This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft
File: D9622F68C539A365B6FA78463F3CD3D3EC231214.mft (raw, json)
Hash identifier: NVfdQ4yMRPN8YZ82FiUKUVXLA3GG0wHHhinUG8oC0Qw=
Subject key identifier: AC:A6:2E:1A:4F:7A:3E:3F:59:5A:BF:B4:AB:91:42:26:C1:8A:10:99
Authority key identifier: D9:62:2F:68:C5:39:A3:65:B6:FA:78:46:3F:3C:D3:D3:EC:23:12:14
Certificate issuer: /CN=D9622F68C539A365B6FA78463F3CD3D3EC231214
Certificate serial: 24E923A0E7CFA635DF15FB54ACD6462B8ECF0BEE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9622F68C539A365B6FA78463F3CD3D3EC231214.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft
Manifest number: FA
Signing time: Sat 31 Jan 2026 18:52:01 +0000
Manifest this update: Sat 31 Jan 2026 18:47:01 +0000
Manifest next update: Tue 03 Feb 2026 21:46:01 +0000
Files and hashes: 1: D9622F68C539A365B6FA78463F3CD3D3EC231214.crl (hash: k/BwIFTsfpMoBw1IFgfYD3NoMJBB/+q63uy9mJ5/NTg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.crl
rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9622F68C539A365B6FA78463F3CD3D3EC231214.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 21:46:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:e9:23:a0:e7:cf:a6:35:df:15:fb:54:ac:d6:46:2b:8e:cf:0b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D9622F68C539A365B6FA78463F3CD3D3EC231214
Validity
Not Before: Jan 31 18:47:01 2026 GMT
Not After : Feb 3 21:46:01 2026 GMT
Subject: CN=ACA62E1A4F7A3E3F595ABFB4AB914226C18A1099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:65:3e:73:00:62:59:dd:22:ee:d7:25:9a:0b:
68:78:4a:ba:b1:f0:fb:af:78:3c:f8:fa:d9:c0:f0:
52:43:e0:7f:ff:f7:1c:3d:f8:65:94:75:65:d9:b8:
d2:23:4b:a9:15:ce:08:eb:a5:62:48:43:ba:63:2a:
60:54:bd:42:51:90:e4:71:1d:37:3d:83:96:13:a3:
1a:ce:7d:f6:f1:39:40:22:1a:b4:1e:01:2d:29:29:
22:62:f2:7a:68:db:86:d7:1b:c4:73:ad:4e:4b:38:
f8:07:83:23:70:f0:ea:cc:bd:d3:e3:b4:b2:f2:16:
bd:93:18:cb:63:55:15:66:82:02:f9:0c:75:9c:3a:
b5:1d:25:b6:e8:67:d4:9a:ee:7c:c9:35:32:02:1f:
6a:c9:46:62:f8:a5:b8:f2:aa:26:03:57:a9:c4:51:
a6:9b:16:cf:d3:95:69:38:78:81:57:3b:f3:b7:ba:
e7:70:1e:0b:e3:2e:b1:84:b9:ea:1b:09:06:38:2e:
a6:ad:1e:64:a3:d5:3d:e1:ec:1d:49:84:df:14:67:
1e:d7:c8:8f:fe:d9:c6:55:13:37:09:3b:f5:35:ce:
eb:ce:27:f0:49:bf:c6:e7:04:a4:c4:3d:47:b4:58:
2d:94:7b:9f:f6:71:0f:c6:5a:47:d6:9e:d0:d9:91:
08:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A6:2E:1A:4F:7A:3E:3F:59:5A:BF:B4:AB:91:42:26:C1:8A:10:99
X509v3 Authority Key Identifier:
keyid:D9:62:2F:68:C5:39:A3:65:B6:FA:78:46:3F:3C:D3:D3:EC:23:12:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9622F68C539A365B6FA78463F3CD3D3EC231214.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:5b:e2:ad:dd:4d:d6:cd:02:4a:28:a6:86:60:23:72:0e:41:
49:7a:13:cc:fb:0a:77:ea:5b:c6:bb:58:68:cd:99:db:23:b1:
89:87:9a:d1:d9:a3:1a:5e:bf:44:b6:1a:93:a6:64:06:d5:1c:
d7:07:79:a9:a6:ed:ad:13:a4:26:29:32:bf:25:b0:b7:ba:5e:
dc:db:37:76:00:4c:46:e6:05:6a:85:1f:e7:83:d4:6d:1f:fb:
9d:55:ba:70:45:92:9f:ea:3a:4f:0a:23:1a:c4:7d:4f:f4:b5:
4a:00:6e:40:a8:22:17:76:37:6a:82:e1:4c:29:ce:30:39:d9:
89:3c:c5:a4:ed:c9:6a:04:f3:d4:1d:d9:86:b7:33:4e:ca:94:
4f:46:09:a7:99:24:77:72:15:cc:f3:af:64:14:03:93:8b:ad:
4c:33:7a:64:ba:1e:f9:f9:9e:4a:df:58:b7:5f:6a:bb:23:a3:
48:6e:30:4e:2b:5a:11:ce:c8:c9:ec:32:fa:4e:d2:a2:66:27:
43:fb:88:cd:99:88:70:aa:88:93:d8:8e:77:5d:43:0b:d3:74:
97:83:99:e3:4a:26:fb:8c:72:ec:11:eb:59:1c:bb:f4:e2:75:
d3:80:66:ed:1c:16:21:8e:5c:5b:4c:83:36:16:e5:62:f8:fe:
09:10:97:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:33 2026 by rpki-client