This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft
File: DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft (raw, json)
Hash identifier: CCNCYyzJ//qPGdWcTXi8Jqsqu8/I4KfB8rf1nTP3wZ8=
Subject key identifier: 5E:E8:74:0A:98:A3:DA:34:80:40:90:47:6E:58:2B:CC:3D:E5:EF:55
Authority key identifier: DA:8C:84:0C:B4:1D:26:68:58:19:83:C2:C4:E9:64:E6:7E:F2:D6:A1
Certificate issuer: /CN=DA8C840CB41D2668581983C2C4E964E67EF2D6A1
Certificate serial: 4354DDEC5C9BF6559AC03CFF869A7C2E96E8DB3C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft
Manifest number: 0298
Signing time: Sat 24 Jan 2026 23:01:52 +0000
Manifest this update: Sat 24 Jan 2026 22:56:52 +0000
Manifest next update: Wed 28 Jan 2026 09:59:52 +0000
Files and hashes: 1: 3130332e3137392e3231342e302f32332d3234203d3e20313439333735.roa (hash: 7mSy93JyGfuZLtTA89nmtcGQjqdRbUslrbNWczBJpGo=)
2: DA8C840CB41D2668581983C2C4E964E67EF2D6A1.crl (hash: I82lCPvVgsxGupSPgGspmHHPcx0s7xDCupiVBa1pfHo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.crl
rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 09:59:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:54:dd:ec:5c:9b:f6:55:9a:c0:3c:ff:86:9a:7c:2e:96:e8:db:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA8C840CB41D2668581983C2C4E964E67EF2D6A1
Validity
Not Before: Jan 24 22:56:52 2026 GMT
Not After : Jan 28 09:59:52 2026 GMT
Subject: CN=5EE8740A98A3DA34804090476E582BCC3DE5EF55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:55:30:fe:4b:92:4d:b3:82:e1:e2:f3:95:23:
45:3d:87:39:6f:0f:85:8c:36:ba:28:47:dd:f0:60:
50:fa:91:3c:e2:50:a4:b0:06:c0:36:cb:c2:af:2e:
4c:ca:c8:3b:7a:f2:f5:2c:6b:4e:7a:dc:30:c9:af:
ee:5a:19:60:73:34:c5:eb:b8:6e:c4:b9:19:7a:4c:
b1:1e:6f:32:c4:25:71:f7:27:18:49:a7:27:85:9b:
bb:b0:54:14:9d:88:9f:a2:bf:2b:e7:54:8d:95:2b:
43:ff:ff:37:83:1d:2f:5c:b8:44:8a:37:58:76:61:
7c:46:c9:88:37:69:86:2f:6d:ea:b9:7d:a8:46:2d:
63:7c:9e:76:96:dc:2d:bd:24:a6:dd:e2:35:e6:95:
f1:cc:3a:1b:3a:83:c1:7b:cd:ba:e9:f8:95:d4:e0:
80:38:93:b5:ba:96:87:09:76:af:a5:8f:c8:d1:1a:
3d:db:50:61:1b:51:3b:2f:4e:0c:9f:84:a2:82:7e:
d0:f7:48:16:09:02:30:b3:a2:39:09:31:4c:df:5e:
05:68:63:71:5c:a7:8f:93:e5:13:f0:ef:1e:f1:3e:
94:2c:10:bf:7b:c2:9f:26:63:e5:25:13:56:f6:bb:
1f:9a:b4:ca:ee:79:e8:39:2b:2b:47:ba:36:26:3a:
fa:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E8:74:0A:98:A3:DA:34:80:40:90:47:6E:58:2B:CC:3D:E5:EF:55
X509v3 Authority Key Identifier:
keyid:DA:8C:84:0C:B4:1D:26:68:58:19:83:C2:C4:E9:64:E6:7E:F2:D6:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:b5:51:59:28:5b:89:9f:b8:4b:d0:13:9d:74:bc:ce:8f:9e:
2e:d6:a4:dd:0f:ad:94:77:a3:67:77:58:10:d6:04:66:9a:59:
24:c6:3e:fb:b8:b0:e7:28:62:35:8d:ab:ff:59:03:2c:c1:85:
3e:78:0c:a0:ff:de:e3:86:ba:7c:b6:c8:37:5f:ce:17:79:3a:
13:43:da:fc:cf:c2:69:28:24:8f:e6:11:98:8e:af:3a:5e:e9:
80:15:a9:1d:0b:ba:2e:ff:23:83:a8:97:38:58:33:52:16:b6:
24:16:1d:db:44:ac:0a:61:33:6e:21:6a:69:dd:9b:51:fb:f5:
4b:d0:65:87:23:3a:d6:ff:ea:b4:37:16:ea:72:60:2b:3a:a0:
f4:e4:0a:47:a4:fb:67:2b:39:93:2e:ee:0b:fc:18:23:2a:7e:
27:25:8d:19:5b:2c:b7:73:a9:22:3a:80:13:8e:35:83:e5:74:
a6:4f:04:1d:74:b2:9b:5f:3e:70:fc:8f:10:81:c7:8c:b4:94:
a6:da:28:f3:5e:dd:ce:e6:b6:21:0c:33:5e:99:c8:30:09:6f:
82:83:b2:19:82:70:4e:13:70:53:6c:5a:65:b2:f6:8b:b9:fa:
b7:c6:f1:7f:34:d6:0c:de:02:08:92:a3:9a:72:0a:34:4a:0d:
c2:5c:8f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:21:18 2026 by rpki-client