This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft
File: 9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft (raw, json)
Hash identifier: 9ltetjNqdHL/STMXZttanR+hDRcwWqb6DlFan/wLbq4=
Subject key identifier: 38:03:DD:70:DB:46:D3:70:61:4C:89:4E:D2:63:24:19:4C:4A:89:01
Authority key identifier: 94:79:B8:C5:D5:AE:8F:AB:DC:57:A9:AB:54:9A:DD:E2:0B:E8:A4:B3
Certificate issuer: /CN=9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3
Certificate serial: 15CA00350CB89A3D00009A911A2F1B92672C6E1F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft
Manifest number: 022D
Signing time: Sat 24 Jan 2026 07:02:10 +0000
Manifest this update: Sat 24 Jan 2026 06:57:10 +0000
Manifest next update: Tue 27 Jan 2026 10:46:10 +0000
Files and hashes: 1: 9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl (hash: 9X7xAvX310e/a3maTaWYoVoauDLm4k1bw6KA0TXXCA8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl
rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 10:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:ca:00:35:0c:b8:9a:3d:00:00:9a:91:1a:2f:1b:92:67:2c:6e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3
Validity
Not Before: Jan 24 06:57:10 2026 GMT
Not After : Jan 27 10:46:10 2026 GMT
Subject: CN=3803DD70DB46D370614C894ED26324194C4A8901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e5:f9:e9:65:24:2c:13:c2:50:f0:13:48:7d:
97:3f:40:bf:8d:85:d8:09:cd:a1:b0:e9:2f:9c:df:
62:39:f9:a5:ee:ac:68:77:76:d6:aa:20:6a:ea:6e:
ad:e9:8b:0e:4b:c6:02:b5:6d:78:74:8c:f6:d5:df:
e7:9a:24:e3:8a:6d:b2:32:10:8a:b1:53:db:ec:12:
13:54:47:c9:d2:7b:fa:94:fd:3d:a6:4d:74:d0:fd:
75:fe:fd:fa:67:8c:59:dc:cf:7b:d3:1e:6d:53:46:
13:01:3c:30:0b:b8:19:8b:71:ee:67:ef:4b:86:af:
59:63:33:cd:7e:5d:dc:d9:c8:55:5f:46:f1:00:db:
0e:0d:18:84:aa:9c:2a:9f:bd:8e:f5:20:64:0a:2e:
f2:1f:2c:19:5f:08:c0:7d:ca:64:51:dc:b7:15:5c:
75:85:3d:4c:a5:6c:0e:bd:47:49:f4:de:7d:d1:72:
70:ee:cc:a3:af:35:04:09:4d:6b:17:fe:da:e2:11:
14:c8:33:a8:7a:13:41:01:dd:18:64:99:4d:3a:2a:
42:6f:78:cf:0c:f3:ce:4b:49:51:1e:e4:8f:8a:93:
32:17:d8:20:f7:54:e1:74:72:1e:25:e3:f6:3f:16:
0b:3c:0d:c7:b1:2d:4f:d7:29:c1:fd:9a:43:3a:58:
4d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:03:DD:70:DB:46:D3:70:61:4C:89:4E:D2:63:24:19:4C:4A:89:01
X509v3 Authority Key Identifier:
keyid:94:79:B8:C5:D5:AE:8F:AB:DC:57:A9:AB:54:9A:DD:E2:0B:E8:A4:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:94:f6:18:76:0a:67:94:12:85:54:6f:54:61:a2:69:71:3b:
15:e6:11:6a:b2:64:44:1a:74:e4:a1:6e:df:e5:64:3d:b4:89:
ee:ca:0f:c8:72:6e:d4:b0:03:13:f4:8d:7e:2b:57:3b:e3:3e:
05:1f:96:59:66:4b:32:38:3d:5b:40:d1:bb:95:c0:13:94:57:
1f:c3:a1:13:d7:f3:d8:4d:6f:0c:93:ab:41:8c:a1:91:9c:89:
f1:3a:ec:6b:8d:d2:82:6f:92:84:54:aa:5e:82:60:5f:c8:93:
b2:38:d7:a2:0f:07:b4:f8:06:6e:cb:5e:1b:6e:a6:6c:8f:30:
11:74:3a:61:cb:0a:14:c7:fa:ec:0b:2c:2e:02:c4:68:28:e0:
fe:cb:66:77:1a:fd:3d:09:c9:97:d8:20:6b:6b:6c:d4:99:f8:
30:1d:10:49:4c:c8:2f:f3:d8:f9:8f:00:0d:e8:91:b8:c9:f1:
87:37:63:37:b7:fa:da:b3:64:c4:90:cb:c0:a9:86:10:22:da:
3b:01:17:a2:58:f3:92:ec:d1:a5:61:85:5c:38:42:52:cc:6a:
ea:de:0e:f6:1b:7e:3f:44:86:c6:1a:e5:de:96:01:57:a7:c1:
c0:d8:b5:5d:31:d1:6d:09:11:9a:b8:c0:cf:9c:f3:20:1d:9f:
40:59:24:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:36:54 2026 by rpki-client