This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.mft
File: 75890247E178C40DD3F9A5968202F684AEB89D9A.mft (raw, json)
Hash identifier: UakeE2ZMO+WzqeHpeV9W3kCZIGnwJSJVDFg4LN+q8Ns=
Subject key identifier: 38:08:C3:F9:51:6B:B7:3C:74:E2:00:83:A9:54:90:E9:CA:E3:94:22
Authority key identifier: 75:89:02:47:E1:78:C4:0D:D3:F9:A5:96:82:02:F6:84:AE:B8:9D:9A
Certificate issuer: /CN=75890247E178C40DD3F9A5968202F684AEB89D9A
Certificate serial: 5803E7609AD158761064061BAF0EA983852F9CE1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75890247E178C40DD3F9A5968202F684AEB89D9A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.mft
Manifest number: 0210
Signing time: Sun 01 Feb 2026 06:21:04 +0000
Manifest this update: Sun 01 Feb 2026 06:16:04 +0000
Manifest next update: Wed 04 Feb 2026 07:15:04 +0000
Files and hashes: 1: 3130332e33392e36382e302f32332d3233203d3e20313530323730.roa (hash: fXiiGXJRCPKNViYWqCFLLjVfmQD8H4I+YjRRxMPnTUk=)
2: 3130332e33392e36382e302f32342d3234203d3e20313530323730.roa (hash: g6PqLS5mE+1W2ojOPy8XOSM+C1KCNHjLUWlTp/BiYKA=)
3: 75890247E178C40DD3F9A5968202F684AEB89D9A.crl (hash: 1dsbDh5SpEplvPa2/3XrrJ3qk/180HItd3Zhr60Nti8=)
4: 3130332e33392e36392e302f32342d3234203d3e20313530323730.roa (hash: ABOgyOC/6WBI7TsB52quJVoJIzB223bKwujKqyNGano=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.crl
rsync://repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75890247E178C40DD3F9A5968202F684AEB89D9A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 07:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:03:e7:60:9a:d1:58:76:10:64:06:1b:af:0e:a9:83:85:2f:9c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75890247E178C40DD3F9A5968202F684AEB89D9A
Validity
Not Before: Feb 1 06:16:04 2026 GMT
Not After : Feb 4 07:15:04 2026 GMT
Subject: CN=3808C3F9516BB73C74E20083A95490E9CAE39422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:84:2c:f1:03:a9:d0:a3:e3:8c:cd:62:b0:fe:
d7:6b:00:36:4b:35:d2:ab:bf:f0:40:30:2f:01:f5:
0a:97:d8:94:33:62:95:1b:c5:8c:07:15:76:90:22:
d3:c1:49:f6:a4:6e:14:81:62:75:fe:04:9e:d6:1e:
14:69:ea:3b:d8:c8:e1:22:fe:b4:95:5e:86:76:9d:
46:aa:84:aa:09:23:71:60:ad:d2:db:41:9c:29:6d:
a7:e3:14:12:3e:31:4f:fa:d1:31:87:3a:36:d7:00:
41:19:5b:00:29:01:98:96:3e:de:2a:73:bf:a8:fd:
ed:fd:23:f3:21:73:22:eb:12:c3:52:e4:94:10:08:
8b:ba:1c:30:cd:a6:bd:63:c9:29:e2:a3:d6:4e:07:
a1:7c:bf:75:be:47:be:a0:3e:d0:4e:37:96:2a:81:
ec:fb:ea:63:09:21:c4:0a:ea:41:27:30:50:f8:65:
33:43:71:0b:e1:44:4e:72:29:d7:93:b9:04:4c:54:
05:6f:e7:81:48:95:16:75:dd:d6:5f:92:87:77:b3:
37:5f:d9:24:42:41:b1:ca:37:83:f8:09:1d:b0:b8:
17:df:cb:8e:fa:6c:34:7b:40:50:47:df:bc:5a:2e:
3f:73:4f:2c:65:e3:96:a0:b8:28:a7:16:61:b7:16:
c5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:08:C3:F9:51:6B:B7:3C:74:E2:00:83:A9:54:90:E9:CA:E3:94:22
X509v3 Authority Key Identifier:
keyid:75:89:02:47:E1:78:C4:0D:D3:F9:A5:96:82:02:F6:84:AE:B8:9D:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75890247E178C40DD3F9A5968202F684AEB89D9A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:0a:43:a1:ae:35:51:d9:39:05:4d:3a:0b:a7:56:6c:44:4f:
6f:dd:ac:f6:4f:6a:d6:52:39:6c:ff:04:00:02:0f:01:5b:36:
72:eb:d1:19:77:74:75:12:da:85:e5:63:51:9d:27:b4:4b:b4:
e3:85:b1:ed:5f:1b:6f:a2:8a:e5:99:ee:d9:d8:bc:c0:cc:02:
fc:94:82:64:63:14:64:85:95:80:e0:25:d2:4c:3c:f3:0b:52:
b4:87:d3:00:c5:c0:59:21:8a:60:be:f2:b8:40:41:95:97:fc:
79:60:bd:d8:0d:43:92:71:b9:2f:fd:71:35:74:0f:0b:91:cc:
11:1e:05:21:31:bb:72:ae:16:e4:91:cd:e3:59:61:a5:1b:b3:
88:1d:4e:42:7b:c2:c3:82:50:d4:2a:ea:66:13:88:d2:ab:fb:
d0:25:3e:74:1f:82:74:b9:a7:22:e6:47:af:80:8c:bd:cb:d7:
61:9e:5b:0d:f3:af:c8:f8:ce:48:a2:df:de:ee:58:5d:4f:a3:
d2:16:af:3d:26:0c:4c:4b:26:9a:c5:96:5f:62:5a:1f:66:4b:
ff:61:b4:69:14:7e:d7:2c:28:c6:bd:08:f1:b0:bd:65:ec:5b:
a3:d6:90:5d:5a:ac:d1:ce:4c:9e:63:70:57:b6:89:4b:0c:1b:
d4:01:f8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:04:20 2026 by rpki-client