This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft
File: 09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft (raw, json)
Hash identifier: zTzR9vw+9imGqm1jhb+4mf1A+d8eF8mtazjVB26NRm0=
Subject key identifier: 43:C1:C0:01:83:14:5F:79:AB:90:B0:CE:AE:94:A0:5C:E1:4E:A4:2E
Authority key identifier: 09:E4:73:7C:EE:36:CC:CE:68:19:F7:04:F9:A9:24:E3:B3:10:A5:E2
Certificate issuer: /CN=09E4737CEE36CCCE6819F704F9A924E3B310A5E2
Certificate serial: 561ADBD2B884E67190426A81630836DC1A0353B1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft
Manifest number: C3
Signing time: Sun 01 Feb 2026 19:01:26 +0000
Manifest this update: Sun 01 Feb 2026 18:56:26 +0000
Manifest next update: Thu 05 Feb 2026 04:10:26 +0000
Files and hashes: 1: 323030313a6466343a386534303a3a2f34382d3438203d3e20313533313530.roa (hash: VpLoaUpt0yVfGQxrRTavIki8YrtUgZnpRbQuyi6BNMU=)
2: 09E4737CEE36CCCE6819F704F9A924E3B310A5E2.crl (hash: ucqX7hwTUdB0Mf8afuvdFk5eHTVfHc9Z9QQVwUnuUJk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.crl
rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 04:10:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:1a:db:d2:b8:84:e6:71:90:42:6a:81:63:08:36:dc:1a:03:53:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09E4737CEE36CCCE6819F704F9A924E3B310A5E2
Validity
Not Before: Feb 1 18:56:26 2026 GMT
Not After : Feb 5 04:10:26 2026 GMT
Subject: CN=43C1C00183145F79AB90B0CEAE94A05CE14EA42E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ea:25:85:9a:7b:90:27:8a:7b:37:12:d6:ae:
98:73:72:f6:40:5b:29:18:4f:a7:64:8b:53:4b:9a:
ba:6b:8d:15:95:04:0b:5a:0c:e9:a4:c1:f4:91:66:
5f:bc:19:92:23:ae:ed:9c:1c:d6:97:c4:32:60:93:
dc:4a:7c:b6:82:9b:aa:9f:cc:18:05:6f:8e:c7:fa:
f5:41:99:0f:d7:cc:41:6c:1c:c3:ca:f3:f5:38:d6:
62:02:69:f4:74:34:e3:df:28:d6:67:6e:8f:63:45:
03:90:86:58:09:a6:35:1e:46:c9:dd:39:4c:ef:8f:
93:bd:95:10:8a:97:fb:51:e0:6a:ea:7f:b6:b6:b1:
d3:58:59:b3:98:51:6e:9b:de:88:6d:c8:de:b7:d8:
18:40:c8:73:dc:e8:21:12:a5:a2:1a:c0:81:19:5b:
39:5f:62:ec:34:0c:85:ca:11:80:32:0a:65:49:fc:
d4:d7:26:f4:79:45:5c:3f:49:91:4c:ba:d6:e1:8c:
02:70:4c:16:5e:ca:c5:7b:07:37:e2:f2:8b:a3:5c:
96:9f:79:ef:a4:2e:23:20:c0:d0:64:6e:11:e3:87:
7c:eb:fd:ea:b9:d2:dd:db:6b:c9:5d:d5:92:a9:f0:
9f:15:80:b7:74:62:8f:6a:70:b5:65:5a:c7:ea:05:
d4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C1:C0:01:83:14:5F:79:AB:90:B0:CE:AE:94:A0:5C:E1:4E:A4:2E
X509v3 Authority Key Identifier:
keyid:09:E4:73:7C:EE:36:CC:CE:68:19:F7:04:F9:A9:24:E3:B3:10:A5:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:22:13:eb:b7:7f:27:43:12:02:48:b9:36:b5:3b:d6:45:52:
12:f7:65:a8:23:45:13:16:37:da:c5:09:42:12:db:0c:51:70:
74:77:fd:c8:ca:c9:b4:08:ff:39:44:68:a2:10:ac:89:20:d6:
b7:3e:4d:79:52:41:b2:9d:08:d7:0a:b3:4a:99:1a:80:85:9b:
11:7c:65:49:34:eb:e4:6c:b6:fc:ef:a2:a2:72:10:bd:9e:71:
b7:ec:9a:97:b9:be:8b:21:9d:73:f2:da:ec:1d:1b:42:4b:5a:
f3:7c:83:c2:06:12:8a:7a:cd:69:4f:87:29:0e:92:4b:7d:28:
09:f6:80:a6:85:4a:60:74:1b:ba:b0:c2:9e:ad:1c:54:99:97:
b2:2f:d5:1a:e9:8a:45:b0:3a:ce:be:e1:9f:cf:ad:cf:0f:be:
7d:e5:12:e7:fd:ee:dd:27:9d:f6:b2:b0:ba:fd:3b:ac:22:f6:
c5:3b:25:06:b5:61:15:5d:ec:4a:b6:e7:94:9a:77:8f:bb:a0:
e0:58:8e:cf:da:76:7b:4a:86:b1:2a:af:00:8a:aa:69:35:47:
0b:97:a8:ab:1b:40:3c:96:22:4f:d0:df:eb:82:9e:37:ce:e0:
46:fe:be:0c:42:6e:6a:2b:10:c4:d5:6c:31:0a:0c:cc:36:df:
5f:89:5a:e9
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUVhrb0riE5nGQQmqBYwg23BoDU7EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDlFNDczN0NFRTM2Q0NDRTY4MTlGNzA0RjlBOTI0RTNC
MzEwQTVFMjAeFw0yNjAyMDExODU2MjZaFw0yNjAyMDUwNDEwMjZaMDMxMTAvBgNV
BAMTKDQzQzFDMDAxODMxNDVGNzlBQjkwQjBDRUFFOTRBMDVDRTE0RUE0MkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN6iWFmnuQJ4p7NxLWrphzcvZA
WykYT6dki1NLmrprjRWVBAtaDOmkwfSRZl+8GZIjru2cHNaXxDJgk9xKfLaCm6qf
zBgFb47H+vVBmQ/XzEFsHMPK8/U41mICafR0NOPfKNZnbo9jRQOQhlgJpjUeRsnd
OUzvj5O9lRCKl/tR4Grqf7a2sdNYWbOYUW6b3ohtyN632BhAyHPc6CESpaIawIEZ
WzlfYuw0DIXKEYAyCmVJ/NTXJvR5RVw/SZFMutbhjAJwTBZeysV7Bzfi8oujXJaf
ee+kLiMgwNBkbhHjh3zr/eq50t3ba8ld1ZKp8J8VgLd0Yo9qcLVlWsfqBdTLAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUQ8HAAYMUX3mrkLDOrpSgXOFOpC4wHwYDVR0j
BBgwFoAUCeRzfO42zM5oGfcE+akk47MQpeIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
NTk2MTJhMi00NDMzLTQyYjktOGY0Zi1iODQ3Nzc2YWNhZmQvMS8wOUU0NzM3Q0VF
MzZDQ0NFNjgxOUY3MDRGOUE5MjRFM0IzMTBBNUUyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDlFNDczN0NFRTM2Q0NDRTY4MTlGNzA0RjlBOTI0RTNCMzEw
QTVFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTU5NjEyYTItNDQzMy00MmI5LThm
NGYtYjg0Nzc3NmFjYWZkLzEvMDlFNDczN0NFRTM2Q0NDRTY4MTlGNzA0RjlBOTI0
RTNCMzEwQTVFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIAiE+u3fydDEgJIuTa1O9ZFUhL3ZagjRRMW
N9rFCUIS2wxRcHR3/cjKybQI/zlEaKIQrIkg1rc+TXlSQbKdCNcKs0qZGoCFmxF8
ZUk06+RstvzvoqJyEL2ecbfsmpe5voshnXPy2uwdG0JLWvN8g8IGEop6zWlPhykO
kkt9KAn2gKaFSmB0G7qwwp6tHFSZl7Iv1RrpikWwOs6+4Z/Prc8Pvn3lEuf97t0n
nfaysLr9O6wi9sU7JQa1YRVd7Eq255Sad4+7oOBYjs/adntKhrEqrwCKqmk1RwuX
qKsbQDyWIk/Q3+uCnjfO4Eb+vgxCbmorEMTVbDEKDMw231+JWuk=
-----END CERTIFICATE-----
Generated at Mon Feb 2 09:49:52 2026 by rpki-client