This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft
File: C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft (raw, json)
Hash identifier: ej6tShC0KfpdhjSHzC9LYwxIUm3BUeu5Q86NpHjKssY=
Subject key identifier: A3:7C:65:C3:F3:94:99:20:AA:91:11:FF:1D:24:48:70:40:E3:43:08
Authority key identifier: C2:CA:98:CA:4D:D8:8D:73:DB:67:A2:41:73:E2:9F:FA:5D:11:64:02
Certificate issuer: /CN=C2CA98CA4DD88D73DB67A24173E29FFA5D116402
Certificate serial: 2F1725639B969F177E8BEEB3814E8B1C1E4C58A7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft
Manifest number: 0269
Signing time: Sat 24 Jan 2026 22:41:13 +0000
Manifest this update: Sat 24 Jan 2026 22:36:13 +0000
Manifest next update: Wed 28 Jan 2026 00:55:13 +0000
Files and hashes: 1: 3130332e38312e36302e302f32322d3234203d3e20313336303630.roa (hash: 1HQUgBaMMc8FXO2SWeKN9gV36q4emO7zTpOs+ZYJF8Y=)
2: C2CA98CA4DD88D73DB67A24173E29FFA5D116402.crl (hash: 4oioVmC0XMjDa0CVob1GdaemoW1Z5mB4kv5BAiP5I/0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.crl
rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 00:55:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:17:25:63:9b:96:9f:17:7e:8b:ee:b3:81:4e:8b:1c:1e:4c:58:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2CA98CA4DD88D73DB67A24173E29FFA5D116402
Validity
Not Before: Jan 24 22:36:13 2026 GMT
Not After : Jan 28 00:55:13 2026 GMT
Subject: CN=A37C65C3F3949920AA9111FF1D24487040E34308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:30:95:5e:82:e2:52:65:dc:f7:a7:2d:23:5c:
c9:08:7a:c7:03:e1:46:ff:40:c7:82:ee:07:c8:ac:
16:77:c8:cc:71:03:dc:52:8c:bb:01:aa:74:c4:5d:
a9:ba:e3:1a:43:a7:71:0d:f1:64:84:55:f3:31:c4:
be:80:56:2e:d4:3d:d7:c5:87:80:ec:71:cd:1b:99:
63:d7:c4:47:aa:dd:86:68:f7:91:ee:34:73:fa:c3:
23:74:e2:a4:35:4e:c5:bd:68:1b:18:05:e5:19:5b:
56:9f:f1:db:7a:65:79:17:fd:28:81:6f:55:74:d1:
12:77:25:32:b9:8a:8f:25:f1:94:52:7d:aa:e1:d9:
de:15:62:24:0a:88:54:e2:9a:bf:60:f1:ff:d8:5e:
ff:7d:08:d8:88:3d:30:48:be:05:20:88:e6:7a:14:
ba:b5:7e:94:49:1c:7b:86:6f:3c:bd:5b:e3:51:c2:
4c:63:44:c5:5a:3a:a5:c2:91:4f:5a:29:f0:70:2a:
49:40:75:59:16:6e:42:54:5f:2c:5f:f7:8f:c2:e4:
38:ba:34:84:56:dc:3b:b1:df:fa:7e:8c:38:e3:26:
89:62:26:7a:e7:39:45:be:94:b0:09:18:d6:4d:ec:
d0:f6:fc:2a:f8:76:ae:ed:1c:6d:89:f8:c4:29:3b:
42:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7C:65:C3:F3:94:99:20:AA:91:11:FF:1D:24:48:70:40:E3:43:08
X509v3 Authority Key Identifier:
keyid:C2:CA:98:CA:4D:D8:8D:73:DB:67:A2:41:73:E2:9F:FA:5D:11:64:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:63:29:4f:cd:af:ff:99:53:1a:ce:41:c4:79:db:1d:0a:b0:
ed:a9:7d:7f:67:a6:46:c9:61:3a:f5:17:ad:b9:35:38:14:aa:
17:a7:03:15:5d:f8:e7:fb:f1:ff:90:4d:1d:67:09:89:76:c5:
bc:63:68:ff:ad:dc:43:d0:4c:f6:a9:cf:43:a1:bd:85:e9:ff:
26:76:26:22:45:4d:93:e7:62:3f:8e:cd:52:2a:30:9c:d7:27:
e9:a0:bc:eb:7d:fd:74:63:28:ed:5a:f5:6f:0d:84:00:c1:d1:
79:e0:1b:54:35:3a:ee:f8:70:f3:46:c6:8f:c4:59:92:eb:86:
92:77:2e:df:da:4e:10:a7:46:1c:f8:e9:23:19:dd:28:a3:5a:
7e:16:12:5e:2a:f5:fa:38:db:18:bc:27:f4:60:4d:ca:82:c3:
d6:98:d3:df:46:48:cd:5a:1c:17:69:f2:bf:bb:3c:f1:bf:c8:
02:22:71:a5:aa:0b:52:74:77:1c:da:96:4c:5a:5c:5e:da:d4:
8b:4d:56:5f:fe:f9:43:31:a0:85:bb:f8:59:f0:8f:98:7c:2a:
b4:2c:b0:64:bf:ec:85:eb:ea:24:8b:89:35:18:1d:a1:54:4d:
2d:2b:1e:8f:68:2a:df:5a:1e:3c:f7:b0:f0:1f:e5:ac:b1:24:
82:86:87:5c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIULxclY5uWnxd+i+6zgU6LHB5MWKcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzJDQTk4Q0E0REQ4OEQ3M0RCNjdBMjQxNzNFMjlGRkE1
RDExNjQwMjAeFw0yNjAxMjQyMjM2MTNaFw0yNjAxMjgwMDU1MTNaMDMxMTAvBgNV
BAMTKEEzN0M2NUMzRjM5NDk5MjBBQTkxMTFGRjFEMjQ0ODcwNDBFMzQzMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyMJVeguJSZdz3py0jXMkIescD
4Ub/QMeC7gfIrBZ3yMxxA9xSjLsBqnTEXam64xpDp3EN8WSEVfMxxL6AVi7UPdfF
h4Dscc0bmWPXxEeq3YZo95HuNHP6wyN04qQ1TsW9aBsYBeUZW1af8dt6ZXkX/SiB
b1V00RJ3JTK5io8l8ZRSfarh2d4VYiQKiFTimr9g8f/YXv99CNiIPTBIvgUgiOZ6
FLq1fpRJHHuGbzy9W+NRwkxjRMVaOqXCkU9aKfBwKklAdVkWbkJUXyxf94/C5Di6
NIRW3Dux3/p+jDjjJoliJnrnOUW+lLAJGNZN7ND2/Cr4dq7tHG2J+MQpO0KbAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUo3xlw/OUmSCqkRH/HSRIcEDjQwgwHwYDVR0j
BBgwFoAUwsqYyk3YjXPbZ6JBc+Kf+l0RZAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
MTU3NmQ0Yy0xNzQ1LTRhMTYtOGVlZi1jZWMwODFjODIwNDMvMC9DMkNBOThDQTRE
RDg4RDczREI2N0EyNDE3M0UyOUZGQTVEMTE2NDAyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzJDQTk4Q0E0REQ4OEQ3M0RCNjdBMjQxNzNFMjlGRkE1RDEx
NjQwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE1NzZkNGMtMTc0NS00YTE2LThl
ZWYtY2VjMDgxYzgyMDQzLzAvQzJDQTk4Q0E0REQ4OEQ3M0RCNjdBMjQxNzNFMjlG
RkE1RDExNjQwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJRjKU/Nr/+ZUxrOQcR52x0KsO2pfX9npkbJ
YTr1F625NTgUqhenAxVd+Of78f+QTR1nCYl2xbxjaP+t3EPQTPapz0OhvYXp/yZ2
JiJFTZPnYj+OzVIqMJzXJ+mgvOt9/XRjKO1a9W8NhADB0XngG1Q1Ou74cPNGxo/E
WZLrhpJ3Lt/aThCnRhz46SMZ3SijWn4WEl4q9fo42xi8J/RgTcqCw9aY099GSM1a
HBdp8r+7PPG/yAIicaWqC1J0dxzalkxaXF7a1ItNVl/++UMxoIW7+Fnwj5h8KrQs
sGS/7IXr6iSLiTUYHaFUTS0rHo9oKt9aHjz3sPAf5ayxJIKGh1w=
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:36:49 2026 by rpki-client