This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft
File: B9A55DD123C2F224C4E245856905F78F2F354D92.mft (raw, json)
Hash identifier: 2JaBKmySjiO7c/BUuBK1ZQ6XRORUNZC05vN9oVGF59s=
Subject key identifier: BA:81:DF:6A:0F:5D:FA:12:79:E0:E4:E5:35:94:D8:D5:5E:E1:2E:78
Authority key identifier: B9:A5:5D:D1:23:C2:F2:24:C4:E2:45:85:69:05:F7:8F:2F:35:4D:92
Certificate issuer: /CN=B9A55DD123C2F224C4E245856905F78F2F354D92
Certificate serial: 05B63F477499CC18BB4863881672D652BACDC5E2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft
Manifest number: 0118
Signing time: Mon 02 Feb 2026 09:51:03 +0000
Manifest this update: Mon 02 Feb 2026 09:46:03 +0000
Manifest next update: Thu 05 Feb 2026 15:04:03 +0000
Files and hashes: 1: B9A55DD123C2F224C4E245856905F78F2F354D92.crl (hash: Tp6L/L3R1EmPaOZVxE2bkEmjKUKHFj9yjRtgASxQ61A=)
2: 3135372e31302e39372e302f32342d3234203d3e203538383231.roa (hash: UPR5y8V0jVDX7lorT6sk4sYb0YCh+EKPNMakCdOkBwI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.crl
rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 04:03:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:b6:3f:47:74:99:cc:18:bb:48:63:88:16:72:d6:52:ba:cd:c5:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9A55DD123C2F224C4E245856905F78F2F354D92
Validity
Not Before: Feb 2 09:46:03 2026 GMT
Not After : Feb 5 15:04:03 2026 GMT
Subject: CN=BA81DF6A0F5DFA1279E0E4E53594D8D55EE12E78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3e:78:ec:2c:81:9e:88:4c:05:8d:82:df:c7:
65:ce:5a:40:cc:35:ae:a3:08:2a:d4:85:6e:66:1f:
f3:55:a9:b0:81:48:92:d7:25:91:95:cc:da:c1:86:
1f:02:06:1f:3e:05:0e:fb:8a:88:7f:d4:7f:38:ff:
8a:60:f9:c8:c0:3d:75:02:0b:09:c8:f2:a6:16:d8:
bb:68:b7:b6:95:b5:a8:74:e0:c8:65:2e:83:b8:88:
b1:01:ab:3f:13:ea:49:66:8c:18:d8:1b:82:1b:25:
63:d4:3c:cf:de:46:b6:27:31:d7:4e:8f:fe:e7:ca:
8e:4e:87:1f:bb:28:cb:56:fa:c7:79:86:95:cc:90:
49:32:01:63:88:7c:02:21:4b:8e:05:44:86:64:25:
0b:34:b7:c4:d5:ad:87:28:25:93:ba:dd:e8:5f:95:
ae:c2:a9:cf:0a:ce:a0:e8:55:08:d4:6d:4d:e8:09:
b8:5b:b6:f3:cd:e9:c9:66:38:1e:44:0a:86:88:73:
b8:20:f4:05:56:ad:fd:a3:30:e7:17:37:87:ca:d6:
aa:d5:06:1b:a2:57:ee:20:d3:55:a4:20:62:5f:6c:
4f:25:f8:d2:b9:5d:40:f6:50:04:67:5b:20:e8:93:
c3:c0:3e:4d:53:56:dc:68:9e:75:5b:4c:e5:7d:1f:
e1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:81:DF:6A:0F:5D:FA:12:79:E0:E4:E5:35:94:D8:D5:5E:E1:2E:78
X509v3 Authority Key Identifier:
keyid:B9:A5:5D:D1:23:C2:F2:24:C4:E2:45:85:69:05:F7:8F:2F:35:4D:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:41:34:26:38:d1:42:31:d5:22:7c:8b:90:83:89:7a:8c:70:
ee:16:dd:6e:8d:cd:56:b5:5e:9c:5e:5f:a7:09:ec:d2:c8:7b:
c3:4f:30:fe:57:47:38:93:c4:d1:07:5e:4e:7d:e3:71:45:35:
51:8f:3b:5f:44:07:26:07:96:66:66:11:74:af:11:9d:69:3b:
b6:ef:f6:97:de:b6:42:79:cf:df:c7:b0:4e:7f:09:8a:60:ca:
38:9d:18:9d:69:76:83:a3:0b:0a:4b:87:eb:66:70:e8:a5:3a:
35:85:bd:63:f2:fe:da:65:00:8f:b6:bb:04:8d:1b:de:34:ee:
bd:41:68:66:5e:f8:6b:1a:f7:04:2c:0c:29:47:04:a6:ee:31:
26:08:8f:37:9c:bd:47:a3:62:1b:99:c6:e0:75:93:31:09:5b:
5d:6f:c4:02:f4:45:58:0f:97:fd:97:60:0e:fe:77:88:0c:a5:
d7:33:a2:c9:3c:e2:7e:1b:e6:3c:06:cf:be:95:41:75:b8:82:
d6:52:84:91:74:31:fd:db:df:91:86:8e:d5:57:32:71:10:f8:
97:cb:85:07:47:de:70:ad:83:05:09:49:77:2a:65:36:e1:6b:
45:c7:4e:ec:53:07:0f:66:ae:e7:39:21:4f:e0:72:e3:10:f4:
88:2c:4f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 14:26:16 2026 by rpki-client