This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft
File: 2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft (raw, json)
Hash identifier: RrCkbi1yywa9aWefIWp5C7cNo4F+bENxSzYzZFMdhVo=
Subject key identifier: A8:E2:9D:37:84:89:07:97:06:48:B6:DF:87:7B:6A:98:69:10:BA:D7
Authority key identifier: 2E:19:B9:74:05:D4:98:D3:B0:67:A9:A1:00:9C:DC:1E:02:FB:11:CF
Certificate issuer: /CN=2E19B97405D498D3B067A9A1009CDC1E02FB11CF
Certificate serial: 2250CA2E49493962D7602D713A63A8C6F1EEEC00
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft
Manifest number: 0340
Signing time: Sat 24 Jan 2026 13:42:04 +0000
Manifest this update: Sat 24 Jan 2026 13:37:04 +0000
Manifest next update: Tue 27 Jan 2026 22:19:04 +0000
Files and hashes: 1: 323430313a313363303a3a2f33322d3336203d3e20313332363532.roa (hash: Zp5MkPoy+mcmuZyHWWPJeYcS5LhdUDlPA4O7bCCb+jQ=)
2: 2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl (hash: fOaodC/tSHzIVUMTpvEKD+FuEep21E+LFOfNruw+1Qk=)
3: 3134362e3139362e34302e302f32322d3234203d3e20313332363532.roa (hash: n+xUq9a7n5f6ndT7big4scouCH78ut4B4QszfPAlm80=)
4: 3130332e32352e3139322e302f32322d3234203d3e20313332363532.roa (hash: d+MQp3eqG/C/hSPziIw4OmNz4U3nA5FN+ZaHxiNIjvo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl
rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 22:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:50:ca:2e:49:49:39:62:d7:60:2d:71:3a:63:a8:c6:f1:ee:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E19B97405D498D3B067A9A1009CDC1E02FB11CF
Validity
Not Before: Jan 24 13:37:04 2026 GMT
Not After : Jan 27 22:19:04 2026 GMT
Subject: CN=A8E29D37848907970648B6DF877B6A986910BAD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b7:56:d6:a3:e1:a8:17:fb:29:e0:4b:ca:17:
8c:4e:22:98:21:21:36:60:81:25:94:4a:c3:05:04:
25:d0:01:f5:db:55:c9:fa:ec:67:39:a1:c2:d2:38:
d7:da:36:91:ba:5e:13:fc:79:cf:b5:65:f4:5b:b9:
7a:ac:25:41:64:65:e2:16:b5:07:c8:32:bb:8f:cf:
cf:17:4d:f4:8e:29:bc:73:5b:3e:ba:7e:91:b4:a2:
6a:eb:5b:77:db:dc:5a:d6:3b:9d:74:27:af:f5:ae:
73:5a:41:e9:23:9a:d3:b3:1b:15:44:ed:96:1f:10:
f7:d9:c3:5d:e5:9c:ce:30:4b:ae:b0:4a:50:9a:5b:
bf:3b:ff:15:13:a4:05:b0:ab:31:2d:5e:68:2b:ed:
87:58:ac:aa:4c:13:72:57:82:1e:63:26:ac:e4:0f:
a5:e1:0e:aa:09:31:fe:bc:66:91:51:59:82:d1:79:
e5:c9:55:ac:6f:0a:83:e6:7d:a3:f5:b4:93:8d:54:
d0:7a:e7:d5:60:73:15:ce:56:34:52:dd:4a:ec:af:
c8:f8:5a:8b:00:84:de:b9:b7:d8:43:b3:1e:23:44:
23:d9:fe:22:5c:41:f9:54:eb:b3:1c:30:ab:25:91:
b0:a6:04:f8:b0:b0:5b:52:b3:99:42:87:58:de:9f:
cf:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E2:9D:37:84:89:07:97:06:48:B6:DF:87:7B:6A:98:69:10:BA:D7
X509v3 Authority Key Identifier:
keyid:2E:19:B9:74:05:D4:98:D3:B0:67:A9:A1:00:9C:DC:1E:02:FB:11:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:4e:fc:f0:c7:89:61:dd:1b:26:b1:2b:b5:be:e8:7a:2a:a1:
a5:a2:fe:13:7c:c4:0d:db:b0:d2:08:c7:d3:31:60:4c:17:6e:
9b:b0:11:d5:16:e8:73:8c:c8:9c:c2:05:41:0f:e5:fa:c4:a4:
1a:af:74:d8:b6:09:5a:4b:78:2c:67:c2:81:e6:36:f1:d2:c3:
7b:d5:36:62:29:28:00:27:d0:44:b7:1f:b8:8d:fa:ea:48:7d:
64:42:e1:53:e1:a8:2d:67:57:8f:e8:ce:00:4c:07:b3:6e:10:
85:6a:5f:0d:43:f1:33:a1:55:0d:7f:03:4a:8a:86:40:aa:fe:
4c:c0:5a:e6:af:c4:96:94:ab:52:fb:af:c8:bf:f4:26:0d:29:
04:f3:53:db:0a:ca:0b:dc:4f:72:85:ed:0c:13:0a:47:01:a7:
e4:d7:8f:0c:b6:e8:22:60:d6:c7:88:91:95:d8:b0:26:4f:3d:
60:8e:a9:47:e9:fb:2c:e4:a8:22:12:20:65:64:02:7e:44:d8:
23:e9:58:18:02:cf:6f:94:3d:76:77:be:4e:3f:68:88:2d:7c:
ee:a9:8f:bb:2a:b4:a9:72:6b:d4:78:ad:82:b0:d5:1a:81:80:
fe:c2:32:b1:8f:39:31:09:37:07:60:05:8a:9d:bf:c7:6f:c4:
48:4f:1c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:22:39 2026 by rpki-client