This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.mft
File: 99A17325620A243689E32E6074D5CFCA91D915EB.mft (raw, json)
Hash identifier: YabrlrSSfep8q0T0NJCVC/x/TOKbRhBIcdA1URPgA7g=
Subject key identifier: 0B:AC:6E:53:59:A4:73:1A:56:5F:1D:7B:89:05:2A:B7:92:B6:B9:AB
Authority key identifier: 99:A1:73:25:62:0A:24:36:89:E3:2E:60:74:D5:CF:CA:91:D9:15:EB
Certificate issuer: /CN=99A17325620A243689E32E6074D5CFCA91D915EB
Certificate serial: 0C91A7E3B88B439D3EECE045E743DBD830E6EDA2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/99A17325620A243689E32E6074D5CFCA91D915EB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.mft
Manifest number: 012F
Signing time: Sun 01 Feb 2026 18:01:47 +0000
Manifest this update: Sun 01 Feb 2026 17:56:47 +0000
Manifest next update: Thu 05 Feb 2026 05:39:47 +0000
Files and hashes: 1: 99A17325620A243689E32E6074D5CFCA91D915EB.crl (hash: pGvt/6KhQDbC/gf2v1IUTkddSUdXwyZHgSQnj/cOiZw=)
2: 3135372e32302e3135362e302f32332d3234203d3e20313532343131.roa (hash: 4ExRW8SIxPfkw+kC/9gMRffVKwpQRwRaUKan/meBEX4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.crl
rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/99A17325620A243689E32E6074D5CFCA91D915EB.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 04:03:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:91:a7:e3:b8:8b:43:9d:3e:ec:e0:45:e7:43:db:d8:30:e6:ed:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99A17325620A243689E32E6074D5CFCA91D915EB
Validity
Not Before: Feb 1 17:56:47 2026 GMT
Not After : Feb 5 05:39:47 2026 GMT
Subject: CN=0BAC6E5359A4731A565F1D7B89052AB792B6B9AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:69:16:00:c5:05:d2:f2:99:22:47:25:95:ac:
6a:d0:62:15:96:be:cf:b5:32:2b:3a:f8:a7:f9:57:
a2:f6:57:a1:91:a1:77:b7:e7:93:84:0b:cd:55:8f:
1f:f9:dc:8a:91:5f:19:9e:b8:28:a5:3b:30:6b:3f:
a3:1b:3e:20:4c:da:d0:78:74:a1:00:53:b5:db:68:
93:66:68:b9:21:b8:b4:23:95:61:0e:b8:0b:0d:21:
67:9b:52:cf:a3:86:db:e2:49:0e:3a:af:7d:75:19:
5f:09:4a:3d:48:2d:a5:c4:a4:a1:1f:1c:37:56:36:
c9:e0:fa:60:ef:44:13:6f:ce:08:69:8b:4e:4f:c6:
88:1a:95:56:cf:57:41:9b:c8:b0:a9:1a:fa:4a:de:
bd:31:fa:b6:3b:98:fe:e6:28:59:e3:8c:25:2b:ba:
39:17:23:5c:2d:7d:11:a7:cb:20:c4:7c:92:ca:f2:
cd:a2:80:2d:8d:d6:8c:53:b4:67:4b:f0:e9:57:52:
34:15:fb:6b:25:81:e6:20:d0:5a:d8:d2:88:3a:35:
05:f0:03:92:a0:ae:8e:01:aa:01:2a:67:d5:71:e9:
a8:b4:f1:99:23:e6:8f:e1:ba:22:85:94:74:bf:f0:
d3:2a:b6:e1:9b:86:5f:33:cb:0b:b5:1f:6f:95:4d:
27:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AC:6E:53:59:A4:73:1A:56:5F:1D:7B:89:05:2A:B7:92:B6:B9:AB
X509v3 Authority Key Identifier:
keyid:99:A1:73:25:62:0A:24:36:89:E3:2E:60:74:D5:CF:CA:91:D9:15:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/99A17325620A243689E32E6074D5CFCA91D915EB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:02:5e:6e:cd:ad:f3:1a:0d:0a:47:97:73:15:f4:6b:16:eb:
f5:69:41:aa:cb:e5:36:63:27:de:64:6d:20:c7:92:2d:5a:d8:
d4:d0:3b:dd:b3:53:36:77:a4:7c:7b:7b:b8:a2:90:72:94:88:
2b:67:57:ac:54:b5:63:78:76:d9:b9:e7:0a:2f:e2:5f:de:d7:
22:7f:be:c7:2a:8f:90:f6:3b:7b:0c:28:b0:33:76:3e:35:b2:
f1:32:7d:0f:0f:d4:24:00:6a:99:e4:11:03:ce:43:f4:54:91:
bf:f8:ed:be:12:ab:44:aa:6b:c4:87:fd:3d:42:f4:d9:ec:cd:
cd:45:7b:b1:e5:98:5f:2a:a8:78:07:f7:22:83:ac:72:33:60:
b9:ba:9c:e9:71:3b:b3:a8:e2:a4:0d:78:19:54:ae:23:d9:41:
4b:65:0c:66:fa:52:ff:9c:be:2c:92:5e:f2:07:56:96:93:dd:
63:11:3b:04:22:0e:c9:9b:2f:dd:89:f7:2e:af:92:18:3f:0e:
e3:38:eb:49:b9:f0:22:cf:08:a8:9f:fa:63:e4:14:68:f4:ea:
5b:11:aa:30:59:a8:40:fd:b2:ba:08:4b:49:c6:cf:7c:bc:76:
f1:04:ff:16:70:33:dd:3d:ac:20:8d:b3:ca:b1:79:60:8b:a5:
c1:86:d9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 14:28:58 2026 by rpki-client