This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft
File: 5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft (raw, json)
Hash identifier: WxCYG7Mz+RcEHHMzIdXK9I4I/0EP3TzpUDGbKDkHIvY=
Subject key identifier: FF:5C:72:96:37:1C:AF:09:26:61:0C:A7:DA:B1:B6:11:35:57:26:C7
Authority key identifier: 53:35:07:6B:95:F2:97:8B:E3:AC:DB:39:36:0A:E5:A2:2D:0D:4B:55
Certificate issuer: /CN=5335076B95F2978BE3ACDB39360AE5A22D0D4B55
Certificate serial: 3043039E2945EE36E1F9209832C8DBAD888B0C18
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft
Manifest number: 021F
Signing time: Sun 01 Feb 2026 07:11:54 +0000
Manifest this update: Sun 01 Feb 2026 07:06:54 +0000
Manifest next update: Wed 04 Feb 2026 18:56:54 +0000
Files and hashes: 1: 5335076B95F2978BE3ACDB39360AE5A22D0D4B55.crl (hash: +70WOjI8XNhQZgKsL4IxB3mSCCHBzlTQ90OgTA21Nt8=)
2: 3130332e3134382e3130302e302f32332d3234203d3e20313339393838.roa (hash: hRVeSPhdphVESxw/HVaRN7Uso4dNGcBae9fMOmvqYMU=)
3: 323430353a636534303a3a2f33322d3438203d3e20313339393838.roa (hash: lyCNDP9EqWqz+HEfKh+8ATTipD904Rt+hS0G+abC8oQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.crl
rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 18:56:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:43:03:9e:29:45:ee:36:e1:f9:20:98:32:c8:db:ad:88:8b:0c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5335076B95F2978BE3ACDB39360AE5A22D0D4B55
Validity
Not Before: Feb 1 07:06:54 2026 GMT
Not After : Feb 4 18:56:54 2026 GMT
Subject: CN=FF5C7296371CAF0926610CA7DAB1B611355726C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c7:f7:e7:13:4f:de:07:28:9b:6d:b4:58:44:
c8:06:50:d3:09:e3:a8:90:3e:d0:b4:67:42:4d:93:
ee:4f:d4:35:32:18:8c:d6:b6:1c:0c:2a:48:a4:4e:
a0:08:7c:fd:b3:f7:34:2b:e6:8d:85:40:1a:f5:2f:
ad:f7:ac:8b:1c:81:d8:9d:dc:35:7e:0d:d9:63:3b:
25:73:f8:b0:dd:b7:64:4a:fb:ff:19:f6:7c:ac:19:
1c:f6:64:4b:c4:b7:1a:0f:97:be:b5:f4:93:a8:6c:
3c:35:6e:43:90:ab:87:d4:1a:2e:36:8a:3d:3c:62:
5c:33:28:fb:af:4f:1c:71:70:2b:c5:7b:4a:97:a0:
31:28:dd:84:af:32:84:16:ca:4c:e1:72:9b:9f:db:
ca:a5:8b:2b:49:96:87:6f:48:4e:54:58:75:e3:32:
d6:8c:7f:03:19:2d:71:21:88:d8:0b:60:6b:30:2e:
f6:dc:8e:3c:62:1a:a2:e4:fb:03:68:a1:ba:dd:0b:
0a:a7:d8:46:89:48:31:38:4f:21:ac:7b:c4:02:96:
b2:02:97:38:94:2b:a8:d5:c1:97:80:81:b8:d2:30:
e2:cc:e9:db:0f:72:93:f7:14:19:2a:80:96:41:ac:
1f:ab:d0:5e:29:39:2a:39:0a:51:67:dd:8c:e6:8b:
a8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5C:72:96:37:1C:AF:09:26:61:0C:A7:DA:B1:B6:11:35:57:26:C7
X509v3 Authority Key Identifier:
keyid:53:35:07:6B:95:F2:97:8B:E3:AC:DB:39:36:0A:E5:A2:2D:0D:4B:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b6:11:2c:07:97:37:da:3e:90:d8:9d:fc:17:b1:04:cc:ad:
4e:0a:83:c2:83:e2:51:0e:44:1d:89:7d:66:bf:b1:6c:4e:c4:
2d:c7:d6:33:f3:d4:c9:ba:87:f6:4f:6f:99:c3:3f:be:a5:ea:
c2:bc:ee:f8:12:b7:d4:58:e4:82:b5:fe:e7:63:d2:dc:1a:8d:
8c:87:70:5a:6c:89:bb:af:40:a8:2a:5a:08:70:e3:6b:85:aa:
5e:8c:a1:8a:6e:4e:df:c4:76:3d:2f:e7:1f:54:13:32:7f:e2:
3d:e5:63:ec:78:72:e3:35:20:aa:e1:b3:9f:0f:8d:31:99:8a:
28:4c:cd:af:3f:48:00:1a:67:22:83:fb:7b:29:22:f1:0c:bb:
87:a8:ca:c3:22:0d:75:ea:7a:a4:ce:be:44:01:05:85:e2:74:
e8:b7:73:6c:a8:e2:fe:ae:ab:c6:86:bc:d6:4b:f1:3c:0a:ff:
d5:c0:f6:4c:cb:4f:cf:5b:91:71:eb:b3:43:66:18:53:d7:a7:
72:05:6d:4c:83:d9:ce:ff:f8:c5:17:61:d4:c8:43:81:1f:ae:
3b:08:ba:77:ba:4d:30:f0:d3:e4:66:e4:18:c8:1b:7e:d9:4e:
94:90:fc:c9:e6:4e:34:f0:27:5d:21:07:9f:01:bb:de:8b:bb:
36:85:f2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:50 2026 by rpki-client