This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/A75550C54400A670523A712A4C8782FA740B4F07.mft
File: A75550C54400A670523A712A4C8782FA740B4F07.mft (raw, json)
Hash identifier: pPhw/WeuyQhyW+gdVj74epul+/6w6igySxfYBVsfC7Y=
Subject key identifier: 24:D8:A7:20:05:7A:32:A5:22:74:3D:3F:5F:CF:93:E5:D6:FE:DA:42
Authority key identifier: A7:55:50:C5:44:00:A6:70:52:3A:71:2A:4C:87:82:FA:74:0B:4F:07
Certificate issuer: /CN=A75550C54400A670523A712A4C8782FA740B4F07
Certificate serial: 2E5D9EADF4DFFACD645ABADFC5213C910A97AF7A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A75550C54400A670523A712A4C8782FA740B4F07.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/A75550C54400A670523A712A4C8782FA740B4F07.mft
Manifest number: 0542
Signing time: Sat 24 Jan 2026 20:12:38 +0000
Manifest this update: Sat 24 Jan 2026 20:07:38 +0000
Manifest next update: Tue 27 Jan 2026 21:42:38 +0000
Files and hashes: 1: A75550C54400A670523A712A4C8782FA740B4F07.crl (hash: wepGB/uBRREvneQ5UP/Lktb39zC3JeHFoRrzY17hX+Q=)
2: 323430363a656230303a3a2f33322d3438203d3e20313332363533.roa (hash: Gl8RPqW8PrXHdW+ycPmmKea6eNkUVcurFhY7MyX2sVk=)
3: 3130332e32352e3230382e302f32322d3234203d3e20313332363533.roa (hash: 7MRblACKzVlLmDvNl3fN+c0aidnB5bJjx48vVv4G66g=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/A75550C54400A670523A712A4C8782FA740B4F07.crl
rsync://repo-rpki.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/A75550C54400A670523A712A4C8782FA740B4F07.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A75550C54400A670523A712A4C8782FA740B4F07.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 21:42:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:5d:9e:ad:f4:df:fa:cd:64:5a:ba:df:c5:21:3c:91:0a:97:af:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A75550C54400A670523A712A4C8782FA740B4F07
Validity
Not Before: Jan 24 20:07:38 2026 GMT
Not After : Jan 27 21:42:38 2026 GMT
Subject: CN=24D8A720057A32A522743D3F5FCF93E5D6FEDA42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:df:fb:65:cb:b3:20:d5:30:17:5b:0c:7d:04:
1b:f2:ae:09:17:5f:70:66:77:64:13:d7:b2:19:cb:
e7:f7:c6:09:52:41:53:04:53:ac:81:3e:44:76:bd:
8f:03:28:ff:2a:15:0f:73:4b:a3:97:c3:65:ad:e1:
30:e7:33:fa:d9:bc:dc:46:4b:5d:51:29:fb:6b:8c:
3a:c2:8f:9e:e5:ab:90:6e:ec:38:8a:fc:7a:8f:ca:
b4:85:cb:1e:09:22:8f:75:84:05:91:2d:15:a1:39:
c5:4d:39:22:32:bd:1a:86:d2:76:1d:8f:48:c9:4c:
27:0b:4f:51:df:51:b0:bd:b2:d9:d1:30:de:17:b2:
5a:07:bb:98:72:4c:f5:bc:5d:0e:97:e8:16:88:30:
76:cf:ff:ea:c2:27:5a:9a:9e:b7:6e:df:c3:a9:52:
e6:3d:50:09:0d:7f:78:a1:68:86:9a:0d:43:04:e3:
02:ff:5c:7d:90:f3:b8:f9:a3:48:65:60:27:b3:cc:
be:b8:a7:56:40:b4:3e:88:84:e1:c7:92:33:4e:2b:
58:a8:52:39:68:5f:7f:7a:9d:be:af:79:a2:19:37:
f4:0a:1e:11:39:88:e9:0a:92:c2:a8:96:ed:3d:2d:
7b:2c:0d:98:71:99:6d:e1:8b:05:81:5f:83:ea:ee:
25:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D8:A7:20:05:7A:32:A5:22:74:3D:3F:5F:CF:93:E5:D6:FE:DA:42
X509v3 Authority Key Identifier:
keyid:A7:55:50:C5:44:00:A6:70:52:3A:71:2A:4C:87:82:FA:74:0B:4F:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/A75550C54400A670523A712A4C8782FA740B4F07.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A75550C54400A670523A712A4C8782FA740B4F07.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/A75550C54400A670523A712A4C8782FA740B4F07.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:c3:bd:81:b6:99:ac:02:75:ce:17:f3:f3:22:21:42:37:61:
30:00:03:d5:08:04:d2:15:43:6c:7f:84:73:05:9c:90:65:94:
ae:79:23:04:89:04:40:d9:9b:36:9a:bd:1f:24:c1:61:59:6c:
e9:f7:8e:5d:4f:36:66:27:2d:12:4d:bc:0d:86:f7:2f:61:90:
cf:ad:c6:44:d2:2b:f5:b6:d8:7c:d5:a0:27:23:5a:47:0f:0c:
c1:23:78:b8:1c:13:76:18:01:94:bf:37:08:57:02:dc:cd:02:
65:54:47:c7:b3:31:06:80:41:e5:ae:e2:b1:98:42:ad:83:02:
e4:f0:62:84:18:a0:14:05:d2:0a:65:76:07:3e:f8:3a:4f:7c:
02:81:8c:a6:2f:60:d6:10:6e:24:17:14:b3:e4:af:83:34:0a:
09:bd:2b:47:a2:b4:7e:c7:fd:6a:ee:de:d0:9c:5c:c8:ff:ed:
d5:e4:9b:37:28:5b:99:d4:3a:0b:af:73:c1:71:99:fb:17:d4:
d0:22:e8:df:a3:01:63:a4:e9:d5:ac:43:85:ff:60:e2:e7:54:
73:4c:80:20:f7:b5:f9:19:9c:55:2e:7c:a0:57:0b:78:94:40:
f5:2f:27:70:0c:9a:df:85:a3:f7:43:17:e2:1a:6b:7e:b6:5a:
ee:1a:52:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:59:30 2026 by rpki-client