This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.mft
File: 99807F9B6904D604FC55188D6AFE03013E0CB07A.mft (raw, json)
Hash identifier: HDrz5ogg4B2NXNaDLDnE9wZp5yBPCoxoISs+SLb6pY0=
Subject key identifier: A0:1A:5F:D6:D0:54:DF:5F:F2:7C:5A:6B:2B:71:2A:F6:9A:E5:83:AA
Authority key identifier: 99:80:7F:9B:69:04:D6:04:FC:55:18:8D:6A:FE:03:01:3E:0C:B0:7A
Certificate issuer: /CN=99807F9B6904D604FC55188D6AFE03013E0CB07A
Certificate serial: 4589D93E7849865DA78F011E2EB3101E12EAC3DC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99807F9B6904D604FC55188D6AFE03013E0CB07A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.mft
Manifest number: 015A
Signing time: Sun 01 Feb 2026 16:51:14 +0000
Manifest this update: Sun 01 Feb 2026 16:46:14 +0000
Manifest next update: Wed 04 Feb 2026 20:58:14 +0000
Files and hashes: 1: 99807F9B6904D604FC55188D6AFE03013E0CB07A.crl (hash: u9h8CnPYPMm8KeLO8cf66agpmtNzyzUD835swadmvJ0=)
2: 3231302e37392e3134312e302f32342d3234203d3e20313532303438.roa (hash: CADdODhlwrtv7aHSOcyvhK/IDuhX6EVBNzN87XcC7go=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.crl
rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99807F9B6904D604FC55188D6AFE03013E0CB07A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 20:58:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:89:d9:3e:78:49:86:5d:a7:8f:01:1e:2e:b3:10:1e:12:ea:c3:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99807F9B6904D604FC55188D6AFE03013E0CB07A
Validity
Not Before: Feb 1 16:46:14 2026 GMT
Not After : Feb 4 20:58:14 2026 GMT
Subject: CN=A01A5FD6D054DF5FF27C5A6B2B712AF69AE583AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:02:41:d2:d9:4d:ca:92:d5:8e:32:43:d7:ed:
90:82:bf:5a:32:07:19:86:29:8c:cb:2b:dd:83:3f:
a3:5e:d1:14:f2:d9:89:65:e7:2f:ba:47:d4:d6:a6:
de:86:b9:25:de:e7:6d:82:73:5a:72:ce:c8:49:54:
3a:34:66:cf:ae:68:6d:a4:3e:47:3d:f2:28:93:94:
14:26:c1:6f:7f:8c:f5:3e:02:70:ce:42:8e:c6:19:
a9:7c:0a:60:6d:dc:15:1a:77:af:17:bb:dc:ac:96:
85:36:8f:ca:88:29:75:b0:94:ea:0c:23:46:a7:58:
b3:24:e2:e2:5c:44:e3:0a:ff:75:7a:0d:bf:df:98:
9c:27:11:06:59:a2:16:28:60:10:95:5e:29:80:2d:
e0:9f:96:7d:dd:7e:8f:54:97:c4:af:e6:9b:f3:de:
d8:9d:85:40:53:d1:db:8a:c9:1e:5e:9b:c1:9c:75:
16:e7:96:f2:80:5c:b8:d6:b5:aa:f9:cd:f0:51:de:
e8:c3:a3:4d:85:77:d7:e6:1a:bc:5f:cf:21:f2:6a:
cf:40:cd:f9:6d:02:95:61:c3:97:de:15:13:b3:c7:
9e:0f:cd:ed:f3:e5:ed:bf:c4:ad:d9:63:2a:c1:3c:
56:d7:13:8c:be:7d:7a:f6:f9:a4:58:42:9b:4a:74:
7f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:1A:5F:D6:D0:54:DF:5F:F2:7C:5A:6B:2B:71:2A:F6:9A:E5:83:AA
X509v3 Authority Key Identifier:
keyid:99:80:7F:9B:69:04:D6:04:FC:55:18:8D:6A:FE:03:01:3E:0C:B0:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99807F9B6904D604FC55188D6AFE03013E0CB07A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c5:e7:d1:81:ca:71:23:78:d7:01:4e:5a:fb:44:de:f2:bf:
25:4d:5c:87:38:01:28:2d:b9:ff:b1:1b:7c:5b:f1:4f:95:84:
45:cb:7d:70:2a:2f:40:22:2c:24:d8:a7:cc:a3:ed:5d:40:02:
31:30:1e:9d:28:51:f8:13:94:b4:01:fb:31:04:ad:94:fc:c7:
a0:a9:3b:51:75:3c:84:74:c8:e5:43:53:30:bc:e1:87:aa:6e:
91:1e:55:55:6e:4c:60:e1:15:cd:47:75:33:64:79:1d:04:6c:
4c:ae:14:39:a2:e1:5d:c7:aa:2e:1b:be:38:01:8e:3e:5e:13:
63:d2:53:62:07:05:57:27:d5:9b:43:ec:08:14:6a:4f:25:fd:
f3:c7:17:15:14:43:58:86:58:2d:0f:93:1e:46:cb:24:cf:29:
55:0b:74:3e:f6:07:42:64:9e:27:cb:64:ba:55:f2:9c:2c:73:
f3:9e:dd:11:c6:02:04:8a:ad:6a:aa:4a:ee:76:a3:0f:79:e0:
ce:6d:08:30:52:8a:62:b0:ec:7d:ac:48:1e:2b:48:f5:fd:74:
7a:a3:bd:06:d2:55:73:af:e9:47:16:0b:1a:35:89:a7:1a:81:
f9:39:84:55:e6:09:74:31:c1:49:6e:65:fd:2d:f7:f7:ac:8d:
c2:39:93:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:48:57 2026 by rpki-client