This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.mft
File: 082F7822D1C63E1ED5DA833913215FE68925FF6E.mft (raw, json)
Hash identifier: 1fsjOG+uFBAHUEHD9EXZ3/uFwoKvKXt8GsOJ44ZfPBM=
Subject key identifier: 2A:C4:BC:CF:4D:72:8B:3C:F9:90:D1:54:BF:08:3C:07:08:65:66:E3
Authority key identifier: 08:2F:78:22:D1:C6:3E:1E:D5:DA:83:39:13:21:5F:E6:89:25:FF:6E
Certificate issuer: /CN=082F7822D1C63E1ED5DA833913215FE68925FF6E
Certificate serial: 0BFAD6717F04E54484561FD61A71ECA7B4AF0F60
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.mft
Manifest number: 0382
Signing time: Sun 01 Feb 2026 08:10:41 +0000
Manifest this update: Sun 01 Feb 2026 08:05:41 +0000
Manifest next update: Wed 04 Feb 2026 19:47:41 +0000
Files and hashes: 1: 082F7822D1C63E1ED5DA833913215FE68925FF6E.crl (hash: GB/yI8bOMmlTMp7slACq6bxTNfi7udCYSsDMiigh1+g=)
2: 3130332e3137322e3131382e302f32332d3234203d3e20313432333935.roa (hash: HP+xeHwMe/Q1Tf4Xq/63+A27OrwucM8iR00HxSt8dQE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.crl
rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 19:47:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:fa:d6:71:7f:04:e5:44:84:56:1f:d6:1a:71:ec:a7:b4:af:0f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082F7822D1C63E1ED5DA833913215FE68925FF6E
Validity
Not Before: Feb 1 08:05:41 2026 GMT
Not After : Feb 4 19:47:41 2026 GMT
Subject: CN=2AC4BCCF4D728B3CF990D154BF083C07086566E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5b:58:fe:0a:53:77:c8:87:ea:07:a8:68:44:
f0:a0:99:63:9e:85:e2:9b:33:20:dd:cb:83:fb:12:
9f:63:42:32:76:5d:d6:9f:d8:4c:e0:90:3b:df:5e:
45:bb:aa:a0:01:cd:e6:54:f6:ea:34:4d:e9:cf:80:
4f:d6:bd:a2:0c:83:2d:b2:1e:7d:33:ef:33:88:a4:
38:9d:94:f8:04:0b:0d:08:d3:70:a4:07:57:ec:aa:
2a:77:a8:f3:74:db:45:75:6e:f7:a1:e4:22:58:75:
b9:8f:1c:22:eb:1a:b7:c8:c2:96:73:c1:a2:f0:38:
89:ed:59:e0:6a:ad:f3:d1:f0:51:6e:0a:3e:ee:50:
71:ec:81:29:69:5d:e5:ad:a2:cd:c9:bb:9c:80:81:
b5:a8:1f:89:cc:b5:ec:7b:aa:fc:e6:cc:f1:ac:ca:
85:a3:f9:47:5f:e2:0b:e5:a5:8d:37:65:eb:64:c3:
d0:91:ae:8d:ad:2f:eb:b2:26:e3:7f:55:38:1b:46:
6d:3e:84:a8:46:32:41:ce:fb:66:69:d7:b2:46:04:
36:a8:38:6b:a1:b4:52:b2:0a:0d:87:85:f3:09:3f:
da:1c:32:25:d1:e4:52:94:bf:3d:01:f1:13:32:56:
b3:0c:54:1b:07:09:13:68:a4:43:75:d8:db:d7:d5:
2c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C4:BC:CF:4D:72:8B:3C:F9:90:D1:54:BF:08:3C:07:08:65:66:E3
X509v3 Authority Key Identifier:
keyid:08:2F:78:22:D1:C6:3E:1E:D5:DA:83:39:13:21:5F:E6:89:25:FF:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:be:77:af:9f:b1:8d:f1:96:07:1b:cc:31:89:ad:58:6a:8c:
98:5e:97:df:cc:3f:26:d7:42:48:4e:c2:ff:1a:a0:fe:78:1b:
ef:93:9f:f6:31:9a:9f:bf:ea:aa:a8:09:f7:91:91:28:3a:02:
28:0e:4b:11:7d:c6:66:7c:5d:b4:60:29:e7:e4:89:32:03:e4:
53:2b:31:56:e2:2c:ae:d6:3a:38:3e:a8:b3:30:05:33:58:62:
9f:1e:b4:b4:bf:e2:10:3d:de:1d:d6:42:3c:0b:25:cf:28:a2:
a9:c7:49:f4:dd:43:ab:46:50:0f:49:bd:a8:b5:3b:ae:e0:18:
39:0b:d8:a5:fc:19:c7:3e:0f:dd:bf:90:7e:21:9e:4a:8e:37:
81:af:04:1d:55:a6:30:18:fe:e4:a4:a2:55:06:ff:f0:ba:3d:
96:ff:98:82:eb:be:f6:b8:0b:5c:14:8d:de:32:93:7d:2e:4a:
d2:4b:95:9c:9c:fe:04:b5:dd:b5:13:d9:c9:04:75:80:f8:55:
ab:dc:85:a0:ee:fc:6f:a3:9b:8b:37:9b:78:8d:86:f1:23:00:
80:27:b7:00:71:64:e0:85:54:48:84:2c:85:16:60:cc:5e:98:
10:18:46:a7:30:e6:a7:7e:f1:d7:3e:74:99:d1:da:ab:66:d7:
fa:4e:3c:25
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUC/rWcX8E5USEVh/WGnHsp7SvD2AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgyRjc4MjJEMUM2M0UxRUQ1REE4MzM5MTMyMTVGRTY4
OTI1RkY2RTAeFw0yNjAyMDEwODA1NDFaFw0yNjAyMDQxOTQ3NDFaMDMxMTAvBgNV
BAMTKDJBQzRCQ0NGNEQ3MjhCM0NGOTkwRDE1NEJGMDgzQzA3MDg2NTY2RTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPW1j+ClN3yIfqB6hoRPCgmWOe
heKbMyDdy4P7Ep9jQjJ2Xdaf2EzgkDvfXkW7qqABzeZU9uo0TenPgE/WvaIMgy2y
Hn0z7zOIpDidlPgECw0I03CkB1fsqip3qPN020V1bveh5CJYdbmPHCLrGrfIwpZz
waLwOIntWeBqrfPR8FFuCj7uUHHsgSlpXeWtos3Ju5yAgbWoH4nMtex7qvzmzPGs
yoWj+Udf4gvlpY03Zetkw9CRro2tL+uyJuN/VTgbRm0+hKhGMkHO+2Zp17JGBDao
OGuhtFKyCg2HhfMJP9ocMiXR5FKUvz0B8RMyVrMMVBsHCRNopEN12NvX1SyBAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUKsS8z01yizz5kNFUvwg8BwhlZuMwHwYDVR0j
BBgwFoAUCC94ItHGPh7V2oM5EyFf5okl/24wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
MDRlOTdkMy03MWMzLTRkMGEtOGIwNC03MDg4ZmUzODJiYzMvMC8wODJGNzgyMkQx
QzYzRTFFRDVEQTgzMzkxMzIxNUZFNjg5MjVGRjZFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDgyRjc4MjJEMUM2M0UxRUQ1REE4MzM5MTMyMTVGRTY4OTI1
RkY2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjA0ZTk3ZDMtNzFjMy00ZDBhLThi
MDQtNzA4OGZlMzgyYmMzLzAvMDgyRjc4MjJEMUM2M0UxRUQ1REE4MzM5MTMyMTVG
RTY4OTI1RkY2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBALm+d6+fsY3xlgcbzDGJrVhqjJhel9/MPybX
QkhOwv8aoP54G++Tn/Yxmp+/6qqoCfeRkSg6AigOSxF9xmZ8XbRgKefkiTID5FMr
MVbiLK7WOjg+qLMwBTNYYp8etLS/4hA93h3WQjwLJc8ooqnHSfTdQ6tGUA9Jvai1
O67gGDkL2KX8Gcc+D92/kH4hnkqON4GvBB1VpjAY/uSkolUG//C6PZb/mILrvva4
C1wUjd4yk30uStJLlZyc/gS13bUT2ckEdYD4VavchaDu/G+jm4s3m3iNhvEjAIAn
twBxZOCFVEiELIUWYMxemBAYRqcw5qd+8dc+dJnR2qtm1/pOPCU=
-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:54 2026 by rpki-client