This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft
File: 399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft (raw, json)
Hash identifier: mnP4kNzJEdhMTC0oLJ0tsEU4fKDfSegShyByYSZLvKA=
Subject key identifier: 1E:E3:16:2C:37:A7:46:EF:38:97:43:5B:EB:F8:A1:BA:14:A5:05:4F
Authority key identifier: 39:93:15:B1:8B:A7:D0:DD:66:6D:CA:8C:3D:BB:E0:13:57:5A:F7:D1
Certificate issuer: /CN=399315B18BA7D0DD666DCA8C3DBBE013575AF7D1
Certificate serial: 250A295ABD65225698FD307A3C8A6EAE322F08BC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft
Manifest number: 0343
Signing time: Sat 31 Jan 2026 19:10:54 +0000
Manifest this update: Sat 31 Jan 2026 19:05:54 +0000
Manifest next update: Wed 04 Feb 2026 01:26:54 +0000
Files and hashes: 1: 3130332e39342e3231322e302f32342d3234203d3e20313336313131.roa (hash: u4aBEtuM2QHTp7BELhEUw3EMWzsVzmaE71DRbevw9IE=)
2: 3130332e39342e3231322e302f32332d3233203d3e20313336313131.roa (hash: tU2O/OAH1O/qSyyJqDlWC4HBTQpL06kLsKSpR1jZ5rg=)
3: 399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl (hash: bmxFPLKhTnheMEX2lRdZzoEU9tEFOiEOd37LR7O5Vd4=)
4: 3130332e39342e3231332e302f32342d3234203d3e20313336313131.roa (hash: wesud4Ud3HCpFz3TbmwbzTcWOeds/1nSTc4iWrxHtOo=)
5: 323030313a6466313a383530303a3a2f34382d3438203d3e20313336313131.roa (hash: umMXNYB5RwjlwGFC5Wpd2rzxhTLaoa08yJ2/wNUcpx0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl
rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 01:26:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:0a:29:5a:bd:65:22:56:98:fd:30:7a:3c:8a:6e:ae:32:2f:08:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399315B18BA7D0DD666DCA8C3DBBE013575AF7D1
Validity
Not Before: Jan 31 19:05:54 2026 GMT
Not After : Feb 4 01:26:54 2026 GMT
Subject: CN=1EE3162C37A746EF3897435BEBF8A1BA14A5054F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d0:d4:47:f9:e7:03:ab:a1:fa:83:92:c6:29:
46:6c:3d:29:89:36:01:37:8f:5a:cb:84:1d:99:bc:
b5:c6:74:45:f6:cf:d1:52:6f:c6:1c:81:6b:52:92:
d1:e1:4a:e5:68:5d:c3:07:52:2e:bf:82:dc:46:73:
3b:57:cc:af:95:b0:9c:80:92:f8:84:73:27:4a:5d:
4f:77:1d:17:c2:7d:4c:0f:ea:db:6c:20:c4:44:52:
25:1e:c8:84:f6:97:11:f9:90:c6:b2:b4:08:a7:e0:
fe:67:65:4c:61:58:6f:b3:b2:56:10:26:ab:13:36:
d4:c6:2c:c5:0c:97:c8:e4:e7:c3:28:93:c3:ba:37:
3e:5d:b8:b4:08:f9:41:68:18:f6:f9:1e:d5:16:8e:
92:3d:ab:10:b5:4a:98:96:e1:e0:16:15:ca:b5:37:
08:c7:f2:f6:0c:29:6a:55:e8:78:3e:c1:a0:28:55:
bd:9b:41:1b:29:73:e6:48:62:a8:18:4b:52:ac:63:
4e:27:b7:c5:0d:88:d2:9f:ac:9e:1e:02:8f:14:0b:
e2:e6:cd:52:5f:83:a4:ec:08:9b:2c:7b:3f:a8:5f:
e4:5b:92:24:95:08:b3:3b:86:41:c2:a4:b6:fe:60:
94:d5:08:0a:43:e5:cc:2e:b3:86:e8:75:f4:ea:ec:
a6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E3:16:2C:37:A7:46:EF:38:97:43:5B:EB:F8:A1:BA:14:A5:05:4F
X509v3 Authority Key Identifier:
keyid:39:93:15:B1:8B:A7:D0:DD:66:6D:CA:8C:3D:BB:E0:13:57:5A:F7:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e5:06:a8:a0:04:47:34:15:6c:77:8a:7e:77:e4:bd:0e:42:
3e:d5:d1:b7:ca:70:18:4a:dc:3f:df:25:bc:ac:db:ab:4c:0e:
ec:69:cf:ad:fb:41:e2:15:33:0f:47:4e:ab:83:ed:04:50:4e:
15:2c:d7:cb:09:c2:09:b5:49:6d:ea:db:7d:97:9c:77:99:c3:
de:b2:13:64:cd:a4:45:94:12:83:bb:d0:7c:5e:45:d8:a6:32:
83:66:a8:d4:98:51:eb:4c:ee:b8:6e:2a:04:09:8e:40:c3:71:
0c:54:66:ff:7c:10:21:1f:0c:c8:95:9e:09:d6:b3:f8:91:e0:
5b:47:87:ef:28:f2:14:57:1c:2a:0a:07:67:09:ef:f8:2f:2b:
56:4f:de:28:a0:66:2d:2b:ad:fb:04:be:57:57:5e:71:41:95:
7a:da:ae:c5:83:79:e7:81:3c:76:4f:32:82:7d:ec:88:99:48:
71:c3:b6:7c:2a:c3:6c:be:22:1f:b6:73:0e:4f:42:3e:cb:cb:
f3:2a:98:ce:78:df:31:f9:87:75:89:14:9e:fe:f3:6c:c1:39:
6b:c2:d7:56:68:3d:5a:be:63:ac:62:45:4d:70:03:aa:4b:97:
92:19:6c:50:b3:ce:f4:27:66:a5:45:4d:17:b2:20:ad:33:8b:
85:6c:23:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:48:11 2026 by rpki-client