This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft
File: 2042008AEC80152F373D2A04DFD3893EE2F92166.mft (raw, json)
Hash identifier: XidjYrUptEc47ygC3++XHjR4NPDFIwuJK6IQ/7p1GHc=
Subject key identifier: D8:74:8D:FB:A1:07:91:74:E1:E2:57:E5:8B:F1:76:72:39:2D:6D:B2
Authority key identifier: 20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66
Certificate issuer: /CN=2042008AEC80152F373D2A04DFD3893EE2F92166
Certificate serial: 766CB129FF1B021A426E60218CD0D4B53CEAB959
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft
Manifest number: 01EA
Signing time: Sat 24 Jan 2026 04:21:36 +0000
Manifest this update: Sat 24 Jan 2026 04:16:36 +0000
Manifest next update: Tue 27 Jan 2026 06:22:36 +0000
Files and hashes: 1: 3230322e37332e31362e302f32342d3234203d3e203538383136.roa (hash: 7u4efn7bHYzED6nyNb+Hqw9a6DQWqirinCujiYt23iE=)
2: 3230322e37332e31382e302f32342d3234203d3e203538383136.roa (hash: 2KzZDAzCYvLDGmuyMQTwS12UkngL2r4uYLx3E6PowDU=)
3: 2042008AEC80152F373D2A04DFD3893EE2F92166.crl (hash: 8Na2Ti3A02ybDoDx6g1K7+51ydbIqM35TNUIKrqPKFI=)
4: 3230322e37332e31392e302f32342d3234203d3e203538383136.roa (hash: 5m5TlKYtb1BvkeOY5L0iLxzd9TDfvf4dSOsCxsnrroA=)
5: 34332e3235322e3138372e302f32342d3234203d3e203538383136.roa (hash: Q14M8/H1GKD5N/6iQpjuxENjm1t2nAKNH5gzPjfdhGE=)
6: 3230322e37332e31362e302f32322d3232203d3e203538383136.roa (hash: ZqPK1HKbxGKM6vESgL5zXUqVRLE1KpGBZ+2gXnpqzvE=)
7: 3130332e3234382e35392e302f32342d3234203d3e203538383136.roa (hash: ItE1oa3zcA/J6v7neMwAUFSJuwJHlB5fYUCcNJ52lrY=)
8: 3230322e37332e32312e302f32342d3234203d3e203538383136.roa (hash: +UYTL16FoJzljt1WcPKnLkea4mRmhRtr/yGtN5BCt4Y=)
9: 34332e3235322e3138342e302f32322d3232203d3e203538383136.roa (hash: SEJtrFMzCIxaL5HsTowHqKeGBeSHdUF6h109MbSr1hY=)
10: 34332e3235322e3138362e302f32342d3234203d3e203538383136.roa (hash: cEeTKWmwIc5D8VRx4Wjyqi25fM0+EqJrs6oXdMSObyg=)
11: 3230322e37332e32322e302f32342d3234203d3e203538383136.roa (hash: 8OfgAbNQVhDJJTxQBxc34yWofgtcid4J/JQSeq4njCk=)
12: 3130332e3234382e35382e302f32342d3234203d3e203538383136.roa (hash: 5t1AVxnTVPWVliNjx4dePm/Uoa7VF9/XPOB2dVW7zIc=)
13: 34332e3235322e3138352e302f32342d3234203d3e203538383136.roa (hash: hamVtzyWWFgDoUv3GhJNoDFMf/gHi6nIkoDk9iZqkLo=)
14: 3230322e37332e31372e302f32342d3234203d3e203538383136.roa (hash: kRRcaFc2J9dVlk1FFSz0s3hPY1eoKnszPg9ucUh3LNQ=)
15: 34332e3235322e3138342e302f32342d3234203d3e203538383136.roa (hash: zkaOl3WDUKt7L8bc11OX90l50YOHPUCk7N8DGiMpczs=)
16: 3130332e3234382e35372e302f32342d3234203d3e203538383136.roa (hash: KnUhOivFyTwSLl1lFtmGPDtu87HmW4jCAVjkx4JXtuo=)
17: 3230322e37332e32302e302f32342d3234203d3e203538383136.roa (hash: oxNl3kL7pfOEMCZna82D8P/b9qkWwOtKEU4nTRdcl3U=)
18: 3130332e3234382e35362e302f32342d3234203d3e203538383136.roa (hash: Fp3TdqFb3PCcEDYFQYYU/EXsl8Z+niV/5Guw5uw0Pl4=)
19: 3230322e37332e31362e302f32312d3231203d3e203538383136.roa (hash: UTxUdswuTF+ox6a5oV05W2D3Jcdyj/c1haTTHi/3q+U=)
20: 3130332e3234382e35382e302f32332d3233203d3e203538383136.roa (hash: zc4ykLGcjnNqveO2/L+gaoTsTtypUdw4BR4ukEt5D9o=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl
rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 06:22:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:6c:b1:29:ff:1b:02:1a:42:6e:60:21:8c:d0:d4:b5:3c:ea:b9:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2042008AEC80152F373D2A04DFD3893EE2F92166
Validity
Not Before: Jan 24 04:16:36 2026 GMT
Not After : Jan 27 06:22:36 2026 GMT
Subject: CN=D8748DFBA1079174E1E257E58BF17672392D6DB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ca:0f:c9:1e:32:7d:a3:47:85:01:8a:bd:b3:
62:0a:71:3d:aa:8d:bb:b6:58:ad:44:2d:4a:98:6d:
21:6b:db:25:c4:94:37:30:7c:aa:9c:f9:0f:82:35:
54:b2:94:6b:e5:c8:ad:d3:24:5f:7a:7e:a2:b7:44:
87:7f:35:8d:8e:f8:85:df:60:b3:d9:29:85:2c:0a:
ed:a0:cf:11:7d:19:dc:21:f3:ff:c9:89:f3:de:ac:
60:67:95:f7:13:bb:50:a9:38:e2:41:ee:15:cf:64:
7d:74:fb:ee:ad:c0:93:2e:2e:9b:ff:38:38:f2:82:
83:65:94:53:8c:b5:50:73:1a:d4:b5:6e:1e:22:1c:
63:f9:f3:e4:4a:6b:99:bd:6c:1a:df:26:d8:1e:70:
f4:5d:a4:a4:3e:96:40:32:06:00:43:29:a4:03:4a:
1d:d6:68:d4:38:45:db:a7:91:fe:e5:fb:52:42:ee:
59:da:69:d2:a8:53:68:91:1b:d6:77:2e:1a:a5:c7:
16:af:49:67:81:b1:c5:89:19:d3:f6:40:6a:8d:4f:
1c:4d:2e:5c:e1:29:5d:94:9f:47:7c:d5:31:19:be:
4c:54:68:e7:17:86:ee:bd:4b:eb:6e:c7:b6:86:1f:
c8:92:0c:98:07:be:bc:9f:16:a9:63:db:d7:ed:e2:
f6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:74:8D:FB:A1:07:91:74:E1:E2:57:E5:8B:F1:76:72:39:2D:6D:B2
X509v3 Authority Key Identifier:
keyid:20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:f8:e0:84:7a:01:82:84:4a:1d:e6:5c:86:c5:01:2d:15:6e:
a3:14:81:20:ea:6d:33:34:45:e3:4c:3b:80:fd:aa:3a:21:dc:
8a:2d:8a:0d:b3:5a:90:fc:17:7f:1e:a8:54:9e:e0:ca:75:bc:
4f:81:b8:71:37:45:f8:89:28:9c:60:ce:3d:31:7f:66:18:4d:
40:95:00:7b:f2:1c:72:fa:ee:8c:4b:b2:f7:33:1f:76:99:e3:
42:ab:7c:ad:65:47:35:13:ed:16:a9:db:53:93:f1:d0:cc:2f:
1b:32:0b:5f:ac:a2:73:fc:7f:b8:e8:6a:ab:1e:6c:d6:e6:cc:
fc:af:38:d2:3e:fc:d6:2a:00:73:4e:bb:84:5e:bc:2d:37:0c:
ea:d8:12:f1:ab:64:43:ef:be:18:4f:c6:54:9e:64:98:bf:ef:
15:a4:27:40:c1:21:63:6e:c6:34:67:27:89:87:c7:9a:d0:08:
95:f5:cb:66:07:a0:31:b8:49:55:09:4b:98:18:35:5d:21:de:
fc:da:b1:76:e2:79:30:cd:8e:7e:22:e7:4b:59:85:1c:04:bc:
dc:7c:bf:f7:6d:e8:56:a8:e4:59:cf:7d:5a:19:39:80:45:c2:
14:ca:85:dd:2f:05:1e:13:db:fb:f3:37:b2:8f:fe:29:2f:86:
6c:ba:d8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:53:30 2026 by rpki-client