This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft
File: D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft (raw, json)
Hash identifier: k/ZWaoVRojCx0y9imTCVTSPlxPqjBPI/pXeYWdXs2eA=
Subject key identifier: 23:E2:0D:31:14:04:80:A2:1D:DF:DD:A2:20:88:D4:0B:0E:37:21:41
Authority key identifier: D1:75:BD:C5:A6:41:4C:EB:AB:47:2D:F9:15:9C:BD:32:BC:CF:91:EA
Certificate issuer: /CN=D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA
Certificate serial: 0E1A122E21FD805F326C407CB07A237FD970678F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft
Manifest number: 01EE
Signing time: Sun 01 Feb 2026 12:40:00 +0000
Manifest this update: Sun 01 Feb 2026 12:35:00 +0000
Manifest next update: Wed 04 Feb 2026 14:34:00 +0000
Files and hashes: 1: 323030313a6466313a646534303a3a2f34382d3438203d3e20313530353033.roa (hash: 7LSMPL8vBB3tryB4W9V+LqRs1lcp8JLOw5O4E5oOPZ8=)
2: 3130332e3132362e3233382e302f32342d3234203d3e20313530353033.roa (hash: N0/JO0oaR76f4qC9rQwj7j3uUoZjxf567pjSkSVvNG0=)
3: D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.crl (hash: 9mAIT1EZeqwK+1oMURQkBaqfcZ6++8zBRVKO3wOezbI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.crl
rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 14:34:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:1a:12:2e:21:fd:80:5f:32:6c:40:7c:b0:7a:23:7f:d9:70:67:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA
Validity
Not Before: Feb 1 12:35:00 2026 GMT
Not After : Feb 4 14:34:00 2026 GMT
Subject: CN=23E20D31140480A21DDFDDA22088D40B0E372141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:66:a3:ed:13:97:9d:ed:06:26:42:f2:b9:2c:
92:60:6d:ae:44:e0:92:1f:0b:b7:cb:e7:69:06:c6:
71:62:e4:6e:db:89:50:62:ed:9b:88:93:d8:98:f6:
92:7c:84:9d:7c:e9:08:60:c3:91:38:a3:d0:f6:59:
ca:e5:6e:97:40:fe:fb:a3:e9:85:5d:14:64:81:ef:
07:c6:a5:c4:8e:47:a6:82:72:89:f5:c3:8a:48:1b:
8a:94:c6:b7:3c:82:d6:a0:f3:f7:95:87:49:94:19:
7d:de:af:60:e1:d2:27:48:c7:2e:9b:e4:75:9a:98:
f6:c8:c9:19:af:24:ee:98:30:1a:3b:3c:c3:e4:51:
c8:97:82:47:2f:27:85:e5:ba:53:8e:ce:b3:95:b2:
87:8b:9c:ba:a9:c0:38:82:a3:0a:0b:6e:bb:13:0c:
39:35:28:d6:38:5c:07:67:34:c4:5e:ca:a4:17:10:
19:8c:3e:02:ed:41:9b:8e:06:87:fd:cd:3e:46:bf:
71:e9:6e:4b:83:0a:dc:d2:77:28:03:e6:0f:2d:18:
30:23:35:72:76:92:c9:0c:42:3b:6b:a2:99:11:68:
39:5a:61:05:dd:6e:f3:3f:5c:49:c1:98:c4:2a:92:
c8:db:aa:83:ab:fb:46:76:68:c6:e7:74:ae:5f:ee:
ce:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E2:0D:31:14:04:80:A2:1D:DF:DD:A2:20:88:D4:0B:0E:37:21:41
X509v3 Authority Key Identifier:
keyid:D1:75:BD:C5:A6:41:4C:EB:AB:47:2D:F9:15:9C:BD:32:BC:CF:91:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c5:80:0b:c6:74:98:b7:68:d9:cb:7b:b4:3c:f3:bf:05:39:
20:4f:9f:ba:ad:1d:4f:2f:d6:35:ba:9a:fb:9a:ca:7f:b6:6e:
64:57:f1:2c:ee:75:85:78:53:4d:c0:10:65:61:15:56:84:83:
3c:c6:cb:38:64:5b:f3:88:f5:da:b2:0b:59:ea:59:43:7f:d2:
f8:f7:cb:d0:df:87:ca:21:07:91:a2:37:3d:42:3c:c7:61:30:
7c:0c:ca:13:12:62:d0:dd:03:92:30:79:b5:b3:8e:fc:5d:f0:
44:e5:d4:3a:83:e3:f6:a6:e2:be:1a:02:8f:72:9d:2a:22:24:
7c:73:e4:37:6b:54:d4:a6:71:d4:18:d2:b8:13:e8:37:38:54:
db:fb:22:be:de:4a:7f:bb:56:d9:64:28:f2:9b:7e:54:d2:23:
02:88:43:fb:36:e0:07:cc:6b:32:8c:af:84:27:99:47:39:cb:
f5:19:30:6e:51:a7:41:88:0e:71:78:36:25:e0:ce:7c:26:50:
a8:c6:cd:18:69:2c:1d:05:b6:76:0d:14:0b:54:6a:5c:59:ed:
76:a5:11:18:ff:5e:4c:c9:53:34:16:6d:4a:3c:9c:da:20:10:
68:44:84:37:b0:62:5d:36:d8:b2:f0:fc:d2:24:3a:61:2d:b7:
74:e8:ff:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:42 2026 by rpki-client