This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.mft
File: 139934661CE07BEBBFA824F7225502B15AE8B653.mft (raw, json)
Hash identifier: e6XK+CrO0BxIng0u+s13w99a5YJW9ww2hdFzgQ7WOQk=
Subject key identifier: 96:F3:C9:62:12:4A:52:2A:A2:BB:C7:18:20:CD:1E:7D:AF:67:39:FF
Authority key identifier: 13:99:34:66:1C:E0:7B:EB:BF:A8:24:F7:22:55:02:B1:5A:E8:B6:53
Certificate issuer: /CN=139934661CE07BEBBFA824F7225502B15AE8B653
Certificate serial: 7E183787ABC3CCAFD973B93CCC846E0825242B12
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/139934661CE07BEBBFA824F7225502B15AE8B653.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.mft
Manifest number: 02B2
Signing time: Sun 25 Jan 2026 15:22:28 +0000
Manifest this update: Sun 25 Jan 2026 15:17:28 +0000
Manifest next update: Wed 28 Jan 2026 20:03:28 +0000
Files and hashes: 1: 139934661CE07BEBBFA824F7225502B15AE8B653.crl (hash: zDyTcRm3V79iDduUXaxwvwCnYntR4pG58CXXwO7OVQE=)
2: 323030313a6466303a353463303a3a2f34382d3438203d3e20313439333437.roa (hash: DAb3p6A+GCIjwCXpDIF2kcbvOKbS93Svvisaez6N1FE=)
3: 3130332e3137392e3231382e302f32332d3233203d3e20313431353936.roa (hash: UDTJVQMfh18042dfeJjUO+1EVnoX+eeQWO16oZtQKXE=)
4: 323030313a6466303a353463303a3a2f34382d3438203d3e20313431353936.roa (hash: JfuES0kaATSQOVSGSxANPI5Fc3cOe+x8BKWfAi4CWYs=)
5: 3130332e3137392e3231392e302f32342d3234203d3e20313431353936.roa (hash: A42BqVzjqFV46OV6hAZdG9PjgUwdu1Wwh4Yi98wXVBI=)
6: 3130332e3137392e3231382e302f32342d3234203d3e20313431353936.roa (hash: 8fuakgFHy3xUm7QgcDkjO9QSLBuvkIz5uGSpSL5YMTY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.crl
rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/139934661CE07BEBBFA824F7225502B15AE8B653.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:18:37:87:ab:c3:cc:af:d9:73:b9:3c:cc:84:6e:08:25:24:2b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=139934661CE07BEBBFA824F7225502B15AE8B653
Validity
Not Before: Jan 25 15:17:28 2026 GMT
Not After : Jan 28 20:03:28 2026 GMT
Subject: CN=96F3C962124A522AA2BBC71820CD1E7DAF6739FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a0:7b:2d:2f:2d:49:cc:a5:d1:5d:89:12:25:
96:c2:96:0b:a2:50:1f:36:c4:7d:96:23:bb:e0:35:
ef:51:51:43:b2:f8:1c:3c:76:2e:d9:e3:49:46:57:
42:b2:95:5d:e0:7e:e0:1e:85:14:6e:e7:13:44:90:
63:c0:f4:90:30:4e:37:c0:a2:10:dd:24:09:8e:76:
be:4c:97:22:80:fc:ab:a7:42:36:c7:75:78:70:fd:
04:4e:c2:ab:d5:4f:78:36:e2:e9:15:b7:72:12:ec:
f5:c7:14:27:54:a4:b3:0a:8c:59:f3:2e:3d:88:9f:
9b:94:6a:73:49:4a:18:91:76:42:2d:59:d3:2d:e7:
d6:45:c9:da:08:c6:6b:52:e6:17:23:f5:4f:09:ac:
ec:4b:35:75:c7:c2:e8:78:03:a8:aa:6f:52:ac:b7:
35:c0:ce:58:cc:71:63:53:e9:63:6e:74:f3:bc:ad:
18:7c:28:1e:3f:9f:e8:6c:66:16:ec:5c:eb:ae:b5:
0a:c1:ec:7f:4c:0d:f5:61:31:c5:7e:54:a3:69:b9:
c3:57:6c:76:05:d7:21:06:be:10:15:ee:a7:62:96:
b8:79:a0:fd:d0:7b:41:89:ea:f2:e6:a3:27:32:c1:
7f:ba:8a:e3:4a:69:34:6f:29:b7:a5:57:72:76:bd:
cf:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F3:C9:62:12:4A:52:2A:A2:BB:C7:18:20:CD:1E:7D:AF:67:39:FF
X509v3 Authority Key Identifier:
keyid:13:99:34:66:1C:E0:7B:EB:BF:A8:24:F7:22:55:02:B1:5A:E8:B6:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/139934661CE07BEBBFA824F7225502B15AE8B653.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:3b:6a:89:59:70:c2:49:81:fe:10:84:8c:98:ac:c3:aa:e8:
0e:76:cd:2d:74:0a:32:82:d2:50:4a:b8:a5:ea:a3:dc:6e:3a:
ad:e3:30:5e:1e:7e:b1:53:81:0c:e7:66:cd:c2:d8:95:c2:05:
53:10:36:c3:0e:88:c3:49:ab:ae:f0:ab:b4:3b:0a:a7:30:e8:
cc:be:da:86:a8:7a:65:76:d0:e3:46:bf:f8:7d:c4:01:48:66:
d7:dd:b1:37:b8:9f:0e:fb:91:35:7e:ee:89:1c:2c:a6:ce:8e:
29:0a:76:69:fd:2a:23:64:a4:b9:61:0f:79:cf:33:4b:8d:dc:
de:32:f3:98:a8:ca:fa:73:18:e0:50:c0:1d:86:18:c4:83:d4:
b4:d1:7c:9e:14:c7:7e:ea:1a:6f:c5:8e:00:4c:07:37:87:06:
92:b7:43:2e:6c:65:30:b8:40:35:46:ae:97:53:d0:98:86:a6:
e8:f7:e5:55:af:e2:d7:af:80:7f:13:6a:f1:fa:45:0d:6c:6b:
85:66:fa:4c:da:7a:90:2a:93:89:a8:ad:3d:5c:75:31:68:ac:
9d:82:a7:35:dd:05:32:29:1a:8b:74:11:8c:2d:8f:a1:df:67:
24:08:a9:9e:ec:1b:ba:08:19:2e:c7:19:18:84:5b:92:dc:a1:
87:84:ae:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:40:26 2026 by rpki-client