This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.mft
File: 232967D03C1169374A898D1C8991F1ABE7744870.mft (raw, json)
Hash identifier: mvN0AQLTZAFGoVcpjm8dblS29WT/LcHnWKBnrOkw3c4=
Subject key identifier: EA:A3:C6:73:48:E7:B9:DB:D9:47:81:13:54:72:74:61:E7:3D:2A:BB
Authority key identifier: 23:29:67:D0:3C:11:69:37:4A:89:8D:1C:89:91:F1:AB:E7:74:48:70
Certificate issuer: /CN=232967D03C1169374A898D1C8991F1ABE7744870
Certificate serial: 6F8BCDE955BD1D8626DA5C890FA6913C40A5CBEC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/232967D03C1169374A898D1C8991F1ABE7744870.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.mft
Manifest number: 02D9
Signing time: Sat 31 Jan 2026 07:21:41 +0000
Manifest this update: Sat 31 Jan 2026 07:16:41 +0000
Manifest next update: Tue 03 Feb 2026 08:16:41 +0000
Files and hashes: 1: 232967D03C1169374A898D1C8991F1ABE7744870.crl (hash: 3eCSQSHevaSryfM4Pm3Evp/G9om0nirSHqvGx/k8SVQ=)
2: 3130332e3135362e3233322e302f32332d3234203d3e20313431303938.roa (hash: OrYEci2LXcYUd7zO3w5vMjUiO57zzyli3tlZ6qJrtVM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.crl
rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/232967D03C1169374A898D1C8991F1ABE7744870.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 08:16:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:8b:cd:e9:55:bd:1d:86:26:da:5c:89:0f:a6:91:3c:40:a5:cb:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=232967D03C1169374A898D1C8991F1ABE7744870
Validity
Not Before: Jan 31 07:16:41 2026 GMT
Not After : Feb 3 08:16:41 2026 GMT
Subject: CN=EAA3C67348E7B9DBD947811354727461E73D2ABB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:de:51:6d:ce:c6:16:7f:ea:43:4c:21:79:ea:
d3:1f:e2:99:ef:42:d6:2e:9a:a9:81:49:06:39:80:
bc:0d:99:4e:23:a5:c3:b4:cc:31:79:39:db:5d:44:
fe:f5:8e:c7:0c:3f:78:dc:81:d4:8c:96:6f:64:af:
2c:66:a2:c7:25:1a:b3:c3:6b:45:89:48:15:0e:e8:
65:e8:e8:be:3b:cd:6b:c9:b8:dc:6c:1a:4d:a1:77:
03:a5:d4:05:cf:4b:fd:68:8f:23:0b:fc:3d:cc:24:
64:dd:37:c5:71:18:cb:93:53:3c:1e:fa:dc:fd:04:
9c:1f:4c:57:b9:76:0d:3a:f2:f4:d0:73:4b:dd:03:
a6:73:7c:1b:6d:31:de:1e:64:f4:3a:39:59:3e:2f:
3d:95:cd:6f:07:4a:70:5f:5a:94:71:30:e7:1e:aa:
e2:59:f3:21:a9:37:01:2f:10:25:54:ba:6d:30:e0:
1f:fe:c0:b9:c9:3f:08:b6:94:51:14:4d:e6:a1:35:
5b:8f:9e:48:b1:9e:c9:78:31:ac:e4:4d:c8:f7:ce:
d0:5d:6f:68:b9:d2:24:f3:0c:7a:4d:78:95:5c:76:
97:ab:41:5f:48:92:1d:19:23:9a:f5:1c:e8:92:ce:
b8:da:83:08:f0:82:45:c6:1e:e0:44:28:96:dd:06:
5a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A3:C6:73:48:E7:B9:DB:D9:47:81:13:54:72:74:61:E7:3D:2A:BB
X509v3 Authority Key Identifier:
keyid:23:29:67:D0:3C:11:69:37:4A:89:8D:1C:89:91:F1:AB:E7:74:48:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/232967D03C1169374A898D1C8991F1ABE7744870.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:d4:8f:d1:90:9e:12:54:5d:43:b1:2d:99:56:e4:2a:76:a7:
4d:d7:4f:6a:d3:3a:bb:fa:59:46:b6:a1:82:a2:58:dc:33:ef:
cc:16:fb:a1:4a:45:a2:7e:d3:86:7c:3c:ec:94:50:67:4d:ba:
40:fe:51:54:b7:78:ef:4f:85:bc:6b:f9:0d:9b:fd:93:9c:de:
c6:1f:b1:18:f3:de:03:1e:db:31:cd:9a:be:a8:c7:fc:49:78:
8b:83:c9:fc:f6:bd:e9:5f:66:7c:c5:93:f9:e4:6d:66:30:34:
f9:3f:b1:b0:28:65:67:d1:18:df:91:17:03:70:eb:f1:9b:84:
c3:d6:e5:76:14:7f:ac:15:d1:ca:8a:53:9a:91:6e:f7:e4:e0:
f8:e6:f7:aa:16:60:f2:a8:f0:9b:63:a3:d6:92:60:84:9c:73:
e4:ce:d7:26:c5:9b:d8:96:18:ca:ef:c4:57:00:dc:b0:cb:b6:
4a:81:81:5e:8b:56:30:42:54:5f:29:bf:dd:7b:44:5c:77:b3:
04:97:60:3b:65:db:30:d7:22:0c:77:f1:d8:da:f7:36:e7:ec:
27:97:c7:f8:a8:47:ac:42:15:c4:0b:d3:f7:78:e1:45:ed:4a:
9b:c9:7c:7b:c0:d2:44:6b:fd:d3:f5:3b:c0:15:9e:55:7a:fc:
5a:51:7b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:56:34 2026 by rpki-client