This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft
File: 9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft (raw, json)
Hash identifier: LW6oBx/z8NhwLJQ0G24yonPuy5OvCjwAWYCshQO8xxI=
Subject key identifier: 2E:52:59:42:39:00:AD:F8:65:73:BA:03:14:F3:AD:68:3F:03:92:61
Authority key identifier: 9C:11:A2:8F:EC:E2:7B:65:C7:E6:47:59:06:C6:CC:B9:74:C0:4C:40
Certificate issuer: /CN=9C11A28FECE27B65C7E6475906C6CCB974C04C40
Certificate serial: 3AA1A6F4BF789A10E2256210660EBE9137698945
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9C11A28FECE27B65C7E6475906C6CCB974C04C40.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft
Manifest number: F5
Signing time: Sun 01 Feb 2026 20:31:17 +0000
Manifest this update: Sun 01 Feb 2026 20:26:17 +0000
Manifest next update: Wed 04 Feb 2026 22:11:17 +0000
Files and hashes: 1: 3230322e39302e3139382e302f32342d3234203d3e203338373739.roa (hash: G/6w1w2C5B7le/ekwUqqgtghBE+GFG1DFKcs7zEE3d8=)
2: 3230322e39302e3139392e302f32342d3234203d3e203338373739.roa (hash: v6LmFd/T+Q18hViAVgo7YGWsfgbS5BdFapubty8W4rc=)
3: 9C11A28FECE27B65C7E6475906C6CCB974C04C40.crl (hash: fennV4Vun07jCOlsg/nmNmdU2yUrBIilrK1RIZv7CVA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.crl
rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9C11A28FECE27B65C7E6475906C6CCB974C04C40.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 22:11:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:a1:a6:f4:bf:78:9a:10:e2:25:62:10:66:0e:be:91:37:69:89:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C11A28FECE27B65C7E6475906C6CCB974C04C40
Validity
Not Before: Feb 1 20:26:17 2026 GMT
Not After : Feb 4 22:11:17 2026 GMT
Subject: CN=2E5259423900ADF86573BA0314F3AD683F039261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c1:cb:21:4a:ab:72:0c:2f:74:c3:bd:72:c8:
c2:b0:36:61:f1:a4:50:1d:b7:2b:d9:a3:a5:07:79:
98:97:0a:ea:58:e6:66:09:3b:7a:86:1e:8a:f3:f8:
b0:75:7c:d5:bc:ed:5a:7d:14:ab:00:75:32:5a:10:
53:b6:d7:96:b3:78:b0:dd:b0:45:e5:6e:65:0c:1f:
3f:68:1a:aa:a0:38:de:c1:52:47:3d:d7:ef:cc:27:
03:09:65:54:c3:45:29:c7:00:4a:fd:55:d3:37:44:
cf:b3:78:ce:00:09:63:c0:ee:1c:55:bc:b4:ca:b7:
56:05:39:bd:a4:67:3d:df:c9:2f:d8:a6:b2:ab:cc:
7f:f7:21:91:60:ee:c8:1c:54:a4:32:57:82:0c:ef:
85:fa:fd:67:f2:37:92:1f:3c:01:25:ea:4d:62:a2:
61:a9:67:d3:23:55:ee:66:ec:ce:09:a3:a1:60:20:
16:e4:44:74:c4:e3:ac:fe:95:19:24:17:6b:22:9c:
03:b7:b8:ff:bb:f5:96:5c:e2:22:28:c0:2c:dc:a0:
ae:99:26:33:10:59:56:22:d6:5c:56:d0:3b:7b:8e:
de:22:a0:4a:1c:3e:c5:f6:f5:cc:ba:15:d0:48:7d:
52:b6:ca:22:d7:17:37:f8:ea:3a:2f:0b:02:17:46:
fb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:52:59:42:39:00:AD:F8:65:73:BA:03:14:F3:AD:68:3F:03:92:61
X509v3 Authority Key Identifier:
keyid:9C:11:A2:8F:EC:E2:7B:65:C7:E6:47:59:06:C6:CC:B9:74:C0:4C:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9C11A28FECE27B65C7E6475906C6CCB974C04C40.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f9:56:7d:84:65:61:c3:a3:8b:0f:33:17:2d:cb:14:9b:c2:
75:b5:8c:0d:0d:1e:28:2a:91:00:aa:b4:47:aa:a4:82:27:02:
35:81:05:99:57:ea:8c:1e:88:6f:88:3e:da:4a:6b:c7:3c:9f:
7d:b1:f9:f3:62:49:f7:2c:91:04:b6:97:18:88:59:d6:f0:36:
31:e1:7b:dc:77:2a:8f:39:26:53:69:4b:4b:58:f3:c6:d7:14:
f7:24:54:97:e6:ed:00:8e:61:f8:fa:b1:98:89:6c:dc:57:c4:
14:ed:53:6e:b9:f8:f6:73:ca:cf:10:54:19:a1:38:13:ea:06:
49:c3:28:38:4c:2f:54:d7:4b:cc:ad:a0:08:58:c0:f3:08:2a:
66:5b:83:f0:7e:f4:e6:1d:c1:1a:29:61:cb:a6:d7:df:4a:ca:
56:a0:66:ea:29:ff:23:10:c2:8d:dc:f0:d6:cb:84:72:6c:de:
4b:82:3f:05:c7:14:aa:5e:6c:02:17:cf:2f:5d:8a:3f:71:45:
44:f5:d5:75:b5:39:cc:11:15:17:61:8c:94:28:a1:c6:15:61:
36:b0:a4:2c:f4:a7:6b:fd:e3:ad:07:46:81:75:f6:53:7e:ec:
35:2a:ee:dc:91:33:64:08:c3:95:00:be:0f:dd:f8:52:2a:50:
ad:c2:c5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:51:43 2026 by rpki-client