This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.mft
File: 743D7544160232918AB5AB2CD90221B4C4E978E5.mft (raw, json)
Hash identifier: xN891jobKwYfPPQwUAy53eK53b9liSl3hvKXmscIXbA=
Subject key identifier: 3A:E8:ED:D8:15:19:1F:93:46:5A:D7:C1:5F:FB:C9:8E:99:94:4B:E4
Authority key identifier: 74:3D:75:44:16:02:32:91:8A:B5:AB:2C:D9:02:21:B4:C4:E9:78:E5
Certificate issuer: /CN=743D7544160232918AB5AB2CD90221B4C4E978E5
Certificate serial: 501CA40B4B9A85990159B5A032F2DB9733372E58
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/743D7544160232918AB5AB2CD90221B4C4E978E5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.mft
Manifest number: 01D3
Signing time: Sat 31 Jan 2026 19:11:07 +0000
Manifest this update: Sat 31 Jan 2026 19:06:07 +0000
Manifest next update: Tue 03 Feb 2026 19:41:07 +0000
Files and hashes: 1: 743D7544160232918AB5AB2CD90221B4C4E978E5.crl (hash: 9S5//P0P1NEOYIuY38sBP1w3KiXBwADR1IcokDNvsFY=)
2: 3130332e38312e3235342e302f32342d3234203d3e20313530353533.roa (hash: O6AiiOFEwGMgZxev69IgPIlcJDgXQoSXIvEt086XR7k=)
3: 3130332e38312e3235352e302f32342d3234203d3e20313530353533.roa (hash: 6WBleXSX0c07tXo+dC+vbRCMKLXoYLwo1rSzqObcWfU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.crl
rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/743D7544160232918AB5AB2CD90221B4C4E978E5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 19:41:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:1c:a4:0b:4b:9a:85:99:01:59:b5:a0:32:f2:db:97:33:37:2e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743D7544160232918AB5AB2CD90221B4C4E978E5
Validity
Not Before: Jan 31 19:06:07 2026 GMT
Not After : Feb 3 19:41:07 2026 GMT
Subject: CN=3AE8EDD815191F93465AD7C15FFBC98E99944BE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ff:6e:e8:9d:ce:34:fe:31:f4:a4:d0:02:2c:
0d:a9:bd:4c:07:11:cf:7f:ef:05:7f:1b:e6:9d:38:
09:b3:42:e3:45:a9:d5:e7:94:ab:b8:4c:fb:1f:59:
52:a0:97:56:ac:22:89:07:04:15:d5:ae:90:de:59:
86:65:fd:ed:bd:2b:03:11:e4:f4:31:89:d4:b7:d1:
0b:37:19:5d:9e:fb:ba:0a:5a:3e:87:ac:7a:12:5f:
50:67:ad:58:be:a1:6e:99:39:73:58:2b:f7:3f:a4:
38:a0:d5:b2:a0:76:79:12:8f:51:f4:4b:b8:b1:d4:
59:1e:aa:01:52:70:3a:47:b2:fc:3f:2c:a0:0f:3d:
35:62:e5:b8:07:80:19:5d:1d:9d:7b:43:b8:f3:59:
f3:ff:57:50:71:8b:83:1a:15:71:56:7b:1a:a6:ba:
d8:7f:12:3f:03:9d:48:d3:d3:b1:e1:9d:ad:a1:29:
35:4d:74:62:ef:81:b4:ef:bc:6b:f8:74:3d:c3:7a:
1e:7f:05:b3:91:7b:3f:0e:8d:b2:7b:67:43:18:75:
c8:db:44:8c:92:1a:dd:33:8d:5e:c1:36:c2:a9:a8:
be:c7:e0:0a:6e:15:9a:ce:5a:e5:d0:e2:4c:e3:85:
20:e3:5d:ac:51:c0:95:00:43:aa:44:69:98:ba:28:
20:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E8:ED:D8:15:19:1F:93:46:5A:D7:C1:5F:FB:C9:8E:99:94:4B:E4
X509v3 Authority Key Identifier:
keyid:74:3D:75:44:16:02:32:91:8A:B5:AB:2C:D9:02:21:B4:C4:E9:78:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/743D7544160232918AB5AB2CD90221B4C4E978E5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:48:bd:08:8e:ce:27:03:14:2d:c5:aa:d9:2e:7d:d0:68:9d:
99:c2:d4:49:ec:d2:1e:59:cd:49:cb:f8:3e:7c:ab:9e:34:9b:
38:45:6c:92:8c:0a:7a:11:b1:da:aa:e4:c8:af:bb:49:bb:c6:
dc:9f:5c:8b:c9:8c:57:c2:e8:29:03:a6:51:e2:fd:53:01:33:
c3:58:97:8f:87:5b:2b:c4:82:57:45:ae:df:2b:1f:13:38:17:
1f:a8:d8:89:3d:e3:ea:e6:b7:47:d4:d2:c6:a8:71:60:f6:f8:
92:82:d6:a9:bc:70:38:a6:cf:93:7d:b9:53:22:e5:ab:b9:93:
55:cc:6c:85:08:29:2a:b4:e7:1a:51:ea:1f:2d:91:14:5c:1c:
18:b0:89:0f:34:01:9d:c4:0b:0e:7d:7c:44:ea:84:bb:bf:04:
fc:a3:5b:54:bd:aa:65:80:62:29:97:02:e8:1d:19:01:52:fe:
57:74:b5:05:05:c4:12:06:ac:d9:f7:ec:5a:2a:3b:39:b3:63:
f8:e2:e6:dc:c4:a3:d1:f3:81:a0:82:a0:26:b5:cf:42:b1:19:
8c:f7:fa:cb:5b:27:6a:17:3f:df:5f:0c:89:93:3b:f8:5e:fc:
da:ae:4e:f8:3d:99:9a:64:e2:32:0e:1f:65:17:58:65:3f:dd:
c4:71:54:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 15:59:19 2026 by rpki-client