This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft
File: 8999E6DA986A355F868ABD73E4E2AADC08244F29.mft (raw, json)
Hash identifier: rYMMTxPRbUnk0l24T9OPvOwQ2obOEjOQq6W34ep54zQ=
Subject key identifier: 9E:A9:98:07:CF:07:16:EC:95:4E:14:0E:4B:51:4F:0D:99:CF:6E:EA
Authority key identifier: 89:99:E6:DA:98:6A:35:5F:86:8A:BD:73:E4:E2:AA:DC:08:24:4F:29
Certificate issuer: /CN=8999E6DA986A355F868ABD73E4E2AADC08244F29
Certificate serial: 093859A8D18E8D199FFC16B0421172A92D1E4197
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8999E6DA986A355F868ABD73E4E2AADC08244F29.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft
Manifest number: 0106
Signing time: Tue 20 Jan 2026 19:22:29 +0000
Manifest this update: Tue 20 Jan 2026 19:17:29 +0000
Manifest next update: Sat 24 Jan 2026 06:06:29 +0000
Files and hashes: 1: 3135372e36362e35372e302f32342d3234203d3e20313530393835.roa (hash: g0W4yfpco5rqCeJ3sGtEPJSj+o2p48FtppiRKtinTxM=)
2: 8999E6DA986A355F868ABD73E4E2AADC08244F29.crl (hash: md8SGqfg23+bXZ8hvsYHfkz5Lbx+Mnvdl5PMt2BbQV8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.crl
rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8999E6DA986A355F868ABD73E4E2AADC08244F29.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 06:06:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:38:59:a8:d1:8e:8d:19:9f:fc:16:b0:42:11:72:a9:2d:1e:41:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8999E6DA986A355F868ABD73E4E2AADC08244F29
Validity
Not Before: Jan 20 19:17:29 2026 GMT
Not After : Jan 24 06:06:29 2026 GMT
Subject: CN=9EA99807CF0716EC954E140E4B514F0D99CF6EEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:16:cf:92:89:4d:36:06:73:f7:99:eb:d6:9f:
d7:f6:58:54:75:7e:8a:45:2a:47:cd:39:45:e9:a8:
f0:11:d5:71:13:d6:f8:8b:b3:37:a9:a9:5d:38:3e:
98:21:a6:f2:63:9b:58:04:23:7e:f2:fb:b4:b0:8d:
8d:cc:39:31:fa:2f:0e:fb:53:0b:d3:53:72:0f:e1:
0e:33:1d:21:16:5f:54:c4:a2:b6:3f:7e:26:3f:43:
ce:27:18:a8:f2:6d:63:9a:95:f2:94:51:0c:29:44:
a6:0e:e4:92:87:2a:88:68:0b:ab:9b:ca:d8:67:b3:
ee:76:bb:35:9d:c7:fa:7c:91:76:04:57:15:d0:3a:
8d:00:6d:21:6a:da:e9:a9:d3:a6:48:93:b5:03:b6:
fa:dd:e7:f9:62:80:74:18:27:98:aa:4b:fd:94:37:
5b:51:4f:e6:40:9a:de:f0:77:7e:38:bc:b2:6d:6e:
c1:d0:af:66:f1:98:ae:f1:4b:b9:4d:d8:b1:25:57:
aa:e5:ea:97:1c:55:13:da:49:5b:2a:11:a5:41:31:
5e:ca:5f:71:7b:71:c1:4b:29:39:15:3e:dc:0d:17:
2b:fe:13:4d:2a:6e:90:62:d4:8b:e1:99:36:b6:ff:
4d:45:a0:fb:e9:f6:cb:58:ca:ea:42:d0:87:81:56:
ef:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A9:98:07:CF:07:16:EC:95:4E:14:0E:4B:51:4F:0D:99:CF:6E:EA
X509v3 Authority Key Identifier:
keyid:89:99:E6:DA:98:6A:35:5F:86:8A:BD:73:E4:E2:AA:DC:08:24:4F:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8999E6DA986A355F868ABD73E4E2AADC08244F29.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:0b:17:be:42:2d:e8:40:6d:ae:0e:b8:c5:d6:a6:f1:71:c5:
43:f6:b8:fe:c3:5e:6d:71:7a:b6:fc:5a:df:cf:7b:ca:d9:b4:
3b:d2:c0:e2:2e:f0:8f:71:59:34:8c:44:cb:80:1a:4c:51:f9:
fa:23:d6:9f:a4:1f:75:db:f4:d9:87:b8:a2:3a:42:08:61:ba:
3a:53:35:ce:3d:b6:4a:8c:5c:95:99:f9:90:83:8a:33:dd:cd:
6a:2f:08:07:75:65:0f:c2:15:c8:9a:53:05:57:8a:2e:3e:6a:
c8:f6:c0:00:c8:43:46:65:2e:1f:d0:1b:2b:94:2f:e2:e2:8d:
b1:b7:9e:b0:bd:7b:bc:4c:8a:30:4d:71:d2:9e:c7:75:f9:5c:
0c:4e:35:75:c0:66:ae:e2:67:77:b2:07:0f:db:27:46:6c:e6:
80:da:9f:0e:7a:15:42:c1:20:1d:ef:01:2e:6d:fe:1f:b7:e6:
8a:b7:3a:35:ed:b4:4d:95:f9:90:1c:63:51:f0:07:a1:ff:81:
ee:f5:2a:83:bc:c4:de:6d:f7:c7:f1:f1:9f:32:8f:68:a1:e6:
9f:4f:41:31:3d:92:e6:18:5a:e8:26:a8:e9:7d:7b:2d:23:fa:
2d:a7:87:f0:a1:17:f2:0c:35:29:c5:6e:e5:30:f3:d7:48:1e:
66:fb:2a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 12:03:22 2026 by rpki-client