This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.mft
File: F9CF581400AB7EE53AB913B25561ED007481F16F.mft (raw, json)
Hash identifier: G087AgOF4rog5r2wZbXPdbzEiGTWhwswg8t9Nd6C3cw=
Subject key identifier: 84:DB:29:A6:5D:44:23:A9:6C:2E:EA:D9:4E:DD:D8:32:64:34:FD:8D
Authority key identifier: F9:CF:58:14:00:AB:7E:E5:3A:B9:13:B2:55:61:ED:00:74:81:F1:6F
Certificate issuer: /CN=F9CF581400AB7EE53AB913B25561ED007481F16F
Certificate serial: 178BC2DEFEF84993554B0C4AF7700866100AAC12
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9CF581400AB7EE53AB913B25561ED007481F16F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.mft
Manifest number: 01FA
Signing time: Thu 04 Dec 2025 18:51:39 +0000
Manifest this update: Thu 04 Dec 2025 18:46:39 +0000
Manifest next update: Mon 08 Dec 2025 05:25:39 +0000
Files and hashes: 1: 3130332e31382e3131342e302f32332d3234203d3e203435323837.roa (hash: cToTFt90KwlvxZE7MCLFACc5g9QO0So5rb9HSJhKMTM=)
2: F9CF581400AB7EE53AB913B25561ED007481F16F.crl (hash: ZVl5zJUsk74BcfSAbZxkVGod39uKxthc2DkJDZ74HWw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.crl
rsync://repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9CF581400AB7EE53AB913B25561ED007481F16F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 05:25:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:8b:c2:de:fe:f8:49:93:55:4b:0c:4a:f7:70:08:66:10:0a:ac:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9CF581400AB7EE53AB913B25561ED007481F16F
Validity
Not Before: Dec 4 18:46:39 2025 GMT
Not After : Dec 8 05:25:39 2025 GMT
Subject: CN=84DB29A65D4423A96C2EEAD94EDDD8326434FD8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c9:f9:91:97:b2:d8:43:95:92:7e:81:f2:b8:
d1:a7:de:a5:5d:fa:e8:0d:c5:5a:29:1f:12:3d:3c:
a0:f6:29:0e:94:21:90:7c:ba:fe:4b:49:f0:a4:47:
41:a3:3c:77:68:0e:83:3f:8f:46:ea:f8:41:cb:56:
3a:07:ba:ed:0e:0e:bb:92:d9:f8:68:9d:4f:f1:18:
d7:9e:75:99:e1:bf:e7:db:2e:08:56:4c:2c:b3:d3:
ab:d5:4f:c3:69:b7:49:e3:08:03:c5:3e:81:dc:35:
74:53:3c:94:68:71:40:09:13:14:ea:8c:50:2f:47:
9d:77:59:8c:b3:3c:8e:b0:bf:68:d7:e3:11:98:13:
95:5d:38:0a:ff:be:06:ce:85:a7:28:23:a8:4c:4b:
52:28:e6:76:3c:c7:06:79:1b:42:56:89:00:fa:81:
b7:89:12:e6:7a:60:65:42:8c:0b:d0:e3:5a:75:e4:
03:cc:17:99:0e:79:dd:54:60:98:55:7e:fa:aa:66:
42:b7:d5:ee:6c:58:12:04:fe:d4:8e:2f:44:91:85:
29:1c:9d:92:dd:db:93:e8:de:d7:f0:a3:5a:9a:4a:
d2:e8:3f:f5:17:b1:ab:90:ca:07:26:29:8a:e3:2c:
da:30:38:17:1c:b6:9e:1e:73:57:19:38:5b:93:7f:
fb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:DB:29:A6:5D:44:23:A9:6C:2E:EA:D9:4E:DD:D8:32:64:34:FD:8D
X509v3 Authority Key Identifier:
keyid:F9:CF:58:14:00:AB:7E:E5:3A:B9:13:B2:55:61:ED:00:74:81:F1:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9CF581400AB7EE53AB913B25561ED007481F16F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:9e:69:78:7a:36:30:ff:68:ed:6e:6d:c8:33:63:6b:ca:ad:
47:15:88:76:7b:e1:13:e7:6b:5d:44:f1:d1:47:14:74:bb:3a:
ec:49:41:00:e7:d9:41:73:60:27:67:fb:b5:04:6c:0d:05:85:
8d:bc:44:bd:40:e7:95:96:72:f5:be:1d:7e:7b:f5:20:55:e5:
4a:d3:5b:e9:cb:ad:3c:4a:29:c9:3d:dd:3d:d1:32:3f:38:c7:
f3:93:8f:4c:71:1d:1a:7a:ba:31:67:b2:04:8b:a2:89:01:16:
a8:fe:0f:27:91:7f:39:1c:84:81:71:ef:f5:81:4b:4e:39:99:
3e:91:44:39:2c:f8:1d:e2:51:a3:31:e4:10:db:5f:6d:e0:e4:
37:7d:b5:bc:68:21:b1:08:af:2e:6a:6a:f4:d7:69:52:ed:40:
ac:26:a8:05:a2:e1:64:3e:6c:bd:17:a1:43:fb:ac:b0:21:f8:
53:68:0f:d5:f7:e4:99:26:da:3a:1d:b1:60:ce:fa:84:29:d0:
9c:24:1a:49:aa:4f:61:a8:62:93:e2:11:d0:e1:aa:13:84:16:
a1:5d:cd:ad:4b:5c:89:1c:56:fa:25:94:7f:2d:40:5e:16:50:
36:b4:15:6f:ec:db:55:d0:f9:b5:cb:f4:de:02:6e:ad:7e:78:
16:6f:c5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:38:29 2025 by rpki-client