This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft
File: 0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft (raw, json)
Hash identifier: 2xj0WoFjKzlV7lVTl5KkTHNAUP7zmbv7XSE2QPKH9Jc=
Subject key identifier: 49:BB:4E:92:18:CA:1A:AC:58:B4:44:52:A0:C2:1B:85:DC:B5:00:B3
Authority key identifier: 09:12:BC:2A:8D:2E:8B:F2:55:3D:71:06:FF:6E:62:22:8E:03:C1:E4
Certificate issuer: /CN=0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4
Certificate serial: 4D4BAB442F8DCF5B304E8AA5877B7BBE428C1C4F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft
Manifest number: 0545
Signing time: Sun 25 Jan 2026 13:11:20 +0000
Manifest this update: Sun 25 Jan 2026 13:06:20 +0000
Manifest next update: Thu 29 Jan 2026 00:04:20 +0000
Files and hashes: 1: 3130332e3133302e3138322e302f32332d3233203d3e20313338303833.roa (hash: /xZYFYyOB1e+pblVdjFbZfEDRpifvi0rioH8bq15tlY=)
2: 0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.crl (hash: Bx/hXN2iiBRFkrcdf6tg7jdDrxMv0H9C5Z8Q6hvCmlg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.crl
rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:4b:ab:44:2f:8d:cf:5b:30:4e:8a:a5:87:7b:7b:be:42:8c:1c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4
Validity
Not Before: Jan 25 13:06:20 2026 GMT
Not After : Jan 29 00:04:20 2026 GMT
Subject: CN=49BB4E9218CA1AAC58B44452A0C21B85DCB500B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:df:79:ee:0f:d2:fd:39:86:03:f3:ed:bf:a6:
c3:e5:2e:b9:75:5e:19:c1:cb:0f:ae:0a:04:93:ba:
87:05:ee:bb:3f:38:1c:dc:9d:73:69:30:f6:d9:7e:
5a:53:16:1b:29:1e:7e:1f:33:32:71:f7:79:47:43:
c3:ae:1e:0f:73:1d:a9:8e:ca:f8:5e:81:20:4b:c9:
39:72:77:0d:73:6e:86:f1:6e:93:39:f3:c5:5f:16:
87:49:6a:59:86:4b:a7:f1:95:11:a1:c2:d6:a1:bf:
8f:72:8b:0e:47:5a:f2:31:39:e5:bf:f0:13:98:16:
3e:5d:87:16:49:80:d1:5c:4d:13:38:15:20:54:b1:
f4:a5:8b:15:33:01:b8:75:c1:fe:d0:c8:49:ff:f7:
94:24:73:8a:96:6d:69:fc:73:73:1f:b0:48:e5:72:
51:59:04:2a:7f:71:e7:9a:4d:5b:b0:0d:ca:37:ff:
6f:e3:33:d0:ee:75:09:17:3d:3c:72:30:5f:19:03:
de:25:86:b6:b5:73:0d:af:26:30:31:40:12:9c:a3:
02:05:81:42:ec:18:1e:a4:43:16:50:5e:38:23:f1:
65:0d:61:cb:51:42:97:96:23:e8:fa:5c:cb:35:17:
fc:bc:2d:5a:42:66:cc:03:d1:7d:3d:7a:d8:bc:6e:
21:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BB:4E:92:18:CA:1A:AC:58:B4:44:52:A0:C2:1B:85:DC:B5:00:B3
X509v3 Authority Key Identifier:
keyid:09:12:BC:2A:8D:2E:8B:F2:55:3D:71:06:FF:6E:62:22:8E:03:C1:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:dd:76:f6:96:64:8b:8d:e1:d5:bd:4a:fe:78:5a:31:21:c4:
aa:4c:39:51:50:3c:e1:08:cd:da:3c:a3:51:54:e8:97:1b:6d:
af:05:eb:ec:59:23:ac:0b:c0:cf:99:8a:ff:84:93:98:0c:53:
90:3e:16:ce:f0:b4:6a:a6:f7:f2:01:c9:b9:5d:4d:df:21:9f:
0d:8a:d7:c6:be:c9:38:47:2c:58:4c:80:d1:67:8c:ce:84:ec:
13:92:4e:f2:0b:91:ed:4c:52:db:40:e6:10:5d:19:37:af:a7:
1e:bc:c0:cf:1f:1c:53:6e:54:f8:cc:f6:8c:5f:c0:e6:2c:ae:
c0:91:54:b7:07:3d:4e:14:22:76:71:0f:af:8a:78:c1:54:bd:
1a:90:2e:81:26:25:2a:4e:cf:f6:62:19:8f:00:41:64:3d:dc:
82:a2:2a:89:16:29:d6:22:f8:67:e2:3e:ce:36:22:9c:13:89:
43:d7:eb:a2:8f:50:23:b1:1b:35:99:4d:ea:9f:69:ba:f7:04:
e5:a1:c5:95:b8:f7:e4:93:c0:d7:8a:03:9f:e0:e6:9f:1b:92:
1d:f2:1f:4b:ee:c6:78:fe:21:8e:17:fb:2d:c4:7f:d0:d4:e9:
44:ef:3d:6b:7d:44:51:03:4f:6e:25:55:a0:cc:62:35:21:95:
11:b0:4a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:57:23 2026 by rpki-client