This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.mft
File: 75F87E19F3D7CA128A64BB0695F7DD416C17CC96.mft (raw, json)
Hash identifier: aX5rPb3YW5K55AH4S2tiIaxmiwBMps8OB0N4ZTfQrUw=
Subject key identifier: CF:1E:AF:5E:4C:A7:75:B5:04:E0:03:F7:19:13:F1:BE:0E:31:9F:F3
Authority key identifier: 75:F8:7E:19:F3:D7:CA:12:8A:64:BB:06:95:F7:DD:41:6C:17:CC:96
Certificate issuer: /CN=75F87E19F3D7CA128A64BB0695F7DD416C17CC96
Certificate serial: 788BF3EA3839C62A6C29F6AB5E842E9E67E07706
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.mft
Manifest number: 01E4
Signing time: Sat 24 Jan 2026 17:52:10 +0000
Manifest this update: Sat 24 Jan 2026 17:47:10 +0000
Manifest next update: Wed 28 Jan 2026 04:28:10 +0000
Files and hashes: 1: 3130332e37392e35302e302f32332d3233203d3e20313337323839.roa (hash: kjJHpX400POBZ9FlMf7b79LcwWfnSnzD5KY03dFlaSQ=)
2: 3130332e37392e35312e302f32342d3234203d3e20313337323839.roa (hash: Pz+PV87koaQ3kPMJ5gPU/if4f0LOXPtq+HAAi9cx8ZY=)
3: 75F87E19F3D7CA128A64BB0695F7DD416C17CC96.crl (hash: 9ALzA/fxEql3xvZMuG3SfR4foj6VmXl7TM9DoFB4Fpo=)
4: 3130332e37392e35302e302f32342d3234203d3e20313337323839.roa (hash: 5sqgaEJx6XUtjCixcNOClY5Lhb81nBxRqHV7wJSD8SQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.crl
rsync://repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 04:28:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:8b:f3:ea:38:39:c6:2a:6c:29:f6:ab:5e:84:2e:9e:67:e0:77:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75F87E19F3D7CA128A64BB0695F7DD416C17CC96
Validity
Not Before: Jan 24 17:47:10 2026 GMT
Not After : Jan 28 04:28:10 2026 GMT
Subject: CN=CF1EAF5E4CA775B504E003F71913F1BE0E319FF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:14:bd:ac:13:eb:2d:e7:2f:de:d3:f8:23:4c:
44:9f:82:9d:7f:51:e1:18:2b:fc:ea:af:7d:61:6c:
56:41:6d:96:21:80:f1:83:30:ea:a3:68:87:20:dd:
a3:0b:96:3b:a7:6a:62:94:5e:ec:17:d1:9d:c7:58:
90:c3:13:8e:d0:21:72:1c:fb:1e:92:5c:ce:9b:70:
5d:04:be:e3:64:56:38:e2:af:e0:9b:a8:02:34:fd:
7f:15:95:df:50:9e:4b:b6:07:fc:38:23:33:e5:f3:
d2:57:aa:e1:dd:60:6b:89:c3:b7:bf:67:1e:b2:cc:
c9:8e:4d:60:e2:26:1c:9b:eb:ee:80:a8:63:6f:3f:
09:46:28:8c:d5:77:0b:26:42:03:85:b9:f1:b6:a2:
8a:33:74:ad:f4:58:78:2f:cb:ca:54:ee:ce:0c:b8:
77:85:a5:16:46:4d:e9:50:f7:e8:8d:0b:ad:dd:e1:
04:a0:a6:22:5b:e6:d8:85:0a:28:5b:a9:af:c3:56:
71:ae:1d:0d:f7:c6:c6:fa:60:64:e0:89:ae:b7:5d:
08:23:30:8f:14:25:af:9a:b3:14:e3:6f:af:73:6b:
70:f0:6d:02:78:8c:95:fd:bd:76:86:5e:55:30:70:
e2:f2:0a:66:2a:1b:6a:ae:a0:4d:80:a6:3c:2f:ea:
d2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1E:AF:5E:4C:A7:75:B5:04:E0:03:F7:19:13:F1:BE:0E:31:9F:F3
X509v3 Authority Key Identifier:
keyid:75:F8:7E:19:F3:D7:CA:12:8A:64:BB:06:95:F7:DD:41:6C:17:CC:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:e8:a1:3d:c0:40:11:1a:b8:bb:fb:1f:59:fe:f3:ab:d8:37:
16:d2:2a:ac:b0:58:2b:4d:76:f5:2d:49:4c:e9:a6:6c:2c:df:
72:71:e7:b7:b0:b8:e4:be:0d:c5:93:6e:18:5f:58:b5:44:ac:
ed:49:1e:dd:4c:90:bb:34:6f:43:51:8c:7c:3d:04:a2:7d:83:
a8:b4:a0:9e:73:a8:fd:d9:7d:76:db:43:8a:08:8d:ca:e9:17:
c1:2f:d8:16:71:ad:1c:3e:0f:9a:fe:9d:a5:6f:cd:c0:ab:04:
a6:f0:92:17:f3:fe:6a:d5:1f:c1:ee:10:ad:88:4e:0f:8c:a2:
57:30:5b:f9:22:3a:65:cd:04:60:66:72:92:d3:cb:6b:10:8b:
e8:22:16:83:46:02:5a:83:04:7f:9f:2c:9b:1b:23:09:3f:4d:
89:4a:e2:c9:21:17:4b:26:3b:85:59:02:a9:04:6f:7f:b5:6c:
15:8e:7b:5f:11:53:95:89:cf:b9:cc:2f:a2:53:b0:49:b1:23:
46:55:c9:5f:b9:43:7c:57:4c:80:b0:e3:e6:1d:75:02:80:2b:
06:30:65:f3:66:03:da:df:a5:a1:39:65:dc:70:fa:fe:31:85:
bc:89:6c:7d:c0:50:d2:58:69:a0:9f:97:8a:de:3f:b2:4e:2c:
53:95:26:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:44:36 2026 by rpki-client