This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft
File: 771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft (raw, json)
Hash identifier: GnFHL13+GUDKZnAw+V8inaQZvV5qO56tvJtosjqo+kg=
Subject key identifier: 3F:26:0A:76:C4:FB:A7:63:F6:B3:0B:AE:63:4D:17:27:2A:95:4E:17
Authority key identifier: 77:1D:0A:B9:C4:45:B2:8C:88:7F:D7:BA:18:DE:C5:15:D8:BA:38:62
Certificate issuer: /CN=771D0AB9C445B28C887FD7BA18DEC515D8BA3862
Certificate serial: 2199D6E79C1FA254E2A9FA3260FAE3C12F58A7C7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft
Manifest number: 022E
Signing time: Sat 31 Jan 2026 18:20:51 +0000
Manifest this update: Sat 31 Jan 2026 18:15:51 +0000
Manifest next update: Wed 04 Feb 2026 03:31:51 +0000
Files and hashes: 1: 771D0AB9C445B28C887FD7BA18DEC515D8BA3862.crl (hash: /bN/hyW31G4hlXOjhblCSXKLnivuXIagx7Uy7OJq89c=)
2: 3130332e3232302e32322e302f32342d3234203d3e20313431363037.roa (hash: 4o94mrc4fRlBDhHzDJcRb+ENMoJpRlPOPsOhrRbyRi4=)
3: 3130332e3232302e32332e302f32342d3234203d3e20313431363037.roa (hash: UB8JtipfosdHlml62Xhk5sLTDI0owepm37Luu+44jy4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.crl
rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 03:31:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:99:d6:e7:9c:1f:a2:54:e2:a9:fa:32:60:fa:e3:c1:2f:58:a7:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771D0AB9C445B28C887FD7BA18DEC515D8BA3862
Validity
Not Before: Jan 31 18:15:51 2026 GMT
Not After : Feb 4 03:31:51 2026 GMT
Subject: CN=3F260A76C4FBA763F6B30BAE634D17272A954E17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:79:8d:62:61:72:43:7a:a5:fd:ad:ad:75:20:
f1:ee:c2:c9:cd:c2:86:d9:46:cb:9e:85:fa:c3:9d:
44:4a:ad:f5:e9:17:f8:93:e0:ca:20:f0:97:5e:c0:
c2:99:ce:27:19:23:09:a9:b5:a0:02:90:e5:23:fc:
8e:80:51:c9:07:b9:8e:a5:f1:80:cf:db:3e:d6:33:
43:76:46:12:e2:cb:5e:5a:ce:50:1b:16:fa:f2:e8:
d6:da:1f:38:b8:9b:52:eb:4b:3e:f8:0a:51:2d:a1:
b3:8d:2f:bd:2c:40:90:db:1f:29:9d:bc:4f:17:e2:
3c:00:9e:37:19:49:dc:21:36:b7:30:e4:e8:9f:90:
e4:ee:a3:39:a1:71:8b:13:72:9c:1d:65:ba:e5:ae:
e0:43:e6:0f:90:2c:89:82:ad:ff:76:14:8f:d9:ca:
d0:2c:d1:10:0f:5b:58:86:b7:dd:b1:1e:0d:4c:ea:
1e:d4:06:a2:fa:42:47:45:fa:14:a8:3e:59:d5:2f:
06:76:b5:db:84:82:fd:b8:4d:d5:53:a3:a0:5c:3d:
28:ea:60:e5:dc:e3:ad:e2:c0:27:b6:08:ec:30:96:
cd:6a:52:03:a6:29:d0:cc:65:ea:f7:dd:c6:7a:39:
a9:69:d8:4d:a7:1e:d5:93:20:22:36:f9:a4:e5:27:
f3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:26:0A:76:C4:FB:A7:63:F6:B3:0B:AE:63:4D:17:27:2A:95:4E:17
X509v3 Authority Key Identifier:
keyid:77:1D:0A:B9:C4:45:B2:8C:88:7F:D7:BA:18:DE:C5:15:D8:BA:38:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:7d:ad:53:f4:ea:03:ed:3e:07:b5:1f:2d:9b:26:dc:d2:89:
4f:72:4b:c2:5e:51:5d:d7:bb:97:06:60:66:50:9a:18:48:b3:
f9:6c:9d:26:47:90:e7:b2:e6:60:04:04:19:98:dd:7e:67:e1:
16:32:8f:cb:c8:98:df:bc:0b:fa:86:36:9b:2e:1b:19:10:11:
b0:ac:e7:9d:5b:28:ff:6f:c5:97:ac:9a:28:45:04:e2:6b:00:
a0:1f:5a:49:45:7c:79:58:c5:8f:b4:15:ff:e4:8d:d3:77:aa:
65:32:b1:73:9d:ac:47:eb:0c:ab:1d:10:c9:9f:53:94:3d:c7:
09:22:c3:dc:71:e1:ef:5b:3e:e0:31:d9:3e:e1:f4:0c:e9:95:
9e:aa:19:58:7f:0f:55:60:76:f5:cc:d5:e3:f1:c5:e3:95:5f:
7f:32:3d:c3:a0:d3:e1:9c:4d:e9:f1:dc:0b:29:cb:63:9c:53:
a2:2a:8b:d2:f4:6c:53:a1:8c:05:0a:89:64:6f:b1:03:a9:03:
c3:84:66:46:ce:6a:a2:bc:b0:e3:ff:91:ac:90:6e:d3:ab:b7:
77:7f:64:02:2b:6d:37:b5:29:27:f6:b1:7f:32:2e:ea:13:c9:
7b:93:ec:45:c0:44:39:13:c0:e9:5d:7b:03:af:25:9f:bb:99:
9d:07:1a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:03:47 2026 by rpki-client