This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/8762A545785B5A6352FB7DA20689CECA8A47432E.mft
File: 8762A545785B5A6352FB7DA20689CECA8A47432E.mft (raw, json)
Hash identifier: qO67x0ia0QtlvlovLaZKRXa5RLFYBnSw4XBMZGnC4tA=
Subject key identifier: 6C:62:EF:0A:1E:36:06:B1:E9:D0:D4:49:09:16:35:7D:2A:C0:98:B7
Authority key identifier: 87:62:A5:45:78:5B:5A:63:52:FB:7D:A2:06:89:CE:CA:8A:47:43:2E
Certificate issuer: /CN=8762A545785B5A6352FB7DA20689CECA8A47432E
Certificate serial: 305940B266FA40C3935427AB818CCC59B8907F27
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8762A545785B5A6352FB7DA20689CECA8A47432E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/8762A545785B5A6352FB7DA20689CECA8A47432E.mft
Manifest number: 0151
Signing time: Sun 25 Jan 2026 01:02:25 +0000
Manifest this update: Sun 25 Jan 2026 00:57:25 +0000
Manifest next update: Wed 28 Jan 2026 09:39:25 +0000
Files and hashes: 1: 3131332e3139322e302e302f32342d3234203d3e20313532303630.roa (hash: +NIjwWcX32iENUI6CwGHVjqpRn9w8NoFIe/Bw+4LZl8=)
2: 3131332e3139322e312e302f32342d3234203d3e20313532303630.roa (hash: lji/vTMkb0wOaoJDSAf5I41zHxz28OXK0EJIORWWggo=)
3: 3131332e3139322e302e302f32332d3233203d3e20313532303630.roa (hash: 85HD3reiEjdkfQdQr7+NqjILaObNFWfX8Cb4+3Rhne0=)
4: 8762A545785B5A6352FB7DA20689CECA8A47432E.crl (hash: Njdswz6fYgkAcdAOnGjOX2oHum6zeADkBtwA/P4MCJY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/8762A545785B5A6352FB7DA20689CECA8A47432E.crl
rsync://repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/8762A545785B5A6352FB7DA20689CECA8A47432E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8762A545785B5A6352FB7DA20689CECA8A47432E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 09:39:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:59:40:b2:66:fa:40:c3:93:54:27:ab:81:8c:cc:59:b8:90:7f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8762A545785B5A6352FB7DA20689CECA8A47432E
Validity
Not Before: Jan 25 00:57:25 2026 GMT
Not After : Jan 28 09:39:25 2026 GMT
Subject: CN=6C62EF0A1E3606B1E9D0D4490916357D2AC098B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0b:6b:1f:9b:96:3d:65:a7:dc:cf:74:d7:8f:
b1:6b:3f:68:ba:ad:80:7e:c9:93:34:a2:42:73:b9:
6a:6a:50:80:93:d2:21:95:26:3e:7d:74:95:68:da:
58:3b:a8:4f:74:2b:e5:13:8f:5b:a8:c7:1f:ca:09:
e5:74:dc:9f:d2:dc:bd:79:53:e6:be:a8:3f:ff:34:
50:55:48:62:ff:e6:7f:38:8b:f3:7b:df:2d:03:19:
17:de:26:0b:03:4c:f3:f3:c3:c3:a8:ce:6b:23:11:
16:d7:b5:fb:93:21:cd:55:47:f3:ff:1a:80:a2:98:
51:76:ed:be:a6:26:a2:54:1d:28:53:ff:5f:5e:32:
79:30:fd:77:4c:1c:27:f4:08:74:7b:2f:09:f1:d9:
6a:f4:e1:fe:43:4c:f7:40:c3:c4:1d:c7:bb:56:67:
46:58:4a:38:14:28:2c:fc:43:bf:63:cc:f2:02:8a:
5a:b0:88:f2:f0:7d:99:8c:7d:b0:8d:11:c2:e0:db:
da:14:73:a1:a1:37:a6:43:fc:36:cd:91:7e:2b:f5:
a0:41:8c:aa:bc:86:3f:b3:4b:bf:86:4a:72:de:d0:
6c:16:2f:a0:c2:07:30:87:bd:60:da:44:fb:be:6c:
8c:fd:11:3c:d4:12:5c:75:e6:5f:fb:15:d8:36:c7:
57:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:62:EF:0A:1E:36:06:B1:E9:D0:D4:49:09:16:35:7D:2A:C0:98:B7
X509v3 Authority Key Identifier:
keyid:87:62:A5:45:78:5B:5A:63:52:FB:7D:A2:06:89:CE:CA:8A:47:43:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/8762A545785B5A6352FB7DA20689CECA8A47432E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8762A545785B5A6352FB7DA20689CECA8A47432E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/8762A545785B5A6352FB7DA20689CECA8A47432E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:53:0d:ab:16:ed:78:96:52:5f:e5:52:22:da:d2:f9:65:2b:
41:16:69:0d:70:9a:82:e7:1e:39:09:44:07:7a:b8:2c:9d:d6:
d6:16:82:05:dc:cb:5f:cd:16:5c:29:c5:1b:e9:33:f4:99:ed:
6b:93:d8:8c:38:f3:8e:b0:d5:ee:eb:08:54:3f:07:f3:9a:ce:
15:4a:b9:67:e1:55:12:9b:e0:dd:ed:76:4a:47:3a:bb:35:e2:
06:5d:a0:b1:9a:fb:31:b6:42:be:46:69:56:ec:e6:04:f1:c1:
28:68:56:fb:4f:a7:a6:2f:0b:9d:d5:4e:5e:2d:49:5b:32:57:
9d:d8:a9:74:5e:e0:33:ba:c3:2c:a7:56:60:53:a8:d1:f5:57:
6a:29:98:aa:7b:96:e6:ee:5b:b7:fe:d6:30:7b:30:f7:53:35:
37:f1:ae:39:ee:1e:b2:d2:f1:c7:20:12:39:ba:0a:9b:b6:c4:
7b:fc:14:b2:1d:4b:df:7b:86:64:40:89:23:e8:c8:a9:6e:98:
c2:2d:3f:74:83:bd:3c:5a:cf:06:5d:bf:4e:38:ae:ac:fd:40:
83:7c:72:9e:17:9a:49:d4:b9:0d:8f:90:0b:32:c8:01:fd:ec:
b8:95:06:08:a1:3c:7a:3c:a3:33:09:b2:ba:83:93:aa:fb:c8:
11:a7:d5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:00:58 2026 by rpki-client