This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft
File: 9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft (raw, json)
Hash identifier: /s7gfKdEyuRv/kX9CbEY9dV2M8YAA4PfEN+ZasY2qEM=
Subject key identifier: 7B:78:10:3B:6E:E1:D1:AC:95:56:01:04:67:B5:8A:5E:B9:65:9C:15
Authority key identifier: 9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF
Certificate issuer: /CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF
Certificate serial: 211293FCD20FCC7D637D8DC50A037D9488631367
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft
Manifest number: 03BB
Signing time: Sun 01 Feb 2026 14:10:58 +0000
Manifest this update: Sun 01 Feb 2026 14:05:58 +0000
Manifest next update: Wed 04 Feb 2026 15:54:58 +0000
Files and hashes: 1: 9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl (hash: xxJJtdClAAFBgxkK5gaqS+L9CHRLxnPXnq/2WaVKrQ0=)
2: 3130332e3136392e3139342e302f32342d3234203d3e20313432333536.roa (hash: /JgZ/3Dc8d37h8AUWlmBK2pFzp3Z0endISYcFZpQbYk=)
3: 3130332e3136392e3139352e302f32342d3234203d3e20313339393637.roa (hash: 2vX1spf0CDDLU6b57YsXR6vrWtD2IJYZSM4qYEDN34I=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl
rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 15:54:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:12:93:fc:d2:0f:cc:7d:63:7d:8d:c5:0a:03:7d:94:88:63:13:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF
Validity
Not Before: Feb 1 14:05:58 2026 GMT
Not After : Feb 4 15:54:58 2026 GMT
Subject: CN=7B78103B6EE1D1AC9556010467B58A5EB9659C15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c1:ce:62:df:87:66:39:e7:06:67:c3:0e:52:
1a:84:bb:3b:70:89:2e:a6:90:95:a8:57:e9:4e:20:
2a:5f:3c:f4:37:1f:8f:ac:e4:db:fe:c8:80:64:33:
41:a2:49:71:04:11:48:28:b4:67:9b:9c:16:34:67:
06:54:44:82:35:75:c6:e3:6f:20:8d:0f:59:4d:b2:
ed:71:39:da:8f:8c:80:d5:3d:93:53:a1:e9:fd:83:
64:6e:cc:b9:97:85:20:6a:0c:63:47:44:bd:45:69:
f3:93:5d:fe:7f:91:fc:b0:d6:76:da:cb:da:09:82:
38:8a:8c:e1:cc:88:17:fb:c6:8c:c2:5a:f2:23:e7:
59:2f:f7:43:9a:f0:73:d3:84:04:27:d3:6c:c4:f8:
06:97:bd:77:8f:bc:24:71:12:b9:c2:36:8f:f5:56:
67:79:3c:d6:94:0c:70:02:a9:d2:57:e1:7f:83:1f:
ec:13:6f:22:93:6a:d6:f5:4c:73:31:bd:af:fc:f0:
20:7d:50:bb:1a:bd:26:ab:f0:33:9e:8f:f8:dc:ca:
06:71:e9:13:94:fa:5a:c8:53:87:74:dc:9e:62:75:
b0:ca:a7:be:b6:d8:9b:f9:46:07:e5:18:cc:6d:d1:
f1:3b:94:e4:06:f0:90:22:26:29:c8:e2:b6:09:22:
4c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:78:10:3B:6E:E1:D1:AC:95:56:01:04:67:B5:8A:5E:B9:65:9C:15
X509v3 Authority Key Identifier:
keyid:9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:85:97:c8:55:8e:27:9c:8a:42:21:17:65:8c:4e:bf:12:cf:
4b:1c:4f:1b:ae:e8:ef:73:a2:83:6f:b1:00:c4:f4:51:3e:7c:
19:82:4e:ac:a4:55:b9:6c:83:e9:e4:66:71:d7:c5:e8:fc:09:
bd:50:70:2a:08:0c:2e:c3:6c:8c:f9:5d:9c:05:1c:0f:c6:31:
5f:6c:1c:ad:a2:ae:07:e1:97:cd:bd:ad:35:7c:dc:80:29:9b:
7e:35:65:44:c0:e0:6b:eb:10:48:3b:58:4e:4b:db:a5:60:cc:
df:bc:fe:97:c3:5d:2a:df:1d:66:57:6d:02:03:1d:4f:15:de:
50:d8:43:e0:7c:02:d7:14:66:36:fa:a4:f9:20:e3:6e:fb:3c:
22:be:19:aa:9e:63:5e:5a:07:48:95:08:2f:4d:12:5b:87:5d:
44:5b:81:9f:3b:a6:c9:b1:87:68:f1:5f:48:10:7a:14:95:d3:
aa:4a:b4:9a:ef:27:b5:d7:ef:1f:32:31:d0:5e:59:7c:7d:7c:
9a:1e:c0:14:bf:bc:f6:cb:df:fe:71:f4:2f:2c:bc:9e:02:33:
4b:2f:f7:e5:81:10:1e:a6:21:47:ca:e5:84:f9:a3:63:be:7f:
a6:e9:e1:a4:2d:00:50:98:5d:6b:99:3d:32:66:ba:96:c7:48:
0e:8a:46:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:42:07 2026 by rpki-client