This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft
File: C85C49978E8023F2D58521524D4EC616244CDC14.mft (raw, json)
Hash identifier: /cdvx2Bx9bfIzuXvrzEky9Z041hajMRykF4GPPxtNR4=
Subject key identifier: 73:69:EB:63:AE:62:CD:6D:93:16:4A:0E:02:E7:79:DB:11:BC:9D:74
Authority key identifier: C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14
Certificate issuer: /CN=C85C49978E8023F2D58521524D4EC616244CDC14
Certificate serial: 7DA82B44FD2E96BFF046213264E14DCA7F7A24D0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft
Manifest number: 0222
Signing time: Sun 25 Jan 2026 12:02:21 +0000
Manifest this update: Sun 25 Jan 2026 11:57:21 +0000
Manifest next update: Wed 28 Jan 2026 16:43:21 +0000
Files and hashes: 1: 3130332e3233392e3231342e302f32332d3234203d3e2034383030.roa (hash: X2QeWvWwuvgIs5+TAK0HDLr7Wz+zJj0bCxQNhzyEI7g=)
2: C85C49978E8023F2D58521524D4EC616244CDC14.crl (hash: en446dAw8oehSyq34O4qiGAFCFpKfrpBZm6XjaJO0BA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.crl
rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:a8:2b:44:fd:2e:96:bf:f0:46:21:32:64:e1:4d:ca:7f:7a:24:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C85C49978E8023F2D58521524D4EC616244CDC14
Validity
Not Before: Jan 25 11:57:21 2026 GMT
Not After : Jan 28 16:43:21 2026 GMT
Subject: CN=7369EB63AE62CD6D93164A0E02E779DB11BC9D74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:94:51:0d:76:24:32:6c:31:5b:6d:65:b7:05:
e4:6e:41:52:ef:c0:df:aa:f0:32:fa:9f:2b:5b:ad:
39:c4:07:4e:ff:80:97:28:c3:be:24:6c:86:f7:94:
e3:7a:72:b7:56:78:ef:f2:1e:24:c5:9e:35:1a:e0:
c5:c0:e7:02:8d:3d:3b:7d:7f:4f:dc:bb:c5:30:b0:
be:a5:8c:92:48:db:99:1f:ea:7e:76:6a:06:ff:bf:
e3:38:b2:51:4b:f5:6a:d4:df:36:e6:4d:91:75:4d:
73:9b:a3:e4:a7:44:6e:84:fd:55:b0:50:82:a2:26:
cc:f8:6e:84:62:da:81:8f:71:e6:9d:d1:36:8b:63:
87:4c:08:66:11:2a:0a:f7:2f:85:22:31:14:df:53:
3e:d2:7d:1a:40:b8:35:6d:98:98:92:68:cf:e8:af:
e3:13:b7:80:8a:d2:49:bf:23:e2:c8:12:79:91:41:
4d:67:7c:9f:24:bf:34:35:a1:43:50:a4:ae:a7:a4:
9b:62:ea:e0:b5:0d:dd:7c:73:ac:c9:62:43:0f:f8:
09:0b:2a:64:07:09:8d:1c:72:43:d6:dd:46:1e:e6:
2b:a1:d6:51:95:37:56:9c:ee:c4:5a:39:1c:c1:48:
ea:99:4d:3f:8f:25:4d:58:4c:b8:fd:cd:6b:1f:2c:
c3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:69:EB:63:AE:62:CD:6D:93:16:4A:0E:02:E7:79:DB:11:BC:9D:74
X509v3 Authority Key Identifier:
keyid:C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:69:43:e8:5f:c5:ad:cb:97:1a:ae:64:79:3a:c1:8c:7d:7a:
75:ed:76:b0:7b:3d:46:ca:8f:20:7d:ed:97:99:be:6d:bc:1d:
e8:ad:5b:12:d9:da:62:50:cd:4b:d2:95:88:31:63:1a:c0:73:
94:65:79:46:b3:4d:1d:68:50:c4:de:9e:91:1a:f0:f2:55:d8:
37:fd:1b:e7:c2:c9:ef:9e:1c:8b:b3:ae:46:a1:97:ac:26:69:
31:ba:f7:d8:ea:b1:39:d4:6e:ab:03:93:12:5a:ca:78:dd:a4:
31:6c:d8:d8:ca:6e:68:ea:46:c0:46:ba:83:7e:74:86:d9:88:
5d:07:78:f4:a5:bb:f4:d5:67:78:23:b2:8c:30:9c:64:50:06:
30:99:ac:92:27:e2:81:f7:fe:7d:5c:64:cb:4f:cf:f3:da:12:
47:8f:79:06:72:a1:aa:58:1a:7b:40:a0:4b:78:5b:72:e8:1c:
fd:dc:21:63:b2:ab:50:31:f6:76:71:45:e9:7e:e4:64:87:76:
58:87:8f:61:cf:4f:27:49:b0:4c:9b:48:8e:04:2b:91:c1:f8:
a4:64:75:32:8f:80:56:d9:ab:be:89:97:52:87:16:6f:e3:38:
80:72:99:92:c8:a6:ee:36:b8:85:ca:0e:4f:12:81:b9:27:d5:
c7:f6:8d:f6
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUfagrRP0ulr/wRiEyZOFNyn96JNAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2MTYy
NDRDREMxNDAeFw0yNjAxMjUxMTU3MjFaFw0yNjAxMjgxNjQzMjFaMDMxMTAvBgNV
BAMTKDczNjlFQjYzQUU2MkNENkQ5MzE2NEEwRTAyRTc3OURCMTFCQzlENzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+lFENdiQybDFbbWW3BeRuQVLv
wN+q8DL6nytbrTnEB07/gJcow74kbIb3lON6crdWeO/yHiTFnjUa4MXA5wKNPTt9
f0/cu8UwsL6ljJJI25kf6n52agb/v+M4slFL9WrU3zbmTZF1TXObo+SnRG6E/VWw
UIKiJsz4boRi2oGPcead0TaLY4dMCGYRKgr3L4UiMRTfUz7SfRpAuDVtmJiSaM/o
r+MTt4CK0km/I+LIEnmRQU1nfJ8kvzQ1oUNQpK6npJti6uC1Dd18c6zJYkMP+AkL
KmQHCY0cckPW3UYe5iuh1lGVN1ac7sRaORzBSOqZTT+PJU1YTLj9zWsfLMN3AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUc2nrY65izW2TFkoOAud52xG8nXQwHwYDVR0j
BBgwFoAUyFxJl46AI/LVhSFSTU7GFiRM3BQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
ZTUxNmU2ZS1jNjc5LTRlNTAtYjdhYi0xZTQwNjc5MTI1Y2QvMC9DODVDNDk5NzhF
ODAyM0YyRDU4NTIxNTI0RDRFQzYxNjI0NENEQzE0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2MTYyNDRD
REMxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U1MTZlNmUtYzY3OS00ZTUwLWI3
YWItMWU0MDY3OTEyNWNkLzAvQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2
MTYyNDRDREMxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAC1pQ+hfxa3LlxquZHk6wYx9enXtdrB7PUbK
jyB97ZeZvm28HeitWxLZ2mJQzUvSlYgxYxrAc5RleUazTR1oUMTenpEa8PJV2Df9
G+fCye+eHIuzrkahl6wmaTG699jqsTnUbqsDkxJaynjdpDFs2NjKbmjqRsBGuoN+
dIbZiF0HePSlu/TVZ3gjsowwnGRQBjCZrJIn4oH3/n1cZMtPz/PaEkePeQZyoapY
GntAoEt4W3LoHP3cIWOyq1Ax9nZxRel+5GSHdliHj2HPTydJsEybSI4EK5HB+KRk
dTKPgFbZq76Jl1KHFm/jOIBymZLIpu42uIXKDk8Sgbkn1cf2jfY=
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:44:41 2026 by rpki-client