This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft
File: 9FB9D7ED833E1CA6E4053773AC164214889108CB.mft (raw, json)
Hash identifier: 2u6g0hDi93maLX8FQBS0Ib3Ol1UVdBRjcn7OtbXYwrc=
Subject key identifier: F9:40:09:24:E6:D7:29:0B:E3:83:DD:64:59:14:BF:2A:5B:EC:D3:99
Authority key identifier: 9F:B9:D7:ED:83:3E:1C:A6:E4:05:37:73:AC:16:42:14:88:91:08:CB
Certificate issuer: /CN=9FB9D7ED833E1CA6E4053773AC164214889108CB
Certificate serial: 6C737F1063700D509F959615B2D5990BE090ED27
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FB9D7ED833E1CA6E4053773AC164214889108CB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft
Manifest number: 02C8
Signing time: Sun 25 Jan 2026 12:10:42 +0000
Manifest this update: Sun 25 Jan 2026 12:05:42 +0000
Manifest next update: Wed 28 Jan 2026 22:58:42 +0000
Files and hashes: 1: 9FB9D7ED833E1CA6E4053773AC164214889108CB.crl (hash: r3UZhZoXKfW5N7LLw81Lj3dPZZHxK0IE4ypiYRTJ1D4=)
2: 3130332e3134382e3139342e302f32342d3234203d3e20313430303033.roa (hash: NWZFKnhcY/aoMWV+2zpR3+GU8xiBKXVASrcCEyuCBhE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.crl
rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FB9D7ED833E1CA6E4053773AC164214889108CB.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:73:7f:10:63:70:0d:50:9f:95:96:15:b2:d5:99:0b:e0:90:ed:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9FB9D7ED833E1CA6E4053773AC164214889108CB
Validity
Not Before: Jan 25 12:05:42 2026 GMT
Not After : Jan 28 22:58:42 2026 GMT
Subject: CN=F9400924E6D7290BE383DD645914BF2A5BECD399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:78:94:5e:31:56:44:d7:55:b1:3d:a3:54:78:
d7:ba:64:c3:aa:46:c1:83:a1:9b:32:a4:b4:34:2e:
b4:a0:b4:c1:91:cc:d8:96:91:a9:c2:3d:dd:eb:5c:
64:48:91:9a:48:a5:21:5e:28:ac:e6:fb:be:a6:86:
00:1c:09:74:6d:a7:9a:e8:3f:6b:d3:59:2f:24:5b:
e4:de:9c:15:0b:8f:44:9b:2a:0d:ec:bb:5b:87:e9:
b9:a4:f3:e6:1e:4f:96:8c:da:24:bd:83:5a:e1:78:
80:67:a1:88:7d:42:8d:8c:57:9f:b3:44:b4:8c:01:
ee:b0:a7:e0:39:ff:83:8b:98:14:55:f7:0d:9a:a5:
da:d9:14:98:99:ca:f6:77:6b:2d:90:57:f1:b4:cc:
d8:fd:95:a3:92:93:bd:e3:8e:56:28:c4:ba:63:c2:
a8:d9:47:0b:39:aa:23:c9:8b:87:23:35:f8:1d:82:
4e:9c:0e:04:17:71:02:d8:2f:c8:43:4c:42:4d:f4:
a4:c2:6d:ae:96:a0:39:0b:b2:41:4f:ec:10:23:31:
f5:c3:06:3c:a9:84:08:7c:86:a2:99:10:cc:f6:b6:
87:55:c2:1b:f0:05:be:e0:46:68:50:0a:3b:ef:3b:
b2:10:d7:fc:a6:da:ae:8e:24:c4:a8:16:e8:9f:6a:
5e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:40:09:24:E6:D7:29:0B:E3:83:DD:64:59:14:BF:2A:5B:EC:D3:99
X509v3 Authority Key Identifier:
keyid:9F:B9:D7:ED:83:3E:1C:A6:E4:05:37:73:AC:16:42:14:88:91:08:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FB9D7ED833E1CA6E4053773AC164214889108CB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:e2:65:13:96:5c:e5:11:e7:9e:c9:dc:2a:fa:00:41:cf:19:
bf:1c:cb:e6:64:28:18:fb:e7:da:b7:9c:39:2d:09:d2:98:9f:
c3:82:4d:2b:fb:1b:7d:e1:4e:f4:eb:0e:11:41:ef:99:04:7f:
e4:b6:1a:06:ba:20:c9:86:47:e0:4f:1f:ec:90:68:e3:50:7b:
7b:d2:4a:88:d3:a2:43:ea:66:66:c2:ac:c6:91:78:db:b3:e3:
d2:49:f8:e9:93:59:0a:27:3f:fa:aa:5b:3b:b9:bb:95:6f:d8:
f9:06:d2:79:b5:b3:f2:33:be:6b:22:08:4b:91:64:e7:8d:f5:
b8:f5:e5:33:61:87:ec:0f:66:8e:50:28:5c:ba:43:fa:35:27:
68:e8:49:ec:d6:47:5e:42:36:61:c1:7f:52:71:79:7a:64:02:
f5:39:b2:df:35:c8:f2:d9:9b:15:68:4d:87:a1:98:e8:d0:8d:
77:fd:29:b8:e0:a2:e5:0b:f4:00:b6:37:c9:82:0d:9d:cf:35:
f7:84:1f:90:fd:db:16:8d:85:21:06:7d:e5:5a:16:82:46:66:
46:5b:1e:72:4f:eb:7c:fd:20:98:80:f6:58:23:a4:5e:a1:cd:
32:44:d9:13:58:c3:d7:4e:d8:5e:13:87:ab:eb:90:9c:da:67:
27:e9:fa:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:37:11 2026 by rpki-client