This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft
File: F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft (raw, json)
Hash identifier: BFHDQCN9AEwEt6Vw9bhZbllYrjn6ReVjSlTd5ikKERM=
Subject key identifier: 8C:5E:F5:51:24:F8:98:F4:1C:02:AE:10:DF:66:F8:C2:7C:88:9F:AD
Authority key identifier: F3:81:08:E7:3D:42:C7:F2:0A:64:8C:A9:19:3F:BF:B8:EF:E0:EC:27
Certificate issuer: /CN=F38108E73D42C7F20A648CA9193FBFB8EFE0EC27
Certificate serial: 54608DAB0F035A45AA5D0E11453FCEC996F0A3E0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft
Manifest number: 01FC
Signing time: Wed 21 Jan 2026 01:11:37 +0000
Manifest this update: Wed 21 Jan 2026 01:06:37 +0000
Manifest next update: Sat 24 Jan 2026 05:42:37 +0000
Files and hashes: 1: 3130332e39372e3233312e302f32342d3234203d3e20313530323831.roa (hash: 12t3q8UKsyUaN7ZPmQ7oKlNAYfCglRtEXGNPube8E5U=)
2: F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.crl (hash: Bv89p3sGhg5PLE89E3KDCpkwwbv8EqRmoSnTdKv6t6Y=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.crl
rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 05:42:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:60:8d:ab:0f:03:5a:45:aa:5d:0e:11:45:3f:ce:c9:96:f0:a3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F38108E73D42C7F20A648CA9193FBFB8EFE0EC27
Validity
Not Before: Jan 21 01:06:37 2026 GMT
Not After : Jan 24 05:42:37 2026 GMT
Subject: CN=8C5EF55124F898F41C02AE10DF66F8C27C889FAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6a:66:09:04:36:06:fb:b6:d1:17:ff:fb:34:
c7:e6:b7:35:ed:a4:5c:a6:bf:b3:1b:12:58:72:f6:
77:6b:ac:01:0c:4a:b2:63:1a:f9:0c:c2:c0:b1:44:
a2:e2:33:07:2a:50:d5:5c:48:e3:13:bd:0a:76:64:
48:a2:27:2c:bd:64:bf:fa:68:9d:7d:04:c2:69:b2:
9e:96:04:fa:b0:e2:76:05:14:23:30:92:68:63:af:
31:af:eb:5d:6d:66:43:47:82:1d:38:25:10:2f:50:
44:2b:61:eb:c9:c8:a3:d2:57:b2:23:e0:52:07:0a:
75:27:64:2e:a8:30:a0:3a:72:24:3b:0f:00:eb:d9:
07:bd:0d:76:ac:9c:2b:48:a8:b3:86:ca:79:c2:f6:
08:0f:47:27:b6:0a:9f:44:41:50:00:9c:c3:aa:49:
99:44:da:5d:fd:e5:fd:89:01:5f:da:d1:08:a7:6f:
3b:1a:54:78:3a:db:7d:0d:bd:67:ea:0d:37:46:d6:
af:53:2b:03:c6:d3:f3:de:49:78:94:d4:57:71:ba:
21:96:dd:1f:ef:eb:bc:99:fd:18:fe:c8:c2:4e:46:
77:b4:b0:d2:72:6d:19:5a:c1:0b:2b:10:a7:7f:e0:
2a:cc:c3:22:65:21:16:90:d5:c4:0a:bc:18:4b:f9:
97:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:5E:F5:51:24:F8:98:F4:1C:02:AE:10:DF:66:F8:C2:7C:88:9F:AD
X509v3 Authority Key Identifier:
keyid:F3:81:08:E7:3D:42:C7:F2:0A:64:8C:A9:19:3F:BF:B8:EF:E0:EC:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:57:25:c2:64:97:dc:2c:64:37:b6:ae:a2:ae:21:b0:b1:13:
00:10:9f:aa:f2:84:6b:68:8b:11:2e:61:e6:39:6d:34:af:54:
5d:10:3b:92:98:26:cc:0c:43:05:b7:24:3a:ed:b6:03:a5:ea:
62:eb:45:99:cd:8e:77:a4:e1:fd:04:82:14:fc:79:3e:e8:b0:
e0:9d:4a:49:34:f1:fb:90:7d:e4:36:e6:05:c0:1a:de:51:9f:
6b:b4:00:db:cf:37:ea:f0:ca:8b:96:6c:49:97:93:5f:5d:ff:
91:ca:a2:e9:61:dd:fe:3e:03:e9:38:66:48:7f:13:75:a8:68:
f6:42:23:52:4e:12:29:c2:bf:eb:47:a8:8c:21:a8:a5:38:80:
5a:89:04:db:79:43:b6:29:a6:9f:ec:b6:b2:73:00:4b:46:47:
d9:7d:19:a8:b5:ae:0f:ba:63:4d:fb:34:3d:3c:2a:01:b4:0c:
25:25:14:70:0a:50:88:71:21:06:ec:7e:cb:db:71:41:b2:9c:
af:91:f5:f2:70:2a:15:8a:51:e1:cb:ca:21:bc:e6:9b:93:f1:
30:38:c0:29:f8:c8:9c:32:6b:20:01:c1:24:2b:f1:96:6d:a2:
65:cf:fb:1f:ef:4b:ad:4b:aa:10:26:38:21:e1:2a:11:9e:bb:
af:01:4f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:45:35 2026 by rpki-client