This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.mft
File: 782659A7F6433029248A38A1C68F2E9971161391.mft (raw, json)
Hash identifier: UuebZg3EpSGYzgAQ3vv8BqM6fTwpJ8Ub+jRtCYwmAVs=
Subject key identifier: B0:F2:AB:35:BE:95:AF:55:24:1A:FC:F8:89:0C:61:4E:38:00:6D:8D
Authority key identifier: 78:26:59:A7:F6:43:30:29:24:8A:38:A1:C6:8F:2E:99:71:16:13:91
Certificate issuer: /CN=782659A7F6433029248A38A1C68F2E9971161391
Certificate serial: 1EAD55640F47B5E373F7707013C77324B210BA1B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782659A7F6433029248A38A1C68F2E9971161391.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.mft
Manifest number: 0161
Signing time: Sun 01 Feb 2026 02:30:59 +0000
Manifest this update: Sun 01 Feb 2026 02:25:59 +0000
Manifest next update: Wed 04 Feb 2026 09:30:59 +0000
Files and hashes: 1: 782659A7F6433029248A38A1C68F2E9971161391.crl (hash: WVvXEWvip2OV56fGW9iCOQl6yyQ6EsmQ7wQDynjYPOg=)
2: 3130332e35352e3235332e302f32342d3234203d3e20313531353838.roa (hash: QzBzm2jTi52qCuHNFLxAMIYm8xcW8JwG11leVCtzjT8=)
3: 3130332e35352e3235322e302f32342d3234203d3e20313531353838.roa (hash: n7hVFiq0OxWE9m+WmPS/fUFFT640qZL0JRyZZq2zd9M=)
4: 3130332e35352e3235322e302f32332d3233203d3e20313531353838.roa (hash: 1o5pWm32JlzXIIYG67jaNX/7ssN7uLCzQj52YRkWuFY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.crl
rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782659A7F6433029248A38A1C68F2E9971161391.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 09:30:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:ad:55:64:0f:47:b5:e3:73:f7:70:70:13:c7:73:24:b2:10:ba:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=782659A7F6433029248A38A1C68F2E9971161391
Validity
Not Before: Feb 1 02:25:59 2026 GMT
Not After : Feb 4 09:30:59 2026 GMT
Subject: CN=B0F2AB35BE95AF55241AFCF8890C614E38006D8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:05:14:20:09:8e:8c:df:2d:d5:be:59:55:07:
9c:f1:81:a6:aa:d0:12:d8:1c:a8:bf:33:6a:78:8d:
07:11:09:be:ed:7c:5b:84:3e:c6:95:d9:da:92:84:
c0:cb:7d:a0:ce:fd:98:a8:7c:72:f0:10:58:d8:12:
d9:e6:b1:60:c3:e3:15:e2:38:c1:82:5f:f6:8c:eb:
82:f3:a4:59:8b:f3:f8:68:e0:ed:01:1b:31:d8:37:
30:1b:92:69:df:78:67:b8:d6:81:40:2c:c2:9a:ae:
dc:08:b2:20:6f:9b:d2:6d:f1:5a:d1:d7:9d:a5:6c:
c8:16:c8:7d:ee:bc:dc:c7:bf:ea:71:7b:c4:a0:9f:
da:1a:ef:ed:f1:9f:75:28:04:cb:69:2d:80:e0:9d:
01:20:88:2b:24:83:96:61:d8:22:c0:be:fc:7b:47:
ee:08:5d:56:85:2e:87:02:d0:cd:6b:b8:56:3e:7d:
32:b6:ee:ce:1c:c9:40:13:d2:b6:a5:93:8d:5a:2d:
62:f0:42:13:e3:23:d5:ea:5b:a4:d6:6f:b1:d7:c3:
f8:26:bf:9f:6b:ec:4c:36:d2:61:af:2a:17:9d:7e:
42:5a:1d:5c:02:23:e5:57:6c:16:f2:bc:b2:da:da:
fa:34:55:a4:1b:ca:23:dc:0c:8d:9b:55:39:0d:da:
30:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F2:AB:35:BE:95:AF:55:24:1A:FC:F8:89:0C:61:4E:38:00:6D:8D
X509v3 Authority Key Identifier:
keyid:78:26:59:A7:F6:43:30:29:24:8A:38:A1:C6:8F:2E:99:71:16:13:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782659A7F6433029248A38A1C68F2E9971161391.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:2e:5a:08:ec:5f:69:76:13:36:74:cd:58:dc:64:a8:64:54:
69:cf:fe:ce:a8:b9:32:2d:93:12:27:36:63:ed:3b:0b:b7:21:
ec:88:27:d0:88:47:43:7b:c7:1f:fd:a0:06:cf:96:b8:f2:75:
01:c9:d9:5f:f6:d6:bd:87:7c:93:85:35:b9:e2:aa:55:0b:19:
7b:53:51:57:b3:be:26:2a:b6:1d:33:f7:0d:c9:02:79:c6:22:
7c:a9:2f:12:cc:c1:9e:30:c0:54:52:9b:f1:ac:02:b5:24:c4:
4a:80:e1:fb:be:3a:6f:8c:e4:0a:81:1d:b1:80:d5:38:63:1f:
10:0e:1a:13:a0:39:76:f2:75:d7:f3:b0:92:9d:53:fa:98:01:
16:b5:3f:95:2f:82:29:d0:ae:80:5b:85:45:c0:cd:0c:ea:31:
36:16:32:ab:79:75:5b:00:4c:1f:a2:d0:a2:bb:60:05:63:4d:
e4:51:8d:e7:0b:30:7f:78:43:6d:18:5a:f9:4d:9b:98:d5:43:
f6:08:eb:54:51:f5:f9:10:f0:0a:47:f3:a5:4d:e3:57:fd:15:
68:68:58:04:2b:3d:04:71:b8:8c:7a:b2:e0:dc:28:0d:49:9e:
cc:2a:ce:88:e2:4e:5e:22:05:60:c8:c2:80:08:89:30:58:50:
69:4e:22:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:06:09 2026 by rpki-client