This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.mft
File: 08A94FD7F0E8A287AD318D7A26254192431E175F.mft (raw, json)
Hash identifier: w76apXzOeiWTgyjzz/vHClCqvpogKmREZt9VKgrg/q0=
Subject key identifier: 11:AD:6E:B7:D9:17:E0:F8:DD:75:F5:7B:B8:CF:B3:25:B6:59:E0:46
Authority key identifier: 08:A9:4F:D7:F0:E8:A2:87:AD:31:8D:7A:26:25:41:92:43:1E:17:5F
Certificate issuer: /CN=08A94FD7F0E8A287AD318D7A26254192431E175F
Certificate serial: 57A193882861D99347DEDA88ACFC64F2ECDAAE79
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08A94FD7F0E8A287AD318D7A26254192431E175F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.mft
Manifest number: 0209
Signing time: Sun 25 Jan 2026 23:30:41 +0000
Manifest this update: Sun 25 Jan 2026 23:25:41 +0000
Manifest next update: Thu 29 Jan 2026 02:51:41 +0000
Files and hashes: 1: 08A94FD7F0E8A287AD318D7A26254192431E175F.crl (hash: cvhLgGy6+CJQE0ZPiMiVBiMcfb9YeW0/BUuU08w3h+I=)
2: 3130332e34332e32352e302f32342d3234203d3e20313339343139.roa (hash: VVwVAHNIOyaNlg3HmkibvzkBQxyuJMfLw9qgXP2WedI=)
3: 3130332e34332e32342e302f32342d3234203d3e20313339343139.roa (hash: n37UknBhv1+9WuSxzltTO8fZT8WF7d4rSmL/iPmFdNo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.crl
rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08A94FD7F0E8A287AD318D7A26254192431E175F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 29 Jan 2026 02:51:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:a1:93:88:28:61:d9:93:47:de:da:88:ac:fc:64:f2:ec:da:ae:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08A94FD7F0E8A287AD318D7A26254192431E175F
Validity
Not Before: Jan 25 23:25:41 2026 GMT
Not After : Jan 29 02:51:41 2026 GMT
Subject: CN=11AD6EB7D917E0F8DD75F57BB8CFB325B659E046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:30:4d:84:c3:30:52:56:c7:62:84:c4:e7:ab:
72:db:3e:98:b0:98:16:1f:bb:e4:3e:8d:e9:4b:a2:
ad:e2:cb:d3:25:f6:2e:10:30:f9:d2:21:65:7f:e7:
4c:2b:97:2f:bf:25:ed:d1:2a:f9:08:bd:d8:15:5c:
7a:d1:e9:83:9b:55:a5:ab:26:24:be:86:41:61:d8:
c3:a0:a9:5f:a8:81:87:92:95:fd:4e:cc:31:7a:b5:
31:d6:2d:91:64:b7:a8:a1:82:4c:8d:d9:85:7d:c5:
84:0e:40:d4:10:3a:4c:c7:81:0b:c4:60:70:16:02:
04:6b:8c:74:aa:bb:27:28:11:6c:9c:c7:68:dc:c8:
bb:1c:73:49:9e:a8:9e:ac:d1:c4:cb:c1:ef:b1:79:
e4:8a:eb:7a:51:1f:f2:f5:df:9c:80:37:c5:39:21:
e5:75:27:c1:8a:f0:49:2c:a4:b1:bd:92:c6:d6:a8:
84:47:0b:bd:05:30:f2:da:53:a9:1a:6e:3e:ea:02:
8d:f7:3f:e8:d3:58:e0:a8:f8:58:4d:50:d5:75:aa:
74:07:af:95:ef:bb:c6:7e:fa:b2:75:41:52:7c:1a:
c5:c2:96:8e:8c:c1:e2:66:7c:b2:7d:dc:19:61:db:
1a:3f:6c:09:b3:b5:3d:52:20:b5:b1:08:1e:dc:4a:
87:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AD:6E:B7:D9:17:E0:F8:DD:75:F5:7B:B8:CF:B3:25:B6:59:E0:46
X509v3 Authority Key Identifier:
keyid:08:A9:4F:D7:F0:E8:A2:87:AD:31:8D:7A:26:25:41:92:43:1E:17:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08A94FD7F0E8A287AD318D7A26254192431E175F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:7c:f6:de:8a:2e:6b:4c:e8:43:40:42:33:6b:79:52:76:e7:
f7:63:7b:dc:56:1e:49:83:6a:72:30:56:23:0c:5a:90:fb:8e:
b2:67:4d:d3:8d:71:a6:7b:ec:fc:65:ce:5b:5e:cf:ce:c2:dd:
51:ec:cb:b8:64:94:94:16:ad:19:82:c0:a8:9a:8c:7d:65:df:
80:5b:70:5e:15:82:37:f2:ff:f7:73:c0:dd:36:f5:23:71:3c:
66:44:d5:e3:8c:47:30:95:13:20:66:7e:40:55:1c:29:75:6a:
32:2d:82:00:e8:c7:1a:66:4a:cd:9e:ba:ac:fc:7a:8d:10:f4:
82:75:81:e8:e9:e6:96:68:70:57:5c:1d:6b:30:e8:72:39:bf:
c8:47:87:b6:dd:35:37:97:51:bb:2a:56:f6:8a:20:e9:0c:ae:
af:79:04:f2:d0:4c:1d:80:c8:b7:e4:de:24:b2:bf:ba:52:c3:
20:d2:86:e8:ed:4a:c4:75:f5:af:55:cf:a2:6d:37:4f:71:99:
0a:09:95:3f:c8:33:7f:f6:8a:85:f2:80:92:b6:50:1b:4a:11:
2e:26:05:4b:75:bb:29:c4:fc:00:5a:d0:3d:20:54:45:e3:94:
fd:ed:70:43:63:d2:55:3f:4a:58:c9:34:80:0d:e3:77:a0:af:
a6:d5:b4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 11:48:29 2026 by rpki-client