This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft
File: 26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft (raw, json)
Hash identifier: vwIOmrxQDFW//EfkYdt3c7oUDQKhvVASeERt5fVurLk=
Subject key identifier: 44:EA:3C:2A:20:1E:39:C0:3B:2A:7C:96:E8:4E:8B:E8:03:03:2A:BA
Authority key identifier: 26:C0:12:47:69:3F:68:CF:DA:1F:8C:B6:B8:8F:7A:37:00:D3:00:01
Certificate issuer: /CN=26C01247693F68CFDA1F8CB6B88F7A3700D30001
Certificate serial: 788E64BDA01FDD4A540CFC52DBC9DA1F69635170
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26C01247693F68CFDA1F8CB6B88F7A3700D30001.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft
Manifest number: 0290
Signing time: Thu 04 Dec 2025 23:12:18 +0000
Manifest this update: Thu 04 Dec 2025 23:07:18 +0000
Manifest next update: Mon 08 Dec 2025 05:44:18 +0000
Files and hashes: 1: 3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa (hash: ooHKZSV1Ovcs3Fa7Lr6Xldk2Fnw1zgyPobWB4Cwlr44=)
2: 26C01247693F68CFDA1F8CB6B88F7A3700D30001.crl (hash: rjd1TfUg/blyJf9WP94E6mk1B3427RJpJB+8mPf41Qs=)
3: 323030313a6466373a376438303a3a2f34382d3438203d3e20313431393039.roa (hash: KA7O/abuJXSSbDP15REs5MblSDnNlUUXbTrePmAZ+kE=)
4: 3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa (hash: pcL7z2soi9Q0FZro9wWeWvMV7DRxoXReR3myJOf1vRA=)
5: 3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa (hash: pmEfBdkV2X0aiNWYmtMTZTWBxEmwxyhF/kgAB9N14Tk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.crl
rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26C01247693F68CFDA1F8CB6B88F7A3700D30001.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 05:44:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:8e:64:bd:a0:1f:dd:4a:54:0c:fc:52:db:c9:da:1f:69:63:51:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26C01247693F68CFDA1F8CB6B88F7A3700D30001
Validity
Not Before: Dec 4 23:07:18 2025 GMT
Not After : Dec 8 05:44:18 2025 GMT
Subject: CN=44EA3C2A201E39C03B2A7C96E84E8BE803032ABA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:82:b8:0f:69:8c:ce:70:12:d4:fb:cb:b0:e0:
a0:b4:78:78:5a:cb:21:c4:ff:44:89:6c:6c:98:d1:
19:ac:f4:7f:14:aa:94:88:a0:d3:16:75:93:f1:ea:
57:76:be:e9:a1:2a:13:1b:b1:b6:45:8e:b7:fb:87:
52:85:fb:fd:f7:40:14:03:b8:f2:24:c8:25:47:d3:
a3:d2:00:bc:e9:1d:9e:6d:d8:af:25:9c:9b:8d:59:
bb:39:e9:94:ed:c4:88:57:5f:7c:04:e4:0c:2e:62:
21:23:b2:44:dd:e8:91:32:ce:af:86:39:ce:ab:92:
fe:64:92:48:87:09:a5:70:37:07:24:d1:c5:6a:77:
b3:98:a9:ad:d9:5f:39:e1:94:36:61:a6:64:bf:af:
a5:c1:97:f5:90:c9:9f:97:48:27:d2:0e:6c:b4:e2:
d4:ea:86:6b:8e:80:0a:c4:07:7d:5d:cd:d8:b6:db:
b7:8d:9b:b1:9b:04:a2:fe:8c:3a:c7:c6:70:b1:d0:
c2:38:a7:ee:e7:15:ae:6f:78:26:b9:64:84:58:c5:
3a:63:7b:de:da:d2:e0:48:98:1d:ea:42:c4:0a:f6:
2c:e4:d2:03:1b:2a:81:a7:d7:0a:13:aa:46:79:6f:
19:48:8e:31:24:34:09:9e:04:4c:16:28:2d:5f:1a:
bc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EA:3C:2A:20:1E:39:C0:3B:2A:7C:96:E8:4E:8B:E8:03:03:2A:BA
X509v3 Authority Key Identifier:
keyid:26:C0:12:47:69:3F:68:CF:DA:1F:8C:B6:B8:8F:7A:37:00:D3:00:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26C01247693F68CFDA1F8CB6B88F7A3700D30001.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ec:8d:2e:58:da:a3:01:49:e9:4f:ae:dc:be:70:18:67:c2:
66:0f:cc:af:a6:db:6f:c1:b0:44:77:b5:f6:03:b5:72:cf:8d:
1a:26:fd:db:42:15:61:71:4e:08:2d:b8:e6:ef:9e:cf:61:a4:
09:ed:59:bc:23:40:f5:e8:66:8b:c5:1a:1a:61:a1:c1:94:7d:
1d:2d:34:6d:86:fc:5f:12:53:14:80:91:2b:1b:78:d9:cc:77:
96:ec:a9:1f:4f:50:8f:db:39:43:ab:f9:2a:00:b7:37:7f:a7:
f4:b4:40:c4:f5:0f:62:ea:5d:71:63:5f:15:14:29:b4:29:fd:
51:9d:ae:f5:9f:fa:3c:3a:b6:c7:74:a2:cf:7c:6d:a3:04:f7:
39:4a:d7:69:ad:74:a9:dd:05:87:35:b4:b2:87:29:69:d9:14:
da:90:85:40:69:6c:07:25:67:52:fa:f1:ea:48:fc:f9:6c:65:
c3:63:0f:26:15:1b:bf:33:b6:36:a3:6c:fd:d8:9c:55:99:07:
56:8d:2e:43:06:4f:15:94:3a:7f:5f:fb:1f:c0:d3:7c:0a:79:
e1:75:85:e0:77:c9:97:b8:0f:55:b3:64:7e:77:a0:e0:26:e0:
1b:40:c8:4b:17:d5:8f:8e:2e:8e:e2:57:fc:c4:f3:86:2f:3e:
f5:1a:3b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:07:01 2025 by rpki-client