This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft
File: 9F1E176A521C3CEFE1D787F898211547A2D65955.mft (raw, json)
Hash identifier: VwP46BG50DEKM1kNZmva9zagk5VT047Boh6Czz69ApQ=
Subject key identifier: A4:D6:DE:4C:45:68:6A:79:21:5E:40:9F:B2:59:6B:47:6E:E8:A7:7B
Authority key identifier: 9F:1E:17:6A:52:1C:3C:EF:E1:D7:87:F8:98:21:15:47:A2:D6:59:55
Certificate issuer: /CN=9F1E176A521C3CEFE1D787F898211547A2D65955
Certificate serial: 3A136A6076F1EB132CEE4D3A86AFD44FF52D4595
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft
Manifest number: 0160
Signing time: Wed 17 Dec 2025 02:11:32 +0000
Manifest this update: Wed 17 Dec 2025 02:06:32 +0000
Manifest next update: Sat 20 Dec 2025 08:26:32 +0000
Files and hashes: 1: 3130332e37382e3233322e302f32322d3232203d3e203634333032.roa (hash: 67RbGhY+6ZVaOK1MwCZS3qjFq9gsaQZlwx9Mn1hUNpU=)
2: 9F1E176A521C3CEFE1D787F898211547A2D65955.crl (hash: 1UmtYBUbi6hKcIDa8YkwsyK4dvJ2tV7UWo4A2gPDGuk=)
3: 3130332e37382e3233332e302f32342d3234203d3e203634333032.roa (hash: qyEXaTUVLtEVprYtVPGwVwuspaFKdLEJ/OENEecXpuE=)
4: 3130332e37382e3233322e302f32342d3234203d3e203634333032.roa (hash: 17orHFCQWF/5DGMqqWKbU6pKgsvlNi/agPyICUt65aw=)
5: 3130332e37382e3233352e302f32342d3234203d3e203634333032.roa (hash: 2H20WDiLKraA5nZo1WLQY+1jKj2wwmLh+BUhMHSZcKQ=)
6: 3130332e37382e3233342e302f32342d3234203d3e203634333032.roa (hash: s3bVTDEV08gnmOxg2zw3dDA0YDxRgug+TOFOTtwInUc=)
7: 323030313a6466363a356130303a3a2f34382d3438203d3e203634333032.roa (hash: 6uu5L9LCXycUnW0VXTaRuOdsIdBD80z20frDdHYbxHE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.crl
rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Dec 2025 08:26:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:13:6a:60:76:f1:eb:13:2c:ee:4d:3a:86:af:d4:4f:f5:2d:45:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F1E176A521C3CEFE1D787F898211547A2D65955
Validity
Not Before: Dec 17 02:06:32 2025 GMT
Not After : Dec 20 08:26:32 2025 GMT
Subject: CN=A4D6DE4C45686A79215E409FB2596B476EE8A77B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:da:70:be:59:7b:7d:73:61:e0:f4:e3:4d:2c:
a8:6a:6f:dd:61:67:c2:f4:c3:88:26:bd:cd:76:7d:
87:b4:92:7f:af:f8:4e:e6:e4:59:78:d2:66:0c:9a:
9b:91:7b:d7:ac:75:6b:1b:61:84:bb:72:87:5f:80:
22:a5:9a:df:e9:60:ad:fa:8c:85:7a:85:07:c5:2a:
61:05:27:22:59:8e:c8:c4:65:29:4c:dd:67:f4:d0:
79:05:6d:e7:e8:81:81:71:21:f5:e6:22:25:b0:0a:
ec:0e:24:86:0c:52:bb:31:6f:08:4f:08:96:f2:b5:
11:64:1a:66:af:ec:72:12:9e:58:64:54:7e:82:c4:
24:e8:1a:47:be:dd:3b:84:9a:0c:09:42:c0:bd:4f:
55:a4:12:9b:22:fa:84:3b:6d:4e:e2:e5:89:8c:d7:
f5:60:f5:2c:43:d8:ae:d5:f0:3c:59:d9:87:5d:ae:
36:04:76:2e:6d:be:26:e6:0b:98:98:1d:59:1a:0b:
ba:bc:27:a3:46:12:fa:ef:3f:24:69:3a:5b:96:9f:
2c:81:86:d0:8e:dc:31:eb:61:58:7c:bf:10:86:f0:
d4:95:81:a1:a6:f7:12:5a:65:99:f5:57:c8:2d:1e:
ec:45:4c:9e:4f:76:59:99:16:74:c8:b4:2a:37:f3:
fe:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D6:DE:4C:45:68:6A:79:21:5E:40:9F:B2:59:6B:47:6E:E8:A7:7B
X509v3 Authority Key Identifier:
keyid:9F:1E:17:6A:52:1C:3C:EF:E1:D7:87:F8:98:21:15:47:A2:D6:59:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e0:8a:1d:19:db:cb:7b:02:38:ae:2c:6b:83:f2:c5:d3:94:
83:6a:c6:b3:e5:ab:fa:9b:38:f3:3d:04:21:6a:9e:4b:94:bd:
d9:e8:bb:6d:75:ea:7b:66:80:34:5e:a6:cf:50:7b:59:71:fd:
60:19:3d:03:3e:09:07:b3:34:b4:01:74:84:05:f6:06:ab:60:
27:40:82:10:14:cd:98:ae:0a:29:1f:55:0c:c3:48:d6:4f:c3:
6c:d8:cc:2e:aa:0e:c4:8a:21:ba:cf:fc:82:e1:57:2a:c5:a3:
93:31:d4:bc:fb:0e:e5:50:d7:c4:55:47:99:d2:bf:66:d3:ec:
d5:0a:a7:20:4a:34:9b:fd:4b:7f:98:a5:6c:03:73:26:11:6a:
90:ed:47:ff:34:19:f5:1d:85:9d:dc:87:9e:e6:32:c0:9e:32:
3c:c6:49:36:02:2b:1e:50:54:ec:c5:b9:f3:66:44:62:4a:cf:
48:4a:9d:58:ba:eb:58:b0:b4:48:2e:4e:58:fe:d4:39:13:9e:
42:55:9d:67:72:57:83:b5:46:31:b3:86:94:f1:77:93:84:2b:
9d:da:55:c2:51:34:99:17:ef:11:d8:01:33:a8:e4:ae:d8:78:
31:7e:f2:7e:75:cd:84:7b:2d:6e:72:a5:cd:d2:ad:61:b6:04:
dc:e2:61:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 05:41:32 2025 by rpki-client