This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft
File: D77C7D38397FCDE17250AA403BF110EC387F7C02.mft (raw, json)
Hash identifier: u96KlMWxHYg3w80nwXtF25CXDjpHWaOTeQeKr/XiMbs=
Subject key identifier: 64:C6:E7:2C:AB:5F:26:54:5A:8A:3A:F4:10:8B:DA:E2:02:44:B8:5C
Authority key identifier: D7:7C:7D:38:39:7F:CD:E1:72:50:AA:40:3B:F1:10:EC:38:7F:7C:02
Certificate issuer: /CN=D77C7D38397FCDE17250AA403BF110EC387F7C02
Certificate serial: 5CA8B92465C9950AE9871A8C0A67AA6619EE31BC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft
Manifest number: 0177
Signing time: Mon 02 Feb 2026 09:51:30 +0000
Manifest this update: Mon 02 Feb 2026 09:46:30 +0000
Manifest next update: Thu 05 Feb 2026 18:20:30 +0000
Files and hashes: 1: D77C7D38397FCDE17250AA403BF110EC387F7C02.crl (hash: sm5IXSj2t8hLJMwz5yDdB35j01lOZwtMdENIrqgAK84=)
2: 3130332e3233342e33352e302f32342d3234203d3e20313531353231.roa (hash: AZoj+0FC7tr+2ZKJboWJyczOYWAwC/zNvBvRBqK06eM=)
3: 3130332e3233342e33342e302f32342d3234203d3e20313531353231.roa (hash: aAQ3gTdw9Ba4EyqO5leg/m+5A85FY5W+Vc3itSgQl30=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.crl
rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:a8:b9:24:65:c9:95:0a:e9:87:1a:8c:0a:67:aa:66:19:ee:31:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D77C7D38397FCDE17250AA403BF110EC387F7C02
Validity
Not Before: Feb 2 09:46:30 2026 GMT
Not After : Feb 5 18:20:30 2026 GMT
Subject: CN=64C6E72CAB5F26545A8A3AF4108BDAE20244B85C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:05:2b:88:bb:53:c7:f6:0d:02:69:ba:ab:2a:
ef:f1:61:8a:ae:a4:13:e3:2c:97:5a:fa:44:98:55:
d0:f3:2d:5a:81:c0:c9:eb:8f:75:96:53:b5:1f:2a:
6d:07:43:b1:77:b9:cb:b7:22:82:6c:a0:e9:45:b8:
71:a3:02:d9:80:04:9e:0b:6f:70:ff:85:1d:9f:bb:
6c:7b:ff:0e:d2:a1:c4:1b:f6:2e:7a:56:b9:f9:99:
d4:b7:78:5e:d1:b4:6c:4f:f0:ac:81:9c:7e:3a:e2:
ca:52:9a:6c:88:b1:f0:72:bb:95:46:14:eb:50:ec:
bf:23:1c:6d:fb:10:d5:82:4a:ba:fd:2a:de:a9:c7:
e4:b9:51:d5:06:32:70:cf:f6:71:c0:7f:45:21:86:
01:f5:69:10:40:e7:f5:46:ef:25:3c:e4:23:15:3c:
1c:79:70:3c:2c:36:39:0c:db:88:20:e9:b4:ed:08:
68:bc:c8:be:18:f1:3b:31:74:4b:04:df:b8:85:60:
66:78:9d:9d:26:26:38:55:6f:ad:c0:1b:b3:ea:89:
bf:51:c8:5b:53:88:1c:c1:03:82:eb:0e:ec:46:00:
53:e9:1f:ad:1b:0d:20:9f:09:7f:43:17:aa:a5:10:
77:87:50:34:b5:3d:33:e0:34:1e:93:94:76:28:e4:
c7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C6:E7:2C:AB:5F:26:54:5A:8A:3A:F4:10:8B:DA:E2:02:44:B8:5C
X509v3 Authority Key Identifier:
keyid:D7:7C:7D:38:39:7F:CD:E1:72:50:AA:40:3B:F1:10:EC:38:7F:7C:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:03:16:3f:52:5d:1b:3f:be:5a:a0:51:57:97:63:df:17:1f:
45:05:6c:e5:8c:6c:94:2b:02:6c:63:cf:3d:db:08:ef:3f:92:
22:be:2e:e5:28:38:81:70:bb:5d:55:90:de:b4:67:4f:ea:ac:
ca:cb:5e:ec:96:5b:f0:44:9d:1a:60:2c:5a:4b:c4:ed:63:35:
0b:78:b0:bd:71:56:0e:76:10:4a:75:d8:d4:9b:8c:c2:a8:fb:
5c:22:da:c1:83:11:97:bc:52:94:59:27:82:f6:6b:d7:a0:a5:
d6:9c:4d:bd:3a:4c:9e:dc:29:8b:e7:d8:c6:08:01:3f:13:c6:
12:6e:81:a3:51:ff:56:bb:30:01:a0:2e:44:ad:fb:05:ef:22:
13:9d:ce:c7:98:b7:46:35:bf:e7:a6:88:2d:a9:4f:8e:50:49:
cc:50:be:a1:91:84:c4:d8:65:45:87:e8:24:07:de:56:79:0b:
5e:14:c6:ff:a9:21:9f:db:91:97:9a:88:3d:a6:c7:f3:bc:20:
a5:3f:96:5f:bf:df:1a:f3:24:34:85:6f:23:ad:39:ba:02:47:
1c:b4:b3:8e:e5:e3:e5:8d:97:bf:fc:5e:9d:58:91:57:00:26:
ca:73:32:01:aa:e6:f6:b1:b0:ff:04:dc:7b:37:d5:86:e6:88:
70:b6:43:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 14:26:54 2026 by rpki-client