This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft
File: 0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft (raw, json)
Hash identifier: +C/NELwxmi44MqTMOpSHbFDaAqNADFI2TV3TPjUH2Wg=
Subject key identifier: F6:FC:91:77:B0:FD:95:81:D4:98:1E:94:9E:A1:8C:4B:83:49:68:8F
Authority key identifier: 0A:1B:FC:E6:76:1D:8B:7F:B2:09:F7:CF:9E:D1:B3:DA:F0:60:36:12
Certificate issuer: /CN=0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612
Certificate serial: 200C82B6C58BCE519064EDE68CB57050DAE9AC80
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft
Manifest number: F2
Signing time: Mon 02 Feb 2026 07:51:12 +0000
Manifest this update: Mon 02 Feb 2026 07:46:12 +0000
Manifest next update: Thu 05 Feb 2026 18:37:12 +0000
Files and hashes: 1: 0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl (hash: t/A1kwNPUVNqITzljIRy6hcMp/t8ANdX6OjncL6Wqt0=)
2: 3136302e32322e3230342e302f32342d3234203d3e20313337333136.roa (hash: Zh8n/dPr3gHP9KgajNV0z2AsOCpEwb2affZu8V5L6qs=)
3: 3136302e32322e3230352e302f32342d3234203d3e20313337333136.roa (hash: 8dognkJ+3KqI8Zy3SbY9osu6X0L9/9P5xv+FtLtMt+4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl
rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 04:03:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:0c:82:b6:c5:8b:ce:51:90:64:ed:e6:8c:b5:70:50:da:e9:ac:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612
Validity
Not Before: Feb 2 07:46:12 2026 GMT
Not After : Feb 5 18:37:12 2026 GMT
Subject: CN=F6FC9177B0FD9581D4981E949EA18C4B8349688F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:16:4b:d9:4f:f4:d5:b5:07:6b:06:6b:74:3b:
87:8d:e9:e8:0d:81:15:ca:c6:db:fd:17:14:31:e3:
ce:60:72:d1:de:1b:30:9b:1f:68:c3:03:b8:5f:4b:
2e:42:94:6e:02:85:5c:99:69:df:24:1e:34:7a:da:
52:25:87:93:18:a1:a9:2f:2e:8a:67:71:df:40:4d:
30:c9:e0:07:c3:79:ca:4a:32:ba:73:0c:9b:e2:11:
c7:17:c9:4c:27:c1:a5:25:b5:0d:7a:55:1b:95:36:
9c:71:08:68:62:3b:88:df:09:b2:94:12:a8:23:fc:
95:1d:18:23:d3:d7:fd:7c:75:5a:83:21:71:50:4c:
9e:69:6b:23:fa:55:e1:02:dd:f2:92:b1:58:ba:f4:
93:ce:3a:9e:59:cc:c0:b7:70:dc:8c:a4:b9:02:c1:
3d:4e:d7:80:af:76:17:c7:3f:8b:dd:e9:f1:32:33:
17:47:d7:11:1a:e2:69:52:88:6c:ed:b4:82:ea:fc:
3b:b5:fa:ab:d7:5c:d5:92:9a:1e:11:e9:aa:c0:8d:
27:d9:ad:96:eb:ec:b1:35:68:f7:52:1a:25:54:b5:
82:a8:22:6a:eb:d3:e5:bd:66:7b:2f:2b:21:9c:f7:
aa:99:4e:04:41:c5:a2:28:1e:fd:b1:66:38:5a:17:
29:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FC:91:77:B0:FD:95:81:D4:98:1E:94:9E:A1:8C:4B:83:49:68:8F
X509v3 Authority Key Identifier:
keyid:0A:1B:FC:E6:76:1D:8B:7F:B2:09:F7:CF:9E:D1:B3:DA:F0:60:36:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:a8:dd:8c:98:4f:83:92:86:2a:ce:9a:f3:46:d2:66:ab:a6:
92:5e:a6:3a:80:8e:0c:a5:dc:a6:0a:3d:3d:2a:93:36:df:95:
05:bf:d3:db:aa:1b:2c:35:30:03:e1:3f:50:ba:88:0b:af:74:
f9:bc:00:41:80:d9:2e:8a:69:71:85:a6:28:0c:bf:bc:9f:51:
5c:8f:21:4f:88:59:72:44:67:86:f4:8d:e7:76:69:10:21:e1:
67:9a:9b:9d:72:e4:b9:a0:80:46:70:06:bd:cf:2e:04:b8:89:
e0:3d:00:48:38:72:4c:d4:3a:3b:27:3a:dd:85:4b:0e:71:29:
45:6f:52:90:70:dd:9f:89:f2:b9:c2:d9:b8:58:e0:6b:4b:81:
50:84:ff:93:12:c6:e8:9a:e7:f6:8c:26:e9:87:42:18:dc:fa:
ed:5b:d6:a3:75:0c:48:c2:18:ca:c5:ff:fd:fd:19:3a:14:34:
36:57:48:bf:d5:7f:d3:b8:ab:29:c1:55:5e:8a:b5:2f:49:01:
c4:d7:0c:85:ca:e5:91:b2:7b:71:03:51:6c:50:f6:95:29:22:
ba:e1:b2:9f:f9:55:41:d2:78:ff:b3:d2:ee:ea:ef:eb:ab:7e:
b3:a6:52:4b:61:bb:45:66:79:b1:dc:e8:70:bb:0c:94:b9:1d:
30:e0:a7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 14:26:52 2026 by rpki-client