This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft
File: A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft (raw, json)
Hash identifier: KdWgtqfA7k6ylytSN3dvvDF7gxv6jqkYGaZm5/X8bqE=
Subject key identifier: AB:B3:64:C7:3D:30:B5:68:F4:52:B0:FF:CB:8C:D1:E8:30:BE:88:17
Authority key identifier: A9:CC:42:A0:5B:0D:6C:A3:79:60:F7:C2:AB:E4:B4:64:DB:56:AC:AC
Certificate issuer: /CN=A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC
Certificate serial: 315D6712AA5D9999E6D4B9FDDC1156D7A6789815
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft
Manifest number: 01A9
Signing time: Mon 02 Feb 2026 04:10:54 +0000
Manifest this update: Mon 02 Feb 2026 04:05:54 +0000
Manifest next update: Thu 05 Feb 2026 12:03:54 +0000
Files and hashes: 1: 3130332e3137382e3132352e302f32342d3234203d3e20313432333839.roa (hash: ilMD0aviEA5kSo/dnNu6/R96mI+Z9NJcdnN/AEMlT/M=)
2: A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl (hash: KK2zULP63WxXh07Jisb5Xhrj1h2NgaImYNlUsCP5nIg=)
3: 3130332e3137322e3134342e302f32342d3234203d3e20313432333839.roa (hash: qBrcbMMaUPDoizuNAU1KWwXnEqXPWGKnlLdZXE+PUUw=)
4: 323030313a6466323a383163303a3a2f34382d3438203d3e20313432333839.roa (hash: DlmZqT9cRSAGh3ZKnjImJtnnzdBwP1WDpr4Ot8v2wkw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl
rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:5d:67:12:aa:5d:99:99:e6:d4:b9:fd:dc:11:56:d7:a6:78:98:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC
Validity
Not Before: Feb 2 04:05:54 2026 GMT
Not After : Feb 5 12:03:54 2026 GMT
Subject: CN=ABB364C73D30B568F452B0FFCB8CD1E830BE8817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4a:e3:91:9d:25:b3:e6:97:51:e5:6c:10:99:
96:f0:0f:37:bd:d2:84:fb:74:55:15:84:3f:ad:d4:
81:16:52:c5:45:55:ff:58:90:d8:f5:36:74:14:53:
df:1c:fa:55:6d:73:fc:82:bd:b7:3e:69:26:0f:b5:
35:b4:86:02:60:f4:9f:56:9b:77:2f:a1:b3:85:e2:
2e:f0:54:08:4d:e6:9a:53:50:16:e5:47:28:f2:35:
00:9b:dd:40:a0:75:3b:52:e0:b8:73:c2:5b:ae:ef:
8a:99:8d:de:8f:b9:d1:da:20:f1:48:61:ec:5f:a3:
60:40:71:70:73:d8:9b:97:80:9a:c7:3d:b7:d4:cf:
39:f2:48:2e:85:e1:50:6e:5d:4d:f7:4e:63:9e:af:
50:45:7f:dc:cb:41:3c:cb:c3:3f:15:cc:ac:36:5b:
93:af:87:a8:63:3b:e7:1e:ab:de:00:15:b6:eb:1e:
77:eb:32:d8:b3:36:e1:7c:a6:d1:bd:a2:1a:49:42:
68:59:62:75:c6:24:5f:50:cb:47:4f:27:57:63:40:
75:a9:b9:7e:87:3e:00:13:32:5f:4a:aa:fb:cf:79:
cb:bc:50:bc:5e:b0:9b:78:d4:58:72:5d:1c:aa:aa:
c5:f4:2a:f5:bb:c7:e4:bc:28:65:0a:43:b6:1f:21:
8f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B3:64:C7:3D:30:B5:68:F4:52:B0:FF:CB:8C:D1:E8:30:BE:88:17
X509v3 Authority Key Identifier:
keyid:A9:CC:42:A0:5B:0D:6C:A3:79:60:F7:C2:AB:E4:B4:64:DB:56:AC:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:50:53:16:3e:a5:33:9f:0a:5c:92:eb:25:4f:59:f7:66:f7:
bf:02:e7:f0:c2:03:35:c8:69:21:ca:61:ac:18:6f:1b:31:80:
7a:0c:11:72:b1:4a:8e:7a:12:56:90:8f:7e:29:cc:1c:07:a0:
e5:d9:62:ff:27:9a:7d:0d:0c:37:d8:ac:ae:a7:5c:88:87:93:
bd:45:ed:da:4d:20:ff:2d:c3:30:8a:ea:8a:b2:3c:60:d1:bc:
26:be:7f:bb:43:86:4f:97:30:a1:ee:be:6c:10:45:aa:23:50:
45:c5:6e:dc:19:e5:a5:ed:c1:d2:7c:a9:de:ba:32:90:8b:fd:
d8:1f:18:e3:eb:bd:e0:df:a1:5f:64:f2:aa:3e:a7:55:90:1d:
ad:ae:9c:49:99:e9:2f:4f:89:30:2a:e2:1f:e8:71:56:f0:8d:
64:5d:32:21:97:05:27:0d:8c:a0:e9:f4:07:7f:b0:68:b3:40:
b9:69:e3:31:2e:66:48:49:f7:4d:e8:e7:c2:44:03:c5:cc:1c:
88:91:07:09:db:31:92:b7:7f:22:6c:d0:8f:4d:86:c3:3b:09:
fb:90:28:f9:05:4f:d7:7f:00:0b:03:76:56:2c:e6:5a:24:d3:
f2:63:69:d6:fb:3a:15:74:20:8f:ba:c6:46:bc:dd:dd:16:51:
e5:b6:11:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:42:22 2026 by rpki-client