This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft
File: 08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft (raw, json)
Hash identifier: E4ispg7nDvTNeKIK/EIYxKd+QMiAis1FPjbkHHFTtYM=
Subject key identifier: 86:4F:49:2F:7C:32:69:B4:E4:AA:8D:E2:F5:EA:D3:E6:4F:D4:FB:CD
Authority key identifier: 08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB
Certificate issuer: /CN=08E555759AA0C18576364C83261B6CEA4BCF0CCB
Certificate serial: 44EF43FE1B60983C457BA7E4FFD853519B521782
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft
Manifest number: 022B
Signing time: Sat 31 Jan 2026 08:12:26 +0000
Manifest this update: Sat 31 Jan 2026 08:07:26 +0000
Manifest next update: Tue 03 Feb 2026 14:10:26 +0000
Files and hashes: 1: 3130332e3232392e3138342e302f32332d3233203d3e2039333431.roa (hash: 7OzNX15Yuahy0/8eEN1/yzezZR+83/JHbFFyRpwzwPM=)
2: 08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl (hash: ZwKqdiDT9OXBCp7ydVUEE/naHh11Yj0jWqp6408p5UM=)
3: 3130332e3232392e3138342e302f32342d3234203d3e2039333431.roa (hash: wfRjzL8bQ7dLLloZedRWystpfn4vijpj4SNcPfcqhxI=)
4: 3130332e3232392e3138352e302f32342d3234203d3e2039333431.roa (hash: bYUXew86UoI4/31WSjYGIt5ZDZ5ojqbj3fo7ufpNm20=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl
rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 14:10:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:ef:43:fe:1b:60:98:3c:45:7b:a7:e4:ff:d8:53:51:9b:52:17:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08E555759AA0C18576364C83261B6CEA4BCF0CCB
Validity
Not Before: Jan 31 08:07:26 2026 GMT
Not After : Feb 3 14:10:26 2026 GMT
Subject: CN=864F492F7C3269B4E4AA8DE2F5EAD3E64FD4FBCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:72:b2:06:14:24:77:6f:48:cf:b2:ad:37:a4:
23:2f:df:5b:76:d5:79:ad:8b:a0:0f:1b:25:36:5c:
c7:51:d2:18:4c:6d:96:2f:67:0d:77:31:5a:62:76:
3c:96:74:27:bd:fa:fa:4e:e2:8e:e6:bc:c7:39:05:
fb:24:0f:fb:e1:9a:bf:03:c9:ef:f9:ab:89:38:8d:
1d:da:a0:ab:9d:4d:d3:c6:f2:87:be:91:66:63:27:
b0:8d:5f:75:53:8c:09:c9:0d:1a:7a:11:43:f1:ef:
ba:9c:20:25:d5:7f:ab:e3:7a:90:ef:0a:5d:63:18:
56:b3:0c:2f:42:63:98:c5:9f:e3:2f:0d:8e:f7:e1:
78:dc:b1:7e:80:b8:c8:a7:bf:f6:38:7d:ed:4f:59:
ed:72:dc:4f:71:58:35:71:d2:bf:a2:4a:5e:78:1e:
ba:c8:a7:70:68:91:79:02:41:72:94:db:5b:92:99:
9e:06:05:19:22:9c:e8:58:a8:07:eb:cf:22:0b:f5:
c8:ab:a1:4a:d9:21:71:10:82:1a:c9:c3:d7:a5:4c:
4b:78:9a:f0:39:d2:77:d5:18:ed:57:91:24:a4:dd:
43:dc:5d:5e:dc:a7:38:50:b3:1e:b4:12:df:8a:20:
5a:6e:05:0d:ab:06:5c:87:a0:9c:3e:ac:94:80:4d:
b1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:4F:49:2F:7C:32:69:B4:E4:AA:8D:E2:F5:EA:D3:E6:4F:D4:FB:CD
X509v3 Authority Key Identifier:
keyid:08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:29:84:41:8e:72:2e:6f:11:35:42:a3:d1:72:17:84:f8:0f:
85:f7:1a:cb:3b:81:1c:67:50:d7:85:0b:9e:af:44:90:aa:27:
3c:3b:d7:b0:50:81:26:27:c6:c6:e7:e7:37:93:dd:22:e6:be:
76:7d:5f:9c:38:c3:56:9c:a0:00:82:89:0b:fe:b1:23:c2:04:
9d:84:d5:24:c6:d9:b3:10:2a:53:8b:6b:b0:02:39:ab:d8:1c:
be:21:8b:52:c7:5f:f8:52:b5:85:f4:54:22:09:d6:6d:e9:ba:
85:dc:e9:29:4b:e5:8c:d3:5b:de:b9:83:9f:49:90:6d:76:9c:
86:23:5c:d9:b1:a8:11:10:cb:59:f6:a9:49:20:67:a5:fb:12:
dd:0c:e5:3b:f8:b4:a2:3a:ec:ab:ea:f9:49:a0:e9:53:e8:b2:
23:15:b5:3a:ab:3a:e9:66:58:bb:6c:dc:58:0b:7b:76:c5:87:
0f:c5:d0:06:35:fa:6f:aa:8c:5b:da:17:c7:aa:36:74:2c:1c:
87:83:48:50:06:ba:c5:bc:4d:87:42:bb:49:fd:fc:e7:4f:75:
69:cb:30:8b:cd:f1:c5:43:b2:ff:c3:84:ca:d4:97:c9:c2:49:
17:ae:d1:54:90:79:ec:f7:8c:df:7a:5b:8f:d2:4a:49:c1:1e:
31:dc:05:d8
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIURO9D/htgmDxFe6fk/9hTUZtSF4IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZDRUE0
QkNGMENDQjAeFw0yNjAxMzEwODA3MjZaFw0yNjAyMDMxNDEwMjZaMDMxMTAvBgNV
BAMTKDg2NEY0OTJGN0MzMjY5QjRFNEFBOERFMkY1RUFEM0U2NEZENEZCQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtcrIGFCR3b0jPsq03pCMv31t2
1Xmti6APGyU2XMdR0hhMbZYvZw13MVpidjyWdCe9+vpO4o7mvMc5BfskD/vhmr8D
ye/5q4k4jR3aoKudTdPG8oe+kWZjJ7CNX3VTjAnJDRp6EUPx77qcICXVf6vjepDv
Cl1jGFazDC9CY5jFn+MvDY734XjcsX6AuMinv/Y4fe1PWe1y3E9xWDVx0r+iSl54
HrrIp3BokXkCQXKU21uSmZ4GBRkinOhYqAfrzyIL9ciroUrZIXEQghrJw9elTEt4
mvA50nfVGO1XkSSk3UPcXV7cpzhQsx60Et+KIFpuBQ2rBlyHoJw+rJSATbFlAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUhk9JL3wyabTkqo3i9erT5k/U+80wHwYDVR0j
BBgwFoAUCOVVdZqgwYV2NkyDJhts6kvPDMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
ZmVlODJiNy1jMTgyLTRlODMtODk3Yy1lMDBmM2NlMWIwZDIvMC8wOEU1NTU3NTlB
QTBDMTg1NzYzNjRDODMyNjFCNkNFQTRCQ0YwQ0NCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZDRUE0QkNG
MENDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZlZTgyYjctYzE4Mi00ZTgzLTg5
N2MtZTAwZjNjZTFiMGQyLzAvMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZD
RUE0QkNGMENDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHIphEGOci5vETVCo9FyF4T4D4X3Gss7gRxn
UNeFC56vRJCqJzw717BQgSYnxsbn5zeT3SLmvnZ9X5w4w1acoACCiQv+sSPCBJ2E
1STG2bMQKlOLa7ACOavYHL4hi1LHX/hStYX0VCIJ1m3puoXc6SlL5YzTW965g59J
kG12nIYjXNmxqBEQy1n2qUkgZ6X7Et0M5Tv4tKI67Kvq+Umg6VPosiMVtTqrOulm
WLts3FgLe3bFhw/F0AY1+m+qjFvaF8eqNnQsHIeDSFAGusW8TYdCu0n9/OdPdWnL
MIvN8cVDsv/DhMrUl8nCSReu0VSQeez3jN96W4/SSknBHjHcBdg=
-----END CERTIFICATE-----
Generated at Mon Feb 2 10:02:19 2026 by rpki-client