This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft
File: A9DD956A549689BA0A3E2FC62291352AAABD591B.mft (raw, json)
Hash identifier: ToC/pjwENnCYoCbm8BWEZFT4MeOkPVOX5ftBgGvMAcI=
Subject key identifier: 05:63:85:0C:0C:E6:96:89:34:81:85:AB:80:6C:A2:CA:0F:42:A5:ED
Authority key identifier: A9:DD:95:6A:54:96:89:BA:0A:3E:2F:C6:22:91:35:2A:AA:BD:59:1B
Certificate issuer: /CN=A9DD956A549689BA0A3E2FC62291352AAABD591B
Certificate serial: 032550CA0BBFF6BE73174245CB829EC745D8E652
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft
Manifest number: 017A
Signing time: Sat 24 Jan 2026 21:51:22 +0000
Manifest this update: Sat 24 Jan 2026 21:46:22 +0000
Manifest next update: Tue 27 Jan 2026 22:49:22 +0000
Files and hashes: 1: A9DD956A549689BA0A3E2FC62291352AAABD591B.crl (hash: lcVHY3EXseAtJU9RBzQUeEb3k7BKeodQiaOTKgLh3YY=)
2: 3130332e3137352e3234302e302f32332d3234203d3e203435333035.roa (hash: cPalj//L2DQWwry9XW3mJXHIMP/VWhMLdNmkuNDvOfc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.crl
rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 22:49:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:25:50:ca:0b:bf:f6:be:73:17:42:45:cb:82:9e:c7:45:d8:e6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9DD956A549689BA0A3E2FC62291352AAABD591B
Validity
Not Before: Jan 24 21:46:22 2026 GMT
Not After : Jan 27 22:49:22 2026 GMT
Subject: CN=0563850C0CE69689348185AB806CA2CA0F42A5ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:40:4e:07:8e:d1:f1:89:96:c1:8c:5a:56:18:
ba:f9:f8:62:a0:2f:be:cf:31:5c:88:d2:06:35:e8:
0b:8e:ff:6c:82:29:bd:57:b0:b3:1d:c6:41:bf:0c:
e2:3b:a1:ea:41:57:31:2c:66:7c:23:c6:33:8e:d6:
3f:c1:16:74:7d:fc:16:05:af:43:59:c2:ce:28:c4:
f1:7b:3a:f6:f1:3d:c1:50:7f:18:f4:5a:b1:56:3a:
15:69:02:23:d7:d8:43:3e:66:18:6b:e8:71:2a:54:
cc:f4:05:e2:63:c3:f3:a2:39:15:e5:e2:15:87:88:
38:4d:31:fa:c7:5a:5a:a6:fd:ed:49:97:c0:47:21:
3d:17:97:f7:70:af:07:5d:a9:16:7c:79:56:4e:a8:
97:43:be:63:a3:94:a1:86:92:a0:4a:e0:d4:aa:da:
6a:ba:d7:8c:35:84:66:4c:7b:22:c9:48:85:5b:62:
c6:dd:bd:95:fd:7f:22:f1:72:fd:8e:87:d8:8c:5d:
6e:14:86:c9:67:0e:4b:1e:1b:35:6f:c4:49:b2:28:
90:0e:ca:1a:b2:36:a6:b7:00:f2:b9:0e:a9:89:09:
91:74:b9:d8:cf:53:43:4f:f3:e0:bc:77:b0:87:bb:
85:92:7d:75:fb:3d:4b:f4:5e:fa:70:3b:c3:4a:e0:
16:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:63:85:0C:0C:E6:96:89:34:81:85:AB:80:6C:A2:CA:0F:42:A5:ED
X509v3 Authority Key Identifier:
keyid:A9:DD:95:6A:54:96:89:BA:0A:3E:2F:C6:22:91:35:2A:AA:BD:59:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d4:fa:79:92:f6:31:5f:21:15:31:5a:e1:d7:ef:73:ff:0f:
a9:a8:ef:ac:c3:cd:e7:40:2d:12:17:6c:69:fd:14:56:16:eb:
66:84:31:c2:b0:3b:48:09:75:18:bd:07:bf:37:ac:72:02:5a:
ed:3d:ca:4d:3c:d3:1c:2f:32:45:91:9f:e2:59:07:f1:d1:35:
0c:35:f7:4d:f4:e0:fd:de:70:f1:d2:43:86:74:85:68:6b:d2:
46:e7:79:16:4f:38:44:5c:33:7a:77:fd:fd:6f:48:19:f6:02:
8a:45:ad:d5:07:37:62:c9:cb:f4:76:dc:87:da:3d:d3:f7:da:
85:42:2c:d2:97:ad:f4:f2:8d:8a:f6:00:26:a3:11:8e:7c:cb:
36:a2:95:ef:4a:62:d3:fb:54:4d:e7:75:8b:ce:d2:49:65:43:
68:2d:85:a9:0d:1f:1a:56:43:08:52:ef:83:28:81:49:06:20:
18:63:b8:cb:d3:aa:79:f2:63:cd:51:ff:84:94:e7:2d:81:c2:
f3:2b:e8:a5:3f:d5:64:27:0f:8f:ab:b3:44:2b:a0:83:31:f5:
48:04:37:81:35:e2:c8:d8:8f:6d:4e:ca:fe:23:31:34:22:08:
b0:21:76:5f:ef:a3:04:20:9d:f4:5c:d9:88:ae:5e:0d:fa:e1:
3d:16:18:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:48:09 2026 by rpki-client