This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft
File: BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft (raw, json)
Hash identifier: +c7GAKF0EedgN+bH0NsMpG+GYMu6eS11ay37CSb9pBs=
Subject key identifier: 45:16:16:EA:58:F6:E8:0F:93:7E:E0:8A:17:4D:8B:09:13:3C:A9:F6
Authority key identifier: BB:9F:73:96:40:FA:A3:D9:05:27:D7:B5:7D:2D:1D:99:93:A4:2B:D1
Certificate issuer: /CN=BB9F739640FAA3D90527D7B57D2D1D9993A42BD1
Certificate serial: 798CD2704F91786D593E2998372FEE0EA33FB943
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft
Manifest number: 020B
Signing time: Sun 25 Jan 2026 15:50:55 +0000
Manifest this update: Sun 25 Jan 2026 15:45:55 +0000
Manifest next update: Thu 29 Jan 2026 00:19:55 +0000
Files and hashes: 1: BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl (hash: NRvzQR39DrUnhydxBZFl6eCvWexDZam9EsCcuSV2NiM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl
rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:8c:d2:70:4f:91:78:6d:59:3e:29:98:37:2f:ee:0e:a3:3f:b9:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BB9F739640FAA3D90527D7B57D2D1D9993A42BD1
Validity
Not Before: Jan 25 15:45:55 2026 GMT
Not After : Jan 29 00:19:55 2026 GMT
Subject: CN=451616EA58F6E80F937EE08A174D8B09133CA9F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:14:bc:53:ea:78:f1:64:99:ea:19:74:51:25:
3a:81:60:72:bb:19:35:97:31:bc:34:81:2f:19:ab:
5e:32:ab:25:dd:7e:38:03:5c:b9:dc:63:d5:30:f5:
15:89:4d:49:95:e6:be:3b:26:25:6c:04:6a:be:aa:
43:e1:80:24:02:82:d4:e8:dd:4e:d6:3d:2e:e7:04:
fa:5a:73:6c:8e:e4:cc:1b:92:ce:9b:da:8a:e6:1c:
94:36:c1:4f:93:2f:2e:37:b5:35:d1:6a:69:1b:0f:
c5:cf:58:a6:10:c2:23:e5:a0:17:2d:4a:be:c2:fa:
dc:09:92:5f:fd:ae:ec:55:65:56:77:35:23:f0:12:
61:cf:c6:ac:07:97:d9:5e:ec:4b:95:03:e4:d1:de:
5e:f3:3f:29:3a:ed:d7:24:5d:47:e9:65:13:49:4d:
71:e8:15:c4:aa:84:0c:2d:45:3d:29:af:52:14:43:
db:d3:df:e9:ed:80:a4:6b:af:f2:b1:7c:c6:74:fe:
7e:6f:f5:fb:61:1b:04:52:e1:1a:76:3e:fe:1a:18:
1e:c3:fc:78:0a:a8:be:1a:91:bc:bd:55:0c:56:dc:
9c:24:09:4c:16:31:16:22:c4:6b:15:1c:38:0d:86:
11:3d:13:31:fd:c5:d8:70:40:7d:ba:96:fd:d1:64:
b5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:16:16:EA:58:F6:E8:0F:93:7E:E0:8A:17:4D:8B:09:13:3C:A9:F6
X509v3 Authority Key Identifier:
keyid:BB:9F:73:96:40:FA:A3:D9:05:27:D7:B5:7D:2D:1D:99:93:A4:2B:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f3:4b:a7:ce:7e:cc:15:db:1a:1f:e4:2d:98:3f:5a:e5:63:
20:ad:32:eb:e1:e2:57:7e:4a:38:07:ef:46:e6:e1:9a:74:83:
41:b1:aa:78:66:a4:fb:84:b8:70:0f:a1:6c:e6:84:a7:59:2f:
0c:08:a2:a6:5a:ba:26:85:32:50:83:68:69:5f:8e:52:a4:fe:
38:12:8c:a8:02:be:4d:47:23:ca:19:b5:43:50:c8:b0:34:91:
3b:48:7f:5d:e3:74:b9:4c:0b:59:d7:d0:d9:02:0c:ff:b1:4e:
41:97:67:d8:c8:bc:40:55:8c:18:eb:d5:d5:48:db:6f:ac:ae:
86:fc:a0:ac:e2:4f:4b:00:b7:68:73:8a:70:2f:b6:ef:32:db:
00:2e:9a:28:2a:f1:b2:17:53:6a:60:6e:0c:7c:96:e0:42:92:
ef:2d:5f:a8:0f:9c:38:37:7e:91:07:2e:c8:dd:3f:26:b2:de:
6f:a4:40:63:58:f7:19:8a:a9:d7:9c:b8:30:aa:bb:5c:31:39:
32:ae:c7:09:16:28:90:83:e6:74:95:34:18:f2:1c:1a:ab:47:
8d:9d:20:50:65:89:f2:ff:35:dc:1c:cf:b1:3c:fd:b8:1a:13:
f7:53:80:cb:f9:f7:14:a2:9f:3c:f0:9f:ce:3b:c6:55:a6:90:
28:c1:14:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:36:29 2026 by rpki-client