This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.mft
File: 8284F61C774622FEC64759E6D77C9DEEB4EC69CA.mft (raw, json)
Hash identifier: dW0L5vVtrbN8mMt0GQMMwzw6t/IoNza7OmuNP1TZwnw=
Subject key identifier: 68:3B:39:CC:9A:EB:2B:E6:B2:60:3C:5F:A4:65:CD:B9:54:37:E9:BB
Authority key identifier: 82:84:F6:1C:77:46:22:FE:C6:47:59:E6:D7:7C:9D:EE:B4:EC:69:CA
Certificate issuer: /CN=8284F61C774622FEC64759E6D77C9DEEB4EC69CA
Certificate serial: 2CC5E7B4EAA0AD0636F28484C9574B52346211E0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.mft
Manifest number: 0547
Signing time: Sat 24 Jan 2026 23:31:23 +0000
Manifest this update: Sat 24 Jan 2026 23:26:23 +0000
Manifest next update: Wed 28 Jan 2026 07:57:23 +0000
Files and hashes: 1: 8284F61C774622FEC64759E6D77C9DEEB4EC69CA.crl (hash: yLaJRJwtxU6l6wbOgeAxJ8Am013djZWDHrc4Kpy3iys=)
2: 3130332e3130302e32372e302f32342d3234203d3e20313336383335.roa (hash: UXCPnVMF20T3u89LBilCEmmt67UECY/psh8twg2H0Yw=)
3: 3130332e3134312e3135342e302f32342d3234203d3e20313336383335.roa (hash: EeVS/Wotu8QiYnhwHE/NjTJ1MQmj/cQtABdAbLQgSvo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.crl
rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 07:57:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:c5:e7:b4:ea:a0:ad:06:36:f2:84:84:c9:57:4b:52:34:62:11:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8284F61C774622FEC64759E6D77C9DEEB4EC69CA
Validity
Not Before: Jan 24 23:26:23 2026 GMT
Not After : Jan 28 07:57:23 2026 GMT
Subject: CN=683B39CC9AEB2BE6B2603C5FA465CDB95437E9BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6f:6a:94:61:38:b8:49:89:3f:49:d9:46:1d:
71:f8:fa:c4:b9:28:e1:a7:9b:a3:14:69:d5:2f:7a:
92:c9:d7:6b:69:1c:54:c3:56:41:0a:f7:6a:fb:c2:
5e:31:40:2c:e0:7e:9f:f1:98:42:22:2a:4a:f6:9f:
56:a5:f4:90:88:36:bd:1f:92:91:7b:ac:c9:91:d4:
43:dd:48:8d:16:8a:41:50:7f:50:75:80:3d:e3:e5:
68:69:16:78:58:fc:1a:71:bc:af:21:01:f4:58:aa:
d6:5e:11:d7:07:3d:ed:95:40:e0:10:b9:a8:6a:e7:
98:a7:73:15:58:cc:01:dd:eb:6d:2c:02:ba:a8:fc:
3d:20:4d:5f:a9:4f:52:98:43:3a:94:8f:d7:6c:67:
69:47:9b:89:e6:7c:f2:7e:4d:67:8c:ba:cd:10:8f:
23:ca:5f:35:18:ad:0e:57:af:d2:5f:56:3e:a3:b7:
22:6f:c0:a2:c1:8d:d6:28:64:dc:d4:22:a6:7e:5c:
63:33:5b:a7:13:af:88:0b:da:37:1c:76:7c:58:5a:
1f:5e:f4:bb:62:40:c4:46:86:d2:95:3e:9f:67:99:
18:93:23:39:ba:77:64:7a:c5:0b:37:05:ec:7a:93:
76:93:9e:37:f1:41:4e:f2:4d:b5:c0:a0:4f:e8:14:
06:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:3B:39:CC:9A:EB:2B:E6:B2:60:3C:5F:A4:65:CD:B9:54:37:E9:BB
X509v3 Authority Key Identifier:
keyid:82:84:F6:1C:77:46:22:FE:C6:47:59:E6:D7:7C:9D:EE:B4:EC:69:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:49:12:cb:66:7d:43:77:5c:7f:10:16:17:37:b5:47:b5:9f:
4f:11:3a:b2:34:17:79:92:45:61:9e:f1:46:9f:19:c8:6c:19:
55:03:04:ed:c4:72:36:fb:42:c1:19:84:8c:92:fc:0e:41:34:
58:09:91:6d:fc:69:61:1c:ab:23:d3:d3:af:56:9f:fc:b6:20:
6c:e9:19:1c:fe:93:32:f4:5e:9d:8b:c6:d3:3e:3e:c0:6f:8e:
fc:6a:38:b8:78:65:f7:39:17:27:c7:73:f8:31:2c:96:47:fe:
e5:e2:f4:d2:ac:04:98:00:f4:d0:39:2d:00:4a:65:43:e5:c2:
62:06:96:c6:18:9a:be:a9:45:85:05:a8:12:06:2f:dc:e6:61:
70:15:60:8f:c8:90:2c:1f:7f:db:48:97:25:a2:6e:e0:5d:57:
48:fb:59:6e:1d:17:fa:9c:be:a7:49:d5:6d:eb:a8:31:20:01:
a7:a5:67:3b:06:ff:6f:78:5c:7f:d7:2f:07:cf:b0:e6:e9:1b:
5b:ad:c0:44:14:9f:ed:50:b6:18:d1:90:61:6c:1a:01:ea:75:
7b:9f:e9:9c:79:64:ad:4f:4a:45:17:f2:de:e4:2d:67:f7:e7:
e3:97:23:d2:04:09:be:38:9e:51:49:ff:8a:52:64:c1:02:8a:
b7:4f:fc:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:58:39 2026 by rpki-client