This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft
File: B563D708A094B24FC361EDD11C91EE7979AB0471.mft (raw, json)
Hash identifier: vK5DVoqOVdeLZVsDfbQQdvzktJ1Cs0jT5XzbhxYXDvg=
Subject key identifier: 89:EE:81:B4:FF:DF:31:D7:C2:33:EE:FF:0A:7F:91:C6:D7:8B:66:70
Authority key identifier: B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71
Certificate issuer: /CN=B563D708A094B24FC361EDD11C91EE7979AB0471
Certificate serial: 12B1FC1639058B7C60D49CCA5188B488C3381999
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft
Manifest number: 04C9
Signing time: Sun 01 Feb 2026 10:11:12 +0000
Manifest this update: Sun 01 Feb 2026 10:06:12 +0000
Manifest next update: Wed 04 Feb 2026 19:49:12 +0000
Files and hashes: 1: 3130332e3135382e3233342e302f32332d3233203d3e20313431383938.roa (hash: Fqgr+r9WG3m7zmpO3rSwg44QNE4blwlf0zSotQ3DNUo=)
2: 3130332e3135382e3233352e302f32342d3234203d3e20313431313332.roa (hash: kpMxQvSYLU76Gm9LQAAGgZvfd3otWzRiAJhO9y4zBsk=)
3: B563D708A094B24FC361EDD11C91EE7979AB0471.crl (hash: EtVzMiwM5d5CGX0eLnzR8Mpw5cTobYri9tGm7uGuRMo=)
4: 3130332e3135382e3233342e302f32342d3234203d3e20313431313332.roa (hash: LFN1lWDxbZdPzNeB6sbVhDvJLLQcsJmGzjZZihSsn1w=)
5: 3130332e3135382e3233352e302f32342d3234203d3e20313431383938.roa (hash: 1oRmxMWEmNWfiObwNq2iDBD7Utfj4IUiGgv5WjZ9wmA=)
6: 3130332e3135382e3233342e302f32332d3233203d3e20313431313332.roa (hash: VerBshfKSbDiG4ilBKzo2++FEnDv7+7VU/P4UtUMaSI=)
7: 3130332e3135382e3233342e302f32342d3234203d3e20313431383938.roa (hash: DC1WzlYzoLRsGjbVoxuqgztNqkwtiD8GKj7bCCztmOc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl
rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 19:49:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:b1:fc:16:39:05:8b:7c:60:d4:9c:ca:51:88:b4:88:c3:38:19:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B563D708A094B24FC361EDD11C91EE7979AB0471
Validity
Not Before: Feb 1 10:06:12 2026 GMT
Not After : Feb 4 19:49:12 2026 GMT
Subject: CN=89EE81B4FFDF31D7C233EEFF0A7F91C6D78B6670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ae:a8:6f:1d:53:ad:ec:f9:77:c0:82:6d:bc:
43:19:12:7f:a4:77:6f:14:cc:f9:3f:10:62:58:3f:
c2:77:28:bf:c3:bc:12:8f:9d:a7:12:3d:68:f3:c7:
dd:ef:a6:9f:5e:70:05:af:dd:82:b9:fb:4f:f6:a4:
4a:32:7e:b4:1d:a6:ff:11:96:13:5f:1b:ed:e3:96:
4b:1f:99:40:c4:a3:0f:c0:76:80:91:9b:18:d1:9d:
20:e1:f8:84:d7:d6:b3:b4:03:c7:f8:93:17:bb:4a:
db:14:0a:61:6d:75:4c:b9:44:01:6c:ba:30:81:6e:
cd:c7:db:3b:cb:98:09:ab:0b:3b:d5:36:80:0a:af:
3c:85:c5:47:6d:10:18:ea:cc:42:60:36:0d:10:cd:
33:93:93:19:23:f5:8a:85:ae:30:46:55:d5:a8:74:
2b:09:66:be:7a:af:aa:a7:4b:6f:d1:e7:53:55:09:
8f:d9:5f:0b:d6:e2:25:53:5b:53:e9:eb:d9:f5:d9:
88:6f:1b:e0:1e:17:84:3c:22:7d:d3:ea:78:04:16:
2a:05:74:23:0e:31:b4:1c:85:ee:38:85:8e:6a:94:
9d:32:64:47:2f:72:61:02:c6:e7:ff:41:c2:b7:75:
d0:6a:e2:7e:5d:72:d2:d8:95:19:5a:56:42:a7:29:
05:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:EE:81:B4:FF:DF:31:D7:C2:33:EE:FF:0A:7F:91:C6:D7:8B:66:70
X509v3 Authority Key Identifier:
keyid:B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:fa:3a:5a:95:38:e7:6a:25:99:e8:95:9e:dd:b2:d2:4b:47:
0c:b3:f8:7c:e5:bc:51:82:c7:de:63:35:02:10:b6:78:d0:02:
21:b9:95:84:4e:b4:ef:c4:12:14:fc:4a:84:92:3b:39:5d:44:
4f:a5:45:e6:ea:d1:ae:09:b9:cc:b8:7a:b0:d7:37:32:55:38:
fd:7d:31:bd:15:d8:c0:05:43:1d:52:03:fd:9c:13:94:88:06:
dd:f5:43:de:f5:02:cf:71:3d:bf:ad:03:1a:51:bb:62:e8:86:
0d:31:a7:0e:f0:40:28:7a:16:c2:87:88:fc:4d:e2:4b:77:96:
7c:5f:71:bc:63:b0:b9:2a:05:61:af:a3:05:e3:8e:fd:5a:99:
29:d3:c1:24:da:a0:9a:5b:92:5f:0c:35:f2:d6:f6:92:d8:7a:
6e:6f:99:f5:8c:3e:67:4d:d1:2e:4a:2a:b9:de:55:e6:71:a6:
4f:93:a4:b6:56:2a:fb:34:01:cf:f1:56:17:cb:d2:d6:66:68:
c5:a5:a6:c1:43:c9:ba:f5:9e:25:93:78:c5:db:5e:7c:4d:ef:
60:84:52:70:58:fd:31:86:85:ed:3f:c4:06:1d:71:08:9b:4d:
15:1c:b8:81:90:ab:b5:b6:2c:a7:31:c7:86:c3:55:fe:86:95:
a0:01:08:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 14:26:59 2026 by rpki-client