This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.mft
File: E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.mft (raw, json)
Hash identifier: 5813mnj8NkEwKL7yn/m+d5eliqj0hcZgAmjOtW8euz8=
Subject key identifier: B9:15:21:7A:33:B0:21:BF:43:71:F7:24:BF:53:31:18:5E:B8:34:AB
Authority key identifier: E3:1C:BD:E5:C6:F3:3D:AE:3C:A9:7A:01:1E:A4:F4:E6:39:FB:4F:F6
Certificate issuer: /CN=E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6
Certificate serial: 4CA610F511BF94E124810D8352FAD59C9AA31315
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.mft
Manifest number: 0243
Signing time: Sat 24 Jan 2026 13:42:19 +0000
Manifest this update: Sat 24 Jan 2026 13:37:19 +0000
Manifest next update: Wed 28 Jan 2026 01:31:19 +0000
Files and hashes: 1: E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.crl (hash: ZPexWKl0iyt95+JMhtyTAEKNh6Kur2ZnKqMZBCOdeG8=)
2: 323030313a6466303a323363303a3a2f34382d3438203d3e20313437313235.roa (hash: P2JGQjJlh0X8PPnIYvpO+iKqp7Ecvs49iVh/XO+bX5A=)
3: 3130332e3137352e3230352e302f32342d3234203d3e20313437313235.roa (hash: LI13Oiwos27NH9fZ9uCjsrTtT/ALoh094BdiKflNCjg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.crl
rsync://repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 01:31:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:a6:10:f5:11:bf:94:e1:24:81:0d:83:52:fa:d5:9c:9a:a3:13:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6
Validity
Not Before: Jan 24 13:37:19 2026 GMT
Not After : Jan 28 01:31:19 2026 GMT
Subject: CN=B915217A33B021BF4371F724BF5331185EB834AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4e:31:12:2a:a3:45:ea:da:ae:00:f0:a1:ce:
f0:14:16:95:c2:ac:98:15:87:a4:1a:92:1e:bc:9d:
72:c7:d8:d0:98:b0:2a:ea:5f:38:d3:08:75:bb:5c:
af:e0:2f:d1:cd:ba:fc:95:eb:11:94:e4:de:82:af:
dc:b3:64:77:21:81:36:97:34:29:39:52:91:24:6d:
e6:d1:76:18:b9:ed:7e:5a:50:e6:9c:62:c7:02:40:
ff:f0:8a:2f:bb:dc:2e:6b:3a:39:ec:3f:7f:c0:b8:
f1:4b:1e:dd:6c:e2:9b:d0:23:cd:ba:53:a2:2b:f4:
7a:60:8f:70:47:dd:db:b8:99:ed:11:56:91:ba:10:
ba:0d:38:ce:fc:ae:f0:e1:ee:d3:e4:0d:52:f9:b9:
65:a9:60:b0:46:22:df:69:40:ea:6f:bc:7c:bd:61:
32:26:9b:2a:2e:42:19:bc:18:d3:46:31:b0:ce:12:
7d:ed:2b:87:78:ed:65:51:54:3b:e0:18:3a:1d:25:
82:3c:e7:f7:3d:52:7f:af:32:5d:d3:11:6c:3e:56:
67:cb:fc:fb:2a:da:6b:ed:35:50:db:6d:1d:28:a8:
cf:f2:51:35:16:81:0c:0c:ed:b3:19:49:dc:45:b0:
57:e4:c6:70:cb:d0:00:21:b5:bf:8a:18:a3:32:23:
ab:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:15:21:7A:33:B0:21:BF:43:71:F7:24:BF:53:31:18:5E:B8:34:AB
X509v3 Authority Key Identifier:
keyid:E3:1C:BD:E5:C6:F3:3D:AE:3C:A9:7A:01:1E:A4:F4:E6:39:FB:4F:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f8:a7:a5:3d:42:aa:03:00:d7:8e:89:ae:8b:40:c2:6b:3c:
f1:ed:90:88:a8:10:f0:9f:5f:79:30:a6:46:95:30:66:1d:3d:
a6:1a:f2:2e:f5:59:03:5d:ac:9c:da:c8:dc:cd:59:44:28:f6:
59:33:e0:9e:f9:26:2b:df:90:75:32:9b:d5:48:d0:72:22:08:
f0:69:b3:21:9f:42:d5:1b:03:d6:42:64:79:30:27:1d:36:2a:
ba:8b:e4:14:9d:fa:f6:c8:2a:5c:10:1d:b2:09:cd:10:25:5c:
f9:34:13:24:58:7d:76:8e:36:18:0a:44:18:3c:19:6e:9d:27:
e8:9c:dc:2e:50:b6:b4:16:2d:e3:99:51:ce:18:60:3a:8d:16:
86:de:bf:24:19:ce:c3:32:06:bd:81:80:f6:76:ce:d5:0d:e2:
ef:b8:04:9e:45:a3:1b:81:e1:3e:15:72:83:55:86:b5:3b:14:
b7:4c:58:bd:3c:db:59:6c:43:f5:69:7e:f3:d7:6a:ec:51:28:
0f:9c:a3:df:92:d1:f8:6d:c2:9b:ce:21:4a:86:95:ba:6c:8e:
37:bc:8f:f4:d7:b2:0b:ce:72:6f:7a:3c:f4:f6:36:f6:ec:e0:
a4:91:21:65:9a:ec:45:5d:d2:d3:a5:bd:e6:da:c6:60:d1:f0:
b6:39:6f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:21:16 2026 by rpki-client