This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft
File: 19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft (raw, json)
Hash identifier: fIPKOcNV1v5ztZIVKHFCCsHZl6n5qcfnCzzkXTRkFaY=
Subject key identifier: 8B:9E:B8:85:04:F1:64:B9:B1:B1:AD:B2:75:BF:AE:44:F6:03:02:71
Authority key identifier: 19:A1:96:F5:E5:BA:BA:31:92:6C:5A:EE:F4:4F:C1:63:87:E6:5C:3C
Certificate issuer: /CN=19A196F5E5BABA31926C5AEEF44FC16387E65C3C
Certificate serial: 2475C08B1E0BB68EDD0BF7F5C83CB482F15BB4CD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft
Manifest number: 0548
Signing time: Mon 02 Feb 2026 07:11:42 +0000
Manifest this update: Mon 02 Feb 2026 07:06:42 +0000
Manifest next update: Thu 05 Feb 2026 15:53:42 +0000
Files and hashes: 1: 19A196F5E5BABA31926C5AEEF44FC16387E65C3C.crl (hash: S51EdWUGwN1nX0RlOf0eXIVEV3scqRbHux+W610DM7A=)
2: 3135372e3131392e3232302e302f32322d3234203d3e203435333032.roa (hash: HO0xgGTKI8hDqeJBD1vkonWKYqVkEjngRgMiBcK+FFk=)
3: 3130332e33302e3138302e302f32322d3234203d3e203435333032.roa (hash: U5fnoyr/5IIStrT2HEQ+BlCOUuRxzROoZ8IEFi9/L1Q=)
4: 323430333a393130303a3a2f33322d3438203d3e203435333032.roa (hash: 4brGPOCgGPQmWwoETwSHHbE2lw9R22KEcXYm0M7Fp90=)
5: 3131322e37382e34302e302f32312d3234203d3e203435333032.roa (hash: Be1o2enB5OVbfeTb11FQx0y/6KQQnTeDSPNmLL8NRc4=)
6: 323430333a393130303a3a2f33322d3332203d3e203435333032.roa (hash: hclG6eHZVb4H2Dv3mKJVXKKatJdKMCXUFJ5B8dDmEf4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.crl
rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:75:c0:8b:1e:0b:b6:8e:dd:0b:f7:f5:c8:3c:b4:82:f1:5b:b4:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19A196F5E5BABA31926C5AEEF44FC16387E65C3C
Validity
Not Before: Feb 2 07:06:42 2026 GMT
Not After : Feb 5 15:53:42 2026 GMT
Subject: CN=8B9EB88504F164B9B1B1ADB275BFAE44F6030271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b8:c8:cf:a3:03:a8:ed:53:ee:8e:05:7f:2c:
6b:be:7e:cd:77:bf:3e:a5:e3:90:06:76:52:7a:a7:
8b:34:dd:e9:db:dd:16:64:f5:95:2a:95:e4:66:62:
2c:04:f6:8c:b7:2c:91:57:75:27:8c:88:4a:6b:8b:
4e:5c:3d:9e:f1:44:eb:ff:8c:5c:66:90:7f:31:1f:
4b:42:0e:f9:dd:70:54:8e:ef:85:84:fb:08:1a:85:
60:f3:02:f3:55:27:df:d4:47:63:5d:90:a1:33:a2:
02:b1:e7:64:12:f2:28:00:22:e0:c2:c2:a7:99:b5:
7e:bc:ae:04:26:c7:4c:b1:89:5d:7d:1c:84:b7:5e:
60:10:9a:fa:2e:35:a6:12:aa:0d:dc:99:58:e1:8b:
a8:b6:96:97:55:6c:8a:93:75:83:8a:3a:11:13:8e:
eb:05:51:7a:ea:cc:a3:94:42:c9:fa:4a:eb:44:77:
42:01:15:b9:38:15:ba:8e:b1:1c:59:c5:5b:1e:00:
c7:6a:53:b9:f1:bd:d8:f4:a8:33:8d:f5:c0:94:e2:
8b:af:eb:b9:8f:4a:ec:cd:e1:6b:13:d7:c7:4f:85:
bc:81:f1:3d:fe:d9:36:4c:f3:5d:3c:53:51:8a:fa:
75:c5:ab:95:c4:24:0d:97:3c:33:57:42:fe:05:34:
ba:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9E:B8:85:04:F1:64:B9:B1:B1:AD:B2:75:BF:AE:44:F6:03:02:71
X509v3 Authority Key Identifier:
keyid:19:A1:96:F5:E5:BA:BA:31:92:6C:5A:EE:F4:4F:C1:63:87:E6:5C:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:79:3b:b1:20:01:5f:da:07:5f:be:e4:55:2c:b7:59:41:26:
55:a3:2f:dd:9d:c7:26:ef:63:e0:fa:74:fb:1f:9d:34:f0:05:
3d:88:0c:af:96:c0:67:1d:09:80:cc:5f:96:18:c9:b2:d8:4e:
cb:37:7a:4e:83:cb:70:a9:f4:b9:8d:42:4b:7e:36:d9:e2:f5:
ba:bc:59:07:50:cb:6f:01:c6:23:bb:89:a4:e7:dc:ef:0e:1b:
56:31:a5:b7:82:85:3a:bc:8d:de:71:53:8d:27:f0:8e:84:b5:
b9:07:2e:0e:ab:ad:81:10:48:6a:f9:62:36:1f:5c:af:83:81:
c3:02:3f:23:be:db:48:4f:c1:8a:d5:0a:2a:a7:93:2e:74:ea:
f9:b6:58:7e:49:03:18:22:ef:9d:a2:a3:4c:9b:50:7e:ec:f7:
e9:3d:17:2d:18:0b:c0:92:b5:d9:f1:e3:94:9b:fb:da:43:c1:
09:d2:d1:e1:06:e4:9c:5e:e5:d4:5e:78:15:d8:89:00:f5:84:
25:3b:60:b5:a2:a9:27:61:e2:15:4b:13:44:51:cf:e3:9e:e7:
f3:13:d8:4b:5c:de:38:27:ab:74:5d:5f:24:2a:cc:2b:47:0e:
51:df:52:75:27:64:c5:72:31:7f:e3:64:a2:ea:69:1e:02:01:
e0:64:7f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:19 2026 by rpki-client