This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft
File: 81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft (raw, json)
Hash identifier: YyWc9PzAdQKaSlBdWeIoQTOm0IvoH4FE3q20WANlMSI=
Subject key identifier: 1E:62:91:60:FA:04:D5:32:4C:31:AF:05:FB:EC:D5:4D:3B:DB:23:75
Authority key identifier: 81:C2:03:CF:45:8E:48:A8:FF:34:5F:B4:A5:DD:84:C6:FA:2D:CD:0A
Certificate issuer: /CN=81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A
Certificate serial: 3C4EB8C1D1592F53EC9605CB75114FC01F81520E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft
Manifest number: 0171
Signing time: Mon 02 Feb 2026 07:01:28 +0000
Manifest this update: Mon 02 Feb 2026 06:56:28 +0000
Manifest next update: Thu 05 Feb 2026 12:32:28 +0000
Files and hashes: 1: 3130332e39362e3134362e302f32332d3233203d3e20313430343536.roa (hash: soTFrYPYqOT0wkrn6Py3xPs0fFiW/5/f4549L3r+Igg=)
2: 81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.crl (hash: p9RZLE/dGHbIdBdK1DTmmh7rRejpI4OiV6MO8Q7cUZk=)
3: 3130332e39362e3134372e302f32342d3234203d3e20313430343536.roa (hash: JE5sa6AJ1Mld5tF+2Ipz0AdqItfZzJvAXpbXLSMBkkY=)
4: 3130332e39362e3134362e302f32342d3234203d3e20313430343536.roa (hash: 5U1TPFLrHbgyHMQ/fhpf0UIVuTfu8KAoi8W0QJ1AERI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.crl
rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:4e:b8:c1:d1:59:2f:53:ec:96:05:cb:75:11:4f:c0:1f:81:52:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A
Validity
Not Before: Feb 2 06:56:28 2026 GMT
Not After : Feb 5 12:32:28 2026 GMT
Subject: CN=1E629160FA04D5324C31AF05FBECD54D3BDB2375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ef:4c:f7:72:78:c9:11:b8:08:ac:29:fb:a8:
3f:4f:56:36:10:88:ab:76:fe:80:c1:bc:8a:62:32:
62:dd:7a:ff:13:db:d1:5a:91:65:e7:47:e3:89:dc:
15:f5:82:63:a3:9e:69:12:62:6c:fb:19:87:bb:fd:
02:56:1f:d0:1c:2b:56:b4:fc:e1:43:26:c6:11:72:
42:ad:e9:d9:6e:68:e6:2a:f2:09:11:0a:17:a2:31:
24:eb:9c:56:82:8f:fa:02:f0:4d:ed:5a:cd:59:80:
d5:e2:87:78:d3:dc:c8:f9:8c:d1:dd:30:a2:d5:fc:
80:fb:96:46:87:ad:8c:8f:44:48:dc:63:20:b9:d8:
90:24:bd:61:6f:a1:f0:c5:1e:68:59:0c:bf:7f:f7:
10:96:24:60:fb:09:9c:75:b3:30:70:24:99:f6:87:
d9:ab:b1:04:38:5d:4f:4f:6b:dc:cf:ea:e0:68:4b:
e3:6e:f4:30:5d:5f:f7:22:be:2d:a1:4e:24:35:b6:
c5:01:2b:04:c8:9b:d0:31:de:c4:eb:e8:87:d1:3f:
66:3d:e5:6d:b5:4e:b0:6c:72:1a:49:32:d4:f5:2c:
53:47:8a:98:17:a0:c6:6d:aa:0e:70:0b:e8:69:89:
e8:64:f0:64:79:4b:ae:49:65:e3:2e:ba:b4:c3:82:
91:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:62:91:60:FA:04:D5:32:4C:31:AF:05:FB:EC:D5:4D:3B:DB:23:75
X509v3 Authority Key Identifier:
keyid:81:C2:03:CF:45:8E:48:A8:FF:34:5F:B4:A5:DD:84:C6:FA:2D:CD:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:8f:eb:86:a1:2c:ac:ec:5a:68:a4:19:6e:83:ec:f4:0a:46:
89:7c:83:e7:49:ce:fb:ca:a2:5e:41:7f:2d:77:71:3d:ec:7f:
2a:64:ec:df:08:61:09:36:9f:56:e8:0c:62:80:85:0d:8e:99:
82:03:cb:35:e8:4c:06:00:93:ee:97:e3:63:b6:12:c1:5d:ea:
af:89:95:fc:c8:14:e7:2d:4f:1b:25:c2:d2:6b:63:f9:14:07:
e1:62:f0:97:7d:d6:b5:d1:0d:e6:ff:47:be:81:fc:9d:4d:75:
92:2d:5b:db:c8:2c:ad:03:03:da:5e:4c:68:fe:05:11:fb:4b:
bb:f5:e1:99:4d:bf:48:9d:0d:ca:ed:84:68:5e:dc:6c:e3:0b:
ea:5c:b9:b9:db:ec:7f:84:85:b3:eb:fd:bc:6a:fc:a8:5d:58:
f0:d0:c5:eb:74:fe:07:21:5d:33:cf:b2:3d:06:eb:72:1c:24:
e5:a1:78:f9:92:6d:27:89:dc:78:50:68:5d:70:0e:e7:28:a2:
95:81:6c:a3:f2:50:c3:2b:ae:96:cd:cd:94:0a:73:6f:1b:2f:
23:e4:31:4f:6d:3f:27:be:b0:85:e7:e6:91:07:52:3e:f1:70:
86:f8:ed:15:67:aa:4f:40:bb:28:b4:fd:6e:ee:e2:d5:61:94:
31:e5:42:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:13 2026 by rpki-client