This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft
File: A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft (raw, json)
Hash identifier: OG5IWzk6W5167EQxagKApvojq83kQasw1mzDQ1gUZa4=
Subject key identifier: 61:37:24:3D:B9:75:25:FB:AF:D9:7A:09:AE:0B:1E:07:86:BC:8D:D7
Authority key identifier: A9:D4:6A:06:6D:BA:E3:77:6A:15:E9:AB:09:A6:CD:3C:82:16:61:5B
Certificate issuer: /CN=A9D46A066DBAE3776A15E9AB09A6CD3C8216615B
Certificate serial: 4BB4A6E86E18938E42939485431C23345244651B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft
Manifest number: 0166
Signing time: Sat 31 Jan 2026 16:10:44 +0000
Manifest this update: Sat 31 Jan 2026 16:05:44 +0000
Manifest next update: Wed 04 Feb 2026 02:24:44 +0000
Files and hashes: 1: A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.crl (hash: u4aj6+yHPA4S6uBxqz1ccbwFYxLrY0krfOCFcEDd4Do=)
2: 3131372e3130332e36392e302f32342d3234203d3e203536323334.roa (hash: udxfPqIRp1VlzrX5n0/fiRSZ+nKJ2BZfVc8P92kVhEw=)
3: 3131372e3130332e37302e302f32342d3234203d3e203536323334.roa (hash: FMlAAb4oa/1SAW0ki6G5gnzHtyuWiQvqxUUC0qgRwT4=)
4: 3130332e3234332e31312e302f32342d3234203d3e20313532303331.roa (hash: qqWSkoteDsFPSy94pyeYjAzSUP9Ynr2j2aE8DeLFfsU=)
5: 3130332e3234332e31302e302f32342d3234203d3e20313532303331.roa (hash: NnrAQKq/S9bS3O9ZlatHMfb5HFDnemqWID50FjT9Aug=)
6: 3131372e3130332e37312e302f32342d3234203d3e203536323334.roa (hash: 1kyzi1r50RrQw1lh7O746Ykgi+j0sINCWFqBw58oQ98=)
7: 3131372e3130332e36382e302f32342d3234203d3e203536323334.roa (hash: mKN81nr9n+EB+Ar0JuYmAgcYDj9oQSxKmUu5BZ5rbmU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.crl
rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 02:24:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:b4:a6:e8:6e:18:93:8e:42:93:94:85:43:1c:23:34:52:44:65:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9D46A066DBAE3776A15E9AB09A6CD3C8216615B
Validity
Not Before: Jan 31 16:05:44 2026 GMT
Not After : Feb 4 02:24:44 2026 GMT
Subject: CN=6137243DB97525FBAFD97A09AE0B1E0786BC8DD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:96:e8:d9:c7:86:df:44:a1:9e:d0:f5:79:77:
92:e9:4a:f8:3d:57:d0:5d:e0:b7:9b:ee:b4:24:46:
7d:a2:0c:5f:65:ca:df:87:df:ba:c1:c9:38:d6:db:
c3:0e:03:9c:fd:b0:20:d7:e2:39:74:26:39:bf:18:
dd:8f:67:96:39:73:fe:0e:96:12:be:93:4a:32:03:
0a:41:4c:8a:29:44:94:fb:0a:29:90:0f:8b:13:25:
01:ca:df:fd:af:c0:17:12:ee:96:91:ad:b6:ba:d9:
11:8f:2c:c9:ac:67:6a:d8:7b:fd:88:2a:a1:cd:95:
13:5c:45:16:a3:27:1c:71:40:2f:b1:9b:bd:6b:ce:
32:43:06:a8:ec:8c:30:12:bf:0a:18:c1:5f:3c:09:
e4:b1:3f:2c:ae:5a:aa:31:2b:16:73:33:9d:b0:1a:
2a:01:36:9e:ca:13:6f:e5:da:9e:5c:41:21:58:64:
04:4c:98:ac:d1:43:3c:42:40:2e:7c:6c:4c:5a:15:
fd:36:a7:cc:78:cd:08:c8:af:60:ab:d1:6b:1c:75:
f9:22:0c:79:97:5c:a3:f3:57:26:81:51:f9:df:4a:
52:96:e0:f4:88:ce:6f:8a:e9:b1:8b:b5:f0:96:f7:
84:d0:06:1e:d8:fb:57:cb:dc:41:0c:e6:ad:99:96:
49:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:37:24:3D:B9:75:25:FB:AF:D9:7A:09:AE:0B:1E:07:86:BC:8D:D7
X509v3 Authority Key Identifier:
keyid:A9:D4:6A:06:6D:BA:E3:77:6A:15:E9:AB:09:A6:CD:3C:82:16:61:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:25:b6:6a:71:6b:ed:e0:e6:a4:d2:c9:be:35:be:71:c9:13:
8a:3f:67:3d:b8:8a:37:5e:20:ff:16:e3:12:d9:1b:5d:fd:4c:
e2:1b:3b:ff:33:70:fb:0e:8d:7b:a0:01:f8:c5:4d:fc:78:f7:
d1:d1:47:7d:24:ed:b5:f0:27:cb:0d:9e:66:23:89:5e:f7:05:
45:df:18:8a:05:6f:81:66:ea:b9:82:4d:a2:a3:b5:7f:fb:d8:
ba:fe:8c:27:51:07:4b:39:01:e8:66:a9:8d:eb:a5:28:eb:ae:
67:86:47:5c:9d:be:83:63:e6:09:44:6b:7a:d4:ff:0e:dc:3d:
30:da:9d:01:4f:2f:1a:69:ca:fd:53:37:bd:e3:81:e3:3e:22:
4b:39:5b:1d:29:11:e2:47:a5:c3:0f:ff:8a:49:9e:cd:f5:70:
dc:35:76:bc:c8:cd:ab:f4:65:98:fc:17:a0:7b:0a:b5:89:a5:
a9:c3:be:59:e4:11:a0:38:c0:d8:3d:e0:05:20:92:78:05:ea:
7d:58:bc:91:6c:7f:d6:76:a5:c9:e0:1b:c6:24:ae:77:2e:4e:
26:c9:05:fe:bd:31:51:48:aa:54:7d:03:41:37:2a:85:e8:25:
be:f3:34:a7:66:ab:5d:3f:82:e1:02:e8:1b:3f:24:3d:18:11:
c7:36:e8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:42:14 2026 by rpki-client