This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/411479424B4016269EB9E266CD48905F63DC9F0B.mft
File: 411479424B4016269EB9E266CD48905F63DC9F0B.mft (raw, json)
Hash identifier: 9TcZJx8JMx+/9hD9K06y6EbX91TlVBaYvfWVu3MeKGw=
Subject key identifier: D7:4C:02:6B:10:2F:2D:5E:08:80:81:D3:3D:39:69:76:F4:45:5C:ED
Authority key identifier: 41:14:79:42:4B:40:16:26:9E:B9:E2:66:CD:48:90:5F:63:DC:9F:0B
Certificate issuer: /CN=411479424B4016269EB9E266CD48905F63DC9F0B
Certificate serial: 02024EBEBF68E4EC8B09A8F2E214008CB5E0ACF0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/411479424B4016269EB9E266CD48905F63DC9F0B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/411479424B4016269EB9E266CD48905F63DC9F0B.mft
Manifest number: 02EA
Signing time: Sat 24 Jan 2026 23:42:33 +0000
Manifest this update: Sat 24 Jan 2026 23:37:33 +0000
Manifest next update: Wed 28 Jan 2026 07:08:33 +0000
Files and hashes: 1: 3130332e3137382e39302e302f32342d3234203d3e20313430343034.roa (hash: OK/qKcmCWZLbUU0gqTVd4CzrA30sPM3AN1RD82duRis=)
2: 411479424B4016269EB9E266CD48905F63DC9F0B.crl (hash: +/SVzzRmS2RnVKdOx3tfUoV2sD8ZjgLJlNL/LK008HM=)
3: 3130332e3137382e39312e302f32342d3234203d3e20313430343034.roa (hash: vr+BxfkmoPeng8pSy2LdmDpMjQR/gXY9KvmthDLXE0s=)
4: 3130332e3137382e39302e302f32332d3233203d3e20313430343034.roa (hash: bLbFLRF4nCoMUEy8txljQ1KpQ4biSpv3zVxmLsxYZs4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/411479424B4016269EB9E266CD48905F63DC9F0B.crl
rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/411479424B4016269EB9E266CD48905F63DC9F0B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/411479424B4016269EB9E266CD48905F63DC9F0B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 07:08:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:02:4e:be:bf:68:e4:ec:8b:09:a8:f2:e2:14:00:8c:b5:e0:ac:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411479424B4016269EB9E266CD48905F63DC9F0B
Validity
Not Before: Jan 24 23:37:33 2026 GMT
Not After : Jan 28 07:08:33 2026 GMT
Subject: CN=D74C026B102F2D5E088081D33D396976F4455CED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:68:b2:11:c3:14:16:cb:a3:ca:b8:5b:67:86:
22:a8:d9:17:91:3b:8f:4e:8e:40:61:61:c1:9f:b3:
f2:7f:97:96:f0:dc:52:66:47:91:a1:7d:ab:24:65:
de:c4:b6:25:f3:04:50:50:9f:3a:42:cf:a0:ac:13:
b1:8f:26:65:44:c5:4d:fe:49:f0:34:42:50:cc:87:
0c:ef:a4:d1:9e:99:ca:65:c1:86:b7:5c:6c:33:31:
c5:df:dc:54:58:92:af:26:25:85:1b:5b:10:92:09:
46:cc:dc:d4:4a:8c:b5:05:ae:84:63:fd:61:ee:9c:
a5:10:c7:04:d8:71:fd:16:84:a1:0c:92:bf:ce:30:
78:c4:ec:4c:87:89:53:76:e6:4f:ba:0a:58:d7:8d:
78:c9:7c:28:da:2f:ed:68:df:54:61:3c:c7:a1:13:
61:3c:fd:af:e4:fa:bd:ca:f0:25:51:e2:b5:25:09:
ac:4d:8e:b5:50:d3:6a:97:a6:a3:97:50:25:5b:73:
9b:d2:13:a1:40:c5:6e:dd:c6:2f:dd:9e:21:52:1a:
84:96:16:ed:51:db:91:e9:3f:e3:60:18:5b:68:e3:
49:d1:26:21:ea:a1:84:2f:c4:01:cb:9f:a6:19:5f:
a1:ce:a5:81:b6:4a:7b:42:b1:ad:9a:3d:6d:5e:28:
c8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4C:02:6B:10:2F:2D:5E:08:80:81:D3:3D:39:69:76:F4:45:5C:ED
X509v3 Authority Key Identifier:
keyid:41:14:79:42:4B:40:16:26:9E:B9:E2:66:CD:48:90:5F:63:DC:9F:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/411479424B4016269EB9E266CD48905F63DC9F0B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/411479424B4016269EB9E266CD48905F63DC9F0B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/411479424B4016269EB9E266CD48905F63DC9F0B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:72:c1:97:43:84:ce:54:f2:65:26:4f:ac:81:ec:83:13:81:
c4:f8:d3:3c:68:97:d0:6f:af:d9:c5:f8:e7:9a:ea:9c:a8:c5:
95:3c:85:22:48:43:22:bd:c3:ba:a7:1e:9d:ac:51:78:70:9f:
42:c9:a6:fd:3b:72:7c:d4:82:db:2c:74:a6:89:86:e6:80:db:
09:9f:72:1f:05:6a:b7:11:76:15:e6:22:cf:5d:1f:0e:e8:13:
ea:ea:ab:0d:4a:04:46:54:88:51:cf:e7:ff:8b:e8:c1:1f:6f:
35:a1:d4:49:1b:4e:67:e2:01:2b:87:ee:6e:02:bc:96:ea:0d:
90:e4:50:dd:af:b3:63:fd:0e:0f:9e:34:97:39:b5:da:f7:c0:
b4:30:0c:a9:1c:38:8f:ed:5f:e2:26:54:8d:95:2c:dd:36:b3:
e6:6f:61:b4:d8:e3:bd:27:47:74:b7:e1:00:1f:41:1e:88:ae:
84:76:49:89:a3:ad:47:43:05:04:57:35:47:66:af:a1:01:be:
06:b9:e6:a8:10:a2:7e:de:db:b2:08:7d:4e:f8:02:07:d9:b9:
47:a6:80:64:27:75:f9:3a:0d:0b:a5:8a:8b:e3:16:a1:2d:5d:
22:b1:75:db:9d:ea:4a:1c:d8:ad:c5:be:26:10:88:7e:0d:ee:
ae:50:a1:de
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUAgJOvr9o5OyLCajy4hQAjLXgrPAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDExNDc5NDI0QjQwMTYyNjlFQjlFMjY2Q0Q0ODkwNUY2
M0RDOUYwQjAeFw0yNjAxMjQyMzM3MzNaFw0yNjAxMjgwNzA4MzNaMDMxMTAvBgNV
BAMTKEQ3NEMwMjZCMTAyRjJENUUwODgwODFEMzNEMzk2OTc2RjQ0NTVDRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9aLIRwxQWy6PKuFtnhiKo2ReR
O49OjkBhYcGfs/J/l5bw3FJmR5GhfaskZd7EtiXzBFBQnzpCz6CsE7GPJmVExU3+
SfA0QlDMhwzvpNGemcplwYa3XGwzMcXf3FRYkq8mJYUbWxCSCUbM3NRKjLUFroRj
/WHunKUQxwTYcf0WhKEMkr/OMHjE7EyHiVN25k+6CljXjXjJfCjaL+1o31RhPMeh
E2E8/a/k+r3K8CVR4rUlCaxNjrVQ02qXpqOXUCVbc5vSE6FAxW7dxi/dniFSGoSW
Fu1R25HpP+NgGFto40nRJiHqoYQvxAHLn6YZX6HOpYG2SntCsa2aPW1eKMgHAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU10wCaxAvLV4IgIHTPTlpdvRFXO0wHwYDVR0j
BBgwFoAUQRR5QktAFiaeueJmzUiQX2PcnwswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
MTM3MzllMS1iNWRiLTQ3MzQtODM4YS1iMGI1ODBiZWI5ZjMvMC80MTE0Nzk0MjRC
NDAxNjI2OUVCOUUyNjZDRDQ4OTA1RjYzREM5RjBCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDExNDc5NDI0QjQwMTYyNjlFQjlFMjY2Q0Q0ODkwNUY2M0RD
OUYwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzEzNzM5ZTEtYjVkYi00NzM0LTgz
OGEtYjBiNTgwYmViOWYzLzAvNDExNDc5NDI0QjQwMTYyNjlFQjlFMjY2Q0Q0ODkw
NUY2M0RDOUYwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAZywZdDhM5U8mUmT6yB7IMTgcT40zxol9Bv
r9nF+Oea6pyoxZU8hSJIQyK9w7qnHp2sUXhwn0LJpv07cnzUgtssdKaJhuaA2wmf
ch8FarcRdhXmIs9dHw7oE+rqqw1KBEZUiFHP5/+L6MEfbzWh1EkbTmfiASuH7m4C
vJbqDZDkUN2vs2P9Dg+eNJc5tdr3wLQwDKkcOI/tX+ImVI2VLN02s+ZvYbTY470n
R3S34QAfQR6IroR2SYmjrUdDBQRXNUdmr6EBvga55qgQon7e27IIfU74AgfZuUem
gGQndfk6DQuliovjFqEtXSKxddud6koc2K3FviYQiH4N7q5Qod4=
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:00:48 2026 by rpki-client