This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.mft
File: D34F7D48A07BB8A2DEEDC8C87819771181935231.mft (raw, json)
Hash identifier: zXpNHV64cJUFUd7Kmizj9nhJ9xRO8I4vdj9mOHCZufo=
Subject key identifier: E9:98:F0:F6:CA:05:AB:54:F3:AC:BB:01:D6:F0:F4:4A:FD:C3:4C:D0
Authority key identifier: D3:4F:7D:48:A0:7B:B8:A2:DE:ED:C8:C8:78:19:77:11:81:93:52:31
Certificate issuer: /CN=D34F7D48A07BB8A2DEEDC8C87819771181935231
Certificate serial: 14341597693C64A9883C25008AF5F65A3186B3B4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D34F7D48A07BB8A2DEEDC8C87819771181935231.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.mft
Manifest number: 023E
Signing time: Sat 31 Jan 2026 19:10:00 +0000
Manifest this update: Sat 31 Jan 2026 19:05:00 +0000
Manifest next update: Wed 04 Feb 2026 05:18:00 +0000
Files and hashes: 1: 3130332e3138392e3131342e302f32342d3234203d3e20313439373533.roa (hash: mJRfdF8Fdla37pRzxHiZB6KLj2ueLFTilKfm0V/9nTs=)
2: D34F7D48A07BB8A2DEEDC8C87819771181935231.crl (hash: PPCAnnoXfmtaAwOT2L4NQ4fD5LBI3ik1izgagc+qXrU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.crl
rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D34F7D48A07BB8A2DEEDC8C87819771181935231.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 05:18:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:34:15:97:69:3c:64:a9:88:3c:25:00:8a:f5:f6:5a:31:86:b3:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34F7D48A07BB8A2DEEDC8C87819771181935231
Validity
Not Before: Jan 31 19:05:00 2026 GMT
Not After : Feb 4 05:18:00 2026 GMT
Subject: CN=E998F0F6CA05AB54F3ACBB01D6F0F44AFDC34CD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:74:e3:21:8a:28:81:86:11:35:1a:c8:65:2a:
77:1c:f0:e9:94:69:f1:23:e0:f5:c9:e7:b4:f0:16:
fe:c9:75:a7:85:c9:39:c4:1d:fd:58:8e:81:a3:73:
70:c3:4a:d4:39:c1:c8:8f:87:1b:1a:c3:d5:52:74:
4e:e6:83:37:8d:3d:c6:c0:9a:d0:22:46:e5:76:9b:
2e:25:22:09:52:ed:18:0e:e7:15:6b:92:f4:bd:14:
a7:b7:33:db:65:60:6e:d0:64:30:b2:af:23:be:bb:
9f:89:fe:a1:f4:08:c0:24:68:83:2b:cd:15:72:c8:
c8:05:a0:95:65:ff:e9:9a:78:06:5f:60:9c:bd:d5:
6b:09:b7:f9:46:a7:43:d2:23:47:b3:14:e0:36:3e:
2a:3d:15:ef:73:70:7a:8c:ec:40:f2:e8:e4:49:4a:
45:dd:11:ce:a0:d3:20:d5:4b:d3:e0:6b:af:2b:70:
72:31:74:51:8c:8e:14:08:37:03:11:9d:29:dd:55:
c1:d6:f5:df:3e:29:a1:c9:33:e8:fd:2d:83:a8:d0:
90:09:82:a9:ae:b1:7d:41:4d:31:a9:17:b0:54:ed:
d9:d3:00:d8:05:76:69:ec:29:c9:12:3d:56:d5:c7:
b0:58:8e:22:68:a8:4c:56:21:a0:36:be:ab:ae:a7:
23:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:98:F0:F6:CA:05:AB:54:F3:AC:BB:01:D6:F0:F4:4A:FD:C3:4C:D0
X509v3 Authority Key Identifier:
keyid:D3:4F:7D:48:A0:7B:B8:A2:DE:ED:C8:C8:78:19:77:11:81:93:52:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D34F7D48A07BB8A2DEEDC8C87819771181935231.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:46:ce:cd:d4:52:58:50:e7:d6:f9:37:52:1c:ce:96:9c:89:
75:1e:7b:fd:88:b2:0e:0e:a0:a8:27:a7:e3:0e:f7:7c:53:b8:
c3:23:be:7e:07:ca:ac:e7:ff:9f:05:0a:20:21:e5:f6:66:2f:
b0:1b:00:3e:82:27:75:be:fa:f8:3b:bf:2e:d9:a3:e3:f8:0c:
2d:d2:5c:07:63:af:8c:ec:ec:08:e1:f6:90:38:b4:8b:95:95:
92:3d:e0:dc:13:fd:53:15:c1:19:47:07:de:65:8e:ec:b2:7a:
3b:16:cf:5d:6d:cf:45:e3:9b:35:9a:89:d3:d3:05:bc:df:8f:
1b:42:5b:79:85:a5:d5:f3:47:f0:ac:f4:a6:58:7a:92:75:5f:
a9:e3:c6:27:43:74:ba:bd:69:6b:b2:d7:97:51:67:18:6b:1f:
7d:bf:9b:a1:9f:27:23:a7:42:17:35:6a:7c:73:2e:11:04:00:
ac:fc:2f:9a:57:d5:36:71:50:8a:7a:79:e3:79:57:77:4f:89:
97:01:08:5e:8f:54:e2:20:70:c1:b8:bc:71:76:99:d2:4b:16:
23:38:03:ea:88:9c:8d:ca:e8:59:62:39:46:39:b6:0c:12:01:
c4:64:56:e9:b1:a9:d0:b0:ce:6e:8b:d7:8b:9e:cd:3a:e3:87:
a6:5a:95:db
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUFDQVl2k8ZKmIPCUAivX2WjGGs7QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0RjdENDhBMDdCQjhBMkRFRURDOEM4NzgxOTc3MTE4
MTkzNTIzMTAeFw0yNjAxMzExOTA1MDBaFw0yNjAyMDQwNTE4MDBaMDMxMTAvBgNV
BAMTKEU5OThGMEY2Q0EwNUFCNTRGM0FDQkIwMUQ2RjBGNDRBRkRDMzRDRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKdOMhiiiBhhE1GshlKncc8OmU
afEj4PXJ57TwFv7JdaeFyTnEHf1YjoGjc3DDStQ5wciPhxsaw9VSdE7mgzeNPcbA
mtAiRuV2my4lIglS7RgO5xVrkvS9FKe3M9tlYG7QZDCyryO+u5+J/qH0CMAkaIMr
zRVyyMgFoJVl/+maeAZfYJy91WsJt/lGp0PSI0ezFOA2Pio9Fe9zcHqM7EDy6ORJ
SkXdEc6g0yDVS9Pga68rcHIxdFGMjhQINwMRnSndVcHW9d8+KaHJM+j9LYOo0JAJ
gqmusX1BTTGpF7BU7dnTANgFdmnsKckSPVbVx7BYjiJoqExWIaA2vquupyMxAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU6Zjw9soFq1TzrLsB1vD0Sv3DTNAwHwYDVR0j
BBgwFoAU0099SKB7uKLe7cjIeBl3EYGTUjEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
MzU5YjZhMy1iNzRiLTRiYWEtOTkzYS04MThmYjcyMTA3MjIvMC9EMzRGN0Q0OEEw
N0JCOEEyREVFREM4Qzg3ODE5NzcxMTgxOTM1MjMxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDM0RjdENDhBMDdCQjhBMkRFRURDOEM4NzgxOTc3MTE4MTkz
NTIzMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzM1OWI2YTMtYjc0Yi00YmFhLTk5
M2EtODE4ZmI3MjEwNzIyLzAvRDM0RjdENDhBMDdCQjhBMkRFRURDOEM4NzgxOTc3
MTE4MTkzNTIzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKxGzs3UUlhQ59b5N1IczpaciXUee/2Isg4O
oKgnp+MO93xTuMMjvn4Hyqzn/58FCiAh5fZmL7AbAD6CJ3W++vg7vy7Zo+P4DC3S
XAdjr4zs7Ajh9pA4tIuVlZI94NwT/VMVwRlHB95ljuyyejsWz11tz0XjmzWaidPT
BbzfjxtCW3mFpdXzR/Cs9KZYepJ1X6njxidDdLq9aWuy15dRZxhrH32/m6GfJyOn
Qhc1anxzLhEEAKz8L5pX1TZxUIp6eeN5V3dPiZcBCF6PVOIgcMG4vHF2mdJLFiM4
A+qInI3K6FliOUY5tgwSAcRkVumxqdCwzm6L14uezTrjh6Zalds=
-----END CERTIFICATE-----
Generated at Mon Feb 2 10:06:06 2026 by rpki-client