This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft
File: B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft (raw, json)
Hash identifier: AqRF9nSzLzUaRDv5BJeSAaJlPM+Eh3NFGzruDqGREbU=
Subject key identifier: 78:89:89:02:7D:51:59:40:68:C5:F5:13:B1:77:3C:0C:19:22:5E:CB
Authority key identifier: B7:6C:EE:66:CD:32:9E:4E:DD:33:E6:D3:45:2A:33:FB:BE:00:D7:41
Certificate issuer: /CN=B76CEE66CD329E4EDD33E6D3452A33FBBE00D741
Certificate serial: 40F02D973018999217889EABE2804F19AD039762
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft
Manifest number: 0262
Signing time: Sat 31 Jan 2026 16:50:55 +0000
Manifest this update: Sat 31 Jan 2026 16:45:55 +0000
Manifest next update: Wed 04 Feb 2026 00:31:55 +0000
Files and hashes: 1: 3130332e3138362e39342e302f32332d3234203d3e20313439373430.roa (hash: 36f1oVCDIma5/edGeBmPtM2U4zeHtnBlVDsNRr5sez8=)
2: B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.crl (hash: G9XBR/jbcqkV/veUnFUVl4PHiAdPNZSRbI66ICP/Cj0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.crl
rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 00:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:f0:2d:97:30:18:99:92:17:88:9e:ab:e2:80:4f:19:ad:03:97:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B76CEE66CD329E4EDD33E6D3452A33FBBE00D741
Validity
Not Before: Jan 31 16:45:55 2026 GMT
Not After : Feb 4 00:31:55 2026 GMT
Subject: CN=788989027D51594068C5F513B1773C0C19225ECB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:2f:c3:27:69:e2:3d:7f:e5:b0:2e:4f:4a:47:
09:cc:c9:c1:94:50:31:66:ce:fa:13:86:ee:6d:bc:
19:50:d9:b3:d8:32:0a:11:92:53:56:d2:39:ee:5a:
57:28:dc:8d:7c:bc:1c:e0:14:60:7a:02:92:df:a6:
ea:bb:b8:e5:57:00:10:f5:b7:a3:fb:15:a9:77:b5:
12:21:6f:a9:94:c7:ad:28:33:9d:fb:39:23:4c:9c:
8b:dc:71:30:65:43:ff:7d:09:c4:64:97:5c:d0:46:
5b:4e:d7:4a:6f:d2:02:47:2d:b4:57:3b:07:23:c9:
a8:fe:a3:bd:aa:37:99:4c:9c:be:fa:c3:2c:b1:66:
c3:35:47:c8:c1:aa:c9:b4:59:86:8c:23:1f:ec:ab:
66:15:eb:e0:18:57:87:d7:00:d7:97:b4:b3:cf:82:
41:aa:6f:82:cd:c3:38:e9:7c:c7:8c:af:89:79:7b:
3e:04:8e:f8:25:54:4a:75:58:f4:c4:c2:0e:e2:c7:
6f:db:fe:31:ee:6d:3d:87:22:e3:1f:2f:b5:9d:dc:
40:ce:d1:4c:6a:14:ca:d7:5a:44:3c:80:87:ce:22:
30:ca:1c:e1:fa:cf:e0:a9:b6:47:62:dc:87:34:72:
d4:af:91:23:80:1f:16:32:24:d8:da:77:5e:d8:82:
bb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:89:89:02:7D:51:59:40:68:C5:F5:13:B1:77:3C:0C:19:22:5E:CB
X509v3 Authority Key Identifier:
keyid:B7:6C:EE:66:CD:32:9E:4E:DD:33:E6:D3:45:2A:33:FB:BE:00:D7:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ed:05:71:b5:94:ce:cc:53:dc:0d:a4:2a:3c:c9:f8:9f:08:
47:b1:5f:ed:42:9c:9a:12:98:33:6c:03:3e:e5:8c:a9:bd:2e:
b8:8a:1d:d0:6a:8d:f2:d3:37:ab:04:07:48:7a:b5:e3:62:d6:
e8:90:ea:a6:14:ed:23:3b:d1:2f:de:db:35:45:d7:dd:21:4b:
b7:85:cd:ef:6c:a4:35:aa:02:2f:03:54:34:7d:f1:92:4f:7d:
3e:87:3c:9f:89:b5:fc:c3:dc:21:79:44:9d:96:24:3d:07:e8:
ce:9b:e2:ac:9d:1c:1f:34:50:45:e6:72:88:b1:6f:5b:f3:cc:
c2:de:79:05:24:03:bd:38:22:d8:81:2e:05:a4:53:c0:c7:26:
e4:0f:d5:5e:54:1a:1b:a3:8a:03:7a:51:1b:b4:fe:ba:3d:99:
9b:9d:a3:f4:a8:7c:7f:38:fe:34:b7:cd:99:38:be:b4:d6:e4:
f9:41:f7:a0:df:37:e9:f4:07:22:9d:c9:89:0b:6c:23:da:6f:
7b:05:dc:25:2d:77:5d:92:99:b1:8e:09:ab:80:38:fe:98:f2:
ec:82:2e:f5:fd:79:d4:af:c5:70:0b:ba:c3:0c:6f:3d:f3:c9:
1d:a9:91:13:1c:09:9c:3e:8b:78:17:2a:8e:2e:a5:42:da:6b:
3a:1e:71:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:07 2026 by rpki-client