This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft
File: 754AE571E3432B20E78045BE7B2C99E39E0F1873.mft (raw, json)
Hash identifier: T3QMgUGaHjV64WEuP4cNkzjc8H2lcTU71AdxS9nDrtg=
Subject key identifier: D0:31:C2:29:CF:FF:67:AA:64:08:6F:03:E9:BC:EB:29:54:0F:51:F9
Authority key identifier: 75:4A:E5:71:E3:43:2B:20:E7:80:45:BE:7B:2C:99:E3:9E:0F:18:73
Certificate issuer: /CN=754AE571E3432B20E78045BE7B2C99E39E0F1873
Certificate serial: 3038E85B0225E8150A4449F63B8895032ED45BA9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft
Manifest number: 0259
Signing time: Sat 31 Jan 2026 07:22:13 +0000
Manifest this update: Sat 31 Jan 2026 07:17:13 +0000
Manifest next update: Tue 03 Feb 2026 11:31:13 +0000
Files and hashes: 1: 754AE571E3432B20E78045BE7B2C99E39E0F1873.crl (hash: buY/h2Pn0PRiV+TvI449Usr62eeSlohmkIoVf/bXbVo=)
2: 3130332e372e3232372e302f32342d3234203d3e203539313335.roa (hash: Fle5qLzNk23ZNkYRzf8mlYQ/OLfLBGZjvUjXRT80jgM=)
3: 3130332e372e3232362e302f32332d3233203d3e203539313335.roa (hash: /qz+/FrTyvqN+lKfQMLM9vGRBCrWv6ZRIa9kSi7cy5M=)
4: 3130332e372e3232362e302f32342d3234203d3e203539313335.roa (hash: d1VqPlCHSAGRA/UEI5pUZ6WXcTK62ba2i6gugZCVB1Y=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.crl
rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 11:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:38:e8:5b:02:25:e8:15:0a:44:49:f6:3b:88:95:03:2e:d4:5b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=754AE571E3432B20E78045BE7B2C99E39E0F1873
Validity
Not Before: Jan 31 07:17:13 2026 GMT
Not After : Feb 3 11:31:13 2026 GMT
Subject: CN=D031C229CFFF67AA64086F03E9BCEB29540F51F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:03:06:0e:dc:83:70:a2:0d:c9:ef:10:54:79:
53:28:7a:32:bb:81:db:00:1b:39:c0:0f:e8:f1:5e:
c0:eb:1d:f8:33:39:b0:8a:77:66:ea:56:ae:05:34:
f1:97:05:1c:40:3c:db:1b:bd:97:ab:22:de:48:b0:
22:94:65:6a:93:c6:75:1b:a8:18:f0:8b:07:dc:3d:
47:9a:c8:fb:1a:82:f7:8b:bd:4a:79:25:bc:ec:dc:
d3:31:10:48:48:f3:51:7f:42:22:87:46:b2:e3:c9:
c2:f1:c3:22:cf:17:83:05:6f:0b:90:2b:08:80:09:
f8:85:20:f8:63:de:e4:63:b5:5c:74:a6:30:94:56:
15:c2:ff:3b:2a:bf:a5:23:6c:b2:bc:aa:fa:18:a9:
63:51:de:b3:90:3c:e9:0e:22:84:5b:d5:fe:d9:26:
32:b4:4a:d4:03:72:5e:e1:08:38:dd:c1:05:89:16:
ce:4c:34:60:94:fc:10:f8:fa:e4:a8:22:cc:ef:d8:
84:b9:54:68:bc:54:f9:2f:3c:74:42:ad:d1:f6:fe:
3b:d7:db:41:2d:e8:9d:a4:78:0a:72:af:d4:d1:0f:
58:67:d8:de:72:64:c4:3e:80:2a:0d:fa:27:81:82:
67:96:0a:06:7a:e6:35:59:42:7a:c3:83:ec:fe:70:
cd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:31:C2:29:CF:FF:67:AA:64:08:6F:03:E9:BC:EB:29:54:0F:51:F9
X509v3 Authority Key Identifier:
keyid:75:4A:E5:71:E3:43:2B:20:E7:80:45:BE:7B:2C:99:E3:9E:0F:18:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:8f:9d:f0:23:26:1a:dc:dd:97:10:62:bd:2f:ac:f0:0d:5e:
c2:70:db:d8:42:c4:a6:34:11:2a:6c:66:95:bc:d1:31:1b:95:
4d:6e:a8:ff:14:a0:9d:8c:17:ab:8f:c9:a2:ec:70:a9:8c:69:
57:18:46:29:b1:29:07:5b:82:ef:7e:26:7a:44:7e:93:cd:57:
1e:52:f0:ae:f5:93:ee:29:bd:9e:d0:8f:1e:09:ea:62:6e:7d:
ee:26:6c:03:e2:6b:24:4b:07:f8:8d:26:d3:4d:c6:fa:5b:11:
55:41:59:e6:60:fb:ed:a2:17:97:9a:5d:77:ad:18:8c:6f:2d:
a2:55:96:cb:2f:1a:55:50:c1:f6:a8:c1:1e:c1:d4:41:c5:f2:
44:77:19:52:b9:30:13:11:38:78:90:59:52:aa:cf:57:c9:5e:
f6:45:1a:5a:a6:20:22:79:65:f9:a3:9b:fe:83:c3:13:a2:5d:
58:42:66:4b:98:4b:7a:47:4b:19:f5:fe:4a:93:4d:78:a3:a1:
1f:f3:cb:d3:5c:d1:22:92:a1:55:a8:b0:a6:5f:aa:3d:6f:44:
0f:23:8a:f1:41:be:8b:ea:42:ba:e5:83:5c:36:3e:7f:47:b7:
99:fa:0e:86:a3:a2:a3:20:c6:8e:f8:51:8d:d0:17:e2:b4:f7:
1e:75:b2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:06:06 2026 by rpki-client