This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.mft
File: A142E54B1173D871802220D7946F31C1C8F55F58.mft (raw, json)
Hash identifier: grWBVgbHuNMDyMkHU1+c7uauWiKIDNZ4Y5LzdKzJngs=
Subject key identifier: 47:42:DC:48:15:7D:1E:B4:2B:8A:E9:C0:D7:55:98:B4:9A:D4:63:62
Authority key identifier: A1:42:E5:4B:11:73:D8:71:80:22:20:D7:94:6F:31:C1:C8:F5:5F:58
Certificate issuer: /CN=A142E54B1173D871802220D7946F31C1C8F55F58
Certificate serial: 74E5BEAE264E92E5671BC2EEE25042B64F98BFC2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A142E54B1173D871802220D7946F31C1C8F55F58.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.mft
Manifest number: 59
Signing time: Sun 01 Feb 2026 02:30:00 +0000
Manifest this update: Sun 01 Feb 2026 02:25:00 +0000
Manifest next update: Wed 04 Feb 2026 13:06:00 +0000
Files and hashes: 1: 3130332e34392e3233302e302f32342d3234203d3e203633383638.roa (hash: OBFtgkraA2mAt61IcdsL1WjQ+6oatnIwsFiBr9g1HRk=)
2: 3130332e34392e3232382e302f32342d3234203d3e203633383638.roa (hash: +fz1OVHlNgOBqr0lbQQ+JDq3kgo82i16sacdT062DE8=)
3: 3130332e34392e3232392e302f32342d3234203d3e203633383638.roa (hash: bojMt0gtubfTBb5QRBM0eDsyEh+eiJmKiv8uVqn90p8=)
4: A142E54B1173D871802220D7946F31C1C8F55F58.crl (hash: Q2pvR5cbh5mbvRNBPLNZKYHNRZ8pG2tWIXts4Fdk2ko=)
5: 3130332e34392e3233312e302f32342d3234203d3e203633383638.roa (hash: A87x9izjeE8fUDhqMlkHjoCuxbSOiZqmsAQhFIKjo7Y=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.crl
rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A142E54B1173D871802220D7946F31C1C8F55F58.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 13:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:e5:be:ae:26:4e:92:e5:67:1b:c2:ee:e2:50:42:b6:4f:98:bf:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A142E54B1173D871802220D7946F31C1C8F55F58
Validity
Not Before: Feb 1 02:25:00 2026 GMT
Not After : Feb 4 13:06:00 2026 GMT
Subject: CN=4742DC48157D1EB42B8AE9C0D75598B49AD46362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:16:4a:ae:5d:78:bf:dc:bf:ff:f8:e5:e3:1d:
23:b3:4a:78:64:ff:86:e7:92:6c:14:e5:74:30:24:
2e:ad:e7:62:8a:22:48:36:72:33:e1:47:fd:99:2a:
45:49:33:1a:c3:4f:cc:85:e8:b7:84:3b:32:dc:a7:
c3:16:4d:9b:83:f3:55:f5:58:a3:51:63:5f:19:9d:
5b:20:be:9b:f9:d3:bf:f1:8f:d9:b4:2d:7c:81:c2:
3f:65:4c:fd:d1:ea:fd:68:26:2e:d0:de:45:13:88:
d5:b1:a1:c6:51:e9:b9:00:9a:af:af:c9:d4:81:a6:
69:93:f1:d3:71:75:cb:08:b2:d0:04:2b:15:4e:6f:
a4:23:6e:ca:cc:5c:df:8d:70:be:80:4a:8c:2d:e3:
88:84:e5:73:0a:e0:e2:1c:73:20:2f:48:e3:21:e4:
98:8c:87:b1:b6:2a:54:24:a0:3d:c3:9f:b4:7e:91:
17:46:cb:4f:84:3e:3d:9c:83:45:66:6c:23:d8:58:
59:3c:55:9f:ea:86:ee:f2:d5:5b:5e:50:13:89:82:
3d:77:81:3b:1b:be:fe:7f:38:1a:36:2e:6b:39:fd:
e7:a6:9c:6c:e6:42:6e:a2:c1:9c:b8:29:09:9e:51:
b1:04:a5:e7:bb:cd:2b:6f:ea:2c:b4:8e:8b:77:29:
54:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:42:DC:48:15:7D:1E:B4:2B:8A:E9:C0:D7:55:98:B4:9A:D4:63:62
X509v3 Authority Key Identifier:
keyid:A1:42:E5:4B:11:73:D8:71:80:22:20:D7:94:6F:31:C1:C8:F5:5F:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A142E54B1173D871802220D7946F31C1C8F55F58.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:60:aa:bd:b3:b3:cd:77:4c:b0:ac:ae:99:e7:2d:cb:a8:51:
80:a8:e9:79:51:99:1c:34:0b:03:ee:30:8e:94:03:a9:32:1f:
0c:b5:76:67:8b:91:c3:56:d0:0a:97:e6:2e:e5:a2:07:82:e5:
04:36:9e:35:8a:92:c1:17:64:cc:26:28:68:c5:95:bb:8f:07:
75:c2:bb:06:be:2f:a5:4d:0a:f2:0c:10:21:31:ca:66:b2:32:
a8:b0:f0:bc:68:e3:1a:8d:42:08:2e:ba:b4:56:b2:14:73:92:
a4:7e:ce:69:d0:46:f6:69:c3:39:5a:83:6c:ee:7c:bb:09:6c:
47:16:73:ea:65:40:e7:07:06:30:67:4f:2a:73:47:ef:1d:bb:
36:d0:1b:6f:d6:3c:06:13:c9:60:4a:47:97:75:a9:c7:e0:1c:
3f:41:9b:a0:5f:93:19:52:7e:dc:59:7b:25:fe:95:e9:01:76:
6a:7e:78:36:2f:7b:dc:ed:a8:9e:54:6d:66:a5:a1:b9:fe:e1:
68:99:4d:26:1c:87:67:c3:5e:31:52:77:9e:b7:33:2a:db:cf:
88:5f:b2:a7:78:ba:46:5f:eb:7c:35:35:0f:6e:f0:e5:ba:38:
1d:9d:ae:24:c0:4a:9c:6c:b2:f9:ce:2b:46:3a:c7:52:ad:c5:
f1:2b:9c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:04:19 2026 by rpki-client