This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft
File: A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft (raw, json)
Hash identifier: iJaAE1XF4QkNYg6e/cja1pUzDUbRe6mxSbJpxM3eDPg=
Subject key identifier: BF:60:96:2D:31:FE:CA:66:55:6A:CB:89:71:E2:85:8A:EA:F7:8A:EC
Authority key identifier: A5:95:9C:75:F8:AC:19:0D:C2:2C:7C:32:76:CF:95:83:4D:5C:A6:87
Certificate issuer: /CN=A5959C75F8AC190DC22C7C3276CF95834D5CA687
Certificate serial: 7EF83392EAA321B12535EA7F66600C89B385FA47
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5959C75F8AC190DC22C7C3276CF95834D5CA687.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft
Manifest number: 0160
Signing time: Sun 01 Feb 2026 12:10:54 +0000
Manifest this update: Sun 01 Feb 2026 12:05:54 +0000
Manifest next update: Wed 04 Feb 2026 23:32:54 +0000
Files and hashes: 1: A5959C75F8AC190DC22C7C3276CF95834D5CA687.crl (hash: H190KQG+booHvPzsmOUeK0DS+B03deup+gUoLTdQxUU=)
2: 3130332e37362e33312e302f32342d3234203d3e20313530343732.roa (hash: HX5hc0JVA/bL3q1k/7p9S2Z5pWHfKNcOFGhiGTLHR6E=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.crl
rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5959C75F8AC190DC22C7C3276CF95834D5CA687.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 23:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:f8:33:92:ea:a3:21:b1:25:35:ea:7f:66:60:0c:89:b3:85:fa:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5959C75F8AC190DC22C7C3276CF95834D5CA687
Validity
Not Before: Feb 1 12:05:54 2026 GMT
Not After : Feb 4 23:32:54 2026 GMT
Subject: CN=BF60962D31FECA66556ACB8971E2858AEAF78AEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b7:40:0c:c2:a7:68:c2:9f:71:9f:31:f5:e6:
2a:ed:ac:ed:f7:3f:3c:e1:63:06:d3:57:e9:b6:89:
a3:86:c2:93:ea:91:c3:0b:32:a0:e9:1e:4c:6f:c1:
82:cd:3c:52:62:2e:c1:2a:2f:20:26:f0:70:b3:a6:
4e:61:17:b0:b0:2b:71:72:bd:64:6d:a6:a7:eb:ae:
41:32:e2:93:2a:19:f4:ec:e1:a3:6c:99:6d:ec:64:
38:f0:f0:30:5b:b5:76:11:b6:92:f7:5d:b9:1b:2b:
74:9f:03:d1:df:9e:46:9a:16:c1:c0:09:27:84:1a:
0d:db:13:15:46:b9:b7:a7:2e:2c:d1:08:6e:05:d0:
97:af:a7:76:66:e6:67:cd:e4:1a:ba:1a:e3:ec:7b:
a8:4c:fa:ad:e3:94:a8:17:ee:98:d7:54:79:4e:8d:
59:1e:7d:ec:1f:57:e5:b7:6d:cc:9c:2c:37:6d:d2:
9e:72:9c:30:d8:bd:1a:2c:09:94:9a:64:6d:03:1e:
25:f3:67:67:70:0f:4d:e8:fa:11:4b:41:e6:f4:72:
42:ea:40:6a:ef:d9:74:5d:76:45:2a:50:14:f7:e5:
5b:39:aa:ec:dc:01:18:93:ee:c8:cf:f0:17:98:12:
50:2d:b5:91:3c:b7:66:8d:8d:00:96:be:ce:e4:b4:
d5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:60:96:2D:31:FE:CA:66:55:6A:CB:89:71:E2:85:8A:EA:F7:8A:EC
X509v3 Authority Key Identifier:
keyid:A5:95:9C:75:F8:AC:19:0D:C2:2C:7C:32:76:CF:95:83:4D:5C:A6:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5959C75F8AC190DC22C7C3276CF95834D5CA687.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:f9:8d:ca:97:7e:62:cb:bc:b7:8a:e0:a3:9d:8d:b9:7f:54:
09:5f:07:24:b8:9e:66:0f:b7:3c:2a:6e:ad:14:62:5d:2f:cf:
dd:a5:6d:e9:66:14:27:ca:6e:eb:9f:81:43:a2:f4:3f:af:ac:
5e:5a:e6:fc:bf:ab:4c:a0:d1:5d:74:03:a8:f7:83:15:e7:1f:
bc:7b:f8:50:5e:5f:31:02:96:0f:a4:04:e5:a5:aa:5c:96:80:
f6:1d:a2:fb:2f:3c:7e:a4:12:33:76:24:e6:f6:51:41:87:9b:
45:ab:2e:08:61:cd:9b:47:9c:5f:9b:1e:aa:73:d5:a4:41:b7:
d2:08:8a:02:b4:d1:eb:fc:87:da:b2:8a:43:6e:2f:b9:b7:81:
43:83:70:b3:85:69:00:03:5e:c3:48:96:1b:4e:8f:44:a3:de:
99:30:c8:08:66:96:a7:d4:7a:f0:fd:04:78:51:f5:86:0b:b3:
b5:eb:6f:95:3f:bb:1b:16:bb:b4:8d:a7:e7:25:d7:49:8a:87:
93:48:a5:e1:27:89:12:c9:d3:5c:59:3a:d2:07:da:93:d0:f3:
fd:13:e6:b0:60:00:2c:8a:d2:e3:41:7b:87:83:35:d1:d4:16:
a5:f8:22:cf:6c:ea:7f:0b:d0:53:0a:6a:98:ac:51:64:17:0a:
ce:0d:18:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:45:11 2026 by rpki-client