This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.mft
File: 743D7544160232918AB5AB2CD90221B4C4E978E5.mft (raw, json)
Hash identifier: 8nDcCUwd/lqf2r46nJPAsVxhAzJjjbHT0RTRsb4JWWs=
Subject key identifier: B9:FF:B2:BE:39:D2:63:15:20:EA:97:4F:24:84:A3:E2:85:0F:04:07
Authority key identifier: 74:3D:75:44:16:02:32:91:8A:B5:AB:2C:D9:02:21:B4:C4:E9:78:E5
Certificate issuer: /CN=743D7544160232918AB5AB2CD90221B4C4E978E5
Certificate serial: 33DCA6A81185A22875CE772817C6048A18727158
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/743D7544160232918AB5AB2CD90221B4C4E978E5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.mft
Manifest number: 01D0
Signing time: Sun 25 Jan 2026 01:21:08 +0000
Manifest this update: Sun 25 Jan 2026 01:16:08 +0000
Manifest next update: Wed 28 Jan 2026 11:38:08 +0000
Files and hashes: 1: 3130332e38312e3235342e302f32342d3234203d3e20313530353533.roa (hash: O6AiiOFEwGMgZxev69IgPIlcJDgXQoSXIvEt086XR7k=)
2: 3130332e38312e3235352e302f32342d3234203d3e20313530353533.roa (hash: 6WBleXSX0c07tXo+dC+vbRCMKLXoYLwo1rSzqObcWfU=)
3: 743D7544160232918AB5AB2CD90221B4C4E978E5.crl (hash: ZAkIi8FEYYf+dzBYXknyKWMAmxxYU7oFJKCq/R7uV8E=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.crl
rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/743D7544160232918AB5AB2CD90221B4C4E978E5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 11:38:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:dc:a6:a8:11:85:a2:28:75:ce:77:28:17:c6:04:8a:18:72:71:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743D7544160232918AB5AB2CD90221B4C4E978E5
Validity
Not Before: Jan 25 01:16:08 2026 GMT
Not After : Jan 28 11:38:08 2026 GMT
Subject: CN=B9FFB2BE39D2631520EA974F2484A3E2850F0407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c7:b0:5c:15:6b:5d:64:95:93:66:38:b8:40:
9a:52:e7:44:d7:ee:2d:db:f5:d8:83:5d:be:72:3b:
e7:43:db:68:79:dc:38:d9:ad:0c:4b:de:84:00:45:
da:c9:3e:a6:08:0d:72:bf:ba:bb:e9:0b:59:50:88:
cd:87:dd:27:f6:97:e7:95:e0:27:dd:ff:5b:86:0a:
19:75:91:07:53:f9:30:2a:7b:56:a6:95:d5:2a:94:
b0:54:a1:22:03:b3:f7:23:27:58:be:0c:2c:21:65:
13:a8:04:fa:d1:57:f0:91:f3:5e:29:45:01:65:df:
f5:20:85:ee:e1:b6:a7:4e:e0:09:1f:ae:5e:67:a6:
dd:87:20:fa:39:e0:8d:e2:95:33:3d:0f:ca:13:f0:
60:27:19:00:01:56:a4:a3:fb:4f:06:58:24:bf:1d:
67:3c:6d:55:f9:8e:7b:7c:96:d2:43:38:d0:3d:13:
d7:ad:85:71:a3:7a:27:5d:44:a0:2c:84:b5:5a:66:
11:aa:25:a9:57:8d:bb:33:4f:da:88:35:70:f5:8a:
63:cb:71:f1:e9:68:57:5a:89:97:d6:88:b7:55:0b:
fa:79:32:17:57:9c:83:f4:b4:ac:c1:2b:db:e4:d5:
de:e1:28:d5:ae:03:af:b1:97:f7:cc:28:3d:1f:eb:
57:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FF:B2:BE:39:D2:63:15:20:EA:97:4F:24:84:A3:E2:85:0F:04:07
X509v3 Authority Key Identifier:
keyid:74:3D:75:44:16:02:32:91:8A:B5:AB:2C:D9:02:21:B4:C4:E9:78:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/743D7544160232918AB5AB2CD90221B4C4E978E5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:19:19:48:45:5b:86:54:5c:ae:53:ef:7b:d6:25:c8:51:2e:
9b:6b:42:35:aa:7e:d9:09:1f:92:f1:83:06:6a:15:02:41:0f:
e3:73:c1:63:50:ec:c0:b2:ef:1c:65:1a:9d:b8:24:ea:c3:41:
aa:37:95:ba:9b:08:e3:77:f1:ea:1d:bc:e6:46:4a:2e:04:24:
23:18:08:e6:d7:20:a3:22:29:52:4d:ca:cd:93:b5:5a:5d:29:
06:19:56:7f:f6:c7:58:4b:31:0b:77:60:89:07:ed:09:b7:71:
93:1f:1e:dc:c2:2b:f1:b2:4f:b4:09:f5:ba:a9:59:2d:14:ad:
05:35:70:0d:15:2f:80:bc:07:08:00:cc:d8:3b:47:0f:f4:74:
ec:e0:dc:7b:68:04:b2:ee:ae:f5:52:d2:08:f6:cc:8a:73:65:
df:ef:b1:e4:67:7f:70:35:88:cf:ca:44:9f:fb:69:9a:7f:3f:
5a:90:bc:f0:ce:18:4a:18:0b:44:d7:23:d1:ec:b5:85:f3:32:
2c:88:ed:d3:ef:77:ae:ea:38:39:b5:a0:37:b5:e2:1b:9e:63:
a0:e8:0d:cc:3e:39:e6:de:ab:98:9e:06:4a:2b:18:66:42:14:
b4:7e:a9:cd:0b:53:9a:62:59:62:58:88:06:68:f3:69:06:32:
a3:7b:02:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:47:35 2026 by rpki-client