This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft
File: 094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft (raw, json)
Hash identifier: GHQ/o4A16mYpDjyAHRrjfcrm4LcNAXnhXHfkjXMsBR4=
Subject key identifier: 41:99:43:54:49:11:86:3C:5B:8C:E9:09:30:AA:A2:23:D2:D8:9B:D8
Authority key identifier: 09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C
Certificate issuer: /CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C
Certificate serial: 3AA6BCD95CC1FA26401333463CB623829FEDD4B1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft
Manifest number: 01FB
Signing time: Fri 23 Jan 2026 19:51:33 +0000
Manifest this update: Fri 23 Jan 2026 19:46:33 +0000
Manifest next update: Tue 27 Jan 2026 03:44:33 +0000
Files and hashes: 1: 3130332e3131322e3134342e302f32332d3233203d3e20323135373237.roa (hash: 8zDZZBY6bA2jEqKH0/3A7Q4sZMdLlbxldDEJxB2ILt4=)
2: 3130332e3131322e3134352e302f32342d3234203d3e20313534343130.roa (hash: UHlPWjPTTA+QwgHjs3cvH+m1L+/DxhR1Bi9LnfxOolI=)
3: 3130332e3131322e3134352e302f32342d3234203d3e20323135373237.roa (hash: 47jeZDZVGJz340J8dcsKd8JOrcaXh6l0x1iSQEe4P38=)
4: 094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl (hash: /phhGNl6L3YsE8wAqHI18vqGyjhT+CZNZXGdXGU38Gw=)
5: 3130332e3131322e3134342e302f32342d3234203d3e20323135373237.roa (hash: gknzJmwMhuMcq+HlLpGDVUWG9agAsyWXJWE8G4S01cU=)
6: 3130332e3131322e3134342e302f32332d3233203d3e20313534343130.roa (hash: 15d3srR41IwQ/STvILY0HITwCXTTisRoDIWtT+eTod8=)
7: 3130332e3131322e3134342e302f32342d3234203d3e20313534343130.roa (hash: 2L8dIdFnu3el0R5ZJrBbgHyyhcGR7++TSiT4qb543Dw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl
rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 03:44:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:a6:bc:d9:5c:c1:fa:26:40:13:33:46:3c:b6:23:82:9f:ed:d4:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C
Validity
Not Before: Jan 23 19:46:33 2026 GMT
Not After : Jan 27 03:44:33 2026 GMT
Subject: CN=419943544911863C5B8CE90930AAA223D2D89BD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a0:46:93:4f:f7:20:a5:a0:a2:b5:23:5d:7f:
eb:fd:79:b8:2d:71:2f:27:76:1a:17:7f:14:8e:ee:
1b:67:f3:85:6e:36:6e:d6:33:55:1d:a8:b2:b4:93:
95:39:81:71:99:d5:53:85:f4:ff:ab:59:ae:23:db:
89:a3:f9:3e:d3:35:0d:f0:06:55:65:9d:57:33:16:
95:fe:f1:ef:d5:bb:b3:8f:fc:bb:2a:08:69:80:01:
e5:b5:9e:0d:2d:f5:20:8c:39:8d:a9:52:a0:90:20:
91:a2:09:5b:b8:08:d8:96:bf:a0:82:83:ad:bd:9f:
32:3c:2a:96:a9:51:de:09:44:a6:c9:ec:f2:86:59:
b1:5e:b9:8b:da:42:15:52:85:26:6c:1f:57:be:a4:
08:f6:3e:f6:2a:33:8f:8f:4b:f4:c8:32:52:f7:38:
e1:25:16:80:ac:ee:7e:c6:b5:85:7f:cc:5f:f6:6c:
a2:3e:08:80:f2:59:6d:9c:6b:fe:19:78:6a:be:ae:
dd:c5:54:8f:13:3d:1d:99:49:33:b7:89:55:b8:fb:
b6:52:8a:df:13:ca:c1:75:89:02:64:72:db:5a:80:
b3:54:da:73:40:61:d4:14:d6:cd:ba:eb:c8:2f:90:
a4:ed:c6:fe:59:96:78:53:0c:7b:3d:6d:46:b4:b5:
ad:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:99:43:54:49:11:86:3C:5B:8C:E9:09:30:AA:A2:23:D2:D8:9B:D8
X509v3 Authority Key Identifier:
keyid:09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:6d:cf:79:eb:ea:3c:ee:4f:d9:7d:18:2a:23:23:37:aa:9d:
61:2f:7d:26:95:93:5d:59:c2:79:32:6f:5b:ce:30:ea:f7:a6:
0b:bf:e5:ca:9d:57:67:d8:d5:38:1f:2d:cc:65:40:b3:d3:9f:
b2:8f:15:49:d7:e3:fa:0e:29:6f:d3:c9:2d:ee:43:94:21:6b:
f4:de:27:b4:df:4f:24:2e:49:93:65:b4:00:91:fe:df:e5:23:
53:09:b8:12:66:57:31:d6:d6:e5:9f:9d:45:0b:49:77:9e:20:
24:ec:e1:f9:46:e2:04:1d:d9:22:f1:44:b2:3a:ee:06:cc:49:
ba:93:64:4e:f3:70:33:70:3f:33:c6:56:2a:c4:b6:bb:0c:c2:
24:bb:13:f5:9d:81:8a:41:c2:12:cf:22:24:d5:a9:11:8d:0f:
61:3f:af:77:c1:35:24:d1:5c:90:f1:3d:e5:2a:57:4f:2d:01:
04:f9:41:8e:21:ce:f9:e4:b6:f4:85:c7:c5:4e:4f:d3:83:3a:
e4:44:3c:80:7c:37:ba:97:71:00:f0:2b:55:19:55:71:3e:98:
5f:84:d0:ad:e3:c1:85:23:4b:4a:25:61:03:a8:57:9f:49:e8:
d7:e6:ab:af:60:de:0b:5b:8c:e2:64:a1:3b:ae:fd:61:54:99:
96:70:8f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:10:29 2026 by rpki-client