This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft
File: 49E12E5CDD57B2E343A560CA6816C93C81748A71.mft (raw, json)
Hash identifier: JIYPt2T1ceat2Mba0GK7V+9wbi8rRPb5D1c0dBA2rq0=
Subject key identifier: 26:B2:05:5D:22:D1:78:EA:A7:FE:4A:28:17:1A:97:F1:CE:14:9F:62
Authority key identifier: 49:E1:2E:5C:DD:57:B2:E3:43:A5:60:CA:68:16:C9:3C:81:74:8A:71
Certificate issuer: /CN=49E12E5CDD57B2E343A560CA6816C93C81748A71
Certificate serial: 55B39296DEBD9C6B901B51B543E73F1A06984A15
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft
Manifest number: 0201
Signing time: Sat 31 Jan 2026 08:52:28 +0000
Manifest this update: Sat 31 Jan 2026 08:47:28 +0000
Manifest next update: Tue 03 Feb 2026 17:44:28 +0000
Files and hashes: 1: 3130332e3133312e3231382e302f32342d3234203d3e203633343838.roa (hash: k3TWS9EMIy8Aq2EwD+5FTkmYFXY12HmYmh8vOGdwopQ=)
2: 49E12E5CDD57B2E343A560CA6816C93C81748A71.crl (hash: AQJPOZ9FgsKUS11h0VFWO0CMYIKeetgD+QumhTUtT3E=)
3: 3130332e3133312e3231362e302f32342d3234203d3e203338373538.roa (hash: +DUYJRF9jOOzr505d8fEOet+gT8K/JULeZjzetsH0Vc=)
4: 3130332e3133312e3231392e302f32342d3234203d3e203338373538.roa (hash: lErVtCJlJ99qdLyNM63Qc8dGtmVES+Gq6hMVSb2l3Bw=)
5: 3130332e3133312e3231372e302f32342d3234203d3e203338373538.roa (hash: Nlbwhvq6RNX8tKRWUBvBeTEEQD1O0jz0pdRla10hmjk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.crl
rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 17:44:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:b3:92:96:de:bd:9c:6b:90:1b:51:b5:43:e7:3f:1a:06:98:4a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49E12E5CDD57B2E343A560CA6816C93C81748A71
Validity
Not Before: Jan 31 08:47:28 2026 GMT
Not After : Feb 3 17:44:28 2026 GMT
Subject: CN=26B2055D22D178EAA7FE4A28171A97F1CE149F62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d7:9c:bc:03:a7:04:14:be:ed:4f:cb:83:49:
d2:a4:d1:35:f6:e3:c0:c2:31:b9:2b:59:bb:13:ab:
f8:a5:16:26:90:30:a9:83:c3:d7:ef:28:ba:e8:1c:
68:24:a5:87:2e:61:0f:2a:ae:32:12:c5:87:ba:03:
25:26:4c:18:95:92:1e:69:8e:40:d3:b0:f0:f1:07:
f4:ea:11:10:bd:e7:16:b3:2c:17:79:9c:66:31:e6:
97:a5:e3:36:88:f6:22:74:49:db:08:f5:b0:be:ce:
2e:66:8a:ab:ef:f0:e2:48:15:19:33:dc:a9:d9:5a:
3b:c4:63:73:ed:40:a2:55:56:52:44:c7:70:9b:f6:
06:df:68:86:f8:66:67:16:fe:64:f6:75:37:6d:de:
5a:2c:23:b1:c5:79:71:a5:ea:d0:09:39:4e:c8:b0:
02:21:84:cf:93:7d:ab:68:20:f7:2e:49:30:8f:34:
59:59:39:4c:de:57:61:b8:34:fb:0f:47:18:ac:24:
ee:7e:e3:05:15:77:71:83:e7:7c:8c:ad:a7:b0:44:
43:ae:c2:b2:e8:4c:89:44:a0:3c:83:1a:2e:fd:5d:
65:6e:c3:24:a0:76:65:02:0e:5c:05:8e:bc:1b:b6:
43:be:77:df:92:02:c7:2d:da:bc:80:0a:2c:05:8b:
89:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B2:05:5D:22:D1:78:EA:A7:FE:4A:28:17:1A:97:F1:CE:14:9F:62
X509v3 Authority Key Identifier:
keyid:49:E1:2E:5C:DD:57:B2:E3:43:A5:60:CA:68:16:C9:3C:81:74:8A:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:6f:58:60:94:1c:ae:d6:f2:1d:2a:39:24:60:dc:ff:c5:c8:
e1:71:13:fd:33:8d:d0:0c:b9:5a:08:76:0e:e8:0d:b7:0b:77:
48:19:6c:63:0c:13:39:c7:99:55:08:05:b7:46:45:31:88:6b:
71:78:be:31:1d:9a:6a:94:c9:db:17:03:60:a2:22:67:05:d9:
b6:14:79:6a:97:06:9f:aa:89:9d:18:f7:ad:04:4e:c6:e9:99:
f5:e4:ac:c3:21:7e:a3:03:56:50:e4:8f:55:33:25:0c:21:f2:
c7:af:95:3e:f8:86:d0:44:f8:07:7f:55:11:9f:07:8f:b1:65:
db:ea:44:07:a1:8b:32:b7:55:76:dd:ab:7e:35:2b:91:a6:49:
75:21:77:35:7e:88:79:47:5e:49:35:10:c2:75:16:93:cb:d4:
97:15:fd:50:19:ca:7f:53:69:0c:90:21:7b:4d:9e:3e:6c:5b:
b4:10:7c:33:1f:76:3e:fc:b7:fb:2e:12:51:64:99:aa:49:11:
66:db:97:38:bd:ea:6b:e8:82:3d:d5:e8:4a:9f:e5:ce:b8:ab:
67:03:18:81:56:c1:c3:02:59:3b:37:00:0c:9b:19:39:e8:95:
e0:e7:55:24:73:3e:bd:7e:cb:57:fa:24:db:37:81:0b:38:31:
33:5c:d5:98
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUVbOSlt69nGuQG1G1Q+c/GgaYShUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlFMTJFNUNERDU3QjJFMzQzQTU2MENBNjgxNkM5M0M4
MTc0OEE3MTAeFw0yNjAxMzEwODQ3MjhaFw0yNjAyMDMxNzQ0MjhaMDMxMTAvBgNV
BAMTKDI2QjIwNTVEMjJEMTc4RUFBN0ZFNEEyODE3MUE5N0YxQ0UxNDlGNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV15y8A6cEFL7tT8uDSdKk0TX2
48DCMbkrWbsTq/ilFiaQMKmDw9fvKLroHGgkpYcuYQ8qrjISxYe6AyUmTBiVkh5p
jkDTsPDxB/TqERC95xazLBd5nGYx5pel4zaI9iJ0SdsI9bC+zi5miqvv8OJIFRkz
3KnZWjvEY3PtQKJVVlJEx3Cb9gbfaIb4ZmcW/mT2dTdt3losI7HFeXGl6tAJOU7I
sAIhhM+TfatoIPcuSTCPNFlZOUzeV2G4NPsPRxisJO5+4wUVd3GD53yMraewREOu
wrLoTIlEoDyDGi79XWVuwySgdmUCDlwFjrwbtkO+d9+SAsct2ryACiwFi4nXAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUJrIFXSLReOqn/kooFxqX8c4Un2IwHwYDVR0j
BBgwFoAUSeEuXN1XsuNDpWDKaBbJPIF0inEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
NTUzZWRhYi00YTNkLTQ0ZTQtOGQ5Ni02MjVhMWMyMDM3OGQvMC80OUUxMkU1Q0RE
NTdCMkUzNDNBNTYwQ0E2ODE2QzkzQzgxNzQ4QTcxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDlFMTJFNUNERDU3QjJFMzQzQTU2MENBNjgxNkM5M0M4MTc0
OEE3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDU1M2VkYWItNGEzZC00NGU0LThk
OTYtNjI1YTFjMjAzNzhkLzAvNDlFMTJFNUNERDU3QjJFMzQzQTU2MENBNjgxNkM5
M0M4MTc0OEE3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJ1vWGCUHK7W8h0qOSRg3P/FyOFxE/0zjdAM
uVoIdg7oDbcLd0gZbGMMEznHmVUIBbdGRTGIa3F4vjEdmmqUydsXA2CiImcF2bYU
eWqXBp+qiZ0Y960ETsbpmfXkrMMhfqMDVlDkj1UzJQwh8sevlT74htBE+Ad/VRGf
B4+xZdvqRAehizK3VXbdq341K5GmSXUhdzV+iHlHXkk1EMJ1FpPL1JcV/VAZyn9T
aQyQIXtNnj5sW7QQfDMfdj78t/suElFkmapJEWbblzi96mvogj3V6Eqf5c64q2cD
GIFWwcMCWTs3AAybGTnoleDnVSRzPr1+y1f6JNs3gQs4MTNc1Zg=
-----END CERTIFICATE-----
Generated at Mon Feb 2 10:05:27 2026 by rpki-client