This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.mft
File: A62202F88CE61D6BD47195FB36103CDD061D7D27.mft (raw, json)
Hash identifier: 795ONqowwaB+hIMTY3PsefXZZN6ey+EX/7JKN3HOnpM=
Subject key identifier: 73:CA:77:BE:C5:0E:3D:7E:E8:1F:E6:54:C7:50:23:5B:3C:14:B0:74
Authority key identifier: A6:22:02:F8:8C:E6:1D:6B:D4:71:95:FB:36:10:3C:DD:06:1D:7D:27
Certificate issuer: /CN=A62202F88CE61D6BD47195FB36103CDD061D7D27
Certificate serial: 79695D1DA78C462E294FEC10B93B25C1BC9A24FB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A62202F88CE61D6BD47195FB36103CDD061D7D27.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.mft
Manifest number: 0200
Signing time: Sun 25 Jan 2026 12:12:16 +0000
Manifest this update: Sun 25 Jan 2026 12:07:16 +0000
Manifest next update: Wed 28 Jan 2026 23:43:16 +0000
Files and hashes: 1: 3130332e3137382e38362e302f32342d3234203d3e20313439333230.roa (hash: 1bNdVmfT+djOhZ89RO79L01jzFp6ENRtflXpl+KJhHY=)
2: A62202F88CE61D6BD47195FB36103CDD061D7D27.crl (hash: c5q0sv+R7rQkPj5DQWlBts38EQHewxR+C/Rkt+MRvfg=)
3: 3130332e3137382e38372e302f32342d3234203d3e20313439333230.roa (hash: ocoZWOXebE29PM9wf4GH+eYs09gSTcPRxglrbyGrg6Y=)
4: 3130332e3137382e38362e302f32332d3233203d3e20313439333230.roa (hash: kHcDvJb/DgVTvuuABJZolA65opC22Ih0u8COwgg0FLM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.crl
rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A62202F88CE61D6BD47195FB36103CDD061D7D27.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:69:5d:1d:a7:8c:46:2e:29:4f:ec:10:b9:3b:25:c1:bc:9a:24:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A62202F88CE61D6BD47195FB36103CDD061D7D27
Validity
Not Before: Jan 25 12:07:16 2026 GMT
Not After : Jan 28 23:43:16 2026 GMT
Subject: CN=73CA77BEC50E3D7EE81FE654C750235B3C14B074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:55:9f:0f:a3:68:2c:65:d8:64:76:ef:fd:e5:
be:52:df:02:92:94:4c:e1:ec:aa:49:62:27:4b:d7:
20:b4:d1:8c:50:25:09:c8:b2:f9:d1:1d:a9:3c:e5:
09:3b:61:fc:c7:98:72:a7:57:d2:85:70:db:6a:42:
bb:a8:be:d6:a0:73:4d:73:16:89:bf:23:88:84:a5:
90:5b:d6:37:2a:bc:f2:46:ec:cb:ef:52:06:19:99:
88:c5:9b:b0:64:17:4e:fa:a3:a6:91:69:68:cb:07:
10:33:98:74:50:62:7a:98:c9:89:dc:79:97:ad:3e:
cf:90:0b:6c:26:94:83:f0:24:ee:97:5e:c0:6b:28:
06:a5:0c:2e:14:34:8e:bb:d7:82:22:e8:fb:fe:a1:
7f:dd:bf:1a:f6:a5:7b:19:79:1b:f5:74:3f:3c:a6:
9c:f0:5c:7e:0b:aa:d0:a4:64:fb:db:81:df:ad:01:
a5:f9:cc:e8:a7:67:39:cd:7c:ae:90:3e:b9:b3:80:
66:a9:aa:01:01:c3:b7:35:51:e5:fc:1d:8e:56:18:
d9:a0:ee:d1:6c:fe:7d:ec:cf:35:1b:c5:9d:66:fb:
f0:ca:9e:7a:a7:97:88:45:a0:1e:8f:7d:cb:79:9a:
75:f7:2a:fe:38:8d:da:1a:2a:c7:c1:d2:e4:bd:34:
53:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:CA:77:BE:C5:0E:3D:7E:E8:1F:E6:54:C7:50:23:5B:3C:14:B0:74
X509v3 Authority Key Identifier:
keyid:A6:22:02:F8:8C:E6:1D:6B:D4:71:95:FB:36:10:3C:DD:06:1D:7D:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A62202F88CE61D6BD47195FB36103CDD061D7D27.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e5:b1:ac:aa:11:9b:dc:34:5e:9e:ba:c7:79:cd:3e:86:ea:
36:4b:d5:60:95:e8:7d:93:ad:81:91:ab:04:9e:e2:e7:7e:89:
c3:63:0b:5b:d7:88:01:48:86:46:32:99:57:6d:6e:5f:c9:be:
f0:fd:9d:fc:c0:4d:1b:47:61:72:73:ba:d4:61:0c:77:8e:d3:
8d:4d:01:03:60:c5:28:84:56:eb:fe:5a:ca:69:6d:da:88:51:
a2:f7:af:ad:37:79:c3:7c:57:2c:53:b9:f0:98:e0:3c:58:3b:
b6:6f:60:c1:9e:86:37:6c:54:0b:64:20:69:e4:98:24:c1:a4:
b6:7a:c4:9e:e7:ea:39:d0:c0:90:10:7d:47:9e:ee:06:24:54:
84:18:7d:43:47:c5:0e:3c:90:3a:73:36:5d:77:58:30:80:d7:
5c:43:61:23:bf:5e:1e:55:9c:f9:4e:fa:34:a3:2f:49:5b:73:
0e:25:34:36:19:47:ab:22:66:b1:14:63:19:4f:23:d2:42:5b:
5e:c2:eb:60:9e:15:04:0e:be:9a:36:55:c1:f8:00:90:46:17:
16:77:36:82:f2:db:36:88:e9:e6:41:e3:41:31:36:80:e4:42:
39:ee:78:15:59:cb:ce:6c:f3:55:70:d3:73:1c:03:cb:ee:41:
ff:3d:92:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:36:59 2026 by rpki-client