This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.mft
File: C5247B1CF64591B1DB27280B439B507E56BF0232.mft (raw, json)
Hash identifier: vTdK/3RAwaLRm6JYTgHpPHZxGdzxUtOJePO2jKdo7bk=
Subject key identifier: 02:25:74:85:76:C6:9A:DF:A4:30:02:35:45:5B:60:F8:18:29:02:97
Authority key identifier: C5:24:7B:1C:F6:45:91:B1:DB:27:28:0B:43:9B:50:7E:56:BF:02:32
Certificate issuer: /CN=C5247B1CF64591B1DB27280B439B507E56BF0232
Certificate serial: 50703A089EEC3A97B56212F02B3223938721EA4F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5247B1CF64591B1DB27280B439B507E56BF0232.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.mft
Manifest number: 048F
Signing time: Mon 02 Feb 2026 01:51:23 +0000
Manifest this update: Mon 02 Feb 2026 01:46:23 +0000
Manifest next update: Thu 05 Feb 2026 07:37:23 +0000
Files and hashes: 1: 3230332e38312e3138342e302f32312d3234203d3e203234353338.roa (hash: fLSt4OmsorwQGSOaGglnH8ttitbrl6AJWQaVzHo2NOU=)
2: C5247B1CF64591B1DB27280B439B507E56BF0232.crl (hash: EkYJQEkbnMjPH9KDfyNUpBcipRiHQ3fEnkzQHq7esg0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.crl
rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5247B1CF64591B1DB27280B439B507E56BF0232.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:70:3a:08:9e:ec:3a:97:b5:62:12:f0:2b:32:23:93:87:21:ea:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5247B1CF64591B1DB27280B439B507E56BF0232
Validity
Not Before: Feb 2 01:46:23 2026 GMT
Not After : Feb 5 07:37:23 2026 GMT
Subject: CN=0225748576C69ADFA4300235455B60F818290297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:36:9b:aa:26:57:97:a6:33:a4:8e:aa:3c:46:
49:62:06:4b:70:c1:24:71:c1:ae:95:a6:d6:38:32:
5e:d4:4c:10:4d:08:4b:00:96:bf:cb:47:e2:43:0f:
0e:de:ed:89:72:65:5c:0f:7d:14:9e:02:61:4e:df:
4c:48:b6:2d:75:f1:56:f6:2d:b4:54:89:49:22:9a:
9a:fa:c1:d9:63:45:5b:4d:70:39:da:bb:58:49:6b:
d4:fa:21:e2:d5:25:61:f1:c5:be:4f:77:51:40:eb:
fd:6a:c2:0e:3e:ce:31:65:20:8d:ca:b1:d9:ee:cf:
06:d6:af:0d:bf:ba:03:a0:06:1a:d6:74:ff:af:76:
3c:37:03:04:a9:42:04:1b:58:d0:78:b4:de:06:d4:
99:c5:a2:a3:6d:29:29:b8:ac:18:ef:ea:be:e0:39:
aa:20:ce:4c:2e:43:28:d6:a4:6f:f6:85:4c:5c:4f:
2c:ed:94:7d:39:34:da:ef:f5:18:fd:16:09:d1:ea:
8d:99:3c:7d:ad:62:7b:fc:ee:f6:0a:c5:f7:f2:55:
9b:8d:9c:20:a5:66:b7:0f:71:58:be:e8:34:d1:88:
ec:c6:cd:f0:9e:22:8e:d1:2b:81:da:2e:04:68:16:
07:ba:05:a2:90:f0:68:0c:7c:4e:72:45:9d:91:b1:
40:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:25:74:85:76:C6:9A:DF:A4:30:02:35:45:5B:60:F8:18:29:02:97
X509v3 Authority Key Identifier:
keyid:C5:24:7B:1C:F6:45:91:B1:DB:27:28:0B:43:9B:50:7E:56:BF:02:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5247B1CF64591B1DB27280B439B507E56BF0232.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a2:f2:cf:4b:15:90:72:30:b1:ac:6b:cc:fa:b2:b7:4d:44:
3c:e8:41:77:c3:f6:c2:90:4a:c1:91:45:99:79:63:8e:3c:0d:
09:ae:31:42:37:9e:9c:e2:52:70:4d:b0:46:a7:d4:f3:5a:9d:
95:c4:8d:e3:e2:6b:e2:24:a0:55:78:84:19:9c:a4:34:ed:4c:
64:39:0f:d8:2d:36:8b:bc:07:7a:d3:d2:91:88:47:84:cb:71:
2e:97:b5:99:f4:87:c4:4e:24:a0:36:f1:f1:7e:89:32:9b:b8:
56:fd:b4:b0:65:d3:66:ee:3d:58:16:45:5a:75:bf:44:f4:3e:
75:24:4d:0e:a6:09:5c:a0:63:8e:d7:41:8e:bd:5f:2b:71:33:
7f:61:64:9b:ee:4e:49:a9:66:ea:ab:70:08:10:cd:cf:5c:29:
3b:12:35:2c:77:04:a4:74:cc:eb:92:24:45:33:21:37:ac:3f:
97:bd:6a:75:80:8c:b3:00:b2:25:e2:83:5e:92:7a:b7:67:1a:
01:60:9d:54:a4:81:cc:86:46:31:d0:cd:c8:2b:da:33:2d:aa:
f6:5f:0e:6b:18:6d:78:28:a8:b5:ac:21:2c:a5:16:6a:81:3e:
59:93:f8:82:c5:65:7a:e1:99:29:c0:c7:22:75:10:a2:98:20:
c6:e5:ab:40
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUUHA6CJ7sOpe1YhLwKzIjk4ch6k8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzUyNDdCMUNGNjQ1OTFCMURCMjcyODBCNDM5QjUwN0U1
NkJGMDIzMjAeFw0yNjAyMDIwMTQ2MjNaFw0yNjAyMDUwNzM3MjNaMDMxMTAvBgNV
BAMTKDAyMjU3NDg1NzZDNjlBREZBNDMwMDIzNTQ1NUI2MEY4MTgyOTAyOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDENpuqJleXpjOkjqo8RkliBktw
wSRxwa6VptY4Ml7UTBBNCEsAlr/LR+JDDw7e7YlyZVwPfRSeAmFO30xIti118Vb2
LbRUiUkimpr6wdljRVtNcDnau1hJa9T6IeLVJWHxxb5Pd1FA6/1qwg4+zjFlII3K
sdnuzwbWrw2/ugOgBhrWdP+vdjw3AwSpQgQbWNB4tN4G1JnFoqNtKSm4rBjv6r7g
OaogzkwuQyjWpG/2hUxcTyztlH05NNrv9Rj9FgnR6o2ZPH2tYnv87vYKxffyVZuN
nCClZrcPcVi+6DTRiOzGzfCeIo7RK4HaLgRoFge6BaKQ8GgMfE5yRZ2RsUDLAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUAiV0hXbGmt+kMAI1RVtg+BgpApcwHwYDVR0j
BBgwFoAUxSR7HPZFkbHbJygLQ5tQfla/AjIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
MWEyOWE3NS1jNWI5LTQ3NWItOWQ5Ni02ZDFhMTVlYWUyNGQvMC9DNTI0N0IxQ0Y2
NDU5MUIxREIyNzI4MEI0MzlCNTA3RTU2QkYwMjMyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzUyNDdCMUNGNjQ1OTFCMURCMjcyODBCNDM5QjUwN0U1NkJG
MDIzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFhMjlhNzUtYzViOS00NzViLTlk
OTYtNmQxYTE1ZWFlMjRkLzAvQzUyNDdCMUNGNjQ1OTFCMURCMjcyODBCNDM5QjUw
N0U1NkJGMDIzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHqi8s9LFZByMLGsa8z6srdNRDzoQXfD9sKQ
SsGRRZl5Y448DQmuMUI3npziUnBNsEan1PNanZXEjePia+IkoFV4hBmcpDTtTGQ5
D9gtNou8B3rT0pGIR4TLcS6XtZn0h8ROJKA28fF+iTKbuFb9tLBl02buPVgWRVp1
v0T0PnUkTQ6mCVygY47XQY69XytxM39hZJvuTkmpZuqrcAgQzc9cKTsSNSx3BKR0
zOuSJEUzITesP5e9anWAjLMAsiXig16SerdnGgFgnVSkgcyGRjHQzcgr2jMtqvZf
DmsYbXgoqLWsISylFmqBPlmT+ILFZXrhmSnAxyJ1EKKYIMblq0A=
-----END CERTIFICATE-----
Generated at Mon Feb 2 10:05:08 2026 by rpki-client