This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.mft
File: 782659A7F6433029248A38A1C68F2E9971161391.mft (raw, json)
Hash identifier: a3hFagTpmtYobQXR05NhqsRiWFZx0EE1+FmEMkRyYUw=
Subject key identifier: EE:CA:3E:5D:73:DB:B8:9B:C6:F8:A0:AB:CF:B3:96:34:CA:DC:CD:C3
Authority key identifier: 78:26:59:A7:F6:43:30:29:24:8A:38:A1:C6:8F:2E:99:71:16:13:91
Certificate issuer: /CN=782659A7F6433029248A38A1C68F2E9971161391
Certificate serial: 14C08FE40CEEFBAF7C9508E62A5A9765C9386D9E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782659A7F6433029248A38A1C68F2E9971161391.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.mft
Manifest number: 015E
Signing time: Sun 25 Jan 2026 05:21:01 +0000
Manifest this update: Sun 25 Jan 2026 05:16:01 +0000
Manifest next update: Wed 28 Jan 2026 07:41:01 +0000
Files and hashes: 1: 782659A7F6433029248A38A1C68F2E9971161391.crl (hash: TZj29uheArTRA/HRghBpv+YUA9+TWz7tDifygpk88Tk=)
2: 3130332e35352e3235322e302f32342d3234203d3e20313531353838.roa (hash: n7hVFiq0OxWE9m+WmPS/fUFFT640qZL0JRyZZq2zd9M=)
3: 3130332e35352e3235322e302f32332d3233203d3e20313531353838.roa (hash: 1o5pWm32JlzXIIYG67jaNX/7ssN7uLCzQj52YRkWuFY=)
4: 3130332e35352e3235332e302f32342d3234203d3e20313531353838.roa (hash: QzBzm2jTi52qCuHNFLxAMIYm8xcW8JwG11leVCtzjT8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.crl
rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782659A7F6433029248A38A1C68F2E9971161391.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 07:41:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:c0:8f:e4:0c:ee:fb:af:7c:95:08:e6:2a:5a:97:65:c9:38:6d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=782659A7F6433029248A38A1C68F2E9971161391
Validity
Not Before: Jan 25 05:16:01 2026 GMT
Not After : Jan 28 07:41:01 2026 GMT
Subject: CN=EECA3E5D73DBB89BC6F8A0ABCFB39634CADCCDC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:03:17:f2:af:27:f0:f6:a5:ea:14:9b:16:d6:
de:b0:4a:48:7b:6c:d4:c5:4c:d0:f2:38:31:f7:b2:
8e:c7:fd:f2:5c:7c:e8:97:af:71:5a:bd:34:40:e5:
c4:88:b3:b0:e6:ac:48:7a:de:73:2e:6c:a5:07:6b:
ee:39:e5:35:e6:09:a7:85:a4:69:f9:e2:fe:04:19:
42:6c:3e:ba:96:1d:ea:ce:f1:0d:e2:b3:67:08:8d:
d5:bf:e9:37:12:3a:2f:cb:b3:b3:84:4c:db:e5:58:
d7:74:ba:12:d0:06:a5:df:ab:a4:82:02:29:d9:ed:
39:80:88:a5:95:87:73:5c:e1:cb:96:c6:0b:e4:36:
80:f4:a8:f2:59:92:11:5a:19:e4:76:82:1b:c3:d8:
87:8f:d5:8a:d2:33:9b:de:df:04:52:19:be:0e:bc:
5a:72:bc:5a:2b:9d:5a:02:2c:a7:35:6e:e1:8b:b0:
49:d3:81:b7:3e:5b:3c:a6:2a:f6:4f:81:0c:aa:47:
dd:2d:6e:7e:ba:9e:0d:fc:65:e0:ab:97:32:58:0b:
50:72:cf:b9:52:f6:de:e3:e3:17:60:e4:26:7b:b2:
56:57:ea:89:ad:03:c0:5e:31:98:87:63:c3:8d:90:
8c:fa:1b:6d:64:44:8e:2f:94:65:76:d4:24:03:00:
5c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:CA:3E:5D:73:DB:B8:9B:C6:F8:A0:AB:CF:B3:96:34:CA:DC:CD:C3
X509v3 Authority Key Identifier:
keyid:78:26:59:A7:F6:43:30:29:24:8A:38:A1:C6:8F:2E:99:71:16:13:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782659A7F6433029248A38A1C68F2E9971161391.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:bf:c1:b9:49:65:b1:d8:42:f2:27:7d:51:72:a4:f7:8b:80:
3a:c5:eb:e5:ca:86:d9:b3:d1:8c:30:29:c8:08:39:bb:e4:0e:
50:fd:61:ed:28:1f:e9:74:99:ff:97:21:a9:30:2e:a7:87:9c:
d7:2b:97:83:8d:88:df:93:02:07:5d:d4:f0:3f:a9:be:64:df:
75:74:b0:49:1a:8d:70:fe:1f:0c:b8:8d:1b:f6:6a:c6:c3:e2:
63:99:62:af:c8:b3:07:d8:b9:4e:33:84:a2:2d:97:24:24:68:
87:bc:9b:86:5f:57:ed:e3:51:f4:ae:66:f5:f6:fe:d8:98:07:
d2:1e:10:d0:3b:a4:a4:2c:2b:27:69:da:10:ca:c1:c5:75:b7:
03:08:f0:2b:3d:d1:75:ff:a0:51:64:31:9c:4f:01:a7:62:06:
9d:31:35:26:ba:db:32:6e:6b:8f:44:5b:b4:75:4e:35:ae:d6:
e4:e5:2f:bd:60:d4:d6:75:85:e3:ed:2b:a7:c8:bd:fb:d0:b8:
5d:72:24:2c:41:61:a2:15:8f:8e:e3:ea:72:4d:07:da:83:fe:
1c:00:eb:db:8c:91:20:d6:4d:00:3a:84:66:31:71:18:58:b2:
a2:bd:b8:ca:68:d3:8f:f6:52:3c:21:51:80:0c:99:4e:47:af:
bc:37:26:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:21:11 2026 by rpki-client