This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft
File: 754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft (raw, json)
Hash identifier: fP1tP/TX1+Sy99Dan/QCL+1RUcf/pa46/mIICBVbuJA=
Subject key identifier: EC:04:E9:A7:66:37:BD:8A:39:AD:A7:8E:D3:2C:D6:D4:74:1C:B2:90
Authority key identifier: 75:4B:C0:48:92:43:06:32:A8:C9:65:AF:4C:5B:71:C5:9B:2A:3C:CB
Certificate issuer: /CN=754BC04892430632A8C965AF4C5B71C59B2A3CCB
Certificate serial: 2629161A002E9BC5BEBD4227E08C8F4E30E0F9E0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754BC04892430632A8C965AF4C5B71C59B2A3CCB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft
Manifest number: 0279
Signing time: Sat 31 Jan 2026 05:51:43 +0000
Manifest this update: Sat 31 Jan 2026 05:46:43 +0000
Manifest next update: Tue 03 Feb 2026 17:29:43 +0000
Files and hashes: 1: 3131302e39332e31322e302f32322d3234203d3e203435373037.roa (hash: 87R1PuyhfrxdjwQzRqLTxL2d+b662e1JTgNI5Ta3odE=)
2: 3130332e382e35362e302f32322d3234203d3e203435373037.roa (hash: C5Tq331HOxIpoDyCifcP3xL7Rqpg2//FSSaLWr+UtUo=)
3: 754BC04892430632A8C965AF4C5B71C59B2A3CCB.crl (hash: GuRxAWl7fXY52JpcBSlWOAn4iEz/llJoVlA5KygEgXc=)
4: 3230322e34332e3131362e302f32332d3234203d3e203435373037.roa (hash: HCZA2Dkaf0AYhdHhm+/ujp4EakaURfA1i4HAbOdk6Co=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.crl
rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754BC04892430632A8C965AF4C5B71C59B2A3CCB.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 17:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:29:16:1a:00:2e:9b:c5:be:bd:42:27:e0:8c:8f:4e:30:e0:f9:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=754BC04892430632A8C965AF4C5B71C59B2A3CCB
Validity
Not Before: Jan 31 05:46:43 2026 GMT
Not After : Feb 3 17:29:43 2026 GMT
Subject: CN=EC04E9A76637BD8A39ADA78ED32CD6D4741CB290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c2:c4:26:99:64:9c:b6:a1:cc:b3:f6:1c:2d:
95:b5:57:e1:52:e6:b1:0f:60:5c:0d:56:d6:11:9d:
2a:a2:79:c3:22:57:d4:54:07:e3:fc:0c:e0:47:2b:
b2:2b:27:52:9c:e6:d9:c7:81:f6:e2:2c:0f:e2:b4:
d6:70:65:fd:9d:85:69:08:90:f0:b0:15:0a:26:1d:
61:b7:98:c3:d3:97:86:ae:78:f8:59:48:96:3a:62:
81:37:02:69:1c:2f:52:25:1b:1d:50:51:9c:6d:52:
23:f4:b2:9d:73:95:6d:1e:cc:4b:2b:11:87:c4:52:
39:5d:db:df:19:f8:67:5a:14:ee:9e:0f:df:a4:7c:
2e:86:f6:b6:ff:da:49:e7:6b:b3:f5:4b:49:42:47:
cd:68:fe:89:83:ea:4d:3c:b6:68:22:5e:3b:22:0e:
d0:47:6d:28:77:36:d7:19:d8:70:47:31:be:a3:b9:
28:86:26:7f:0d:be:14:d5:c8:63:d3:c1:2c:08:fb:
9c:d7:0d:84:00:f3:a4:40:2d:49:fe:3b:f1:8e:f4:
19:71:4a:aa:3a:a0:b3:2c:ab:c8:44:ca:bb:f7:6e:
47:cc:97:9e:a6:ac:33:c4:5e:81:6c:1e:c6:17:39:
b4:a3:1c:39:5f:91:38:6d:e7:d7:5b:70:61:c7:b4:
d0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:04:E9:A7:66:37:BD:8A:39:AD:A7:8E:D3:2C:D6:D4:74:1C:B2:90
X509v3 Authority Key Identifier:
keyid:75:4B:C0:48:92:43:06:32:A8:C9:65:AF:4C:5B:71:C5:9B:2A:3C:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754BC04892430632A8C965AF4C5B71C59B2A3CCB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:51:ac:1b:9d:4d:48:8c:5a:57:d5:54:f8:10:fa:95:41:d6:
51:00:10:ac:00:dc:e2:76:a5:10:56:13:3b:e4:c9:ab:d1:ea:
87:95:01:7d:92:3a:43:1b:0d:11:1a:7c:d6:ce:b7:b6:2d:f0:
26:9b:58:57:81:6a:f5:24:0e:94:73:a1:28:ef:96:10:1b:c4:
85:ec:65:f9:6f:06:cb:4d:8e:a0:89:f3:12:9f:10:cf:1f:ee:
59:88:b5:27:93:bc:b9:b0:5f:d7:d9:4a:30:16:4e:86:69:49:
a6:94:8b:ca:e6:a7:64:01:bb:82:d1:3c:e8:4b:fe:cd:31:4b:
96:1a:74:8d:e4:a1:52:e5:cf:3d:96:30:9e:3e:aa:38:d2:77:
ec:82:47:be:1b:d6:6b:1c:1d:40:30:00:83:9c:35:ca:09:ce:
39:ea:0a:38:e1:b3:df:2a:79:5d:58:02:9b:b2:66:e3:8e:4f:
56:b8:0f:45:29:3f:5f:40:a7:66:8e:29:97:e1:56:93:a2:34:
3a:61:2f:ef:3d:ec:d5:e5:1f:41:d8:cb:24:c1:ed:f3:5b:19:
6c:66:b2:9e:56:a3:7a:8b:db:07:75:a6:ec:e3:59:08:bd:64:
05:82:83:87:46:24:cf:51:93:9f:c6:a2:d7:bf:a7:8e:0e:ec:
7e:4c:9c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:55:58 2026 by rpki-client