This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft
File: 1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft (raw, json)
Hash identifier: ZGsAbuC8NDZooEM3YQfQbhZ41ovHZGTiOODgnE56Lhc=
Subject key identifier: 9F:4C:B1:A6:57:90:01:7D:57:ED:E6:BB:1E:9B:6C:0B:8B:62:59:F1
Authority key identifier: 1D:4A:75:62:F0:96:F3:F7:53:E3:88:C1:45:94:BA:75:AE:09:E7:F3
Certificate issuer: /CN=1D4A7562F096F3F753E388C14594BA75AE09E7F3
Certificate serial: 51746D9A379B64C33A1577BDE671A2CEB1BF06BB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft
Manifest number: 01C2
Signing time: Sun 01 Feb 2026 15:01:39 +0000
Manifest this update: Sun 01 Feb 2026 14:56:39 +0000
Manifest next update: Wed 04 Feb 2026 18:58:39 +0000
Files and hashes: 1: 1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl (hash: mK7WSz8wiQG0IVF4YyiAxbArTq2p44XGOdPQdg/qHNM=)
2: 3130332e3130372e3137362e302f32342d3234203d3e20313530393434.roa (hash: t5cP9pI7pfpZ95tebj5VAs5xM+wyda4Uz0LABi641BU=)
3: 3130332e3130372e3137362e302f32332d3233203d3e20313530393434.roa (hash: +kGXvvTp0IkbxrGv/DEpgvQeRlEwoEyXoWledhe0tWQ=)
4: 3130332e3130372e3137372e302f32342d3234203d3e20313530393434.roa (hash: Tu2pBk/URNroZW6zOqNNP1pzL3rQikcBMBsuhpkJzRA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl
rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 18:58:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:74:6d:9a:37:9b:64:c3:3a:15:77:bd:e6:71:a2:ce:b1:bf:06:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D4A7562F096F3F753E388C14594BA75AE09E7F3
Validity
Not Before: Feb 1 14:56:39 2026 GMT
Not After : Feb 4 18:58:39 2026 GMT
Subject: CN=9F4CB1A65790017D57EDE6BB1E9B6C0B8B6259F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:42:f0:81:10:63:21:22:47:77:a7:ab:01:31:
de:6b:e8:95:8c:7d:5b:0a:b2:4d:0b:9f:71:f8:85:
9c:a0:ce:43:c3:e9:47:46:58:a3:ba:30:8e:2c:33:
10:1a:7a:43:9f:4c:92:b6:51:ba:65:a0:cb:f1:90:
33:c9:ce:57:3c:08:5a:2c:6b:d9:bc:49:b8:ae:d3:
7b:3e:0c:f5:7b:4a:e4:b7:ff:63:7c:e8:82:98:68:
fd:5c:40:e4:72:c9:70:b0:d3:67:24:3e:99:d1:36:
4c:03:80:59:a2:09:ea:f8:7d:6b:53:7f:d9:e1:39:
db:e2:a0:ec:ac:61:6a:46:36:87:a9:31:f8:d3:8e:
6a:a3:58:90:c9:23:81:3f:be:89:7b:0c:83:57:1d:
c3:aa:fd:26:b2:bd:a7:9f:07:81:42:cd:04:36:d4:
da:57:6e:b6:71:ba:33:61:17:bd:08:a1:6a:30:92:
28:47:f0:2b:ac:e0:b4:70:9b:c1:f3:c3:d2:d7:a8:
14:1d:e5:50:05:bd:04:f2:1b:d2:ff:94:79:9b:b7:
6a:4b:48:cb:23:7b:1b:e6:80:55:63:56:97:c5:04:
69:64:c9:a2:71:53:e0:80:35:f3:33:17:34:6e:ac:
95:df:56:8f:b5:dc:3a:13:9d:e6:2b:31:60:f0:a7:
28:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4C:B1:A6:57:90:01:7D:57:ED:E6:BB:1E:9B:6C:0B:8B:62:59:F1
X509v3 Authority Key Identifier:
keyid:1D:4A:75:62:F0:96:F3:F7:53:E3:88:C1:45:94:BA:75:AE:09:E7:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:fc:a4:98:02:a2:37:c5:49:45:b9:d8:7a:c1:4e:45:55:4d:
d7:54:c5:15:9c:d4:63:10:24:a7:ee:f1:a2:a4:c1:2e:df:c1:
f1:60:98:49:c5:52:a2:2b:f3:3b:1d:94:eb:a3:ee:17:2a:81:
ee:cc:a4:0c:9e:84:09:55:6f:b9:51:67:8b:08:8a:58:e4:f6:
09:2d:77:21:67:46:4c:6f:32:86:26:15:9b:51:25:5f:ce:64:
22:fc:14:4c:1b:bf:57:e8:5a:8a:46:39:f3:ed:1b:b3:bf:43:
af:09:ea:7c:9b:6a:ec:1a:61:72:db:40:46:c4:82:b1:12:5f:
a7:51:05:ba:12:67:eb:69:19:29:a1:70:cd:d5:5b:07:34:7b:
62:f2:b4:0a:35:71:64:46:97:62:46:45:dd:3c:cf:a3:00:68:
19:61:89:76:9b:ba:27:17:d4:be:02:d2:86:8d:fe:2f:0d:41:
0f:97:58:22:86:8a:d3:f1:bc:a4:e3:93:19:21:d3:5c:68:af:
44:f6:a8:2f:9a:c7:da:7a:81:55:30:b4:ff:02:91:67:99:d2:
bb:94:d5:d3:b1:5c:95:72:20:20:4e:9c:37:dc:1e:82:d7:6d:
d6:3a:ac:c7:33:3e:d7:11:1c:5a:69:85:c8:f8:4d:87:c3:e3:
77:4b:1f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:55 2026 by rpki-client