This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft
File: D4DD8244BC2EB2B187B4181226714505DF8F4452.mft (raw, json)
Hash identifier: c2sP+klBaEy3/Lub63GPOsjKx66wFPatM7zMc1ut0PQ=
Subject key identifier: B1:7F:08:5F:4A:F0:6D:0D:31:9B:03:6D:D8:74:68:B9:73:39:CD:E2
Authority key identifier: D4:DD:82:44:BC:2E:B2:B1:87:B4:18:12:26:71:45:05:DF:8F:44:52
Certificate issuer: /CN=D4DD8244BC2EB2B187B4181226714505DF8F4452
Certificate serial: 0396C6221A4428350833D477E87AC14416977E15
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4DD8244BC2EB2B187B4181226714505DF8F4452.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft
Manifest number: 023B
Signing time: Sun 01 Feb 2026 01:01:16 +0000
Manifest this update: Sun 01 Feb 2026 00:56:16 +0000
Manifest next update: Wed 04 Feb 2026 11:14:16 +0000
Files and hashes: 1: D4DD8244BC2EB2B187B4181226714505DF8F4452.crl (hash: iPmJM7clfX6H7ezgD2UNU1PdHmmLdDEVVl8bvXmUVS0=)
2: 3130332e3137302e3138372e302f32342d3234203d3e20313432333635.roa (hash: WbsQ68Cu40oqUa2yh2wFEKvkhfxO2KVKndxoFM4DO5k=)
3: 3130332e3137302e3138362e302f32342d3234203d3e20313432333635.roa (hash: OXRZ526Vg7TmkLT93n/Qe4MisAG7vaUJuVBZqKmzdzU=)
4: 3130332e3137302e3138362e302f32332d3234203d3e20313432333635.roa (hash: H+FNrGTWOm2rEbzW4c22NCPKDmaY/bFliACB6RDfaOU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.crl
rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4DD8244BC2EB2B187B4181226714505DF8F4452.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 11:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:96:c6:22:1a:44:28:35:08:33:d4:77:e8:7a:c1:44:16:97:7e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D4DD8244BC2EB2B187B4181226714505DF8F4452
Validity
Not Before: Feb 1 00:56:16 2026 GMT
Not After : Feb 4 11:14:16 2026 GMT
Subject: CN=B17F085F4AF06D0D319B036DD87468B97339CDE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:85:b4:45:32:34:88:d9:74:ac:17:df:ed:13:
48:1c:f7:6e:17:05:3c:d5:bf:f7:66:c1:72:4e:91:
a8:ac:bc:83:28:c8:04:ed:1e:1a:be:79:b8:37:fc:
e7:93:98:9e:df:6a:03:60:bf:e0:ef:4f:36:99:06:
6e:b2:40:e8:08:c8:e1:9e:76:c2:ad:4f:8d:3f:8e:
b2:da:90:59:65:f4:e9:b2:dd:f2:ec:50:e6:97:4c:
c8:4b:98:0c:cd:54:e8:35:ac:c7:88:4f:32:7b:e9:
bb:9d:f5:41:54:a0:c5:b3:80:20:23:ef:0c:63:ad:
73:49:0a:15:cf:08:ae:07:9e:47:f7:bb:fe:34:4d:
5a:76:d4:b6:cf:2e:1c:f2:99:1c:f9:62:b4:5b:c3:
ed:f7:29:1d:fb:04:9e:b7:32:a7:1d:a9:f2:8c:f3:
25:0a:35:26:ad:94:53:9b:aa:bd:90:f9:58:0d:de:
c5:90:2f:92:a8:57:72:3f:bd:f9:9a:10:2a:e6:42:
71:7b:e1:97:d6:ff:c8:d9:53:15:a9:b8:78:ea:12:
27:0c:b2:5a:55:a2:1b:a7:3e:22:5b:d8:eb:1d:44:
e9:94:dc:4d:63:0d:e6:4a:c0:40:54:0c:2d:05:56:
ad:f3:e6:13:24:5e:27:f5:58:e4:b2:0f:58:a4:c8:
cd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7F:08:5F:4A:F0:6D:0D:31:9B:03:6D:D8:74:68:B9:73:39:CD:E2
X509v3 Authority Key Identifier:
keyid:D4:DD:82:44:BC:2E:B2:B1:87:B4:18:12:26:71:45:05:DF:8F:44:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4DD8244BC2EB2B187B4181226714505DF8F4452.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:74:ec:72:38:4c:5f:eb:43:7a:11:5f:d1:c8:19:3d:9a:67:
28:ae:43:c7:fa:c2:c9:e6:4b:56:5f:fc:a2:bc:f4:97:0b:66:
73:0b:4d:17:65:51:a0:fa:af:71:20:22:0f:8f:6c:43:67:5d:
2d:6d:69:ec:84:0f:0f:c7:68:e5:7b:00:be:54:31:a6:6e:d5:
bd:50:e1:68:ac:cc:bf:fd:51:07:b1:52:83:32:4b:7f:b0:1d:
a1:79:57:f9:6a:0f:da:b2:22:e5:a4:81:60:51:ea:d1:37:ac:
ae:ef:14:34:7f:a1:21:55:34:8b:ed:47:90:2f:13:8e:de:eb:
ab:1c:e5:4f:17:a1:9f:17:96:e6:2d:be:be:95:55:fe:40:e0:
13:0d:22:f3:b7:29:32:f4:7e:cd:c4:d9:c9:3b:2b:1a:51:be:
81:c3:a8:44:cd:e4:14:42:38:22:4f:8a:f7:67:c2:db:69:f9:
66:26:61:c6:ad:69:28:97:59:57:d4:79:e4:3b:2f:95:13:5f:
e3:71:60:d4:94:5b:a7:f5:57:ed:08:a9:05:3d:98:47:a1:77:
f1:50:76:85:b4:9b:74:3f:5d:15:65:02:48:46:d0:fb:63:ba:
35:11:8c:3a:4c:4c:fb:91:c5:54:71:eb:63:64:14:d8:44:2f:
5c:b0:f3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:53 2026 by rpki-client