This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.mft
File: C4632299E016D269164FA40AEF99CC8602E2B7C1.mft (raw, json)
Hash identifier: l1IzTVMqqq2IgNY40z/VdHWXqqaTAndW+TLuXA6yx3s=
Subject key identifier: 50:DA:1F:F7:4B:D7:6A:A7:3F:40:E8:9C:09:1C:34:DD:39:4E:06:3F
Authority key identifier: C4:63:22:99:E0:16:D2:69:16:4F:A4:0A:EF:99:CC:86:02:E2:B7:C1
Certificate issuer: /CN=C4632299E016D269164FA40AEF99CC8602E2B7C1
Certificate serial: 12A9291969D35DF8D96272819AAE9879909B9DED
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4632299E016D269164FA40AEF99CC8602E2B7C1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.mft
Manifest number: FE
Signing time: Sat 24 Jan 2026 08:31:39 +0000
Manifest this update: Sat 24 Jan 2026 08:26:39 +0000
Manifest next update: Tue 27 Jan 2026 18:35:39 +0000
Files and hashes: 1: C4632299E016D269164FA40AEF99CC8602E2B7C1.crl (hash: YAWthI2e5pDhosDv2WGin1EKFobXSzyY2/G95F48ujs=)
2: 3136302e32322e36342e302f32332d3234203d3e203435333035.roa (hash: gDEeaK4MqvoH1/Rybnd4HP4RdLEQVc8gkFhCRcLn6ys=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.crl
rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4632299E016D269164FA40AEF99CC8602E2B7C1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 18:35:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:a9:29:19:69:d3:5d:f8:d9:62:72:81:9a:ae:98:79:90:9b:9d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C4632299E016D269164FA40AEF99CC8602E2B7C1
Validity
Not Before: Jan 24 08:26:39 2026 GMT
Not After : Jan 27 18:35:39 2026 GMT
Subject: CN=50DA1FF74BD76AA73F40E89C091C34DD394E063F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:23:c1:8f:5e:aa:8a:ab:e0:92:a0:91:f7:5f:
ee:9c:1f:09:c0:dd:68:47:4e:80:d5:09:a6:8b:69:
da:0f:c0:d3:b2:57:1d:f1:8d:73:f7:ce:61:1d:3a:
ff:d0:8e:0d:f6:aa:dd:96:31:fe:b1:63:22:54:8f:
93:13:5f:1d:e7:ee:12:b3:90:84:08:3b:1d:ab:cf:
d6:a2:32:c2:7e:bc:44:2c:97:37:64:97:b9:f6:82:
6f:eb:3f:08:eb:73:c8:40:d8:56:46:1a:32:bb:33:
a3:a2:3b:ab:10:bb:f8:72:dd:d1:44:6d:55:8b:bf:
e7:0f:ed:c1:25:d7:97:99:ae:57:eb:c9:8c:0f:79:
62:f5:e5:41:e1:7b:b2:8b:16:66:65:b2:6e:12:6d:
32:9c:16:4f:49:3e:c6:d5:e2:78:4c:96:29:bd:a4:
f1:a1:95:7e:74:a1:4e:ef:8d:2f:53:5c:aa:4d:28:
f6:1e:1e:40:17:ed:bd:55:a0:3b:89:c9:cf:75:b0:
d5:c8:e8:0c:60:bd:e7:c9:ca:f8:86:01:90:0b:8f:
db:c3:3b:1a:bf:cc:2d:d6:64:e6:f6:d6:dc:53:b7:
aa:da:2c:bc:29:f8:f2:6d:da:5f:dc:e4:aa:55:9b:
ca:44:bd:4c:47:1a:d2:98:16:41:2d:df:a7:34:16:
b6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:DA:1F:F7:4B:D7:6A:A7:3F:40:E8:9C:09:1C:34:DD:39:4E:06:3F
X509v3 Authority Key Identifier:
keyid:C4:63:22:99:E0:16:D2:69:16:4F:A4:0A:EF:99:CC:86:02:E2:B7:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4632299E016D269164FA40AEF99CC8602E2B7C1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:19:7d:e8:f5:bf:e0:5b:71:6f:9e:ca:ed:19:9c:3b:6f:2b:
a6:29:9c:74:ae:fa:bb:cd:1e:79:56:9e:dc:ba:b1:9e:fb:39:
8f:73:68:7d:35:89:9a:80:e4:99:cc:76:52:7f:3e:f2:5f:07:
43:75:04:9b:2a:79:b2:e0:89:47:88:6d:d3:f5:8f:1a:e5:f0:
e9:2b:e7:06:8f:b7:de:8a:78:33:cc:d7:72:2f:c4:f2:b1:77:
7f:e0:c0:a4:06:28:4d:bc:31:48:ed:b8:bc:7b:91:55:05:c8:
0e:62:a0:ef:fb:be:16:eb:9c:94:d3:2e:53:fb:20:85:b6:b9:
77:1e:d5:a2:2f:98:8b:93:68:db:b2:32:d3:eb:05:46:56:12:
47:e3:1f:40:4e:a1:a3:7c:49:7f:8b:f4:7b:08:c3:50:54:55:
65:69:0f:5f:d5:a5:fc:e2:c4:91:29:1a:72:9e:2d:61:00:a6:
87:7d:ac:bd:53:40:d8:22:77:f6:4e:d2:39:5a:ca:4e:6c:bb:
a9:d2:42:98:86:5e:1d:ad:46:f6:59:4a:ba:b4:37:ad:c8:ff:
ca:94:b9:1e:18:51:14:60:29:11:fa:3a:43:a0:60:e7:a2:ef:
de:c5:69:8e:54:c3:b5:42:33:74:50:01:41:26:68:ba:50:6a:
7e:f5:b3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:09:23 2026 by rpki-client