This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.mft
File: C45A558750D6CF5BE02532DDE80326AEF5012912.mft (raw, json)
Hash identifier: FpkByTVbunrzxNKgjJKkUQoPde+/g62+80nel/WB9g0=
Subject key identifier: D3:A6:C2:CD:8E:08:31:59:02:F5:F4:29:C4:F3:1A:C4:39:DE:58:A5
Authority key identifier: C4:5A:55:87:50:D6:CF:5B:E0:25:32:DD:E8:03:26:AE:F5:01:29:12
Certificate issuer: /CN=C45A558750D6CF5BE02532DDE80326AEF5012912
Certificate serial: E07246262E1FC65C791AA1830ADF641FFA613F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C45A558750D6CF5BE02532DDE80326AEF5012912.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.mft
Manifest number: 03B8
Signing time: Sun 01 Feb 2026 07:21:25 +0000
Manifest this update: Sun 01 Feb 2026 07:16:25 +0000
Manifest next update: Wed 04 Feb 2026 12:38:25 +0000
Files and hashes: 1: 3130332e3137302e3131352e302f32342d3234203d3e20313432333639.roa (hash: wKi20xV5IYiEYg1koyO2hLczrvapaQLTXfUibveAkFE=)
2: C45A558750D6CF5BE02532DDE80326AEF5012912.crl (hash: YVLd6Gp82cUuAxtwbarUiKUTEUGQ7NUwnoYzJGxgZU4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.crl
rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C45A558750D6CF5BE02532DDE80326AEF5012912.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 12:38:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
e0:72:46:26:2e:1f:c6:5c:79:1a:a1:83:0a:df:64:1f:fa:61:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C45A558750D6CF5BE02532DDE80326AEF5012912
Validity
Not Before: Feb 1 07:16:25 2026 GMT
Not After : Feb 4 12:38:25 2026 GMT
Subject: CN=D3A6C2CD8E08315902F5F429C4F31AC439DE58A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:aa:c5:5b:b7:1b:5a:e6:bc:b8:e1:a6:03:d0:
f2:0a:9c:98:62:4b:ee:2d:b7:a5:19:19:e2:d0:d2:
12:a9:be:a7:15:de:40:5d:39:e4:0f:2b:a4:23:83:
58:e3:02:52:72:ba:1f:05:87:cc:66:fb:b6:f6:43:
92:ed:97:dc:ac:ef:83:88:14:9b:29:74:33:74:f4:
9b:f6:65:89:53:b9:e0:04:18:dc:e0:e0:f6:4c:b6:
6c:74:63:2f:ca:80:66:9c:49:99:d9:1f:c4:b8:0a:
b5:4e:5b:93:81:0c:f7:f4:03:0f:a1:b9:af:21:9f:
32:ec:3b:b9:10:45:72:da:13:df:ad:3f:47:21:46:
11:53:29:10:ec:c8:44:99:49:b7:c0:07:0a:e4:2b:
dc:dd:74:a2:b1:b7:39:71:1f:02:b8:a5:cb:89:e6:
ba:71:93:b3:97:13:94:d5:03:b5:aa:6c:3c:09:33:
6b:d9:54:25:f5:b8:94:ff:68:9c:d0:18:af:e0:a1:
d6:08:0d:24:09:5c:a0:f6:33:19:c8:b2:87:43:45:
05:84:28:17:8f:e3:f9:20:a1:1e:f3:13:bd:a6:da:
fe:16:e5:b8:86:e3:bc:9d:2e:23:dc:03:ea:09:bc:
5c:a2:d0:9b:ac:f7:f1:d0:45:0d:04:3c:f1:24:9b:
8f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A6:C2:CD:8E:08:31:59:02:F5:F4:29:C4:F3:1A:C4:39:DE:58:A5
X509v3 Authority Key Identifier:
keyid:C4:5A:55:87:50:D6:CF:5B:E0:25:32:DD:E8:03:26:AE:F5:01:29:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C45A558750D6CF5BE02532DDE80326AEF5012912.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:0b:ce:79:2b:e8:c4:6c:f6:e8:42:fb:f5:87:83:5d:78:b8:
71:a0:b8:11:d0:84:ee:8a:e1:be:3a:01:dc:b0:f6:f4:6e:97:
c9:c0:e1:a9:21:dd:26:ed:08:b5:93:38:78:8a:31:ed:51:87:
19:d4:39:8c:c6:d4:63:e9:e5:be:9e:6b:28:8f:f8:a0:db:f7:
f3:b0:84:36:3c:4b:a7:b8:dd:63:a1:1d:1c:0c:09:c5:30:8b:
c8:fd:12:c2:b5:b4:8e:d0:17:8d:f5:84:a2:92:e1:16:cc:1f:
78:14:81:aa:20:3d:4b:40:c3:db:05:34:bc:d0:23:47:9a:00:
83:23:9f:fe:d9:ee:36:cc:df:ad:d8:e3:0e:5e:6c:36:ec:21:
97:24:a9:27:04:07:64:29:63:a5:8a:91:bb:09:dc:08:b8:5f:
92:7c:7e:90:5e:7e:47:bf:d6:4a:6a:d0:4e:03:fc:b5:a2:d9:
c4:a4:d1:d9:0c:4d:c7:d3:68:32:fd:49:5e:b0:e3:46:be:6d:
87:2f:c8:7d:91:96:9b:9a:1f:ad:28:55:53:4e:2e:28:85:30:
45:88:8d:b0:92:24:c3:32:92:5c:ef:25:f1:3b:ff:89:aa:21:
57:bb:3e:67:98:98:f7:d0:14:e3:62:20:cc:bc:9d:5b:78:81:
c7:38:bf:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:05:12 2026 by rpki-client