This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
File: 8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft (raw, json)
Hash identifier: XFwtb/3BptadR9foUVYnIuB7whKmrDmL0u0Rf3nXF0E=
Subject key identifier: 48:12:76:10:D1:80:23:F0:32:68:18:06:A5:8C:15:81:08:CC:35:26
Authority key identifier: 8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F
Certificate issuer: /CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F
Certificate serial: 04E3F8103FDA4BD68C3AD4B98B6082A84F53F49F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
Manifest number: 055A
Signing time: Sun 25 Jan 2026 08:31:45 +0000
Manifest this update: Sun 25 Jan 2026 08:26:45 +0000
Manifest next update: Wed 28 Jan 2026 10:04:45 +0000
Files and hashes: 1: 3231302e3234372e3235312e302f32342d3234203d3e20313331373435.roa (hash: P6u7QjpJVBQpJpJ2dL4GKUXqC1XLtlIwog/7NL3QJe0=)
2: 3231302e3234372e3235332e302f32342d3234203d3e20313331373435.roa (hash: SDQ6xpzFoeg0lTwEJkVJ2YC5ntC/O8NvcqwJeEYUXmo=)
3: 3231302e3234372e3235322e302f32342d3234203d3e20313331373435.roa (hash: 0G3umGSNIafLUyMMJjc+XpTQjFcLRIMU7BoomAPsjew=)
4: 3231302e3234372e3235342e302f32342d3234203d3e20313331373435.roa (hash: 8bH62zhwf0kgF3amh047ZVAlbr2i3orRPBn9qkRCMJk=)
5: 3231302e3234372e3235352e302f32342d3234203d3e20313331373435.roa (hash: RS4Z5hPliFofbuZy6siMGSvvq53kTGe3aDopkAMtX7s=)
6: 323430363a376530303a35393a3a2f34382d3438203d3e20313430343035.roa (hash: gnvURXZkhn/FEj22B4ytqTMsZk8ZLC9E8Tq6VbTdHlg=)
7: 3231302e3234372e3234342e302f32342d3234203d3e20313331373435.roa (hash: dBLrElsxS7m32RqtK+bS83Eb5ZTI1r6yldhEY0SWU34=)
8: 34392e3132382e3138342e302f32322d3234203d3e20313331373435.roa (hash: b1YIXb394hbQaEvgUpDDWq1EiTyAhc+KvTRls7LdNdE=)
9: 8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl (hash: q89rbtNHxzu6gZuestC4vdjGTGTTi+sla2vnla5QRCk=)
10: 3231302e3234372e3234382e302f32342d3234203d3e20313331373435.roa (hash: fEAII0Y1Y5OrJRrreDOapy9Xzh9eNqz/FB7+aD7tXRA=)
11: 3231302e3234372e3234372e302f32342d3234203d3e20313331373435.roa (hash: exFF47IhXFNrUrw6HPUoTvZWZdOLZc/bApdp77HMNNg=)
12: 3231302e3234372e3234322e302f32342d3234203d3e20313331373435.roa (hash: D991UEHbv0mT0xjDcSLCu5iaTm6ib67YwDcjKkL5vPw=)
13: 3231302e3234372e3234392e302f32342d3234203d3e20313331373435.roa (hash: 4G4aZfFUqaHECTTNNiBKb2BiuB7CRoLOY6G0O5P5Xsk=)
14: 3231302e3234372e3234332e302f32342d3234203d3e20313331373435.roa (hash: lzhEeQ6DAkKFZoSDXb/ij7h8jtExSjFLGzcvwIopMPE=)
15: 3231302e3234372e3234362e302f32342d3234203d3e20313331373435.roa (hash: FN3CKjxRonayrnINYbudYXLP7jZ9/YnqEvFYbd9U1hM=)
16: 3231302e3234372e3234302e302f32342d3234203d3e20313331373435.roa (hash: 6Xt6BmWqNlJ2rgGnrh/8HdtB+svaXm043WhGiQr8wxY=)
17: 3231302e3234372e3235302e302f32342d3234203d3e20313331373435.roa (hash: UaBtRg3Pe7eF6qAh+L1uU3ib10+G/2GiDGDbWzNrJJQ=)
18: 3231302e3234372e3234352e302f32342d3234203d3e20313331373435.roa (hash: kHHBOgtxtA2O4NSmNMgW2PeMrc26bvv8HtnzwONr0bg=)
19: 3231302e3234372e3234312e302f32342d3234203d3e20313430343035.roa (hash: M3nv0mC0g0dVK72c2OJ01BOoKTGk3r0NAIb60MF1lcw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl
rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 10:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:e3:f8:10:3f:da:4b:d6:8c:3a:d4:b9:8b:60:82:a8:4f:53:f4:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F
Validity
Not Before: Jan 25 08:26:45 2026 GMT
Not After : Jan 28 10:04:45 2026 GMT
Subject: CN=48127610D18023F032681806A58C158108CC3526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:36:4a:dc:b2:c9:ca:91:3a:8b:26:e8:a3:11:
e5:b8:9e:7b:0b:7c:02:cd:d0:99:66:7e:1b:2c:b6:
a6:c2:b4:46:8d:72:52:58:90:ab:26:3e:c1:72:cf:
53:4d:2c:c8:7d:c8:24:61:0f:9e:a8:f5:7e:66:86:
ea:d2:51:e5:76:49:38:16:12:b2:f5:87:2b:2b:79:
a4:fd:10:6b:68:20:d6:7f:dc:73:b5:d9:9b:fc:c6:
49:53:c3:bb:12:ad:86:bb:ae:ca:43:bb:49:f8:7a:
0d:ec:1e:1a:f4:05:e9:82:ec:a2:f0:68:73:6f:b9:
fc:e5:16:ee:4b:40:5e:44:ad:ef:65:ef:46:1c:1e:
aa:a6:00:1e:ea:80:b9:e0:dd:75:b5:73:51:76:49:
08:9a:33:3b:e0:05:79:b0:95:32:ef:95:7b:03:19:
c6:f5:7c:13:07:30:66:e9:95:7b:b0:5f:7e:68:5c:
e2:cb:77:ff:e0:a9:35:89:84:a8:e4:3d:53:d3:b6:
36:13:b9:52:6a:16:f9:0b:2a:0c:16:e0:a9:dd:ed:
7b:d8:63:59:2c:59:7f:7f:84:4d:c4:77:66:36:98:
7f:d7:43:9b:28:fe:3a:77:d2:e8:d0:b9:4d:91:79:
92:b0:1d:82:3e:24:b2:b3:9b:b5:1e:fc:4c:0f:11:
93:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:12:76:10:D1:80:23:F0:32:68:18:06:A5:8C:15:81:08:CC:35:26
X509v3 Authority Key Identifier:
keyid:8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ba:44:87:5f:7d:94:73:b9:2f:4c:5f:21:7d:6d:c5:0c:bc:
ee:20:97:de:53:4a:fe:ea:5c:be:61:18:71:94:21:12:5a:78:
da:13:51:34:d8:36:44:3b:3f:36:81:d7:81:c0:6f:d1:4b:49:
a0:f4:56:d3:7f:92:36:c6:7c:8d:24:b5:f0:14:48:b5:0a:84:
3f:0d:1d:f8:3a:a9:7e:90:8e:ca:f3:eb:f4:e0:9a:7e:f6:b1:
df:34:24:33:1b:b6:60:8d:66:53:bc:55:02:2a:6a:0f:21:d7:
fb:b3:2d:2f:00:fa:c6:cf:6f:6c:da:d7:04:14:1d:d7:fc:71:
c2:a9:5a:76:e6:af:6c:3e:5c:b3:3f:c4:78:76:07:8f:c7:1d:
b9:5a:60:df:e4:4a:71:4b:ee:fa:76:2e:85:93:82:46:2d:60:
5e:d8:29:43:34:2f:7c:a0:d3:71:e0:01:5a:9c:52:29:e0:95:
02:ec:b7:35:6f:9e:e6:88:c8:25:4f:84:9a:03:ec:6e:a4:4d:
cf:6d:90:ad:96:23:85:fa:e4:d0:26:4d:3f:8f:72:aa:c1:61:
60:ac:96:db:04:03:b3:91:15:b4:15:d0:55:74:12:b2:c7:52:
d9:ae:98:b5:ac:17:5a:3c:7a:9b:09:c8:6b:30:d1:40:4d:38:
94:ca:df:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:36:36 2026 by rpki-client