This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft
File: 229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft (raw, json)
Hash identifier: VA9wEipIAfgh9ym3zHuDR1EDBLqujV5nmuD7JKaa3mE=
Subject key identifier: FB:CC:EE:DA:D8:AC:DF:5D:80:AA:28:26:A1:10:CF:B3:6A:5B:21:18
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Certificate issuer: /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial: 3CACA2EBD764DF81EA2035B8731F62A1148130C1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft
Manifest number: 0364
Signing time: Sat 24 Jan 2026 04:01:28 +0000
Manifest this update: Sat 24 Jan 2026 03:56:28 +0000
Manifest next update: Tue 27 Jan 2026 07:26:28 +0000
Files and hashes: 1: 229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl (hash: jCrREWKbP2GrmGbRYYgDs3mQsRIjRGlMEwrYNEGh6hU=)
2: AS147168.roa (hash: sXrlmN+ZCRiNZeyqUN67fyS1tNOgP0RFDODnmFAtcLI=)
3: AS45700.roa (hash: BXkE0BXqN50iJBAlAe18i/nlvwrKk+4GRFc684uKAn8=)
4: AS10217.roa (hash: AKpcdslpGED1vOq8rbDyvewGD3kNp+be//qHRk5p0rQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl
rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 07:26:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:ac:a2:eb:d7:64:df:81:ea:20:35:b8:73:1f:62:a1:14:81:30:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Validity
Not Before: Jan 24 03:56:28 2026 GMT
Not After : Jan 27 07:26:28 2026 GMT
Subject: CN=FBCCEEDAD8ACDF5D80AA2826A110CFB36A5B2118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4b:6d:ce:87:3d:ab:48:8d:f2:fe:99:af:c2:
e8:f8:a9:24:67:a8:cf:25:c9:96:34:64:60:c2:52:
9f:85:91:4d:19:64:60:d6:f1:b4:e1:30:80:88:11:
03:6d:ef:6d:f2:99:37:b6:61:86:a9:50:8c:7b:ea:
64:8e:22:4d:b3:f7:a5:9e:46:ea:24:ab:24:38:f9:
d8:72:65:0f:a4:62:e8:7f:6e:74:82:97:aa:4a:75:
15:15:5f:e6:e5:21:f7:9f:41:78:a7:26:23:ae:d3:
56:8b:50:50:4f:52:48:70:9c:50:2b:12:9d:6a:83:
ad:24:d1:6a:88:d8:eb:84:1a:5e:af:cb:eb:84:2b:
d1:3a:de:0b:f3:e5:57:c0:81:3b:1f:34:85:0f:a2:
00:78:68:7a:24:4a:4e:20:06:91:dd:67:51:f7:22:
08:2b:b3:3d:ec:0a:a8:4d:7a:f2:9e:63:89:3c:6c:
77:54:7c:9c:5d:7d:3d:39:51:0f:f3:36:4a:7d:f4:
1a:f3:2a:39:b4:54:28:d4:75:82:86:79:cf:6e:4c:
83:88:5c:e5:53:f1:0d:3e:3d:23:a6:67:c5:ce:85:
a5:bd:32:ad:64:f5:06:29:e3:d3:00:a7:41:2f:df:
fc:4b:3c:00:98:be:03:f3:b0:05:9c:8a:b6:1a:5c:
72:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CC:EE:DA:D8:AC:DF:5D:80:AA:28:26:A1:10:CF:B3:6A:5B:21:18
X509v3 Authority Key Identifier:
keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e1:1d:ed:4a:1b:fd:2b:32:8b:cf:f6:3e:c6:96:88:5e:00:
cd:81:f4:8d:36:56:9a:e9:70:2c:d4:db:15:8b:58:86:2b:99:
ba:2a:63:60:d7:e8:aa:59:78:2c:b0:7a:41:0b:ab:51:54:d2:
9a:ef:62:18:41:f3:97:f5:8b:a0:53:9c:9a:73:b4:65:e7:53:
48:50:c7:f0:c3:b0:35:ce:81:c2:38:b4:73:c5:57:1e:85:5c:
54:af:cd:50:23:b7:e2:3a:8c:7b:0b:3c:a7:2c:f3:4a:36:ee:
4b:68:38:c0:3a:16:3c:04:d7:d5:3d:1e:a3:19:24:aa:0b:78:
d8:b4:bd:70:33:7d:f5:36:d1:f1:69:d7:49:a1:7e:86:60:d6:
c5:3d:2b:fe:aa:10:2d:d2:2f:f5:95:17:16:7b:fa:6a:3f:89:
9f:e6:37:ec:6a:91:62:5b:b6:c0:7a:1e:97:67:1d:16:9f:2e:
10:cc:31:e1:c8:e3:46:99:22:13:06:44:1b:84:20:a0:04:89:
fd:b9:3a:d6:ce:da:05:14:c4:2d:4a:06:9d:08:81:b3:ba:79:
16:39:7b:89:b3:70:f6:77:c7:56:b0:aa:9e:de:a5:ea:02:76:
63:22:93:93:6a:e4:db:ae:e4:c2:0c:83:c5:c0:85:42:ca:66:
01:b3:a7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:17:42 2026 by rpki-client