This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/9310C473EC1219DDC9911827F2B8ADB9372D55A5.mft
File: 9310C473EC1219DDC9911827F2B8ADB9372D55A5.mft (raw, json)
Hash identifier: Oq6wZIpTNHSoK9ggFI1FAa5OdRUCEJgnBEajbghkTEM=
Subject key identifier: CD:29:38:44:77:80:27:3F:69:1D:60:40:C2:B4:31:19:A0:E7:84:AE
Authority key identifier: 93:10:C4:73:EC:12:19:DD:C9:91:18:27:F2:B8:AD:B9:37:2D:55:A5
Certificate issuer: /CN=9310C473EC1219DDC9911827F2B8ADB9372D55A5
Certificate serial: 7B242723E914B1E698B63B8E684AB169E49B73BB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9310C473EC1219DDC9911827F2B8ADB9372D55A5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/9310C473EC1219DDC9911827F2B8ADB9372D55A5.mft
Manifest number: A6
Signing time: Mon 02 Feb 2026 00:51:39 +0000
Manifest this update: Mon 02 Feb 2026 00:46:39 +0000
Manifest next update: Thu 05 Feb 2026 10:25:39 +0000
Files and hashes: 1: 323430363a373534303a3a2f33322d3438203d3e20313431303637.roa (hash: krntMtkV7itMzb7RpigawfupJFS+qvD2y8iOF/n2mS4=)
2: 3130332e3135352e3139302e302f32332d3234203d3e20313431303637.roa (hash: KR+NJhq+RXT/HF9cVUOg/9gCypJUOrwEKynO5zfKYzQ=)
3: 9310C473EC1219DDC9911827F2B8ADB9372D55A5.crl (hash: N2KaH1X7qeprg5j1k8QxwAkl0rJzLWf1oNcwe8jbb8E=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/9310C473EC1219DDC9911827F2B8ADB9372D55A5.crl
rsync://repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/9310C473EC1219DDC9911827F2B8ADB9372D55A5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9310C473EC1219DDC9911827F2B8ADB9372D55A5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:24:27:23:e9:14:b1:e6:98:b6:3b:8e:68:4a:b1:69:e4:9b:73:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9310C473EC1219DDC9911827F2B8ADB9372D55A5
Validity
Not Before: Feb 2 00:46:39 2026 GMT
Not After : Feb 5 10:25:39 2026 GMT
Subject: CN=CD2938447780273F691D6040C2B43119A0E784AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:93:d2:30:ad:7c:8c:08:9c:75:79:b7:ca:fc:
a7:34:98:d6:dc:e7:31:34:e2:ad:d3:25:d3:f7:26:
97:5a:37:91:74:ea:4d:aa:e7:6d:d9:1f:36:12:74:
b4:bd:02:ae:2c:cf:65:8c:a1:40:87:8b:31:47:c2:
43:d5:d4:53:7c:a1:7b:15:13:54:3d:d2:e7:86:ee:
8f:67:01:5e:09:64:a1:cb:5e:f7:65:8e:d6:f5:b6:
6f:13:fe:48:2e:f5:0c:38:02:06:5f:a8:37:7b:3d:
20:66:d9:c6:2d:71:a6:c4:da:47:8d:b8:ee:c0:8f:
cf:15:88:60:71:5e:ba:94:9d:04:19:56:3b:70:b7:
af:46:56:84:b9:4a:ae:14:df:3c:44:b8:1d:16:96:
bc:59:4a:ce:47:eb:4c:21:fc:93:56:67:e9:46:26:
d5:c5:02:a1:89:dd:58:6f:43:36:b3:33:4f:ad:f9:
09:a7:8f:f8:8a:7d:f1:71:bf:6d:5e:e1:a2:03:11:
90:78:cb:c6:67:66:5c:1b:20:0c:0e:48:d4:07:9c:
5a:67:ed:6f:c3:ba:e8:37:b9:28:d0:c0:73:34:17:
ee:8c:2e:71:f2:0f:88:44:ff:93:b9:b7:a7:19:ee:
15:41:39:d6:8c:1e:a3:0d:ca:cf:88:2a:b5:6a:db:
2c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:29:38:44:77:80:27:3F:69:1D:60:40:C2:B4:31:19:A0:E7:84:AE
X509v3 Authority Key Identifier:
keyid:93:10:C4:73:EC:12:19:DD:C9:91:18:27:F2:B8:AD:B9:37:2D:55:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/9310C473EC1219DDC9911827F2B8ADB9372D55A5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9310C473EC1219DDC9911827F2B8ADB9372D55A5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/9310C473EC1219DDC9911827F2B8ADB9372D55A5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:19:ee:9d:cd:e4:cf:e1:e1:1e:22:b1:49:76:2d:4b:0b:5d:
e8:04:24:94:81:62:8a:9f:d6:6d:f3:ca:a1:0b:4c:9f:94:26:
1d:2e:8a:2e:64:98:41:6f:af:d5:e4:cd:f2:de:44:e5:c8:a1:
10:fb:9f:af:cb:87:1f:48:d6:fa:3e:87:71:0b:a9:ce:64:36:
6f:fc:65:8b:c2:f6:4e:d8:48:b2:02:1f:46:1e:88:04:7a:6c:
fc:be:cc:9b:fb:47:17:2e:a2:d6:aa:2c:28:82:02:2e:2c:e5:
72:62:a7:2a:ef:d1:64:c0:9a:55:2a:1b:be:fe:c9:69:aa:e7:
18:8d:07:4f:8d:15:7a:72:7f:67:74:89:d8:04:72:5e:f6:00:
c5:25:25:4b:0d:5e:d0:02:d7:f5:ca:3b:44:23:10:13:ad:85:
1f:c1:22:7c:06:b4:c9:39:d9:a4:a3:17:0d:4a:b4:82:4d:d9:
2a:af:67:b9:c0:44:6a:e2:0d:97:35:19:29:69:c5:4e:09:03:
a0:e6:0b:c1:4b:62:55:93:27:44:2a:a4:36:bb:5d:af:5e:86:
59:6d:9a:16:d8:72:92:c9:ef:bb:2b:1c:8c:3a:2c:ea:cc:62:
7f:e6:3f:20:2b:2d:d0:32:10:ac:35:e4:d1:c6:07:a8:1a:9c:
4c:0e:07:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:48:10 2026 by rpki-client