This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.mft
File: 09884E2A3DACA82285AA33105FFA136D63B6B89E.mft (raw, json)
Hash identifier: t5hTTuwJS+/YpI6upP+ILnKnEf9wkDF9jyVFeAvoV4A=
Subject key identifier: 91:20:FF:2D:34:87:34:BB:4D:2B:C3:49:6C:0F:AD:6A:E5:B7:05:B0
Authority key identifier: 09:88:4E:2A:3D:AC:A8:22:85:AA:33:10:5F:FA:13:6D:63:B6:B8:9E
Certificate issuer: /CN=09884E2A3DACA82285AA33105FFA136D63B6B89E
Certificate serial: 67E5909587EFC7C219EF405DA031BCF9453CE2FF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09884E2A3DACA82285AA33105FFA136D63B6B89E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.mft
Manifest number: 31
Signing time: Sun 25 Jan 2026 04:21:39 +0000
Manifest this update: Sun 25 Jan 2026 04:16:39 +0000
Manifest next update: Wed 28 Jan 2026 08:57:39 +0000
Files and hashes: 1: 09884E2A3DACA82285AA33105FFA136D63B6B89E.crl (hash: Ln1BQ9A3tLrDaqlVzEYWxGMXulYDOzCtC7KXHMWqPWo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.crl
rsync://repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09884E2A3DACA82285AA33105FFA136D63B6B89E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 08:57:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:e5:90:95:87:ef:c7:c2:19:ef:40:5d:a0:31:bc:f9:45:3c:e2:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09884E2A3DACA82285AA33105FFA136D63B6B89E
Validity
Not Before: Jan 25 04:16:39 2026 GMT
Not After : Jan 28 08:57:39 2026 GMT
Subject: CN=9120FF2D348734BB4D2BC3496C0FAD6AE5B705B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:82:b8:7f:b9:91:d3:fc:ad:88:fc:b2:d3:ff:
3a:f5:f9:61:fc:55:80:6f:af:27:2f:79:d4:66:d1:
a6:4e:ba:2d:76:17:53:65:ff:f1:7f:a1:12:9c:5f:
7d:62:6b:5f:53:9e:bc:75:5f:63:5d:70:07:37:fc:
11:75:74:c8:0c:6d:2e:03:a8:3c:2f:a8:a1:67:60:
02:f6:ac:06:cc:f0:cb:18:97:e9:e3:01:35:9a:bd:
73:da:ec:79:ba:8b:d5:05:53:47:c1:0b:bd:44:ee:
32:57:b3:c1:ab:54:e4:1a:69:8f:32:2b:1e:d5:bc:
bb:81:ba:53:50:f7:74:f1:b8:26:59:ee:41:c4:2a:
f6:eb:a2:08:b7:23:7b:de:83:9f:f6:cd:1a:10:9a:
4d:52:2d:90:ec:bc:9e:56:b1:bc:41:6f:3e:27:c2:
31:ab:0a:4a:fa:f6:cd:0b:62:81:16:0f:4c:c3:78:
e9:85:80:20:24:88:0d:f1:d7:99:67:43:a5:04:d4:
e6:90:87:ee:be:f7:c2:72:a5:db:9b:0c:5f:c9:c4:
80:db:db:4e:b3:f9:f6:9a:ef:19:14:0a:8d:a5:77:
a4:c1:b4:ae:47:10:fd:d7:db:5e:20:9a:c1:03:bf:
91:dd:6e:c2:13:49:32:31:5f:37:d7:6a:2a:99:c6:
2e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:20:FF:2D:34:87:34:BB:4D:2B:C3:49:6C:0F:AD:6A:E5:B7:05:B0
X509v3 Authority Key Identifier:
keyid:09:88:4E:2A:3D:AC:A8:22:85:AA:33:10:5F:FA:13:6D:63:B6:B8:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09884E2A3DACA82285AA33105FFA136D63B6B89E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:bc:91:eb:f3:77:e9:de:8e:47:30:2f:2a:0c:e5:1b:70:dc:
ca:77:a2:bb:3d:b3:5a:83:20:2c:5e:ed:50:c9:99:b1:98:8a:
ff:dd:b7:6e:3f:ef:31:4c:bd:6f:e4:75:e3:51:aa:4f:98:e2:
02:83:ae:a1:87:a0:e2:96:f6:b3:42:b6:0a:8e:17:4a:c0:89:
fc:f7:ae:4c:dc:c1:72:72:14:ae:7e:6a:6e:ee:8c:3d:95:90:
b0:63:fe:56:12:53:31:81:20:bb:dd:7b:66:48:87:38:de:12:
f4:0f:24:ff:06:2d:a9:25:f0:04:64:3c:14:ed:21:da:d7:b0:
3a:22:89:c0:ad:0c:22:5c:cb:84:b8:a8:45:62:ed:e2:2d:9d:
c7:01:91:16:ae:07:b9:6e:87:17:c6:28:15:81:df:4f:48:c0:
f8:57:d3:6e:dc:79:b0:9a:b6:51:93:0f:fe:7d:c9:c1:6f:29:
2a:19:3b:8d:ee:8e:c8:6e:07:cf:6b:eb:8b:b8:81:e4:38:65:
f9:f8:28:2d:24:2f:dd:21:11:3c:99:fa:24:23:2e:74:0e:d2:
8f:b7:5d:c8:8a:34:3c:bb:2f:83:8e:da:a4:b4:67:c9:81:45:
19:84:88:78:e5:83:58:d0:ca:59:19:ec:ec:fd:bf:1e:08:69:
75:7d:11:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:42:03 2026 by rpki-client