This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft
File: 7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft (raw, json)
Hash identifier: DOqRas7tUEA0yC7OQbSlxeUz5sc5MTvTYTQpeVA7vqw=
Subject key identifier: E4:58:3A:83:5F:DF:81:01:0E:50:E7:8D:59:3E:4B:F6:31:AB:EF:ED
Authority key identifier: 7F:8F:E9:F9:4E:D4:A8:F1:69:D2:C8:A3:79:66:D0:62:16:68:47:56
Certificate issuer: /CN=7F8FE9F94ED4A8F169D2C8A37966D06216684756
Certificate serial: 738026AEEE6D33A9B71C3FBD4B9CA4348809C0A4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F8FE9F94ED4A8F169D2C8A37966D06216684756.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft
Manifest number: F0
Signing time: Sun 01 Feb 2026 09:00:01 +0000
Manifest this update: Sun 01 Feb 2026 08:55:01 +0000
Manifest next update: Wed 04 Feb 2026 09:21:01 +0000
Files and hashes: 1: 33362e35302e3135342e302f32332d3234203d3e20313532303738.roa (hash: Op7L0f6zgAVUDBqJ1dF3rBL4LfH2t/QTkoViKXEVCPk=)
2: 7F8FE9F94ED4A8F169D2C8A37966D06216684756.crl (hash: bAJnDayzxvDbkgnk7qDgG+X7urGZHuEojNgnYHFwBBc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.crl
rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F8FE9F94ED4A8F169D2C8A37966D06216684756.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 09:21:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:80:26:ae:ee:6d:33:a9:b7:1c:3f:bd:4b:9c:a4:34:88:09:c0:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F8FE9F94ED4A8F169D2C8A37966D06216684756
Validity
Not Before: Feb 1 08:55:01 2026 GMT
Not After : Feb 4 09:21:01 2026 GMT
Subject: CN=E4583A835FDF81010E50E78D593E4BF631ABEFED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:25:88:e1:14:c3:52:1e:0f:a1:3e:69:77:bc:
ec:e6:17:85:c4:91:07:5f:8f:94:00:a5:3a:c4:67:
f4:da:32:f1:1a:0c:60:3c:0d:5b:c9:b1:04:b4:1b:
91:5b:e7:53:26:f6:7a:ee:38:2f:61:3c:05:c5:cd:
ae:0e:6b:fb:ae:28:92:d0:b5:5f:51:4b:18:a3:cb:
99:ef:e8:3b:1c:84:f1:84:15:ec:28:8f:e6:21:06:
6b:c2:2b:3f:96:92:d8:71:a0:84:f7:fe:ad:65:0b:
22:e6:25:c8:a5:2c:f6:05:cd:38:ef:7a:05:dc:34:
0a:3f:e2:ec:6e:c5:bf:0c:1a:96:f8:d9:38:07:23:
40:c9:bf:18:ca:ef:f1:6d:49:9e:f2:ab:f3:0b:68:
05:29:f6:8d:31:44:f8:2f:9a:81:2b:94:cd:30:d1:
71:ff:d8:72:50:b9:cf:55:c2:81:57:a8:46:41:55:
22:8f:f5:c2:79:cb:1a:b2:5e:40:3b:0a:66:97:a0:
a1:b8:e1:0f:2c:ad:f1:ca:aa:83:c4:fa:1d:31:4c:
75:f5:56:95:e0:70:91:87:c8:e9:c1:b3:c8:c9:6e:
02:62:32:60:19:d8:2e:65:32:2b:b4:d0:68:05:e8:
a3:67:83:d9:57:36:a2:a7:1d:3f:59:4c:de:83:96:
5d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:58:3A:83:5F:DF:81:01:0E:50:E7:8D:59:3E:4B:F6:31:AB:EF:ED
X509v3 Authority Key Identifier:
keyid:7F:8F:E9:F9:4E:D4:A8:F1:69:D2:C8:A3:79:66:D0:62:16:68:47:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F8FE9F94ED4A8F169D2C8A37966D06216684756.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b4:fc:8d:27:ae:71:08:f3:28:8a:be:0b:aa:12:68:dc:a3:
6e:e7:9a:f8:e6:16:bf:96:4e:8e:b9:03:7c:8a:aa:67:7b:45:
ef:b2:1a:ca:54:af:d3:e9:e8:ed:0f:44:7b:6e:41:72:bc:42:
17:48:1a:b6:25:41:19:79:1f:dc:28:ce:3f:a0:b8:37:aa:0a:
a6:b6:25:e6:97:b4:43:72:16:9f:5e:dc:e3:df:cb:8f:96:b6:
8a:cc:8a:7a:10:a5:12:af:f6:a5:9d:36:8a:92:ac:b7:67:d5:
fa:e2:9f:44:21:41:25:a1:1c:31:73:a8:8e:76:34:12:8b:82:
85:fe:35:fc:08:c6:ca:6a:b6:66:60:ac:b3:72:ad:a3:33:df:
22:0a:ec:cc:66:b3:b3:17:4e:f3:33:db:07:5c:ed:21:17:48:
3f:13:77:96:1b:1e:6c:7e:cd:f4:bc:20:95:13:41:7d:b7:25:
97:32:1a:bb:1a:4a:9f:a0:f4:93:ba:09:93:61:6a:b1:72:c2:
a1:ed:77:44:41:9e:f8:ea:eb:c1:1a:e9:e8:52:cf:d7:17:e8:
7b:b0:53:46:38:62:b6:a8:c3:04:a7:72:38:40:11:11:ab:8b:
ce:54:c0:76:16:61:1f:61:6d:0c:16:be:8a:db:fb:32:81:3c:
77:72:49:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:51:08 2026 by rpki-client