This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft
File: 82BBF3364DDD646942F4CAE0579F132D84194FE2.mft (raw, json)
Hash identifier: 6MEWZtnbQFdeFFE24/nGkYJXLLrYcuk7dM4DCmS397I=
Subject key identifier: 9A:E4:D9:2A:2D:7B:07:C9:84:B3:BF:97:A0:0B:20:84:26:FC:ED:10
Authority key identifier: 82:BB:F3:36:4D:DD:64:69:42:F4:CA:E0:57:9F:13:2D:84:19:4F:E2
Certificate issuer: /CN=82BBF3364DDD646942F4CAE0579F132D84194FE2
Certificate serial: 37C98EA95BF9DE47BD6DBE84D0149C10FFC28629
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82BBF3364DDD646942F4CAE0579F132D84194FE2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft
Manifest number: EB
Signing time: Sun 25 Jan 2026 06:41:01 +0000
Manifest this update: Sun 25 Jan 2026 06:36:01 +0000
Manifest next update: Wed 28 Jan 2026 15:30:01 +0000
Files and hashes: 1: 3130332e3134392e32322e302f32342d3234203d3e20313430303235.roa (hash: ANxlrE1JSxdjlT4kZZgX9Az8PSjhsbf6pSdaY8P2LXE=)
2: 82BBF3364DDD646942F4CAE0579F132D84194FE2.crl (hash: 8tW65rUfzjOdelFXoAdQtR0AzdS1CFGp/JVIJYO+wUs=)
3: 323030313a6466333a3738303a3a2f34382d3438203d3e20313430303235.roa (hash: peJ67ixLv6wOxbNwTzpazMnzEKzYxMtdAI8w89zlkC0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.crl
rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82BBF3364DDD646942F4CAE0579F132D84194FE2.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:c9:8e:a9:5b:f9:de:47:bd:6d:be:84:d0:14:9c:10:ff:c2:86:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82BBF3364DDD646942F4CAE0579F132D84194FE2
Validity
Not Before: Jan 25 06:36:01 2026 GMT
Not After : Jan 28 15:30:01 2026 GMT
Subject: CN=9AE4D92A2D7B07C984B3BF97A00B208426FCED10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2e:f0:cc:9f:ba:7a:16:ac:31:83:1b:1c:ac:
f1:eb:e5:5c:de:2e:ef:7b:6b:f4:fe:55:9f:e7:e2:
f7:1c:4f:9d:55:3e:9e:b8:a2:60:81:13:43:35:5c:
56:71:ac:24:85:cd:6a:79:3f:0c:8a:83:32:01:27:
3d:e4:0d:3e:0e:12:37:d6:f4:45:5c:d6:96:51:8b:
21:1a:65:d9:4c:f3:c0:60:2e:57:51:e5:6f:1c:d1:
82:22:fc:b1:8c:09:7a:c0:dc:dd:99:ef:af:92:b7:
e5:04:1c:c9:8a:3a:4d:8c:c4:7a:d4:73:5e:09:86:
21:3f:be:6d:ab:8f:fe:24:fc:54:0f:30:24:87:01:
e7:fc:03:70:25:19:c4:c7:04:fe:8d:18:b7:24:5a:
fa:f5:e7:0a:21:45:08:ab:70:6e:50:db:86:72:6c:
7d:f4:ef:36:d3:14:f6:e2:fb:ce:70:34:1e:9b:11:
97:d0:c1:d3:9a:1f:f6:65:b6:19:83:54:5e:4b:3e:
8c:af:60:68:7d:a1:e0:8f:1d:5e:3b:97:f6:b5:3a:
b9:db:a6:d2:8b:36:21:d1:bf:34:16:27:23:94:dd:
ef:61:60:13:12:1b:92:10:a9:7f:a6:77:bf:49:51:
1e:2b:a5:10:6f:c3:34:20:9a:6f:39:dc:21:11:8d:
13:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E4:D9:2A:2D:7B:07:C9:84:B3:BF:97:A0:0B:20:84:26:FC:ED:10
X509v3 Authority Key Identifier:
keyid:82:BB:F3:36:4D:DD:64:69:42:F4:CA:E0:57:9F:13:2D:84:19:4F:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82BBF3364DDD646942F4CAE0579F132D84194FE2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:52:ee:3f:df:ef:e6:1b:53:03:d8:4b:0a:0b:c3:24:dc:84:
86:9e:b1:4f:67:b4:8c:e0:45:58:04:c4:2a:4d:cd:8f:40:36:
0e:2a:11:73:a9:93:a9:08:6e:e4:29:d6:4c:e9:2d:6f:0f:f8:
92:19:a8:9e:46:04:61:85:14:ff:3c:23:d6:5e:91:d1:c3:41:
d9:97:e7:0d:1b:91:a3:a8:42:ad:5a:ca:b0:2e:f7:4d:0b:69:
ae:d5:21:b0:f1:e2:05:53:94:b5:00:e9:69:eb:9e:ea:3b:40:
3e:82:fb:ab:73:9f:3e:62:35:4b:1e:b4:ee:fb:70:ce:22:a2:
17:36:42:cb:32:6c:0c:4b:b7:d0:dc:95:59:75:ad:cb:58:9c:
dd:cd:f9:f1:05:75:53:5b:ad:54:b0:f2:46:3f:a1:60:15:c3:
00:b0:27:24:2d:96:87:ca:83:98:cb:97:bf:0f:57:b5:1b:9a:
30:d5:a2:0a:c4:57:e4:2f:6d:b9:fc:fa:d7:42:78:a9:be:02:
6a:69:76:b4:25:31:ea:b3:db:0e:50:da:7d:f6:51:6a:fc:6b:
bb:03:16:85:81:3e:8b:c2:2b:1a:39:0a:6b:df:4d:e0:83:59:
4a:95:05:58:86:07:19:3f:ee:14:56:e1:84:be:6e:42:41:7f:
d9:20:a8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:46:03 2026 by rpki-client