This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft
File: 26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft (raw, json)
Hash identifier: /WGW1A9vZTrSZBCmtHR7dn/TLq/6X6IjLY0BpztgU+I=
Subject key identifier: 26:D5:EE:DF:0D:8E:4A:4A:65:51:5A:39:6C:34:13:F3:70:F7:77:82
Authority key identifier: 26:C0:12:47:69:3F:68:CF:DA:1F:8C:B6:B8:8F:7A:37:00:D3:00:01
Certificate issuer: /CN=26C01247693F68CFDA1F8CB6B88F7A3700D30001
Certificate serial: 6955B4545A9989F8EE4B09C3479E8E90C68AF3ED
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26C01247693F68CFDA1F8CB6B88F7A3700D30001.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft
Manifest number: 0296
Signing time: Wed 17 Dec 2025 22:02:16 +0000
Manifest this update: Wed 17 Dec 2025 21:57:16 +0000
Manifest next update: Sun 21 Dec 2025 07:57:16 +0000
Files and hashes: 1: 26C01247693F68CFDA1F8CB6B88F7A3700D30001.crl (hash: dRAE+Dscf7+jM0z39NmGGqI1zZRBQC0TsSPhTWOeqRM=)
2: 3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa (hash: pcL7z2soi9Q0FZro9wWeWvMV7DRxoXReR3myJOf1vRA=)
3: 3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa (hash: ooHKZSV1Ovcs3Fa7Lr6Xldk2Fnw1zgyPobWB4Cwlr44=)
4: 323030313a6466373a376438303a3a2f34382d3438203d3e20313431393039.roa (hash: KA7O/abuJXSSbDP15REs5MblSDnNlUUXbTrePmAZ+kE=)
5: 3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa (hash: pmEfBdkV2X0aiNWYmtMTZTWBxEmwxyhF/kgAB9N14Tk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.crl
rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26C01247693F68CFDA1F8CB6B88F7A3700D30001.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 07:57:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:55:b4:54:5a:99:89:f8:ee:4b:09:c3:47:9e:8e:90:c6:8a:f3:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26C01247693F68CFDA1F8CB6B88F7A3700D30001
Validity
Not Before: Dec 17 21:57:16 2025 GMT
Not After : Dec 21 07:57:16 2025 GMT
Subject: CN=26D5EEDF0D8E4A4A65515A396C3413F370F77782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d0:97:48:8b:db:8d:fa:b5:e6:3c:d5:41:36:
ce:a9:f8:67:cc:87:50:94:ac:53:d4:a2:e9:d4:e0:
e0:c9:92:b7:d3:9b:87:e9:ec:c2:fa:16:41:d1:16:
cd:65:2d:01:cd:e9:4b:9f:9b:22:3e:5e:22:03:1e:
aa:41:d5:93:f1:38:84:49:3a:84:3c:68:3d:b5:9d:
5d:40:45:f5:69:8f:92:7a:82:6e:13:f2:9d:51:77:
77:01:83:05:e0:11:25:f4:6a:3b:a7:48:42:30:1b:
db:28:23:96:31:a7:bc:95:a8:10:1b:17:8a:49:98:
c2:14:18:2c:cc:32:39:d9:83:c5:ab:58:ac:ef:06:
5b:20:b9:e2:51:62:a1:35:32:71:e4:68:09:26:3e:
4f:e1:47:e2:5e:71:e3:a4:71:e5:bb:e8:20:0a:1a:
84:63:97:f7:a2:4e:c0:46:77:37:00:78:90:88:62:
f7:c1:c4:c8:a9:5c:d3:b7:a3:82:b6:82:d9:30:f4:
e8:f3:16:0e:6d:f5:f9:a1:b0:8d:64:ce:8d:0b:67:
eb:de:d7:06:51:54:6a:90:4c:9b:e7:c5:0d:38:0e:
49:4b:d8:c1:b6:29:99:bc:b9:ff:fd:c6:39:bc:0c:
6f:77:24:8e:3b:69:4d:33:cc:ec:90:6f:8a:a3:36:
f5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D5:EE:DF:0D:8E:4A:4A:65:51:5A:39:6C:34:13:F3:70:F7:77:82
X509v3 Authority Key Identifier:
keyid:26:C0:12:47:69:3F:68:CF:DA:1F:8C:B6:B8:8F:7A:37:00:D3:00:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26C01247693F68CFDA1F8CB6B88F7A3700D30001.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:fc:bf:bb:9a:3c:c4:7f:65:f6:5b:d2:5a:20:27:18:72:8f:
d4:fa:df:94:df:a7:d7:08:af:89:0a:db:c4:88:8e:7f:ac:04:
2e:45:ec:5a:f2:a5:ad:aa:e9:4a:c0:ef:a2:e0:b8:25:dd:29:
a8:b8:e1:c1:8b:5e:91:ed:dc:9e:05:e3:2e:84:6c:b7:7f:8a:
4a:57:96:f5:c6:40:05:e8:20:3e:eb:5e:41:00:27:b4:5b:98:
4b:55:56:4e:99:6b:91:6c:61:a5:44:84:e1:3c:3f:43:ef:b1:
bc:5d:a3:68:20:61:cc:e5:26:a2:cd:61:ff:cf:7f:5b:b0:36:
78:04:07:d5:dc:52:74:59:28:83:7f:cd:6e:c8:a8:bd:67:3e:
0a:c3:9a:e6:21:12:26:f0:54:bb:55:a7:71:51:cd:9f:cb:15:
d6:ec:67:8a:e1:bd:18:74:c2:80:48:01:0b:fb:32:58:4c:5e:
7a:ef:9b:39:92:67:08:57:0a:9c:34:98:46:7d:11:de:44:03:
87:36:1d:2d:c0:b3:52:96:f9:f3:64:1a:e9:94:ff:ce:87:7a:
69:28:3a:5a:4a:78:48:ac:23:ec:98:7e:38:81:0d:16:d7:c2:
70:f0:21:18:a5:32:fa:62:26:58:f3:ff:8c:10:c3:a9:65:94:
12:5f:d7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 14:06:40 2025 by rpki-client