This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft
File: 9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft (raw, json)
Hash identifier: W/APcMq7hYAQfhMlfJWwsBpPbwlhdA2Ixw9+ES7uzXc=
Subject key identifier: 70:72:28:9F:0A:17:D0:6B:B8:66:6C:B8:29:FB:DA:58:3A:78:2A:26
Authority key identifier: 9A:4F:69:E8:B4:60:63:63:8E:82:F1:FB:06:0A:B3:D7:25:FA:48:21
Certificate issuer: /CN=9A4F69E8B46063638E82F1FB060AB3D725FA4821
Certificate serial: 6CD4AE71097A0538E6DDE5A6202B6F1E6BDB7C77
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft
Manifest number: 0319
Signing time: Sun 01 Feb 2026 17:32:28 +0000
Manifest this update: Sun 01 Feb 2026 17:27:28 +0000
Manifest next update: Thu 05 Feb 2026 00:18:28 +0000
Files and hashes: 1: 3130332e3137352e34372e302f32342d3234203d3e20313437313039.roa (hash: 1P+PQQB102TZART/oZnwB0CXGgNgBobig9IZy6mAuUM=)
2: 3130332e3137352e34362e302f32342d3234203d3e20313437313039.roa (hash: XcReqzCko69+a8GUZBIxgx2X6G3V6UQGka2FfNCmX/c=)
3: 9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl (hash: qPNoAC/RQYWtdqBkmXx7JoycY0HYimJf0fwJMgFLwEg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl
rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 00:18:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:d4:ae:71:09:7a:05:38:e6:dd:e5:a6:20:2b:6f:1e:6b:db:7c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A4F69E8B46063638E82F1FB060AB3D725FA4821
Validity
Not Before: Feb 1 17:27:28 2026 GMT
Not After : Feb 5 00:18:28 2026 GMT
Subject: CN=7072289F0A17D06BB8666CB829FBDA583A782A26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1e:b9:87:86:ef:30:c7:5a:16:9c:de:95:1c:
fe:4f:73:89:24:bc:6e:35:cd:89:f3:8a:6a:86:b8:
a4:00:72:86:da:4e:27:52:63:48:be:74:3f:cb:54:
b0:cc:2a:95:fa:3e:34:3b:3c:ba:8d:e2:3c:b3:a6:
39:74:95:24:a4:74:dc:f9:aa:5c:72:6a:ed:cc:3b:
e1:91:3c:14:10:a2:df:b8:0e:6e:c3:af:1c:25:24:
63:04:ed:41:8c:c7:c0:69:06:be:a7:bf:71:6e:19:
f6:64:12:94:93:e4:1f:dd:9c:53:8d:47:e0:0f:61:
56:30:71:5c:e9:08:f5:e7:b1:cc:bf:42:8e:a8:b5:
80:30:d4:22:6a:69:33:63:d9:fc:b1:9d:27:72:6e:
c6:c9:dc:e7:a1:58:fb:b1:f9:1d:23:b5:ca:0b:e2:
a4:52:a4:35:f9:32:ad:8b:f1:49:33:a3:f8:59:68:
61:bf:08:1e:71:bf:ee:21:a7:06:26:53:fa:89:7e:
4b:28:28:5b:9f:8e:5a:e6:bb:3d:a7:76:a0:f8:a0:
2b:7a:ef:38:e0:35:7f:d8:f0:42:a8:73:60:c0:9a:
b9:eb:0f:36:ec:a9:0b:44:61:d3:24:2b:89:b5:6f:
b9:b9:ee:0b:91:cc:3a:4d:66:62:f5:d9:ed:67:4f:
1e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:72:28:9F:0A:17:D0:6B:B8:66:6C:B8:29:FB:DA:58:3A:78:2A:26
X509v3 Authority Key Identifier:
keyid:9A:4F:69:E8:B4:60:63:63:8E:82:F1:FB:06:0A:B3:D7:25:FA:48:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ee:15:dc:5a:d7:a6:77:72:25:0f:34:08:b8:48:53:56:d2:
31:43:24:d3:50:1c:f8:d0:00:32:39:0f:c7:09:a0:0a:c8:8b:
98:15:5f:18:93:74:e3:26:2e:c3:0d:ef:c6:5f:f1:f5:16:6d:
c9:22:39:60:1a:36:da:99:34:ba:46:d1:b8:ea:86:e2:fa:01:
df:b1:83:cc:e6:72:c2:be:af:49:57:53:10:55:0b:eb:f4:0d:
56:f4:c4:ed:72:61:07:ae:c9:6c:d1:b0:80:97:96:ae:63:cf:
06:93:2d:9d:fc:63:ef:a1:9a:3c:6a:b4:95:9a:aa:9a:f0:d3:
8f:2e:79:26:24:c0:ce:6d:f5:24:2e:0a:74:b8:99:5a:2f:1b:
6d:0e:b9:91:53:56:21:00:bb:69:a9:fb:d7:5b:96:e0:e4:a2:
b2:f7:a6:0e:8c:cc:60:74:ca:3e:fd:fb:94:e1:6f:b0:d1:5a:
cb:87:af:37:2b:dc:82:83:cd:55:88:42:2f:37:e3:0c:f0:a7:
a3:18:51:ed:17:66:98:6a:47:95:4f:1d:ee:2a:6e:bc:46:f3:
fe:16:b2:65:a8:f1:73:40:27:af:5d:6f:4d:f6:d3:1d:16:15:
db:e4:4f:07:0c:8a:93:d0:d9:73:f8:94:51:a7:56:d1:be:58:
60:c1:cb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:44:52 2026 by rpki-client