This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft
File: 9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft (raw, json)
Hash identifier: YJ0M8O6kE1CgfDBDh2/jYuUGRw+QikxnAQSXFN5UAKo=
Subject key identifier: F2:5D:93:E3:A1:19:1E:96:4B:7F:FD:07:9E:EB:8F:B5:0E:2D:01:D7
Authority key identifier: 93:88:69:5C:CB:2D:CC:37:F2:AB:8A:3D:10:E4:FD:E0:C3:A9:75:A1
Certificate issuer: /CN=9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1
Certificate serial: 7743074E79106969F255EFC3F0E2F5E5162DCFBD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft
Manifest number: 0101
Signing time: Mon 19 Jan 2026 20:40:55 +0000
Manifest this update: Mon 19 Jan 2026 20:35:55 +0000
Manifest next update: Fri 23 Jan 2026 06:42:55 +0000
Files and hashes: 1: 3136302e32322e39372e302f32342d3234203d3e20313532383238.roa (hash: kwAZ838D0ERhtGt/Ke2PpJnDihw3zY8GMQxxC8oDZ/k=)
2: 3136302e32322e39362e302f32342d3234203d3e20313532383238.roa (hash: n7MsU+NqSEfM83vem4uRyZBilJV0EOOi2kf/za1AxU8=)
3: 9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl (hash: hs3rFXNJsXBtYYLdkNUB9+XEPO6FMAPXO4ZLwv8P4Yc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl
rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 Jan 2026 06:42:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:43:07:4e:79:10:69:69:f2:55:ef:c3:f0:e2:f5:e5:16:2d:cf:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1
Validity
Not Before: Jan 19 20:35:55 2026 GMT
Not After : Jan 23 06:42:55 2026 GMT
Subject: CN=F25D93E3A1191E964B7FFD079EEB8FB50E2D01D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:11:48:9a:57:6c:78:f9:00:42:36:0d:6e:dd:
79:ef:6a:8a:2c:e6:a3:17:aa:5f:d6:d6:b0:d0:6f:
f2:90:61:5c:8b:7e:5e:27:c4:96:54:b1:c4:d6:29:
70:fa:50:85:ae:77:77:5e:d5:7b:83:4f:94:94:6a:
da:2c:82:df:0b:dd:67:2d:95:e0:2d:9d:bb:bb:00:
74:79:03:6f:c5:d8:96:19:dc:b4:61:07:62:5e:6d:
b6:0e:32:16:2a:48:62:ba:31:12:8e:e8:9f:2e:4b:
b2:ad:a3:35:18:aa:42:a2:d7:50:71:56:21:3e:c8:
44:ad:bd:47:19:43:67:37:a6:a9:e8:51:bc:e4:ab:
75:83:b1:82:07:40:d7:f3:d7:84:9f:99:7c:7c:8a:
c9:53:32:04:49:52:5f:39:91:0f:04:20:e2:af:f3:
0c:25:dd:02:9d:8c:5e:9b:7e:82:cc:bb:cc:c7:ea:
e2:d7:cd:e9:2f:00:74:1a:49:1d:61:3e:a3:46:e8:
35:61:05:7e:6a:8f:7e:aa:30:51:86:23:ef:c9:05:
49:aa:59:53:5b:70:9a:23:dd:4a:57:2b:cb:84:20:
1c:e5:fc:dc:b0:47:0c:e8:86:7c:96:eb:4a:64:18:
44:e2:ed:3b:d5:0f:50:d3:b2:16:10:ac:c5:60:fe:
2d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5D:93:E3:A1:19:1E:96:4B:7F:FD:07:9E:EB:8F:B5:0E:2D:01:D7
X509v3 Authority Key Identifier:
keyid:93:88:69:5C:CB:2D:CC:37:F2:AB:8A:3D:10:E4:FD:E0:C3:A9:75:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:e5:e0:f9:85:3a:ec:97:f6:98:78:2b:14:25:c0:1f:1d:12:
01:ba:a8:81:2b:08:d2:37:a6:bf:84:df:47:44:a6:8b:e9:f7:
89:a3:d5:89:46:92:b5:96:e2:90:17:3a:0b:5d:d3:48:3f:3f:
34:e4:03:2a:57:83:a9:64:7b:c5:be:0d:1d:aa:d0:5e:18:ef:
41:cb:95:e8:e0:21:c1:20:91:ee:66:69:4e:c5:5b:aa:4d:17:
de:56:77:e7:7a:c6:41:a5:2b:47:bf:3d:15:b8:ce:f8:5c:85:
dc:98:98:a9:8f:90:66:1b:b6:99:ee:fa:a7:3c:45:ca:9b:1e:
42:18:7d:9a:e4:bb:7c:1a:b5:a7:4e:0f:35:3f:0e:d0:07:7c:
7e:d4:33:b3:ef:69:64:b8:c6:56:27:68:15:74:2e:e5:7d:6e:
b4:4d:2e:13:cb:70:d4:5a:3e:b5:1b:08:45:4b:d6:10:1e:05:
43:20:85:5a:30:51:73:84:ac:7e:04:35:3d:06:e6:c3:b5:d4:
2c:bf:a9:24:18:b9:52:65:84:73:ea:f2:4a:aa:fc:08:35:5c:
af:3e:df:ec:93:22:fa:67:eb:c0:c1:df:71:0c:b6:a0:42:4e:
fa:74:28:f2:e6:04:55:09:05:18:57:c2:06:e9:8b:e2:4e:31:
cf:94:27:74
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUd0MHTnkQaWnyVe/D8OL15RYtz70wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTM4ODY5NUNDQjJEQ0MzN0YyQUI4QTNEMTBFNEZERTBD
M0E5NzVBMTAeFw0yNjAxMTkyMDM1NTVaFw0yNjAxMjMwNjQyNTVaMDMxMTAvBgNV
BAMTKEYyNUQ5M0UzQTExOTFFOTY0QjdGRkQwNzlFRUI4RkI1MEUyRDAxRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0EUiaV2x4+QBCNg1u3Xnvaoos
5qMXql/W1rDQb/KQYVyLfl4nxJZUscTWKXD6UIWud3de1XuDT5SUatosgt8L3Wct
leAtnbu7AHR5A2/F2JYZ3LRhB2JebbYOMhYqSGK6MRKO6J8uS7KtozUYqkKi11Bx
ViE+yEStvUcZQ2c3pqnoUbzkq3WDsYIHQNfz14SfmXx8islTMgRJUl85kQ8EIOKv
8wwl3QKdjF6bfoLMu8zH6uLXzekvAHQaSR1hPqNG6DVhBX5qj36qMFGGI+/JBUmq
WVNbcJoj3UpXK8uEIBzl/NywRwzohnyW60pkGETi7TvVD1DTshYQrMVg/i0vAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU8l2T46EZHpZLf/0HnuuPtQ4tAdcwHwYDVR0j
BBgwFoAUk4hpXMstzDfyq4o9EOT94MOpdaEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
M2NiZDY3Yi1kMTkwLTRhNGMtODNiNi0xMTg4N2Q3YzJlOTkvMC85Mzg4Njk1Q0NC
MkRDQzM3RjJBQjhBM0QxMEU0RkRFMEMzQTk3NUExLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvOTM4ODY5NUNDQjJEQ0MzN0YyQUI4QTNEMTBFNEZERTBDM0E5
NzVBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODNjYmQ2N2ItZDE5MC00YTRjLTgz
YjYtMTE4ODdkN2MyZTk5LzAvOTM4ODY5NUNDQjJEQ0MzN0YyQUI4QTNEMTBFNEZE
RTBDM0E5NzVBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFPl4PmFOuyX9ph4KxQlwB8dEgG6qIErCNI3
pr+E30dEpovp94mj1YlGkrWW4pAXOgtd00g/PzTkAypXg6lke8W+DR2q0F4Y70HL
lejgIcEgke5maU7FW6pNF95Wd+d6xkGlK0e/PRW4zvhchdyYmKmPkGYbtpnu+qc8
RcqbHkIYfZrku3watadODzU/DtAHfH7UM7PvaWS4xlYnaBV0LuV9brRNLhPLcNRa
PrUbCEVL1hAeBUMghVowUXOErH4ENT0G5sO11Cy/qSQYuVJlhHPq8kqq/Ag1XK8+
3+yTIvpn68DB33EMtqBCTvp0KPLmBFUJBRhXwgbpi+JOMc+UJ3Q=
-----END CERTIFICATE-----
Generated at Wed Jan 21 12:03:23 2026 by rpki-client