This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft
File: C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft (raw, json)
Hash identifier: 9HSnRd6fpSTfZdudGcVIBUJRW66ADBFTjv3cPSMGa1o=
Subject key identifier: 3C:5E:C2:DE:8D:CA:47:CB:64:61:8F:3F:6B:00:AE:CA:FC:F3:C9:FE
Authority key identifier: C8:17:5E:7E:9E:15:E5:65:FE:69:72:92:A3:7E:14:BF:E0:67:CA:F7
Certificate issuer: /CN=C8175E7E9E15E565FE697292A37E14BFE067CAF7
Certificate serial: 3C5A7FD6949DD7670ED7DD4804F3E7CC30FE60BF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8175E7E9E15E565FE697292A37E14BFE067CAF7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft
Manifest number: 01BC
Signing time: Sat 24 Jan 2026 14:20:02 +0000
Manifest this update: Sat 24 Jan 2026 14:15:02 +0000
Manifest next update: Tue 27 Jan 2026 18:35:02 +0000
Files and hashes: 1: 3130332e3135382e31332e302f32342d3234203d3e20313338303839.roa (hash: M+WZc7qSf2CmAB/JGuGAm2J24ap4dhEUP+j6m1qwiAs=)
2: C8175E7E9E15E565FE697292A37E14BFE067CAF7.crl (hash: nBcfiqz+xrnHLOfOSTtvB5XKwal8qimDnh8ZQs6ylek=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.crl
rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8175E7E9E15E565FE697292A37E14BFE067CAF7.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 18:35:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:5a:7f:d6:94:9d:d7:67:0e:d7:dd:48:04:f3:e7:cc:30:fe:60:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8175E7E9E15E565FE697292A37E14BFE067CAF7
Validity
Not Before: Jan 24 14:15:02 2026 GMT
Not After : Jan 27 18:35:02 2026 GMT
Subject: CN=3C5EC2DE8DCA47CB64618F3F6B00AECAFCF3C9FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3e:71:ec:6c:9b:75:fc:6e:a5:de:8f:75:e0:
fc:9d:d7:7c:ed:f2:f4:28:97:26:a9:0b:8c:24:22:
a3:b9:98:c7:0a:89:8f:2e:64:4f:53:29:b5:0d:49:
1f:fb:26:2e:6d:f2:4a:10:6d:98:46:8c:12:d2:5f:
be:fe:22:e3:97:70:40:62:ea:28:9e:ea:5e:26:5e:
68:76:52:18:0c:3d:09:9f:13:96:06:b9:0c:d7:7e:
28:da:63:10:ff:d5:08:f6:97:2b:88:4f:27:ed:87:
6c:7f:89:60:9f:63:4d:14:fa:36:a1:fc:8a:ea:8b:
43:48:98:df:b1:65:58:3c:03:82:7e:ab:dd:aa:06:
42:06:e9:0b:18:13:ef:aa:9d:db:aa:59:59:92:cc:
e2:d4:a9:67:4c:72:fd:78:ae:5f:e7:1a:81:1c:c2:
ec:bb:89:40:8b:38:dc:37:25:3a:40:4a:91:4e:b3:
40:de:b6:2e:ec:a0:39:38:84:b0:60:4b:d0:31:2c:
8f:ec:d5:63:32:06:24:4a:4f:ff:e6:f4:a3:ea:38:
a6:b0:7a:5c:95:45:b3:39:46:53:df:e2:a1:59:cc:
e1:6c:0b:95:e5:28:c2:2b:5d:55:70:c6:56:81:4d:
e1:b2:8d:37:09:96:60:0b:8c:b6:8c:f0:f9:2b:5b:
8b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:5E:C2:DE:8D:CA:47:CB:64:61:8F:3F:6B:00:AE:CA:FC:F3:C9:FE
X509v3 Authority Key Identifier:
keyid:C8:17:5E:7E:9E:15:E5:65:FE:69:72:92:A3:7E:14:BF:E0:67:CA:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8175E7E9E15E565FE697292A37E14BFE067CAF7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:f2:a2:56:da:28:96:ca:7d:36:6a:c1:d9:10:df:f0:d2:82:
bf:17:37:4b:92:2b:7c:3e:13:fe:fe:c7:23:04:a6:49:24:af:
7a:3c:49:96:31:ee:44:4e:56:5a:8f:5c:d8:bf:11:45:c8:94:
b8:95:26:3e:1b:09:ab:0b:75:7f:84:c4:69:46:8e:8f:e2:15:
e5:45:c6:f7:a0:85:df:2f:94:ef:72:2a:2c:22:02:5f:78:12:
45:1b:db:ba:d8:ae:8b:d9:e2:5e:4a:86:fc:e5:e1:36:f0:ea:
0f:cf:ec:71:12:be:34:b5:6b:5b:63:85:c8:0b:09:97:a6:f0:
fe:e6:8d:44:ab:9a:85:53:da:3d:73:e1:79:c4:8b:0b:b0:db:
5e:b1:dd:d5:77:db:29:bb:ca:1f:72:c0:e4:48:67:89:2c:43:
ff:af:67:da:c9:f8:36:7d:6a:31:6c:15:50:db:65:f7:f6:de:
dc:f4:11:9e:7c:5c:d4:5f:5f:10:89:4f:c5:42:f3:4f:b8:31:
ed:8d:80:0b:bc:18:e7:80:53:68:68:b9:42:ea:1c:8b:de:5e:
a5:58:0f:21:bf:d4:82:cb:d2:f8:a0:21:54:b9:3f:aa:6b:2f:
4a:e0:0d:52:45:61:68:21:ec:a1:3d:4f:40:ee:f2:f9:b5:56:
cd:55:d1:e6
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUPFp/1pSd12cO191IBPPnzDD+YL8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzgxNzVFN0U5RTE1RTU2NUZFNjk3MjkyQTM3RTE0QkZF
MDY3Q0FGNzAeFw0yNjAxMjQxNDE1MDJaFw0yNjAxMjcxODM1MDJaMDMxMTAvBgNV
BAMTKDNDNUVDMkRFOERDQTQ3Q0I2NDYxOEYzRjZCMDBBRUNBRkNGM0M5RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCPnHsbJt1/G6l3o914Pyd13zt
8vQolyapC4wkIqO5mMcKiY8uZE9TKbUNSR/7Ji5t8koQbZhGjBLSX77+IuOXcEBi
6iie6l4mXmh2UhgMPQmfE5YGuQzXfijaYxD/1Qj2lyuITyfth2x/iWCfY00U+jah
/Irqi0NImN+xZVg8A4J+q92qBkIG6QsYE++qnduqWVmSzOLUqWdMcv14rl/nGoEc
wuy7iUCLONw3JTpASpFOs0Deti7soDk4hLBgS9AxLI/s1WMyBiRKT//m9KPqOKaw
elyVRbM5RlPf4qFZzOFsC5XlKMIrXVVwxlaBTeGyjTcJlmALjLaM8PkrW4sBAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUPF7C3o3KR8tkYY8/awCuyvzzyf4wHwYDVR0j
BBgwFoAUyBdefp4V5WX+aXKSo34Uv+BnyvcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
MzZmZDU1MS02YWJhLTQyMjItOGEyNi05ODYzNDY4MjViMzgvMC9DODE3NUU3RTlF
MTVFNTY1RkU2OTcyOTJBMzdFMTRCRkUwNjdDQUY3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzgxNzVFN0U5RTE1RTU2NUZFNjk3MjkyQTM3RTE0QkZFMDY3
Q0FGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM2ZmQ1NTEtNmFiYS00MjIyLThh
MjYtOTg2MzQ2ODI1YjM4LzAvQzgxNzVFN0U5RTE1RTU2NUZFNjk3MjkyQTM3RTE0
QkZFMDY3Q0FGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAMfyolbaKJbKfTZqwdkQ3/DSgr8XN0uSK3w+
E/7+xyMEpkkkr3o8SZYx7kROVlqPXNi/EUXIlLiVJj4bCasLdX+ExGlGjo/iFeVF
xveghd8vlO9yKiwiAl94EkUb27rYrovZ4l5Khvzl4Tbw6g/P7HESvjS1a1tjhcgL
CZem8P7mjUSrmoVT2j1z4XnEiwuw216x3dV32ym7yh9ywORIZ4ksQ/+vZ9rJ+DZ9
ajFsFVDbZff23tz0EZ58XNRfXxCJT8VC80+4Me2NgAu8GOeAU2houULqHIveXqVY
DyG/1ILL0vigIVS5P6prL0rgDVJFYWgh7KE9T0Du8vm1Vs1V0eY=
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:38:21 2026 by rpki-client