This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/26A14190F845A3F3FC336BD3062AE6F165B97E5C.mft
File: 26A14190F845A3F3FC336BD3062AE6F165B97E5C.mft (raw, json)
Hash identifier: vHLbOCjaos43pXwTIAXrXWiCjChVBh828TZm3dLQca0=
Subject key identifier: F7:4E:1A:54:B3:78:B5:05:9E:6F:B8:1E:6B:8B:78:1A:84:5B:FC:3B
Authority key identifier: 26:A1:41:90:F8:45:A3:F3:FC:33:6B:D3:06:2A:E6:F1:65:B9:7E:5C
Certificate issuer: /CN=26A14190F845A3F3FC336BD3062AE6F165B97E5C
Certificate serial: 60CE1A87239592BE2F55AF4E9D88560086021611
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26A14190F845A3F3FC336BD3062AE6F165B97E5C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/26A14190F845A3F3FC336BD3062AE6F165B97E5C.mft
Manifest number: 01E4
Signing time: Tue 02 Dec 2025 16:30:53 +0000
Manifest this update: Tue 02 Dec 2025 16:25:53 +0000
Manifest next update: Fri 05 Dec 2025 23:50:53 +0000
Files and hashes: 1: 3130332e3134352e3134362e302f32342d3234203d3e20313430303038.roa (hash: l6aeKW09Sx7rSFkeI19KtMnYYrlj03ziclyGv0GOLhU=)
2: 26A14190F845A3F3FC336BD3062AE6F165B97E5C.crl (hash: LwDSCr45h1DkjsAgmCrMCL0p7VjQYjkBFhaCm8E0BH8=)
3: 3130332e3134352e3134362e302f32332d3233203d3e20313430303038.roa (hash: tPkwmcbFGdH2Zdm8XN8SrM9FraltUANniKZrGodwkPI=)
4: 3130332e3134352e3134372e302f32342d3234203d3e20313430303038.roa (hash: FzyKL9bCnJSB3v6U9N3ecP/uhXzcWqpKC54Mt7U5nck=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/26A14190F845A3F3FC336BD3062AE6F165B97E5C.crl
rsync://repo-rpki.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/26A14190F845A3F3FC336BD3062AE6F165B97E5C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26A14190F845A3F3FC336BD3062AE6F165B97E5C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Dec 2025 23:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:ce:1a:87:23:95:92:be:2f:55:af:4e:9d:88:56:00:86:02:16:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26A14190F845A3F3FC336BD3062AE6F165B97E5C
Validity
Not Before: Dec 2 16:25:53 2025 GMT
Not After : Dec 5 23:50:53 2025 GMT
Subject: CN=F74E1A54B378B5059E6FB81E6B8B781A845BFC3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:ff:f9:8f:dc:85:0b:db:3a:95:95:3a:69:88:
d9:b0:9a:2f:02:58:ba:f2:63:72:c9:e3:0c:a6:22:
29:35:16:d6:c3:b8:d5:30:24:49:33:b8:de:cd:a3:
a1:07:3b:d8:53:51:6a:31:13:a2:fa:09:73:d2:a7:
d5:8c:03:fe:09:f1:2c:0d:0c:0d:b3:01:46:0f:4b:
f2:aa:42:a7:8a:37:51:41:28:9d:36:73:07:39:5e:
a5:95:99:21:38:d4:a1:78:1e:bb:2a:69:c9:9d:23:
e9:a7:6a:82:13:c8:28:67:ca:6b:6d:0d:be:20:0b:
1d:ed:5e:b5:d0:49:78:5f:92:80:4d:50:b8:fe:f7:
7b:f0:e8:0b:99:83:e6:b5:a7:e2:e1:c3:5b:15:d0:
78:3d:cb:b7:04:af:3b:5f:a9:1d:55:d2:4e:ef:7f:
e3:30:c3:07:c3:c8:60:a9:ec:0d:66:5c:a4:59:a2:
ef:e4:fe:16:e2:10:cd:ed:43:70:51:e0:70:a3:f5:
7f:72:01:cb:13:4e:e6:98:54:79:73:fa:5b:6a:2f:
94:eb:8b:d0:ef:38:db:f4:ed:58:df:eb:3a:c8:9e:
9c:03:fa:68:e5:36:93:ce:0f:ed:b0:cc:50:26:c6:
bb:c6:93:82:76:32:6d:5b:a3:f5:6c:47:b7:9e:ac:
ad:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:4E:1A:54:B3:78:B5:05:9E:6F:B8:1E:6B:8B:78:1A:84:5B:FC:3B
X509v3 Authority Key Identifier:
keyid:26:A1:41:90:F8:45:A3:F3:FC:33:6B:D3:06:2A:E6:F1:65:B9:7E:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/26A14190F845A3F3FC336BD3062AE6F165B97E5C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26A14190F845A3F3FC336BD3062AE6F165B97E5C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/26A14190F845A3F3FC336BD3062AE6F165B97E5C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:dd:7e:83:d4:7e:04:6c:de:4f:c4:86:23:b6:5e:5a:88:4e:
d4:a1:b1:8a:6a:a4:2f:49:75:4f:41:5a:4f:14:fd:86:d0:e1:
ab:49:77:54:d9:08:da:9c:46:f1:f2:30:9f:b4:bb:2f:f7:00:
aa:56:2c:4e:a5:d4:39:bf:8d:c3:25:45:8e:e7:73:fb:c9:c4:
72:0a:3b:f8:a6:95:de:14:cf:29:99:2e:55:09:ae:3f:03:d7:
82:e3:44:3e:77:da:97:f4:2a:f5:93:fe:0c:e1:bb:e7:9a:fc:
bc:fb:fd:0f:61:78:dd:68:67:a4:c2:82:48:86:c3:61:36:1a:
91:73:2c:eb:0f:d8:73:35:cb:29:e4:21:f5:91:19:0b:8f:ba:
51:95:ff:2a:1f:01:8b:56:c2:8c:8e:39:91:20:22:d3:c4:d1:
93:3e:ee:c1:7f:f8:78:b4:4d:83:d0:6e:3c:a5:34:d2:07:43:
2a:4d:9e:29:13:56:35:73:d1:f6:53:a0:70:6a:a4:d5:7e:ee:
b5:14:af:f7:b6:44:6e:05:2d:84:2f:0c:8d:f1:89:bf:fb:e9:
36:92:24:88:09:b9:74:c6:68:e1:b7:90:fa:24:f5:b5:a3:dd:
04:97:6a:c5:91:9d:cb:d2:4a:19:cf:8b:bd:7e:66:1f:9b:40:
fb:3e:1f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 15:30:24 2025 by rpki-client