This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft
File: 9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft (raw, json)
Hash identifier: BGj/KqD4LwHdhAU2vHdvw8gknHSYIiZG76evUhFP63M=
Subject key identifier: 01:B7:D8:18:68:90:81:8A:19:6D:1B:90:8E:87:07:25:F9:EE:51:E2
Authority key identifier: 9F:02:A9:B8:7C:C5:F8:1A:22:E8:E5:8D:2E:C1:2E:6E:06:58:8A:03
Certificate issuer: /CN=9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03
Certificate serial: 240A0542094A45083F70C42A037969415D304864
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft
Manifest number: 03B4
Signing time: Sun 01 Feb 2026 16:11:41 +0000
Manifest this update: Sun 01 Feb 2026 16:06:41 +0000
Manifest next update: Thu 05 Feb 2026 02:45:41 +0000
Files and hashes: 1: 9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.crl (hash: JJRXf3SnWl4OG98NcMOZroxZEh7HVfRitP3q8OUAp0w=)
2: 3130332e3137302e3233362e302f32332d3234203d3e20313338383535.roa (hash: vagIMKImu4Zs/hOeAJyRqPH9hY16TNqQAf9b5U67Rs0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.crl
rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 02:45:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:0a:05:42:09:4a:45:08:3f:70:c4:2a:03:79:69:41:5d:30:48:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03
Validity
Not Before: Feb 1 16:06:41 2026 GMT
Not After : Feb 5 02:45:41 2026 GMT
Subject: CN=01B7D8186890818A196D1B908E870725F9EE51E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:04:61:94:d3:87:6a:7e:a1:d8:5d:4c:c5:45:
4a:42:d7:f4:26:34:f5:39:b2:a5:c8:14:c1:04:d4:
ed:0d:6a:2b:e6:4c:d9:43:44:0a:dc:c5:f4:40:b3:
31:91:72:d0:e2:60:04:4c:a4:8b:37:d0:77:4b:3f:
af:23:d7:ed:e3:8a:7d:0d:2b:c7:d8:83:41:cc:af:
be:41:18:b0:4d:61:b1:a1:dc:18:ca:5d:cb:bf:5a:
f7:9f:ed:cc:a0:dc:27:cc:ce:6d:3e:30:b8:33:f0:
be:04:f3:d1:6a:36:a1:64:21:4d:3d:a1:33:de:82:
48:c8:aa:96:9e:9f:dd:ab:47:43:34:13:98:6c:5b:
6c:bf:c5:5d:29:aa:b5:79:5d:a7:6b:37:60:0b:08:
92:74:3d:32:a8:19:7e:81:67:62:49:76:64:f4:24:
28:f2:7e:26:33:41:51:30:3a:a9:7c:6c:ce:f0:8a:
bd:69:70:08:ad:ea:63:ea:ac:fa:44:0c:fd:1f:ca:
62:b1:4f:49:2d:80:5d:32:db:21:ab:2b:a4:d0:c2:
dc:71:49:1a:dc:12:19:85:37:9f:91:1a:87:cf:18:
b5:a2:d8:10:14:b4:68:5d:36:76:7f:1b:a9:ff:6c:
03:71:da:23:21:b9:48:47:61:64:0a:49:e1:b3:1c:
36:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B7:D8:18:68:90:81:8A:19:6D:1B:90:8E:87:07:25:F9:EE:51:E2
X509v3 Authority Key Identifier:
keyid:9F:02:A9:B8:7C:C5:F8:1A:22:E8:E5:8D:2E:C1:2E:6E:06:58:8A:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:be:1b:b8:81:08:c6:8f:d9:6e:58:a4:9f:8f:fb:df:59:3b:
81:92:04:f0:1b:ca:1f:8a:36:7a:a2:1b:c1:a8:df:27:20:ea:
12:ca:c4:df:f2:38:db:04:b6:db:0a:6b:32:65:79:e4:f7:c0:
b9:58:55:14:2d:bf:45:51:9c:89:7b:f0:69:b6:fb:dc:a4:fd:
f3:66:82:a4:7c:a1:81:13:af:eb:71:4e:b0:d5:09:ae:ab:ad:
93:29:08:48:cc:fa:f6:b2:68:2a:07:2f:aa:a6:37:3b:f9:34:
46:99:f7:22:dd:ca:b8:c9:75:f9:46:7f:06:6a:ea:d5:e3:0d:
6d:03:bf:b0:4f:ee:4c:3a:d1:10:19:4a:34:4e:eb:1f:1a:bf:
bb:f3:87:86:0a:ee:05:f6:54:41:7b:bb:57:ac:ab:7c:fe:61:
67:b3:4c:fd:52:76:5d:15:ea:49:0f:7a:15:d8:f5:21:d7:06:
c2:96:2b:f8:d8:77:52:92:98:bb:27:3b:8a:c5:b3:f4:0a:94:
38:b2:ab:98:1b:c8:0e:49:22:0a:6d:91:28:56:f0:96:00:18:
93:fc:45:e0:3d:67:c5:f5:f0:43:19:c5:ea:1e:b4:0e:f6:b0:
1e:f5:6e:98:13:14:62:9e:af:4e:e9:98:75:1c:39:c4:c8:99:
28:bf:cf:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:44:01 2026 by rpki-client