This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft
File: 0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft (raw, json)
Hash identifier: 3qxhX94z2Crn3y1jpPmPzw4msNX429hFq5jvu9VJDA0=
Subject key identifier: 69:CF:96:37:FD:F6:90:80:A3:3D:0E:F0:F2:0A:E0:F9:20:26:33:FE
Authority key identifier: 0D:80:04:91:C0:3B:FB:57:9D:58:FF:C7:A2:4C:AA:87:10:84:5A:9C
Certificate issuer: /CN=0D800491C03BFB579D58FFC7A24CAA8710845A9C
Certificate serial: 182E4C123FD9E4604922511BDD788A6D74E7DB5C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft
Manifest number: 016E
Signing time: Sat 31 Jan 2026 13:21:32 +0000
Manifest this update: Sat 31 Jan 2026 13:16:32 +0000
Manifest next update: Tue 03 Feb 2026 20:28:32 +0000
Files and hashes: 1: 3130332e3134342e3132392e302f32342d3234203d3e20313339343333.roa (hash: vmmdKTzGdj+WW7oR5Y7BlF5cHcjcyn2ZeY0vBD9tiWM=)
2: 3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa (hash: +5s73n1GRDKOs1PLsu8AmlmjjmE1TE3hQKNaKdkD1e0=)
3: 3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa (hash: DWfEMEPWxsUozNiwbgr8ihU7QhgizyAKxGEXUL32Nzc=)
4: 0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl (hash: ksBkaeR+VLmLLJ7EZ5pc4APVJ9MfM9BB6gDjZrPDsEY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl
rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 20:28:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:2e:4c:12:3f:d9:e4:60:49:22:51:1b:dd:78:8a:6d:74:e7:db:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D800491C03BFB579D58FFC7A24CAA8710845A9C
Validity
Not Before: Jan 31 13:16:32 2026 GMT
Not After : Feb 3 20:28:32 2026 GMT
Subject: CN=69CF9637FDF69080A33D0EF0F20AE0F9202633FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e7:f8:20:bc:f6:5b:0e:d6:89:e6:15:f3:99:
37:d7:39:30:ef:ff:5b:e7:77:eb:b3:f8:9c:20:8f:
28:f9:5b:85:f1:35:0c:74:90:e4:da:6c:0e:a8:6a:
4e:95:1d:82:22:3c:0e:55:cc:52:1e:48:fb:6e:01:
b8:83:f5:cf:86:e3:7e:04:1e:36:24:91:58:69:84:
ef:07:0f:fb:44:29:05:d0:80:e2:fb:a1:0a:44:5c:
a9:56:ca:85:f8:20:a0:28:18:d8:b6:69:58:13:8e:
b0:ff:c7:05:55:6e:d4:7d:3e:80:d7:e2:8d:2b:9f:
0a:97:5e:24:5b:93:73:24:27:f3:30:75:d4:e6:27:
7d:60:ca:40:fd:1b:a7:9e:5e:9a:23:b7:d5:a1:c2:
2a:56:c8:9b:4f:42:58:48:8c:10:8f:66:dd:40:79:
17:81:76:ad:41:6d:6e:d8:e3:b9:fd:6d:46:f2:6a:
56:f3:86:8c:27:46:3b:84:72:4e:80:2c:b0:c7:93:
4b:37:75:94:a8:c6:03:d4:09:ec:3f:99:ca:03:f4:
7b:e4:00:60:2a:9e:e6:46:f2:31:d6:bf:f5:a1:55:
16:07:33:8b:61:b5:b3:0e:c5:3f:df:a6:ff:6f:38:
7a:54:2e:74:df:dd:07:65:78:0f:60:96:9b:69:70:
64:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:CF:96:37:FD:F6:90:80:A3:3D:0E:F0:F2:0A:E0:F9:20:26:33:FE
X509v3 Authority Key Identifier:
keyid:0D:80:04:91:C0:3B:FB:57:9D:58:FF:C7:A2:4C:AA:87:10:84:5A:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a5:20:00:b9:2b:01:5b:bb:35:ce:40:98:e6:8f:5f:01:f8:
01:f7:ab:86:bb:a9:ea:9a:c7:93:1d:5f:a4:ab:0d:e8:7b:bf:
16:fe:14:cb:5c:36:ff:50:7b:63:b7:00:95:7d:87:44:82:fc:
bd:4d:3b:e8:e4:9c:d2:38:43:55:6a:27:2f:53:8d:b3:2d:f4:
84:da:d9:15:cb:84:03:41:50:31:8a:84:b0:1a:bb:6a:f6:73:
27:37:b8:f1:60:6c:c8:7a:3a:6e:ac:91:9e:18:25:dd:b2:e8:
28:09:bf:7d:2f:8e:e8:5d:53:2c:ac:ac:9b:c2:d6:db:c7:16:
34:7e:75:ff:58:5f:7a:d6:c5:65:41:fa:ff:b6:3f:c1:f5:f4:
c2:6c:e4:f3:22:88:a3:91:36:b5:3d:69:6a:46:22:e1:04:0d:
e0:73:30:1e:e3:83:60:7e:f3:9c:d2:af:d1:8e:54:a4:63:e8:
dd:d3:97:fb:ef:db:7c:b5:7b:2b:35:aa:70:de:ad:6c:f7:12:
e2:19:ff:5c:84:db:b1:b8:e5:72:cf:ad:d2:08:57:63:64:e5:
d0:76:c0:7a:f5:4d:12:a2:62:e9:ea:7a:3d:f1:84:4f:48:9a:
fa:93:dc:19:57:fb:f8:0b:2b:53:b7:0d:76:d9:98:69:f9:69:
9c:9b:f6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 16:11:37 2026 by rpki-client