This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.mft
File: C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.mft (raw, json)
Hash identifier: VrHjtncDNZOoXyY5eSurjbnrXcx5r+1MQMdtoH2RJHA=
Subject key identifier: 64:EA:49:E7:A6:71:B4:CA:90:58:D3:13:0A:8E:59:F3:CF:AA:EB:3D
Authority key identifier: C8:2A:80:AD:CB:D8:36:F4:D8:D5:E4:E9:80:88:C3:EC:BC:AF:18:D7
Certificate issuer: /CN=C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7
Certificate serial: 129D6DE1C176ECA712BFAF1B943EBF564C22D0CF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.mft
Manifest number: 0546
Signing time: Sun 01 Feb 2026 02:51:40 +0000
Manifest this update: Sun 01 Feb 2026 02:46:40 +0000
Manifest next update: Wed 04 Feb 2026 03:49:40 +0000
Files and hashes: 1: 323430363a323163303a3a2f33322d3332203d3e20313430343239.roa (hash: ZpsXVRa1bGj6KGJ4JUiINsK5cebpyx4AuHAmoR4SCEQ=)
2: 3130332e3135312e3232372e302f32342d3234203d3e20313430343239.roa (hash: 2U9Zf0sqVfy0Kk4IRyy+SOT0VXzAWAUry3fc1mN2+RE=)
3: C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.crl (hash: Esy+LtYIAks7vs+sUfVubjgP9mgFGY+VmNeVhnBlSFM=)
4: 3130332e3135312e3232362e302f32342d3234203d3e20313430343239.roa (hash: 95rrpHgHcYlBddvbgX3RJAAMir/2oNARNGF298XXujg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.crl
rsync://repo-rpki.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 03:49:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:9d:6d:e1:c1:76:ec:a7:12:bf:af:1b:94:3e:bf:56:4c:22:d0:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7
Validity
Not Before: Feb 1 02:46:40 2026 GMT
Not After : Feb 4 03:49:40 2026 GMT
Subject: CN=64EA49E7A671B4CA9058D3130A8E59F3CFAAEB3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ae:07:b9:6c:ab:b8:4b:c6:8a:01:55:42:9a:
0a:28:48:3e:f2:c9:07:e9:c6:51:60:fb:6c:e1:44:
4a:ed:5b:00:1c:24:99:08:fd:c8:cd:86:e7:28:6d:
c7:87:3d:8a:69:de:9c:55:f9:95:90:53:33:89:8f:
9f:37:cc:39:5f:c5:5e:1e:fd:38:34:47:8b:10:4c:
cd:94:ee:ce:ce:f0:1b:39:2a:0b:25:a0:b4:7c:c1:
84:ac:f8:2e:23:fb:9a:b3:f7:7d:24:9c:eb:39:69:
0b:4b:12:a4:ad:1d:d4:65:6c:c1:10:a3:6b:72:10:
7b:62:37:56:e2:b7:99:e2:a9:c3:31:b5:a4:f3:04:
7b:9c:ff:02:7f:21:27:6d:a7:a6:6a:84:b1:e2:48:
a7:a5:9f:d5:bc:29:a1:cc:1a:fa:3b:8f:c6:6c:c9:
53:e7:98:61:71:ea:20:5f:43:f3:66:a8:0a:d9:13:
8d:5b:b8:ed:26:77:fd:42:61:2b:39:0d:0f:52:af:
81:12:51:9b:30:77:98:db:98:1a:e3:cc:ed:25:5f:
43:07:c5:0f:6c:95:11:1f:42:98:c9:75:58:75:48:
eb:2a:e5:9a:89:23:bc:7f:7a:1b:b2:07:56:b9:6d:
1c:da:19:5e:d5:a0:a3:a4:55:d7:87:60:36:d3:5d:
e7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:EA:49:E7:A6:71:B4:CA:90:58:D3:13:0A:8E:59:F3:CF:AA:EB:3D
X509v3 Authority Key Identifier:
keyid:C8:2A:80:AD:CB:D8:36:F4:D8:D5:E4:E9:80:88:C3:EC:BC:AF:18:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:0a:c3:21:a2:e0:00:b6:9c:05:5e:fd:29:ad:91:c8:33:9b:
eb:06:02:b7:37:19:de:a7:de:45:32:c0:83:b7:8f:06:52:8d:
38:b7:68:de:fc:9f:0c:81:82:21:af:85:f7:cf:31:c5:f1:3e:
f6:21:ee:30:0b:2a:fa:2a:85:35:60:e7:19:41:58:fe:75:f3:
f8:8c:97:39:d2:98:f0:2c:c0:e0:8a:82:38:5b:85:95:0e:62:
ff:09:f2:eb:f8:85:cd:16:c2:9c:9f:74:da:b0:29:e0:a5:01:
a7:a8:bb:b5:bc:33:82:c5:7f:33:c4:05:13:73:ac:e5:f7:1b:
65:7b:71:6d:03:24:e4:02:d5:12:e6:56:c9:84:47:f6:2f:30:
7c:da:98:2e:5a:fa:7c:2b:a0:42:a8:dc:bd:33:b1:26:91:6a:
06:a0:d1:b5:1d:86:02:e3:ec:70:d4:ac:73:9d:a1:3b:7c:4f:
59:6e:ce:61:e4:a5:ac:60:66:4a:c9:f5:70:d6:a1:bf:1b:a7:
5d:99:ca:c0:88:1e:7b:83:1e:b4:43:3d:ec:4f:21:25:da:66:
d5:84:86:d3:57:5e:ac:3e:54:e2:cb:1c:99:60:c8:e1:6e:49:
b8:83:f8:8d:a7:a4:05:93:7e:32:7c:d8:f3:05:6e:a8:61:12:
34:8c:bd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:52:26 2026 by rpki-client