identifier:
keyid:C7:0A:34:39:32:99:12:81:F9:17:96:DB:87:B0:11:98:76:03:BB:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C70A343932991281F91796DB87B011987603BBF4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c3:fc:c3:25:38:3e:50:24:d0:a5:49:d9:75:62:83:bf:35:
04:da:0c:29:ce:8b:09:eb:a7:83:f6:af:81:f2:a5:89:72:5c:
0f:47:22:01:54:5d:7f:e7:bb:10:86:4f:88:cd:93:e1:ab:9f:
97:3b:44:89:dc:d6:d2:ca:64:c6:1d:29:69:9f:4d:d9:f3:7f:
a0:b6:48:8b:45:0e:b4:02:c3:02:36:81:e4:23:e1:ed:51:ae:
18:60:af:fb:d2:99:a9:83:30:a2:93:44:99:4f:f8:a7:92:32:
c7:e3:ac:53:06:1f:51:3d:e6:63:ed:c1:8e:28:75:84:16:07:
f7:de:03:de:5d:65:af:74:17:fa:42:1f:03:6a:63:b4:88:02:
f5:cd:4b:98:12:88:0c:ef:80:4f:02:6e:aa:db:cf:ff:a0:77:
68:70:ef:bb:15:56:c3:fc:aa:dd:f2:ca:de:0f:b4:f4:2e:ec:
7d:d6:91:24:60:f3:e5:52:a0:9f:2a:40:fb:e2:17:2d:67:50:
70:3f:c5:a8:2c:1a:05:aa:ad:2c:c9:1a:6d:83:e4:c5:30:0d:
a5:71:7a:ce:d4:ec:25:94:73:13:e3:9c:e7:e2:5d:55:98:5d:
28:3c:7a:7a:15:d9:32:d3:bb:74:7c:1b:dd:9e:90:46:36:94:
e5:d5:6c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:44:50 2026 by rpki-client