This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft
File: 196DBD061B4577EF848600B17A266D689F5A70B5.mft (raw, json)
Hash identifier: GvYNVyLeFZTsMNXho63R4O3ZA3Pd+BGcE9a7nQe7l28=
Subject key identifier: 01:D2:E4:6A:38:7E:64:C6:8A:D6:03:30:16:BC:03:3B:4C:49:C5:5D
Authority key identifier: 19:6D:BD:06:1B:45:77:EF:84:86:00:B1:7A:26:6D:68:9F:5A:70:B5
Certificate issuer: /CN=196DBD061B4577EF848600B17A266D689F5A70B5
Certificate serial: 32495BD73CE0AD321DF7D61BFE36E210D4F1A479
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft
Manifest number: 0234
Signing time: Sat 31 Jan 2026 03:51:38 +0000
Manifest this update: Sat 31 Jan 2026 03:46:38 +0000
Manifest next update: Tue 03 Feb 2026 13:29:38 +0000
Files and hashes: 1: 3130332e3138302e3139382e302f32342d3234203d3e20313439333638.roa (hash: 5lY4f9V94dB+03La5b3P91qI5RBjwa5CSpgEJJRGvxc=)
2: 196DBD061B4577EF848600B17A266D689F5A70B5.crl (hash: anT0g8JzgzuYOraiKb6KC4X4939aCk3+IEA/GT/voO8=)
3: 3130332e3138302e3139382e302f32332d3234203d3e20313439333638.roa (hash: EDPK0eOxqBPQlG42EiZMre0RjhVvjul6NQmz0+X17bE=)
4: 3130332e3138302e3139392e302f32342d3234203d3e20313439333638.roa (hash: 34/R8QTjCFJsUx7prL6eX2eJ9Y/fnEucfem7nusLMB8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.crl
rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 13:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:49:5b:d7:3c:e0:ad:32:1d:f7:d6:1b:fe:36:e2:10:d4:f1:a4:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196DBD061B4577EF848600B17A266D689F5A70B5
Validity
Not Before: Jan 31 03:46:38 2026 GMT
Not After : Feb 3 13:29:38 2026 GMT
Subject: CN=01D2E46A387E64C68AD6033016BC033B4C49C55D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4e:b5:f6:e1:02:e2:dc:1f:ee:05:af:a9:92:
7f:1d:57:2e:42:cc:67:22:18:44:80:0a:cb:7a:85:
2b:93:95:c8:c0:d3:c9:13:71:6f:e4:78:1b:8e:02:
08:fd:8f:5e:1b:95:f2:31:97:5b:6b:3e:8c:0c:62:
bd:0e:49:34:7c:58:77:fb:80:04:a0:53:f4:4d:a5:
eb:2e:27:53:8f:bc:cd:64:44:d3:d8:36:2c:62:bf:
7a:6b:37:fa:f7:d0:8c:5c:5e:fa:ae:1a:1d:fa:96:
36:9e:38:83:9d:35:d5:f0:17:99:1d:82:60:c5:80:
be:5b:9c:39:97:4b:37:72:b0:db:66:6b:50:03:b1:
10:47:db:b1:86:87:93:db:67:a5:f9:2c:59:41:98:
07:94:6f:01:1e:bb:9b:58:30:65:ce:16:84:e0:bd:
89:59:19:11:f3:00:d7:86:0e:ee:e4:eb:76:a1:77:
64:97:42:5b:16:54:b0:69:d0:83:23:e7:33:7e:c2:
c7:ba:66:f1:33:d3:fc:2e:1b:7f:57:29:c2:cf:53:
a1:f5:5e:ba:4e:bd:84:9b:e6:bf:c6:bf:be:ee:87:
2c:02:90:8d:46:95:9f:85:a0:e4:4b:b7:4c:ef:47:
6a:86:02:8c:10:d5:e6:ca:f3:07:7b:fa:5e:85:fe:
d7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D2:E4:6A:38:7E:64:C6:8A:D6:03:30:16:BC:03:3B:4C:49:C5:5D
X509v3 Authority Key Identifier:
keyid:19:6D:BD:06:1B:45:77:EF:84:86:00:B1:7A:26:6D:68:9F:5A:70:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:e4:57:ff:9f:92:fe:82:d3:4d:bb:f5:1b:64:a9:96:3d:9a:
a9:97:e7:04:23:3c:65:55:a7:b6:77:dd:5f:67:44:01:47:f0:
33:24:46:96:88:be:15:60:fb:4b:7f:8c:28:d4:e2:41:cb:50:
55:1a:3e:64:dc:04:7c:c9:e2:19:8f:4f:1e:fc:d4:9a:63:ba:
8f:98:4d:77:ae:83:47:2d:06:b7:57:fb:d0:8d:a6:8f:9c:03:
75:84:7f:11:ab:47:3f:8b:f0:0d:34:e5:96:1e:24:f9:5c:b2:
4a:f4:f1:bf:4e:f9:84:1e:7a:4f:c1:22:e7:85:d5:76:cc:43:
c1:4d:bd:a5:01:92:ad:2f:95:dd:a2:c3:0f:6b:75:fd:c0:77:
74:eb:3f:e0:82:8a:c8:f2:03:cd:e4:11:af:b3:25:ce:36:b5:
b8:a4:a6:ac:5c:4e:c6:e0:d8:5e:cf:52:6b:c0:28:13:cc:e6:
dc:1c:df:73:da:50:74:1a:7d:70:f6:64:5c:54:73:10:4b:2d:
4c:06:11:16:38:9c:cd:0e:fa:ba:ad:e6:44:4a:d7:92:44:4c:
2b:8f:48:a7:cd:13:22:0d:0c:cf:85:24:36:10:80:3a:9f:0c:
5c:8c:56:7a:be:b4:3c:5e:d0:24:46:ff:80:bd:5c:ce:cb:6d:
a4:c2:8b:ee
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMklb1zzgrTId99Yb/jbiENTxpHkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTk2REJEMDYxQjQ1NzdFRjg0ODYwMEIxN0EyNjZENjg5
RjVBNzBCNTAeFw0yNjAxMzEwMzQ2MzhaFw0yNjAyMDMxMzI5MzhaMDMxMTAvBgNV
BAMTKDAxRDJFNDZBMzg3RTY0QzY4QUQ2MDMzMDE2QkMwMzNCNEM0OUM1NUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+TrX24QLi3B/uBa+pkn8dVy5C
zGciGESACst6hSuTlcjA08kTcW/keBuOAgj9j14blfIxl1trPowMYr0OSTR8WHf7
gASgU/RNpesuJ1OPvM1kRNPYNixiv3prN/r30IxcXvquGh36ljaeOIOdNdXwF5kd
gmDFgL5bnDmXSzdysNtma1ADsRBH27GGh5PbZ6X5LFlBmAeUbwEeu5tYMGXOFoTg
vYlZGRHzANeGDu7k63ahd2SXQlsWVLBp0IMj5zN+wse6ZvEz0/wuG39XKcLPU6H1
XrpOvYSb5r/Gv77uhywCkI1GlZ+FoORLt0zvR2qGAowQ1ebK8wd7+l6F/tczAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUAdLkajh+ZMaK1gMwFrwDO0xJxV0wHwYDVR0j
BBgwFoAUGW29BhtFd++EhgCxeiZtaJ9acLUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
YWM4MDFhMC03OTEyLTRiMDEtYTI4MS04ODAyNDYyNGEyZDQvMC8xOTZEQkQwNjFC
NDU3N0VGODQ4NjAwQjE3QTI2NkQ2ODlGNUE3MEI1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTk2REJEMDYxQjQ1NzdFRjg0ODYwMEIxN0EyNjZENjg5RjVB
NzBCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFjODAxYTAtNzkxMi00YjAxLWEy
ODEtODgwMjQ2MjRhMmQ0LzAvMTk2REJEMDYxQjQ1NzdFRjg0ODYwMEIxN0EyNjZE
Njg5RjVBNzBCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAPkV/+fkv6C00279RtkqZY9mqmX5wQjPGVV
p7Z33V9nRAFH8DMkRpaIvhVg+0t/jCjU4kHLUFUaPmTcBHzJ4hmPTx781Jpjuo+Y
TXeug0ctBrdX+9CNpo+cA3WEfxGrRz+L8A005ZYeJPlcskr08b9O+YQeek/BIueF
1XbMQ8FNvaUBkq0vld2iww9rdf3Ad3TrP+CCisjyA83kEa+zJc42tbikpqxcTsbg
2F7PUmvAKBPM5twc33PaUHQafXD2ZFxUcxBLLUwGERY4nM0O+rqt5kRK15JETCuP
SKfNEyINDM+FJDYQgDqfDFyMVnq+tDxe0CRG/4C9XM7LbaTCi+4=
-----END CERTIFICATE-----
Generated at Mon Feb 2 09:45:00 2026 by rpki-client