This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.mft
File: 74D4F2785CA261D018C909BA622D8244292BCB3E.mft (raw, json)
Hash identifier: NG5a963XN9MQFdCBS7ixon/b3upr3+Ia6IEZwAgUinA=
Subject key identifier: DA:A2:34:D5:73:3F:35:41:35:8F:91:A9:54:71:99:9B:9D:0C:87:AD
Authority key identifier: 74:D4:F2:78:5C:A2:61:D0:18:C9:09:BA:62:2D:82:44:29:2B:CB:3E
Certificate issuer: /CN=74D4F2785CA261D018C909BA622D8244292BCB3E
Certificate serial: 1B94970A7629C687F0D20861E2EDCAF9F67CECAA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74D4F2785CA261D018C909BA622D8244292BCB3E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.mft
Manifest number: 0386
Signing time: Mon 02 Feb 2026 03:51:44 +0000
Manifest this update: Mon 02 Feb 2026 03:46:44 +0000
Manifest next update: Thu 05 Feb 2026 10:13:44 +0000
Files and hashes: 1: 74D4F2785CA261D018C909BA622D8244292BCB3E.crl (hash: 1ezu3DcbIHratPIij7nQphAU07CpWyk2lbA/f7v8ge0=)
2: 3130332e3130332e3134352e302f32342d3234203d3e20313336383631.roa (hash: u6oloP9Y8JGAma8cxbntxH8WmfQY01P9oCREk7+XMxs=)
3: 3130332e3130332e3134372e302f32342d3234203d3e20313336383631.roa (hash: GRVghrICNAdxouBIwXYTRSPY6doN9zN/lvPgtUZIKw0=)
4: 3130332e3130332e3134342e302f32342d3234203d3e20313336383631.roa (hash: qaTsYAuDwYq3vmdm+MP/d1P3xUHxCKcLJsCvSBVNIeQ=)
5: 323430313a663563303a3a2f33322d3438203d3e20313336383631.roa (hash: EZvYjhUqWVWt3m8BlTlpwuqAgPj6OBoR83LID+/r3xw=)
6: 3130332e3130332e3134362e302f32342d3234203d3e20313336383631.roa (hash: gj/8lggfR8myqoNqzBWaOnMDIVL5S0r8bZN2DAfp+nY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.crl
rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74D4F2785CA261D018C909BA622D8244292BCB3E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:94:97:0a:76:29:c6:87:f0:d2:08:61:e2:ed:ca:f9:f6:7c:ec:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74D4F2785CA261D018C909BA622D8244292BCB3E
Validity
Not Before: Feb 2 03:46:44 2026 GMT
Not After : Feb 5 10:13:44 2026 GMT
Subject: CN=DAA234D5733F3541358F91A95471999B9D0C87AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ac:20:85:26:e7:81:e0:4a:fb:5e:f6:a0:c6:
e5:98:97:78:0c:b5:da:a3:a4:85:a8:f7:06:61:74:
5b:61:37:37:58:87:07:f1:bb:54:21:be:19:34:87:
5f:55:71:18:aa:08:86:72:f4:bd:03:64:e2:c8:4c:
a5:86:6d:f5:04:7c:31:76:d7:59:ed:4f:0a:b3:18:
90:9f:f7:5b:10:eb:6b:08:8b:39:80:6e:ea:bd:3a:
1e:7d:52:31:c7:31:b3:7f:0e:98:f8:78:ce:b8:13:
e5:ee:a4:3b:25:a8:04:af:87:42:fd:18:25:dd:5c:
c4:0b:64:6d:98:50:b4:27:2f:93:d0:24:e4:a5:e4:
63:c9:61:dd:a9:21:e3:bf:58:8a:50:61:8b:ed:0c:
2a:3c:81:83:b6:b5:5a:4c:12:41:c2:50:87:4f:14:
e2:76:7b:57:a0:d3:46:20:84:21:4c:13:74:39:a1:
d2:4a:d7:49:62:68:de:fe:cb:91:a5:d6:88:a6:05:
70:c5:79:56:41:08:e4:37:30:b5:4f:49:4c:a4:31:
7b:2d:28:b7:c1:3f:da:01:12:eb:1a:99:6f:94:64:
62:78:16:68:76:00:53:14:44:47:24:a9:c8:fc:73:
d2:a4:e7:46:52:33:ae:ee:1a:f5:45:fa:79:93:c0:
22:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A2:34:D5:73:3F:35:41:35:8F:91:A9:54:71:99:9B:9D:0C:87:AD
X509v3 Authority Key Identifier:
keyid:74:D4:F2:78:5C:A2:61:D0:18:C9:09:BA:62:2D:82:44:29:2B:CB:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74D4F2785CA261D018C909BA622D8244292BCB3E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:00:58:42:07:2c:44:85:84:0c:a6:e8:83:3e:cc:4a:14:f8:
60:c7:7c:d7:63:c7:7e:9a:3b:07:c3:77:bd:6e:9e:b2:8c:15:
6d:b0:f7:99:4d:82:19:44:b5:83:24:1b:59:cb:b3:76:60:4d:
1f:9b:82:b4:0e:5d:6b:93:dc:7f:95:e4:fb:d1:f8:51:a5:ff:
05:35:9f:7f:a5:4f:ad:56:42:a8:5b:dc:31:08:73:e9:79:54:
5f:67:7c:a6:26:55:5f:3f:ce:47:03:23:e5:1e:a2:2b:b1:5c:
e3:e5:b2:4e:6d:7a:24:14:b2:e7:9b:18:e7:cd:73:27:bf:df:
86:76:a5:ce:31:1d:e0:e2:6e:20:0e:77:28:ce:58:bf:a1:ad:
ce:22:97:f3:b6:95:57:4f:31:86:86:84:f2:9e:0d:a3:43:d5:
cc:0e:21:e5:b4:5a:be:41:28:6b:c2:7e:71:0c:37:22:d9:6b:
2a:27:46:97:1f:ef:d0:53:14:0f:4e:25:dc:ad:1b:0c:b7:1b:
2c:9b:a7:61:17:58:76:9b:99:45:b9:1a:76:1f:d9:e5:6e:d3:
79:0b:ee:f5:d9:9d:e7:d9:5d:61:2a:3a:6e:cc:a9:41:d2:c8:
6b:de:7f:2d:26:8d:c1:f4:79:24:ef:be:ec:c9:89:51:b5:72:
13:93:24:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:44:03 2026 by rpki-client