This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft
File: 473225269441779F80E443B1EA516CC99E4ED4DA.mft (raw, json)
Hash identifier: tG4CDYSHUachvrS4EDHuJGoTG+AaEIv5bH/4lWf03sY=
Subject key identifier: CE:7F:05:F4:6C:EA:5A:AC:45:81:32:47:AC:6D:63:89:A5:81:39:21
Authority key identifier: 47:32:25:26:94:41:77:9F:80:E4:43:B1:EA:51:6C:C9:9E:4E:D4:DA
Certificate issuer: /CN=473225269441779F80E443B1EA516CC99E4ED4DA
Certificate serial: 6368F1BC515D378094C805B46CA9C107B96BDC18
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft
Manifest number: 01C0
Signing time: Sun 01 Feb 2026 14:12:24 +0000
Manifest this update: Sun 01 Feb 2026 14:07:24 +0000
Manifest next update: Wed 04 Feb 2026 19:56:24 +0000
Files and hashes: 1: 473225269441779F80E443B1EA516CC99E4ED4DA.crl (hash: UyDpGAwHufCzQYdkCEfdE68ba8jLN9XMaTS2lbte29Q=)
2: 3130332e3132312e3138372e302f32342d3234203d3e20313431393039.roa (hash: ICTrr1zawcyGxqE9qaGBu/NO12Zp3KpSJLdHGzxMVFA=)
3: 3130332e3132312e3138362e302f32342d3234203d3e20313431393039.roa (hash: opCF0u3jko4hNWDE/2pVcJdIdU0FHQiXsJlqg5I4v5U=)
4: 3130332e3132312e3138362e302f32332d3233203d3e20313431393039.roa (hash: oAysGbdydhifr7l/UknID+HyQ/T/iVxBHJ4DGeZc8gQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.crl
rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 19:56:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:68:f1:bc:51:5d:37:80:94:c8:05:b4:6c:a9:c1:07:b9:6b:dc:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473225269441779F80E443B1EA516CC99E4ED4DA
Validity
Not Before: Feb 1 14:07:24 2026 GMT
Not After : Feb 4 19:56:24 2026 GMT
Subject: CN=CE7F05F46CEA5AAC45813247AC6D6389A5813921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ce:8a:76:73:2a:26:f1:8f:7a:f1:81:c3:94:
80:1d:c1:12:27:0d:13:3e:d2:4f:50:f2:52:f4:73:
15:b9:40:db:a6:0e:48:03:57:bb:2d:96:8f:89:96:
af:00:90:3d:23:56:e8:45:11:33:96:55:d2:19:f7:
cc:e1:8f:14:c6:cd:c9:8d:3d:e0:68:8d:9c:5a:70:
25:6a:14:2f:0e:f1:e4:bd:a5:fe:15:de:b4:1d:16:
f7:2e:46:ad:2e:ae:70:d5:5c:ea:52:b6:11:6d:7e:
57:db:7a:82:6b:fc:61:ab:87:89:9d:09:63:1f:a3:
ec:fd:24:98:f2:7e:51:4d:31:df:8c:22:cc:20:38:
50:8f:61:f3:6e:ee:fb:c3:b6:02:f1:93:5e:4f:dd:
20:67:64:d8:a2:66:db:16:9f:d2:12:00:ad:a8:71:
ce:e9:4c:15:48:06:b3:76:9a:f5:7f:4e:bf:ee:bd:
7e:fa:29:82:9e:1b:cf:33:e7:4c:40:bd:b0:ea:2f:
68:8b:8f:7f:16:47:76:07:e4:88:43:94:0a:f6:75:
d5:d4:6d:9b:44:ac:7b:2d:e9:6a:06:34:6e:ed:05:
1a:3d:33:fd:0f:32:ed:2b:04:26:2b:d9:5f:ee:ea:
c1:70:58:b8:8b:05:53:f5:27:2c:63:93:26:77:18:
20:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:7F:05:F4:6C:EA:5A:AC:45:81:32:47:AC:6D:63:89:A5:81:39:21
X509v3 Authority Key Identifier:
keyid:47:32:25:26:94:41:77:9F:80:E4:43:B1:EA:51:6C:C9:9E:4E:D4:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:87:6e:d6:eb:22:3b:cc:36:b6:bd:74:6b:f6:a1:a6:ec:0e:
f2:bb:91:d2:c0:29:78:1b:c4:e7:43:d9:ae:c9:8a:17:4c:5f:
d1:96:c3:d5:20:d3:67:69:d3:39:b7:37:86:41:3e:77:09:e3:
36:c9:fb:2c:47:38:ba:e4:5a:e9:7d:39:55:39:33:48:60:0b:
70:21:94:b6:4d:e6:15:e2:19:78:1d:98:24:ff:ab:14:52:32:
96:fe:2d:ef:b4:97:81:df:09:63:3a:d8:72:10:f3:c3:2f:b2:
52:db:c8:f6:2b:5f:39:ca:d5:fd:4b:39:b5:74:58:f2:c2:12:
88:cf:69:52:23:e9:d9:a2:12:fc:d4:8f:e4:6a:e8:4f:90:17:
4b:d1:30:1f:d8:e4:81:69:21:6a:49:30:31:e4:b4:85:90:c1:
6a:b4:c1:2a:6b:b7:9e:ac:e6:b2:ea:ee:68:03:c6:5b:29:ed:
bc:20:88:b7:2f:78:2b:3f:44:1a:c8:b9:b1:b1:34:67:af:75:
b2:70:4a:47:bc:05:18:cb:de:db:33:5d:d8:c9:e1:30:6a:3c:
59:59:ce:d0:c2:28:22:16:56:bd:97:80:de:a6:d5:57:1e:9a:
da:11:ba:6e:c3:45:1f:21:61:cc:84:da:7c:cf:58:58:50:08:
e5:f1:33:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:05:06 2026 by rpki-client