This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.mft
File: 5DF7F909917C4DA09D7486E2B70323E7972B7675.mft (raw, json)
Hash identifier: 87n0rCXptphamdKigYArf5F7Hu8GmBCobej4E5+Ocxk=
Subject key identifier: 67:76:D2:1E:D8:D2:A1:90:87:FF:AA:90:B3:50:70:38:BC:D2:1B:BB
Authority key identifier: 5D:F7:F9:09:91:7C:4D:A0:9D:74:86:E2:B7:03:23:E7:97:2B:76:75
Certificate issuer: /CN=5DF7F909917C4DA09D7486E2B70323E7972B7675
Certificate serial: 30F7D4A05EE2AA872EC55D8727852346EFF68550
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DF7F909917C4DA09D7486E2B70323E7972B7675.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.mft
Manifest number: 025C
Signing time: Sun 01 Feb 2026 00:21:54 +0000
Manifest this update: Sun 01 Feb 2026 00:16:54 +0000
Manifest next update: Wed 04 Feb 2026 03:22:54 +0000
Files and hashes: 1: 5DF7F909917C4DA09D7486E2B70323E7972B7675.crl (hash: dlubldFF2L43tc94WnXs3XiTIfTAy4GoL5auemQZ9zM=)
2: 3130332e3138362e3136372e302f32342d3234203d3e20313439373033.roa (hash: etKKSveFADWMloWFgv7k4bcqwUD/JCeti3TZy4ckvfE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.crl
rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DF7F909917C4DA09D7486E2B70323E7972B7675.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 03:22:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:f7:d4:a0:5e:e2:aa:87:2e:c5:5d:87:27:85:23:46:ef:f6:85:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DF7F909917C4DA09D7486E2B70323E7972B7675
Validity
Not Before: Feb 1 00:16:54 2026 GMT
Not After : Feb 4 03:22:54 2026 GMT
Subject: CN=6776D21ED8D2A19087FFAA90B3507038BCD21BBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7c:1e:ca:05:7f:53:80:88:b3:78:ca:ca:4c:
a9:bc:88:d8:95:49:aa:19:5c:4f:87:80:28:2f:c4:
4c:3c:45:83:a8:f5:52:0b:57:ca:3e:f2:ee:2c:78:
3d:6a:b8:2b:0d:e1:43:e2:2a:53:06:a0:17:9d:eb:
e0:b4:79:ef:51:76:18:4b:36:0b:ca:13:9c:74:64:
65:84:ce:8e:6d:64:af:4f:f7:e8:65:d4:02:94:eb:
aa:a4:e2:b5:58:f4:8f:ce:6c:6b:d2:37:55:76:6a:
35:39:05:4a:07:47:51:43:90:33:c9:30:31:e6:70:
93:f1:df:ca:8f:ab:28:ef:41:12:10:95:53:a5:4a:
21:6c:9e:ee:e1:d5:d7:4b:f0:bd:46:dc:33:64:45:
d9:cc:e7:21:9a:83:a8:52:aa:ee:c7:b2:71:5b:db:
50:26:c7:99:eb:b0:4d:d2:46:5d:ee:16:78:78:dc:
2a:13:8f:ab:e0:70:c3:21:66:a3:35:7d:23:73:9f:
64:ec:24:c4:5f:72:a3:96:96:b1:96:45:ac:9b:8d:
cc:8e:9e:86:3e:ed:47:c6:9b:b4:6d:6c:00:8b:42:
7f:ed:5b:c5:7f:39:ea:50:b4:78:e9:fd:db:83:38:
b1:ee:89:8e:cf:fe:21:04:b9:80:d5:20:26:3d:14:
45:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:76:D2:1E:D8:D2:A1:90:87:FF:AA:90:B3:50:70:38:BC:D2:1B:BB
X509v3 Authority Key Identifier:
keyid:5D:F7:F9:09:91:7C:4D:A0:9D:74:86:E2:B7:03:23:E7:97:2B:76:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DF7F909917C4DA09D7486E2B70323E7972B7675.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ce:e6:24:36:07:62:5d:ac:be:90:04:9b:45:8d:ac:9f:f7:
6d:2d:04:0a:d1:a3:40:69:de:a4:b0:f7:af:61:53:ea:36:8f:
b8:47:53:cf:18:01:14:8b:a3:50:9c:f5:f9:a2:92:03:fd:65:
31:78:4a:76:19:23:79:88:bc:e8:94:10:b2:5f:2e:31:96:50:
81:df:52:e8:74:e6:07:73:00:e9:a4:b9:cc:0d:52:26:29:c1:
b8:66:ac:35:fd:e2:bc:1a:ec:0c:14:f1:13:ec:9c:db:17:57:
ac:dc:1c:3e:11:13:30:30:5a:ac:18:ef:c1:83:d1:3a:ce:64:
5c:19:dd:2f:c4:9d:be:48:94:1e:6e:4e:91:ae:a2:9f:59:c9:
38:89:6d:2e:75:02:4f:c3:a3:55:e3:11:cf:e3:9e:3b:26:a8:
42:24:ed:c6:91:23:c5:21:1c:09:1e:79:f4:d3:a0:45:37:33:
c3:7f:f7:21:c7:95:10:e7:2d:9a:cc:ec:cd:64:0d:bf:85:13:
01:ee:b1:a0:da:11:ca:cc:ed:b6:3e:ca:33:1d:60:a5:d4:9e:
c2:78:f5:7c:2d:33:fe:6b:07:44:b7:2a:d7:fe:73:04:3c:ca:
d7:03:a1:46:b9:d8:fa:48:6b:7b:95:15:4a:49:84:40:b6:45:
fc:59:ca:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:02:55 2026 by rpki-client