This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft
File: 02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft (raw, json)
Hash identifier: 0lxgsGxGY7qWJ0FsMoBq1v8R21jGYIibVVwkHzJYoC4=
Subject key identifier: 30:D0:C0:15:6C:1D:96:25:E2:42:5B:24:0E:E9:33:BB:D2:9D:91:2C
Authority key identifier: 02:AC:8D:C3:B0:03:05:9A:70:40:ED:CF:C8:81:D9:C9:3B:06:4C:18
Certificate issuer: /CN=02AC8DC3B003059A7040EDCFC881D9C93B064C18
Certificate serial: 306A6199B35374BFA561D39C9285AC9D26849798
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft
Manifest number: 0546
Signing time: Fri 23 Jan 2026 13:00:50 +0000
Manifest this update: Fri 23 Jan 2026 12:55:50 +0000
Manifest next update: Mon 26 Jan 2026 20:52:50 +0000
Files and hashes: 1: 323430353a63303a3a2f33322d3438203d3e20313338383831.roa (hash: pTOPZ6sG4IHWMXNqdVtb8BodM+aimyGzFSlPn64NksY=)
2: 3130332e3134302e3138382e302f32332d3234203d3e20313338383831.roa (hash: 1AWd4OZCytjnMLGGQ3mn/VpwNeJ1KA7954S/Uarlfug=)
3: 3130332e3134302e3138392e302f32342d3234203d3e20313338383831.roa (hash: o2Fqju9m16OPUHuFcH3wb0i9qMLN8qQR+7Sxr2BaVt4=)
4: 3130332e3134302e3138382e302f32342d3234203d3e20313338383831.roa (hash: d7I2swOfny5ecV9M83MtKittywnggYfHKo91PVbmn6Q=)
5: 02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl (hash: 3EXWEsxLZX26TJryiHpfZNjRXhE4N/UtWPVXBQ8pE3s=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl
rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 20:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:6a:61:99:b3:53:74:bf:a5:61:d3:9c:92:85:ac:9d:26:84:97:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02AC8DC3B003059A7040EDCFC881D9C93B064C18
Validity
Not Before: Jan 23 12:55:50 2026 GMT
Not After : Jan 26 20:52:50 2026 GMT
Subject: CN=30D0C0156C1D9625E2425B240EE933BBD29D912C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:de:c4:73:f1:d1:96:28:b0:f7:e8:89:72:5f:
19:92:4a:15:a6:26:1f:1c:11:c1:71:43:fb:e3:4b:
54:40:ac:ef:ee:4d:c1:a9:b5:13:3e:05:fd:39:86:
b6:5f:29:8e:7f:03:73:2d:0b:42:0a:c1:88:aa:c7:
d1:0d:95:4d:d8:d0:52:3d:96:68:d5:02:14:0e:34:
e3:4d:68:31:f5:e3:6d:a7:1f:7d:d3:85:ad:22:00:
ee:f9:c4:19:6c:e4:c4:35:20:87:92:2b:49:57:77:
c0:63:0e:60:f3:24:a2:ac:c3:91:6d:3c:e7:ca:91:
a1:67:36:b5:6b:89:07:56:fc:17:fd:e2:78:b3:d8:
ad:78:3a:58:63:88:93:4a:af:4a:37:20:17:94:20:
df:94:9e:f6:28:83:8b:8d:72:88:02:6c:fa:92:a0:
3d:b3:ea:9e:25:1e:f6:95:02:0a:9f:97:5b:c4:bc:
39:da:92:1b:0a:32:a9:77:e0:9f:93:53:56:17:1a:
a3:16:69:a6:b5:d9:14:48:8c:bf:8d:93:4b:8e:db:
9f:4a:b5:2a:52:bf:86:04:32:d7:37:da:d9:c6:57:
8e:8b:ae:7a:c9:86:e0:8a:91:19:b5:68:18:bc:3c:
23:3e:f3:c9:06:9a:87:d7:67:a4:89:f4:c4:7e:ef:
f8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D0:C0:15:6C:1D:96:25:E2:42:5B:24:0E:E9:33:BB:D2:9D:91:2C
X509v3 Authority Key Identifier:
keyid:02:AC:8D:C3:B0:03:05:9A:70:40:ED:CF:C8:81:D9:C9:3B:06:4C:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:05:95:41:74:5a:4c:4b:22:e7:c1:a5:c4:c3:9f:8b:ca:73:
71:6f:21:c4:5f:e8:09:12:70:45:45:ac:be:df:aa:a6:4f:0c:
a0:e0:2a:f6:b3:a7:9d:70:11:a2:46:cf:66:77:fc:7a:7d:b7:
13:6c:2e:df:fc:91:ea:16:c5:08:00:53:e0:08:b6:05:92:92:
d8:6b:34:74:da:4f:19:29:bf:28:3c:be:ef:99:8e:24:f7:e1:
25:27:12:44:a8:d0:7e:46:40:f5:29:ba:e8:50:cd:77:74:65:
81:ba:4f:7e:ae:c2:39:74:da:08:55:0d:05:13:cb:e4:65:16:
86:49:1d:89:8b:c5:72:b1:9f:47:f0:7c:ac:55:45:0f:a0:8d:
cd:7c:ca:56:94:b2:c1:cd:79:97:5a:da:f7:f5:96:5c:29:c9:
dd:af:41:57:b4:59:6e:7e:db:f3:96:5f:fd:a7:f2:7d:26:0e:
70:cc:20:46:60:b3:7c:aa:4a:e5:9c:60:45:3b:93:f8:04:d0:
c9:d5:2a:72:c7:6f:d8:6c:ed:f3:3d:d5:1d:98:c8:f5:ab:8d:
dc:bb:c7:27:82:c6:b7:99:f0:ae:d2:ec:28:63:e6:bb:91:cd:
84:ee:70:94:11:ee:bf:e2:6a:57:41:d1:dc:36:db:98:b8:a7:
b1:47:63:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:59:37 2026 by rpki-client