This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft
File: 78578588503A7F091F1D7CD7B16BDC9E55055889.mft (raw, json)
Hash identifier: Hp4WAcgsKB2vl7gm++OpRzN1oZ4qjswvE8SyMNXFpXE=
Subject key identifier: D3:29:76:05:CA:78:FB:0A:E4:42:E1:23:2B:6F:9F:1C:A7:20:CC:E5
Authority key identifier: 78:57:85:88:50:3A:7F:09:1F:1D:7C:D7:B1:6B:DC:9E:55:05:58:89
Certificate issuer: /CN=78578588503A7F091F1D7CD7B16BDC9E55055889
Certificate serial: 36AC2A84DD9B6A97A9825F9D7062C17C9818872F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/78578588503A7F091F1D7CD7B16BDC9E55055889.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft
Manifest number: 0164
Signing time: Sat 24 Jan 2026 06:21:39 +0000
Manifest this update: Sat 24 Jan 2026 06:16:39 +0000
Manifest next update: Tue 27 Jan 2026 13:50:39 +0000
Files and hashes: 1: 78578588503A7F091F1D7CD7B16BDC9E55055889.crl (hash: +aXwkndRATkyloiHUkq2UtgaLG/ex3CzdqTVFr9scV8=)
2: 3130332e3131352e3232382e302f32322d3234203d3e203138333531.roa (hash: nvXxgMVYVQTfNR+4bpW+Ps8HHDED8r4qVZcdX5Y3BiM=)
3: 323030313a6466353a333930303a3a2f34382d3438203d3e203138333531.roa (hash: EBR+p3PkcTAiMYCAgv6PbSayq0bFAGHJD99zgOmEdFk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.crl
rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/78578588503A7F091F1D7CD7B16BDC9E55055889.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 13:50:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:ac:2a:84:dd:9b:6a:97:a9:82:5f:9d:70:62:c1:7c:98:18:87:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78578588503A7F091F1D7CD7B16BDC9E55055889
Validity
Not Before: Jan 24 06:16:39 2026 GMT
Not After : Jan 27 13:50:39 2026 GMT
Subject: CN=D3297605CA78FB0AE442E1232B6F9F1CA720CCE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f7:41:f4:9c:71:9a:70:65:4c:51:02:d9:ca:
2d:2e:e9:6a:48:00:a7:c8:8a:60:bc:cf:8e:4c:7c:
2c:0c:06:d3:6e:81:26:a9:a5:86:97:fc:b8:51:7f:
86:52:fd:ca:40:fd:81:b9:c7:8c:da:9d:cc:8c:fd:
5e:35:1f:86:06:2e:d1:5f:a0:0d:38:71:cd:7b:76:
8c:62:e0:6e:d6:10:e8:6f:68:08:93:87:92:45:ea:
79:2b:41:f2:7b:3b:23:d8:bc:eb:5d:5c:f7:c6:b0:
e0:94:8e:54:28:5e:cd:c1:f7:7d:88:ac:59:ea:7e:
50:f2:b3:1b:e1:52:a4:24:01:63:8d:dd:aa:5f:ff:
65:e7:0e:1f:08:50:63:17:ba:52:f7:05:43:47:67:
d8:3e:50:19:66:14:ec:a5:6e:d4:40:4d:c5:f1:a2:
98:a5:3e:39:47:19:e3:95:69:c9:66:27:45:e0:19:
4b:6f:97:45:69:61:dd:e8:d7:f5:5b:b1:17:e4:5f:
9a:bb:78:b3:54:d7:7e:83:d5:28:26:60:32:3a:52:
1b:de:24:81:b7:f1:ea:88:69:14:d5:12:31:4a:11:
e9:c1:a5:79:6c:73:98:46:43:28:ca:7c:60:5a:ff:
cd:e7:01:5c:72:45:fa:97:40:26:fb:4f:7d:af:17:
f4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:29:76:05:CA:78:FB:0A:E4:42:E1:23:2B:6F:9F:1C:A7:20:CC:E5
X509v3 Authority Key Identifier:
keyid:78:57:85:88:50:3A:7F:09:1F:1D:7C:D7:B1:6B:DC:9E:55:05:58:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/78578588503A7F091F1D7CD7B16BDC9E55055889.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ca:7b:b7:5e:fd:eb:e1:be:d2:bb:9f:c1:a9:bb:8b:ea:bf:
12:6b:cb:d8:0e:e4:5b:01:f7:9b:2f:3f:a5:3a:06:8a:40:49:
bd:95:2e:af:db:fa:3e:dc:b3:e6:bc:fe:88:68:a9:3c:02:fb:
64:5e:dd:67:48:70:c2:f3:d4:67:55:09:bc:81:c8:16:d4:6b:
a4:ea:b4:27:40:3d:87:9b:e7:70:b7:f1:41:86:db:c5:d4:03:
77:9f:78:8e:da:09:76:3e:ea:8f:95:50:98:82:7f:78:23:78:
ce:e9:ed:1c:8f:d4:4b:fb:be:bf:8f:0c:71:7b:29:54:f4:e1:
3f:40:0d:19:73:34:ec:f8:e2:6f:28:fb:d7:ef:7d:ee:db:cf:
0e:53:09:08:9e:ad:22:f0:d7:b5:28:ca:ee:6c:35:a6:9b:ab:
75:84:bc:03:aa:85:80:0e:b3:ee:ed:bb:f3:c1:18:64:13:96:
7d:b5:95:d0:a2:9a:a2:26:33:80:51:67:05:9f:17:e8:53:a2:
ef:6b:17:9e:af:70:f3:ee:2a:c6:40:e8:82:1e:a6:3d:a2:7b:
bb:22:1f:7b:5e:6a:7a:f4:e0:09:77:b0:8d:35:e5:e8:78:c8:
32:a7:8d:b0:b2:69:7a:20:a0:4f:7c:ba:53:45:3a:95:d3:a0:
8f:41:36:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:36:56 2026 by rpki-client