This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft
File: 8874CE775F191B6E0B34A789A359EB9FB93B737E.mft (raw, json)
Hash identifier: U0Wi8PfxUcZHjaeOeTUAbGA31uK0/ll/z/CH6aXOeeQ=
Subject key identifier: ED:93:95:43:B9:16:1C:C0:F8:F5:F5:72:A6:FF:14:8B:90:C2:1C:1C
Authority key identifier: 88:74:CE:77:5F:19:1B:6E:0B:34:A7:89:A3:59:EB:9F:B9:3B:73:7E
Certificate issuer: /CN=8874CE775F191B6E0B34A789A359EB9FB93B737E
Certificate serial: 6D3F46FFC612F7F10E6D2569744B6ABFEB275B4F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft
Manifest number: 02A0
Signing time: Sun 01 Feb 2026 08:40:47 +0000
Manifest this update: Sun 01 Feb 2026 08:35:47 +0000
Manifest next update: Wed 04 Feb 2026 18:54:47 +0000
Files and hashes: 1: 8874CE775F191B6E0B34A789A359EB9FB93B737E.crl (hash: iM8lbMIhcNdRT/WQcFfrABu1iS/dUX+dzihbSfdg0cg=)
2: 3130332e3137322e32342e302f32342d3234203d3e20313432333837.roa (hash: nL/HZGA0E7GxsNtQZwq3/bQqUnFo5wNCWdHlAXFVa2g=)
3: 3130332e3137322e32352e302f32342d3234203d3e20313432333837.roa (hash: aI45yKhAru9VHfZlQWe/rwkciB33mSYkuVbNTgyinfk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.crl
rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 18:54:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:3f:46:ff:c6:12:f7:f1:0e:6d:25:69:74:4b:6a:bf:eb:27:5b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8874CE775F191B6E0B34A789A359EB9FB93B737E
Validity
Not Before: Feb 1 08:35:47 2026 GMT
Not After : Feb 4 18:54:47 2026 GMT
Subject: CN=ED939543B9161CC0F8F5F572A6FF148B90C21C1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:73:8a:e4:b7:30:9f:b2:ad:d4:cb:76:04:18:
3c:c2:f5:5e:d3:5c:f3:71:29:ea:70:02:0b:b0:fe:
43:43:af:e8:64:51:94:1f:65:c9:62:5f:41:8b:4c:
83:1d:a2:de:b6:97:e6:56:07:73:3c:2f:59:a2:e6:
57:2f:09:ff:2f:33:8d:91:38:0a:3c:2c:3f:e8:95:
ff:5c:99:fa:62:c3:45:91:7f:e2:d4:76:2c:6b:28:
2f:e9:22:58:03:9c:19:01:da:71:9e:8b:7d:59:3f:
43:21:83:99:1e:13:7b:e7:94:2e:d5:2a:85:e3:cc:
2b:4e:a4:0c:af:61:07:74:51:58:24:dd:7f:92:a4:
73:7b:33:bf:9b:f5:98:e4:81:9a:f6:ee:c1:b5:85:
0f:96:7f:9d:93:32:fd:60:58:1a:d2:cb:c9:4e:9d:
de:74:46:06:e0:c6:3a:c9:a3:a9:a1:42:fa:b2:d7:
63:f2:97:9e:07:96:93:a7:a2:28:88:76:47:c5:b1:
ee:e1:48:f7:21:2f:33:1c:35:8e:13:46:b4:09:f1:
dc:ab:22:5f:f4:74:88:76:6c:17:e0:fd:d5:0e:d7:
f8:32:9c:a6:1d:e3:02:94:75:81:a3:c3:a6:d5:dd:
d4:e2:d1:f8:1a:6f:61:0b:19:6a:ff:be:83:83:a5:
11:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:93:95:43:B9:16:1C:C0:F8:F5:F5:72:A6:FF:14:8B:90:C2:1C:1C
X509v3 Authority Key Identifier:
keyid:88:74:CE:77:5F:19:1B:6E:0B:34:A7:89:A3:59:EB:9F:B9:3B:73:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ad:7d:61:db:65:a7:09:8b:4d:b3:1d:54:3b:b6:bc:16:8e:
ad:35:8c:bc:60:93:1c:8f:05:75:39:16:17:73:fa:ad:a5:89:
4d:53:b5:83:31:3b:8c:3b:a1:0f:cf:0f:2e:04:32:df:26:95:
14:37:e5:d4:ff:8c:cc:fb:49:d8:8f:f1:25:33:0a:1c:5b:90:
b6:17:fa:03:3e:73:65:09:3c:2f:38:ed:6a:d8:5f:04:bb:c3:
db:c3:06:96:04:7e:e9:49:0e:a3:d4:36:d0:54:02:e1:42:a8:
65:19:3d:c5:79:d2:33:30:62:96:44:cc:93:e0:18:d5:8b:48:
4f:09:49:a6:7c:69:64:37:73:2d:93:15:a6:96:50:3d:ae:bb:
c3:27:66:33:64:1f:95:69:f9:13:51:fd:a6:7b:9a:34:f7:dc:
91:03:e6:ee:c3:17:bc:25:c7:87:84:8d:90:e7:09:81:ce:6b:
b5:56:20:dd:1a:51:cc:49:e0:b6:d9:e5:91:2e:e1:53:dc:48:
39:96:bd:d9:cd:75:75:92:d5:b0:73:c4:0d:c1:3c:ef:17:f7:
97:ca:b7:b2:6e:dd:3f:ca:2d:1c:7d:79:f6:b5:5e:4a:2f:b8:
7b:4c:22:e4:17:a6:ad:78:22:b3:3f:28:2c:d8:4f:af:a0:57:
8d:47:08:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:05:14 2026 by rpki-client