This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.mft
File: 961C97EF8E7664408011D05E6A81CF905A1336B1.mft (raw, json)
Hash identifier: KqBfnW1/NQlocziB5ItxVgfgozLgv/W7NnIEY/sBqPk=
Subject key identifier: AA:F8:98:BA:A2:2F:93:95:00:CC:B0:53:C2:62:76:76:E7:3A:85:34
Authority key identifier: 96:1C:97:EF:8E:76:64:40:80:11:D0:5E:6A:81:CF:90:5A:13:36:B1
Certificate issuer: /CN=961C97EF8E7664408011D05E6A81CF905A1336B1
Certificate serial: 41F0379D18CC69CF174A902785F62AC681AD220E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/961C97EF8E7664408011D05E6A81CF905A1336B1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.mft
Manifest number: 01C9
Signing time: Sat 24 Jan 2026 03:21:38 +0000
Manifest this update: Sat 24 Jan 2026 03:16:38 +0000
Manifest next update: Tue 27 Jan 2026 10:07:38 +0000
Files and hashes: 1: 961C97EF8E7664408011D05E6A81CF905A1336B1.crl (hash: zYPVUj8pAEo/EvdytHLFZvL57p+tQoMP/cQm85zo9io=)
2: 3130332e3133302e38302e302f32332d3234203d3e20313339393737.roa (hash: QAv8L/SfO4pmTvlOrUOe85CRHhQ8zH/NkbLzEqjzAes=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.crl
rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/961C97EF8E7664408011D05E6A81CF905A1336B1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 10:07:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:f0:37:9d:18:cc:69:cf:17:4a:90:27:85:f6:2a:c6:81:ad:22:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961C97EF8E7664408011D05E6A81CF905A1336B1
Validity
Not Before: Jan 24 03:16:38 2026 GMT
Not After : Jan 27 10:07:38 2026 GMT
Subject: CN=AAF898BAA22F939500CCB053C2627676E73A8534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:79:07:3a:6b:5f:39:71:7b:c2:d2:4e:c3:dc:
f1:be:3b:5e:a3:5d:86:f3:36:ed:a3:9b:33:3b:73:
88:44:77:85:e0:e9:f8:03:51:ab:38:52:4d:0c:f2:
70:e9:da:d2:b5:30:72:0e:fc:d2:4b:4c:d9:5e:d6:
55:db:fd:33:2d:62:23:18:70:ef:cf:da:86:62:55:
91:2a:7f:ec:5b:7a:78:68:59:6b:5c:17:54:34:6f:
56:71:5a:bc:9d:0a:74:5a:5c:45:39:b9:84:64:22:
5f:8a:3f:cd:cb:c1:fa:8e:36:4c:9b:0e:83:8c:79:
a2:a9:92:b7:50:63:c8:aa:ec:d0:d3:99:69:5c:58:
94:3a:c1:db:01:5c:0d:1a:60:e2:a3:be:0b:cf:71:
e4:05:fc:5e:f1:61:09:76:73:c7:cd:f7:8d:85:ec:
d1:ba:ac:2a:b1:dc:13:a6:f0:10:2a:5a:86:97:a3:
b6:87:89:68:6b:63:2b:57:cd:a2:b5:41:57:81:80:
98:3a:31:8d:e8:94:c9:21:69:bc:77:19:b1:30:0b:
8d:95:a1:c6:29:1e:4f:db:ba:11:48:9d:5a:4e:46:
d9:e0:7e:25:b2:87:a8:ca:ea:cb:3c:48:1a:c0:3d:
03:ab:bd:cd:b0:7a:74:0b:26:e1:a1:65:b1:f5:4b:
6b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F8:98:BA:A2:2F:93:95:00:CC:B0:53:C2:62:76:76:E7:3A:85:34
X509v3 Authority Key Identifier:
keyid:96:1C:97:EF:8E:76:64:40:80:11:D0:5E:6A:81:CF:90:5A:13:36:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/961C97EF8E7664408011D05E6A81CF905A1336B1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:1e:d6:ac:47:50:eb:52:e5:b7:a7:83:2c:5a:cc:28:af:ac:
aa:10:ed:8c:d3:01:2e:64:db:a2:a3:3f:83:75:a5:08:ee:09:
52:2c:c7:a3:5d:0d:6c:24:15:cd:52:ad:4a:26:dd:6f:b5:d4:
be:16:5a:d9:a3:65:15:7a:31:cf:dd:f8:ca:f1:e2:da:71:f5:
2c:7f:7a:de:d2:dc:ef:5e:b6:82:d1:b4:b5:8e:b2:9e:d6:9c:
43:dd:9e:13:fa:1f:fb:c1:7c:fb:96:e2:48:ea:1a:46:38:33:
07:98:5f:4a:13:3f:fd:db:1d:94:0e:d6:5b:6a:3a:2c:e1:62:
0e:a0:b7:20:d7:b4:be:d2:fd:0b:7a:5b:b5:6d:88:39:4b:e5:
ff:b2:31:06:84:92:75:84:2d:09:01:29:b8:eb:88:eb:66:3b:
86:25:9f:bd:3b:27:07:52:ed:af:75:74:67:29:d1:f9:25:11:
15:34:91:55:01:4c:a3:92:90:83:d0:ab:12:c1:b6:fc:83:a3:
64:94:c8:73:ce:36:82:42:9e:d1:49:90:05:eb:d7:74:96:0e:
6a:21:8d:85:97:e4:56:c9:7d:c2:b3:bc:3c:9c:f2:3e:5d:35:
49:7d:24:9f:d7:51:d1:1e:82:9c:8b:f1:9d:bb:a4:cf:19:f6:
9b:c1:92:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:07:36 2026 by rpki-client