This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft
File: 45164C20EAF7FAB583FB12C81727150895FCEC70.mft (raw, json)
Hash identifier: Oly1QiDstvglx6X0HTRRJRVKEpwyFtzrzx1XO1UFzdM=
Subject key identifier: 83:B9:8E:DD:6D:70:01:68:9F:61:A2:28:EA:2F:91:2E:D0:83:02:82
Authority key identifier: 45:16:4C:20:EA:F7:FA:B5:83:FB:12:C8:17:27:15:08:95:FC:EC:70
Certificate issuer: /CN=45164C20EAF7FAB583FB12C81727150895FCEC70
Certificate serial: 39013E1727725D728DEA08789528A1D258170A5B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft
Manifest number: 0165
Signing time: Sun 01 Feb 2026 07:42:22 +0000
Manifest this update: Sun 01 Feb 2026 07:37:22 +0000
Manifest next update: Wed 04 Feb 2026 19:01:22 +0000
Files and hashes: 1: 45164C20EAF7FAB583FB12C81727150895FCEC70.crl (hash: O+HR7apU6smcGRSG0Qzda6YRn55eAQ9RtIbMn4cC0oQ=)
2: 3130332e3135332e34302e302f32332d3234203d3e20313430343534.roa (hash: TTBU1STvQaNI1wpqoaj9bG2m/T27T+WPjYQLtuioWoo=)
3: 3130332e3130382e3135362e302f32322d3234203d3e20313430343534.roa (hash: cLToJ49OKqVQRgjYGYNvWnWnJYTEY5LWx4h5YZdNEfg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.crl
rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 19:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:01:3e:17:27:72:5d:72:8d:ea:08:78:95:28:a1:d2:58:17:0a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45164C20EAF7FAB583FB12C81727150895FCEC70
Validity
Not Before: Feb 1 07:37:22 2026 GMT
Not After : Feb 4 19:01:22 2026 GMT
Subject: CN=83B98EDD6D7001689F61A228EA2F912ED0830282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:88:6f:f1:e9:6f:b7:61:73:a7:90:19:be:50:
c9:2a:66:d7:51:bc:20:1e:e8:47:a2:60:9c:a2:8a:
19:64:c6:ac:c3:48:c6:9a:b9:35:ba:d7:1e:d6:8b:
55:5c:cd:1b:a3:ea:7d:f7:36:52:4c:25:da:db:bd:
4a:d3:cc:64:2c:d7:9f:7c:ad:e1:33:8e:97:f9:60:
14:7c:c3:4a:8b:83:7c:90:cf:25:5b:cc:cf:f2:5c:
29:f1:32:e4:34:f0:4b:12:1d:77:d0:7f:b6:f5:04:
35:b7:ae:c6:26:7f:85:b5:1b:bc:2f:a2:90:d2:3c:
82:1f:5f:39:ec:83:21:f5:45:e1:83:52:b8:99:00:
cc:48:ad:cd:86:7c:ae:10:af:4c:dc:70:b1:89:6d:
1c:5e:ed:20:54:7d:57:a3:58:49:c8:85:0b:cf:46:
76:11:dd:02:e4:eb:97:fb:e7:5c:fb:35:4e:79:b7:
a7:32:82:ca:e8:f6:8a:6e:e1:02:7e:24:51:f3:08:
bc:c8:b1:e3:2c:ef:02:c5:f9:9f:1f:43:0d:47:ce:
a7:03:d4:fb:30:3d:6e:87:4c:05:15:f2:d0:fb:a8:
42:dd:61:b2:e0:8e:db:ce:17:d7:2d:e1:94:e1:9f:
e3:92:d2:38:27:a4:2d:f2:fa:67:94:f5:12:cc:37:
c4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B9:8E:DD:6D:70:01:68:9F:61:A2:28:EA:2F:91:2E:D0:83:02:82
X509v3 Authority Key Identifier:
keyid:45:16:4C:20:EA:F7:FA:B5:83:FB:12:C8:17:27:15:08:95:FC:EC:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:89:56:38:4e:de:9b:d3:f8:e7:8f:d4:d8:d4:19:c9:ee:cc:
73:98:a5:e3:e6:15:63:cb:78:c7:fc:e8:8a:48:40:b7:6a:b7:
6f:34:0f:f7:c1:26:43:6c:a7:3a:81:46:d0:b1:d9:12:37:e8:
73:e3:63:ec:f5:97:a5:55:33:23:86:3f:60:95:b9:be:c8:33:
b2:73:e0:e8:43:6a:53:42:4c:b1:bb:ac:6c:0f:9c:80:74:41:
6b:43:46:8d:20:a1:c3:e1:13:b3:52:62:5e:71:38:3b:a4:cd:
51:d3:b2:29:aa:c6:fb:e9:a6:86:cc:46:d9:e4:ef:c3:18:7b:
d1:28:d3:af:1a:64:6b:93:cb:37:d5:e8:f7:a7:37:b6:01:dd:
37:e1:f0:80:e0:c4:9f:66:62:3b:a5:2d:a9:d8:af:e6:0c:43:
a7:d4:fe:28:1e:6c:c1:5d:13:75:20:56:30:f6:ff:46:ff:c9:
ce:38:14:f8:28:2b:6c:b6:21:78:cb:df:80:de:13:78:56:6c:
62:2d:6e:4e:fb:12:0c:64:08:54:56:6f:d9:46:81:a9:c0:17:
58:ae:7c:35:56:19:ef:1c:e3:1e:d2:66:4e:79:94:84:05:45:
ac:89:3a:aa:55:25:6d:d5:89:93:59:90:a1:03:f6:a6:70:46:
f1:c2:89:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:13 2026 by rpki-client