This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.mft
File: 9F93097BE8B711227435ABF870C332F631C8D769.mft (raw, json)
Hash identifier: QnmZiI/Mc67XCK/4FgQxXcfB0lUrM77Ph8tIZ2btpGU=
Subject key identifier: 7B:C9:BB:A0:44:99:0B:4C:65:57:24:0B:9C:F1:45:C8:22:CC:EA:5A
Authority key identifier: 9F:93:09:7B:E8:B7:11:22:74:35:AB:F8:70:C3:32:F6:31:C8:D7:69
Certificate issuer: /CN=9F93097BE8B711227435ABF870C332F631C8D769
Certificate serial: 4A2A9C1F5B42981B6EAA58276DC36A0468C746A3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F93097BE8B711227435ABF870C332F631C8D769.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.mft
Manifest number: F0
Signing time: Sat 24 Jan 2026 03:11:25 +0000
Manifest this update: Sat 24 Jan 2026 03:06:25 +0000
Manifest next update: Tue 27 Jan 2026 03:23:25 +0000
Files and hashes: 1: 3130332e3231352e36322e302f32342d3234203d3e20313531303130.roa (hash: 2K/xB758etINS0lFywkuf13/M0mChw9SVZu+VGyF0I8=)
2: 9F93097BE8B711227435ABF870C332F631C8D769.crl (hash: lgILcQBfrLhRbBf/6lo0ku1f5v2B/f9pbYQHl3KMclQ=)
3: 3130332e3231352e36332e302f32342d3234203d3e20313531303130.roa (hash: zK90jmviS5skAn/jDcVMI3Aok7WFlX9b62aRW8Ax9FY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.crl
rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F93097BE8B711227435ABF870C332F631C8D769.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 03:23:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:2a:9c:1f:5b:42:98:1b:6e:aa:58:27:6d:c3:6a:04:68:c7:46:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F93097BE8B711227435ABF870C332F631C8D769
Validity
Not Before: Jan 24 03:06:25 2026 GMT
Not After : Jan 27 03:23:25 2026 GMT
Subject: CN=7BC9BBA044990B4C6557240B9CF145C822CCEA5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:46:95:a4:45:17:17:c2:95:1b:9a:58:28:2b:
45:0f:c7:d0:ba:ea:1a:c2:a9:de:a8:d8:71:c2:05:
ed:8d:a4:22:f7:f2:62:49:b9:37:95:2d:e9:ac:31:
c6:1c:8e:db:85:8c:f7:07:7e:9d:cc:30:9a:d7:d8:
71:42:ab:10:b9:c5:11:b6:d6:13:37:a9:3d:94:c1:
13:71:5d:9c:0d:c4:b8:bd:aa:13:06:2f:ea:ab:4c:
5f:25:87:9d:c4:dd:a3:b2:7b:35:d4:5d:5a:3d:9b:
dd:bf:6f:99:ae:5c:e6:a3:13:2d:45:48:2e:10:46:
db:c8:4e:bd:4e:eb:8f:3c:19:9f:8a:50:3c:3a:e5:
cb:ad:26:6e:50:88:e4:f1:44:ee:d1:cc:56:7b:a4:
61:c3:28:a5:49:8b:3f:f5:e5:c7:01:66:5b:21:e6:
57:d4:14:b4:cf:2a:94:68:b8:b2:4c:dd:88:02:b3:
66:3b:f2:42:cd:b6:3e:cc:b7:8c:57:11:d4:80:43:
a3:81:1f:b4:ae:c6:2d:73:b5:a7:0f:ea:fa:07:a4:
0d:5b:05:ab:02:b2:4c:11:1f:81:29:7c:01:ca:00:
12:bc:61:e8:f2:56:93:38:5e:89:90:a7:49:ec:8f:
44:81:bb:c5:a4:ef:07:8c:67:ed:ae:1f:08:f4:19:
11:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C9:BB:A0:44:99:0B:4C:65:57:24:0B:9C:F1:45:C8:22:CC:EA:5A
X509v3 Authority Key Identifier:
keyid:9F:93:09:7B:E8:B7:11:22:74:35:AB:F8:70:C3:32:F6:31:C8:D7:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F93097BE8B711227435ABF870C332F631C8D769.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:79:ec:59:42:09:f7:c1:78:29:6b:09:dd:75:e6:fb:71:4b:
51:ff:ae:98:43:bd:f7:44:de:b8:97:2f:5f:92:4d:c1:da:e4:
75:d6:34:b9:74:f3:3f:0d:c6:bc:e9:97:ca:ce:2b:1a:9f:47:
fd:32:0d:79:e7:27:ba:1d:ef:39:44:96:16:0e:bf:61:97:08:
12:ea:91:48:7d:85:ee:d6:a9:31:d7:5c:01:25:16:54:6f:3f:
f4:77:b4:6f:27:22:a5:76:97:1e:5e:61:93:03:4c:63:85:44:
de:4b:d4:2f:86:fd:7d:6d:e0:f7:03:d4:91:43:8e:9f:33:7d:
ef:77:d0:ab:f0:d7:26:76:a7:a0:07:da:10:e8:b9:f7:59:5b:
23:d1:f5:ab:01:b0:f1:bf:fa:10:cc:5a:46:16:9a:89:91:65:
9d:9b:a4:06:6c:ad:e0:10:78:b0:05:a8:eb:e1:e5:98:09:54:
49:cf:cf:94:5e:05:d8:e4:b5:e9:3b:22:42:36:ae:a0:03:5d:
6b:ea:10:79:6f:05:e1:ae:98:fa:0a:7e:10:94:1a:30:44:2e:
4c:b8:ff:5f:ee:e2:90:52:1c:0f:d7:af:bd:dd:56:b7:34:d2:
86:61:2e:4f:ef:0b:f0:4c:f5:9a:f7:e7:ca:12:22:95:b4:fa:
3c:ef:32:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:32:09 2026 by rpki-client