This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.mft
File: 2ADCBF290A98776E6F59353351C879A1502B884A.mft (raw, json)
Hash identifier: ns7LP6ee/++R42ohWyVag0KzfUHtc1wzhKNz+bLG/ik=
Subject key identifier: 35:F5:28:49:07:62:9A:D6:32:B2:13:9E:91:FD:EB:0A:C2:F6:B4:16
Authority key identifier: 2A:DC:BF:29:0A:98:77:6E:6F:59:35:33:51:C8:79:A1:50:2B:88:4A
Certificate issuer: /CN=2ADCBF290A98776E6F59353351C879A1502B884A
Certificate serial: 19248D547BCDCA5CF3D6D1689DE8B43F940511DD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2ADCBF290A98776E6F59353351C879A1502B884A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.mft
Manifest number: 01ED
Signing time: Sun 01 Feb 2026 03:00:52 +0000
Manifest this update: Sun 01 Feb 2026 02:55:52 +0000
Manifest next update: Wed 04 Feb 2026 12:31:52 +0000
Files and hashes: 1: 3130332e35342e38322e302f32342d3234203d3e20313530353132.roa (hash: C79vzTgAfsGSSc4gNZfEhC+/ZQRPXp9nU63pK44dLyE=)
2: 3130332e35342e38332e302f32342d3234203d3e20313530353132.roa (hash: NLpjQTON2Z80uPvHtmw/0JAegSKn6kWFoxLR7SImnLM=)
3: 3130332e35342e38322e302f32332d3233203d3e20313530353132.roa (hash: FjkCQEbxTkTrmju7umuTXr3UC7Hk/PD5qd4yUNE4PfI=)
4: 2ADCBF290A98776E6F59353351C879A1502B884A.crl (hash: l2xEl5Vvn4wfH3fUYmCf+x1PiN3EWKLORzGFYq0UEyc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.crl
rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2ADCBF290A98776E6F59353351C879A1502B884A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 12:31:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:24:8d:54:7b:cd:ca:5c:f3:d6:d1:68:9d:e8:b4:3f:94:05:11:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ADCBF290A98776E6F59353351C879A1502B884A
Validity
Not Before: Feb 1 02:55:52 2026 GMT
Not After : Feb 4 12:31:52 2026 GMT
Subject: CN=35F5284907629AD632B2139E91FDEB0AC2F6B416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:10:de:36:54:8f:42:f1:98:1a:42:83:15:0c:
f3:11:a5:41:15:4d:ae:df:32:44:59:c0:d0:7f:e9:
38:b3:0a:ed:a4:d4:74:97:36:04:dc:cc:d4:90:f1:
61:ec:32:6d:8b:61:b2:88:c7:12:1e:34:80:74:d7:
41:bb:97:cb:12:79:0f:82:4e:2f:a3:83:ea:c3:11:
cc:d3:8a:90:ac:29:36:c0:6f:5a:1f:8a:b5:e6:29:
96:4f:26:67:83:15:b5:81:70:77:04:99:90:66:11:
77:10:b3:e7:7a:3a:31:77:7e:3a:e9:54:48:9d:73:
5e:17:1a:aa:60:d4:a5:58:10:80:29:0e:a7:98:57:
88:64:f2:b9:83:13:dd:bc:c9:21:bf:6e:90:c6:93:
56:94:ca:ca:24:0e:32:99:71:b8:30:2e:0f:3a:5a:
d4:bc:ed:4a:3d:7f:94:45:0b:65:63:af:21:ad:3a:
b7:03:66:4b:72:7d:69:a7:36:4b:91:11:b9:09:ba:
13:85:9c:d3:48:8b:d5:b0:4d:30:5c:df:0a:98:dd:
f4:fc:5f:f7:86:5d:83:90:a0:31:86:0a:00:bb:1a:
dc:5c:ab:49:55:e0:40:a7:4f:51:a0:fe:91:54:35:
ef:92:ec:18:64:76:6b:bc:6f:8a:75:81:7e:83:00:
c5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F5:28:49:07:62:9A:D6:32:B2:13:9E:91:FD:EB:0A:C2:F6:B4:16
X509v3 Authority Key Identifier:
keyid:2A:DC:BF:29:0A:98:77:6E:6F:59:35:33:51:C8:79:A1:50:2B:88:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2ADCBF290A98776E6F59353351C879A1502B884A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:b0:00:12:f1:40:13:38:b4:7e:55:34:1b:8e:2c:60:65:47:
f4:82:c2:bf:2c:6d:f1:2d:ba:70:c1:5f:52:bc:0d:6c:20:42:
ae:55:3f:de:8b:0e:69:c7:71:09:bb:b3:f2:62:6d:61:23:26:
d1:87:89:a3:d5:f8:3b:14:c3:d7:56:bf:bc:1c:60:37:02:fb:
a0:25:7f:03:97:58:58:f9:2c:10:8c:90:a9:2d:ec:52:44:24:
5d:96:55:d2:cb:cc:f6:74:c3:dd:bf:89:8c:d0:56:6f:2d:e3:
b1:35:ae:b3:41:fb:d0:34:2f:7d:b8:00:4e:5f:e8:b5:41:34:
8e:40:64:52:fb:35:0b:a4:44:8d:9b:5b:8e:28:b0:05:de:00:
72:e9:b5:7d:01:fd:00:1f:2b:43:79:14:21:69:93:d8:c2:f3:
7a:a8:c5:08:4d:aa:28:5f:10:f4:72:c5:e0:8a:21:f5:ac:50:
18:47:4d:fe:a1:f7:22:a9:bb:60:ef:14:ec:36:c0:4f:df:57:
e4:04:c2:e9:76:c3:60:02:74:5e:32:5b:7e:a0:1f:f2:7f:ff:
48:6a:b1:7d:15:3e:e7:a9:3e:89:c7:ef:c9:3f:d4:4e:6d:44:
99:5a:45:21:11:6b:1f:8a:ca:6b:b3:b0:f8:32:31:42:d0:f1:
a8:a0:df:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:05:11 2026 by rpki-client