This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft
File: 29A4AE587F980E73A344FD1ED55C47566E609511.mft (raw, json)
Hash identifier: OQ8VSEp4WwdVXVIKPjE4dLTG4bgwSQAzb1v+VmvPwFw=
Subject key identifier: 3F:22:3D:37:53:C9:DC:45:9A:88:B8:04:B1:95:F3:A2:0A:29:E0:CE
Authority key identifier: 29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11
Certificate issuer: /CN=29A4AE587F980E73A344FD1ED55C47566E609511
Certificate serial: 66D44E7372C77108415FC5208228102E260E8FBB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft
Manifest number: 020E
Signing time: Sat 24 Jan 2026 22:01:04 +0000
Manifest this update: Sat 24 Jan 2026 21:56:04 +0000
Manifest next update: Wed 28 Jan 2026 07:18:04 +0000
Files and hashes: 1: 3231302e35372e3231382e302f32342d3234203d3e203338313432.roa (hash: ibgEML1LWV3GcYP6GRvOjjWRG6RzbhDfHX86QAq91qs=)
2: 3231302e35372e3231352e302f32342d3234203d3e203338313432.roa (hash: EXLASj8PVKKJwsREbqBWd6a8fmdAbHcB/DzU2bmTOyA=)
3: 3231302e35372e3230382e302f32302d3234203d3e203338313432.roa (hash: kYJzUEQcWnyFZnM0+lqlLEcfPB6UOEcJYBSDjGHXeZQ=)
4: 3231302e35372e3231322e302f32342d3234203d3e203338313432.roa (hash: duc90GFuNbL5017UYKgzCGWcF8U4EsnoqNIvTSG815o=)
5: 3231302e35372e3231332e302f32342d3234203d3e203338313432.roa (hash: vcvaF7qLrZfF67W9/bH4Pv9+bQ+VrLBZL/jJ0+fbzRQ=)
6: 3231302e35372e3231392e302f32342d3234203d3e203338313432.roa (hash: CtnAA9scsnBm9yBtcf3dh5QpYIx2D3sLFM+gjP0S/X0=)
7: 3231302e35372e3231372e302f32342d3234203d3e203338313432.roa (hash: OeDxmQiYfJ+Kuyw0E4mlOqMrTAjgkpNdl0ffvHuVyVk=)
8: 3231302e35372e3232322e302f32342d3234203d3e203338313432.roa (hash: LtP1kQmMGBD8rNYEzlai6KwmPf3m3u3XHD/epMWL5xk=)
9: 3231302e35372e3230382e302f32342d3234203d3e203338313432.roa (hash: 5KJPXKO+YgVPDp5/Lxph27ikYeC7tlibyzTKvb+xH+U=)
10: 3231302e35372e3231342e302f32342d3234203d3e203338313432.roa (hash: CNjjCjswWd58cFSAK67rKA8R6XX41IvI3hykr65lfAk=)
11: 3231302e35372e3232332e302f32342d3234203d3e203338313432.roa (hash: lpKbOrbrhT2vlvAJL98reUqD6vC4IeP7PUgmebV+YgY=)
12: 3231302e35372e3231362e302f32342d3234203d3e203338313432.roa (hash: FYQ4GgoWT79qHp4XxDTgktT9zjmOHOsSmJwwOMQ1oFw=)
13: 3231302e35372e3231302e302f32342d3234203d3e203338313432.roa (hash: s4sdV2zqNMH3fGcBnDuis8aX3mvXYgrOkNmd2MBCpEo=)
14: 3231302e35372e3231312e302f32342d3234203d3e203338313432.roa (hash: A2F1GbTYlcEIUwvBTPhQfv0VuBBIuBdZuIee8bvl4wQ=)
15: 3231302e35372e3232312e302f32342d3234203d3e203338313432.roa (hash: WS/P4TpGYsCeXm+bcL5xnvrovJjYUoIR2jeGTVeT3mU=)
16: 3231302e35372e3232302e302f32342d3234203d3e203338313432.roa (hash: jQ9xqnz2BbrO2Re14MPLZ4EX0mN0DnJymhawCVrzhBE=)
17: 3231302e35372e3230392e302f32342d3234203d3e203338313432.roa (hash: rcQy9K6A496g9N3vwW/BVEMEh81ubo325Yhstno8ULI=)
18: 29A4AE587F980E73A344FD1ED55C47566E609511.crl (hash: FOsKXg2c6w6ZrkqFskgEFD2303euz9HCbhyocqMuL9I=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl
rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 07:18:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:d4:4e:73:72:c7:71:08:41:5f:c5:20:82:28:10:2e:26:0e:8f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29A4AE587F980E73A344FD1ED55C47566E609511
Validity
Not Before: Jan 24 21:56:04 2026 GMT
Not After : Jan 28 07:18:04 2026 GMT
Subject: CN=3F223D3753C9DC459A88B804B195F3A20A29E0CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6b:10:2b:ce:1c:d4:f6:82:56:65:83:75:c0:
30:cc:b7:b6:ec:56:e6:5a:b6:33:4e:bf:5f:eb:dc:
f3:ae:ae:27:8a:2a:36:92:b9:bc:87:44:a3:a0:b8:
df:e1:06:ce:2f:4e:66:cd:be:8a:42:24:a9:0d:8d:
16:26:95:67:6d:50:f6:18:80:32:6f:1e:9b:4a:86:
c7:6c:b3:44:98:d6:6e:0e:37:a8:8b:00:12:da:9a:
69:54:61:f8:8f:6b:e3:34:e6:18:63:c5:12:41:6d:
c9:7f:3e:1f:91:ee:92:28:2c:64:d2:43:86:de:b0:
04:a2:4b:d9:33:3e:d1:17:19:18:2e:74:f3:3a:e8:
24:37:ef:2d:d4:cf:4f:56:40:e3:cd:18:a2:2f:3a:
0b:1b:68:e3:1e:cf:ae:62:49:47:e7:7e:5f:b1:a7:
6f:cc:4d:c6:d7:0f:6a:34:3f:5c:de:15:bd:cc:6d:
d4:1f:d7:c8:a7:3f:10:47:b0:f6:75:e3:af:7d:2d:
55:c7:68:e6:e6:a8:6e:e3:36:4f:d3:e6:fb:35:27:
f8:bb:76:e7:85:2e:d4:0c:e3:95:17:dd:59:b4:f2:
42:0f:43:e0:00:1a:90:bb:2a:c9:07:77:e2:5a:d9:
c7:1f:64:ff:81:33:f0:09:1e:d2:b1:48:d0:d3:9d:
02:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:22:3D:37:53:C9:DC:45:9A:88:B8:04:B1:95:F3:A2:0A:29:E0:CE
X509v3 Authority Key Identifier:
keyid:29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:3f:d2:e2:60:9c:3f:88:78:f1:8b:9f:35:59:12:c5:4d:7d:
96:f3:f1:d5:f9:9e:e6:22:6d:ce:66:0f:7a:f3:57:54:7a:ad:
01:a7:5b:61:41:43:4d:05:66:cc:72:f7:fe:52:71:6e:a3:e2:
01:f3:31:95:3c:ea:d3:a2:bf:06:4d:72:29:8d:f4:0c:ba:53:
1d:0c:14:4e:2b:ba:33:0c:c9:c1:fd:ef:79:1f:b9:cb:59:69:
57:5c:cd:b0:4a:54:39:09:eb:52:6e:a0:55:c7:04:0e:64:1d:
62:a9:e8:4f:5c:64:98:d6:5b:ca:7d:17:fa:5a:e3:a0:dd:bf:
55:8b:ea:ef:9c:9e:82:a8:72:c8:99:6c:ac:e7:c4:23:23:2b:
65:9b:97:05:14:43:d0:42:08:b3:ec:5f:5d:23:a3:76:f8:ca:
4d:fa:22:51:04:21:02:80:54:bb:91:fe:eb:fd:de:10:16:8d:
b6:6d:2f:4b:5c:c4:df:39:e2:32:b1:16:88:ea:d4:01:a1:57:
f9:30:0a:b4:3d:ab:c3:de:03:aa:8d:da:b1:b5:d0:a8:2d:b2:
73:79:28:4b:0e:5b:2f:59:59:10:48:91:80:ba:91:a7:54:40:
44:c6:d9:02:4b:d3:ee:d9:47:18:dc:40:a0:c2:06:46:c6:d5:
93:c5:eb:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:05:44 2026 by rpki-client