This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft
File: 9B0395E989465D693E38FF5140C2FABE1631B562.mft (raw, json)
Hash identifier: mTrD9Xk9DW6vjLIezmub6sLh1Q6G46PrimaTrr72ELw=
Subject key identifier: 38:D7:76:57:6D:DA:52:86:6D:56:3F:DA:C4:35:D2:57:8F:FF:66:0C
Authority key identifier: 9B:03:95:E9:89:46:5D:69:3E:38:FF:51:40:C2:FA:BE:16:31:B5:62
Certificate issuer: /CN=9B0395E989465D693E38FF5140C2FABE1631B562
Certificate serial: 43547A2D16DAA5A3A4E32C05ABFE60F3336B6AE3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B0395E989465D693E38FF5140C2FABE1631B562.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft
Manifest number: FD
Signing time: Sun 25 Jan 2026 06:20:05 +0000
Manifest this update: Sun 25 Jan 2026 06:15:05 +0000
Manifest next update: Wed 28 Jan 2026 08:56:05 +0000
Files and hashes: 1: 3130332e31382e3233322e302f32332d3234203d3e20313530323331.roa (hash: wUtK6lO7dD/y5QIQIRKJysOh0xNgmCTXdRc7wOm6Gq4=)
2: 9B0395E989465D693E38FF5140C2FABE1631B562.crl (hash: 7XNDVN5E/HpoiBcSch88oq07+jvnMsKW7x3eKxtjQmE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.crl
rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B0395E989465D693E38FF5140C2FABE1631B562.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 08:56:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:54:7a:2d:16:da:a5:a3:a4:e3:2c:05:ab:fe:60:f3:33:6b:6a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B0395E989465D693E38FF5140C2FABE1631B562
Validity
Not Before: Jan 25 06:15:05 2026 GMT
Not After : Jan 28 08:56:05 2026 GMT
Subject: CN=38D776576DDA52866D563FDAC435D2578FFF660C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6a:e8:15:52:32:a0:d1:f6:9b:35:ed:ab:e8:
d7:7f:ef:08:ea:4b:50:b8:b7:af:f4:24:0b:2d:23:
db:d5:65:03:b4:7a:6f:f2:d8:67:07:84:ee:e0:d0:
e6:16:1d:08:34:0a:d5:11:cd:5d:38:78:6c:9c:d5:
ab:a7:d7:2e:3e:f7:0c:ad:ec:2d:97:1d:8b:66:d1:
81:7f:1f:8d:ed:49:05:b5:54:f0:51:1c:26:22:f7:
08:56:e3:10:71:93:ed:2e:3e:3b:ff:46:c1:d4:5f:
db:f9:d0:38:42:a8:1e:36:e7:a1:b0:83:ae:64:7e:
c6:2d:1b:de:2a:1f:ed:3a:6d:8e:48:15:bc:7e:30:
3b:dd:3d:7b:eb:26:5b:61:2f:32:12:03:86:81:22:
6a:a1:87:78:51:75:34:6d:10:9a:ab:7d:b0:55:78:
f4:1e:80:69:0d:6d:27:20:d6:26:c6:ad:0c:7e:eb:
65:fd:81:e1:53:b4:86:4f:49:3e:5a:3a:25:06:d8:
81:09:b7:8e:4e:b2:b0:d1:59:e5:bd:1f:15:8b:4e:
8e:cb:59:b2:0b:8b:fd:f2:5a:77:5d:2f:49:e0:cc:
92:09:b9:c1:17:54:20:8b:1e:af:89:36:cb:ee:8a:
e8:73:4f:38:e1:80:40:0f:51:c6:11:fc:19:33:22:
4e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D7:76:57:6D:DA:52:86:6D:56:3F:DA:C4:35:D2:57:8F:FF:66:0C
X509v3 Authority Key Identifier:
keyid:9B:03:95:E9:89:46:5D:69:3E:38:FF:51:40:C2:FA:BE:16:31:B5:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B0395E989465D693E38FF5140C2FABE1631B562.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d0:c3:12:ef:6c:54:95:4d:01:26:07:52:ac:d5:fd:3e:6c:
e6:32:c5:5a:7d:5b:a3:6b:2d:ab:b1:19:fb:c7:b1:f9:63:85:
2b:8f:15:ab:ee:d8:c0:f1:2a:32:85:d7:a3:2a:dc:bc:ee:bb:
12:05:ca:63:23:13:5c:e7:81:d3:7a:df:c8:c9:49:fa:d7:29:
16:b6:82:b9:60:ec:8d:f0:60:e5:c6:ee:a6:5f:0a:dc:c3:a4:
90:a3:c0:88:b7:27:90:78:07:bb:f7:2a:2d:97:80:45:49:31:
66:83:86:d5:91:ab:73:14:8b:50:1f:2f:6d:8b:2c:18:38:6f:
78:68:d8:5b:ed:37:df:48:d2:9b:d6:56:36:a2:54:f2:cf:cd:
1e:5e:9c:65:86:0f:59:70:32:f2:1f:0d:5e:82:e8:01:7b:c2:
30:dc:b5:45:9f:a3:79:fb:4d:15:93:14:c0:7a:e3:c1:7b:a1:
3d:2f:32:ba:e6:4b:5f:81:36:00:b5:2a:b8:2f:64:2e:a7:1c:
29:4e:a9:57:32:e6:ca:c7:66:4a:6a:12:20:fd:43:b3:50:8b:
1b:50:e6:de:24:f7:3a:5d:99:bc:d2:3c:48:66:fd:03:b1:ec:
af:d1:bf:08:c6:0f:73:9a:88:f7:1f:6b:ec:8b:0d:2b:e3:91:
fc:bc:b3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:47:04 2026 by rpki-client