This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft
File: 9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft (raw, json)
Hash identifier: ZZIRM/j8MluQMzlWauf0YmeE65/WcyoF5dzFzz6C/as=
Subject key identifier: 6B:83:E8:D7:4D:30:F5:91:F4:3B:E9:31:17:B7:4B:A7:88:82:02:BB
Authority key identifier: 9D:97:13:1B:95:3D:97:C1:8D:6B:71:F6:DE:63:20:9F:65:41:DB:0E
Certificate issuer: /CN=9D97131B953D97C18D6B71F6DE63209F6541DB0E
Certificate serial: 6121DD43BB7D5AF50454CD505722A8F1824AD829
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft
Manifest number: 01A7
Signing time: Sun 01 Feb 2026 01:20:40 +0000
Manifest this update: Sun 01 Feb 2026 01:15:40 +0000
Manifest next update: Wed 04 Feb 2026 01:30:40 +0000
Files and hashes: 1: 3130332e3131372e31302e302f32342d3234203d3e20313530343738.roa (hash: +olAq7p56zfhKu5twJLCWaLZ5DJyPxgYj3wH5RLPlus=)
2: 9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl (hash: ZpbWXaw4qP7kJXf4KwnOmg+pf5eKnASORJxCAT+QzaY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl
rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 01:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:21:dd:43:bb:7d:5a:f5:04:54:cd:50:57:22:a8:f1:82:4a:d8:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D97131B953D97C18D6B71F6DE63209F6541DB0E
Validity
Not Before: Feb 1 01:15:40 2026 GMT
Not After : Feb 4 01:30:40 2026 GMT
Subject: CN=6B83E8D74D30F591F43BE93117B74BA7888202BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:80:18:b5:c9:c7:c3:0e:4f:0a:42:cf:70:9f:
c6:1f:9b:c2:9c:1d:51:e9:e5:a0:3f:db:2a:b4:84:
5b:86:7e:44:c2:7a:4c:6f:1d:66:85:47:27:d6:34:
ad:66:3f:b8:34:44:4c:e1:1a:90:3c:26:dc:8e:dc:
59:f3:b3:5c:51:d8:9e:f2:f9:38:0f:a7:da:5d:8a:
05:ce:52:8a:62:c9:f0:b4:7d:86:ca:2a:a5:3d:38:
df:fd:5d:93:62:d3:c6:e7:76:17:2f:e6:a5:70:0e:
82:5d:2f:f7:81:d4:cc:0b:d2:75:b8:47:5d:22:3c:
84:b8:9d:5b:62:84:3f:d1:ee:fa:be:54:1f:90:57:
7c:4c:9b:b2:85:e3:83:4f:19:15:63:07:cb:0a:4d:
40:09:a0:d5:94:2d:8b:17:b5:d5:c0:d2:43:3c:0b:
69:4b:00:41:d9:64:37:ea:b5:2c:70:aa:a8:71:34:
30:23:84:f7:c6:21:23:95:32:25:cf:eb:6a:51:85:
81:ea:0b:83:f5:22:f5:e7:08:ea:45:aa:76:73:37:
75:73:87:a1:59:df:6d:e4:8b:b3:4c:74:f8:cb:6f:
6f:e8:19:4f:c4:4b:d8:69:7e:61:9e:e3:d7:a1:c6:
3c:70:b8:c9:c6:be:76:ed:42:12:6c:1f:ff:99:78:
69:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:83:E8:D7:4D:30:F5:91:F4:3B:E9:31:17:B7:4B:A7:88:82:02:BB
X509v3 Authority Key Identifier:
keyid:9D:97:13:1B:95:3D:97:C1:8D:6B:71:F6:DE:63:20:9F:65:41:DB:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:f6:68:a5:9c:68:d0:87:4d:0a:99:52:df:a6:12:3f:b4:ce:
54:ec:fe:5d:b6:ac:1e:4d:6e:56:bd:91:45:ef:f8:e0:14:56:
6d:d1:21:09:b9:40:40:76:e5:f3:a4:81:b0:0c:eb:2d:09:f7:
73:da:b4:80:69:50:82:4d:aa:c2:63:be:3a:ee:2d:77:f2:e7:
d2:08:05:da:0b:e9:f6:e4:67:4e:39:37:31:82:a6:98:86:e5:
f6:0b:ba:47:35:52:9a:dc:34:7f:c5:59:2a:64:40:3d:ae:9c:
da:9b:36:2b:3d:6a:ca:55:e6:68:b3:8c:8f:16:e1:29:79:8e:
52:d1:a5:51:2b:26:6b:d0:91:16:3d:90:03:cc:a2:a3:fe:f3:
93:e4:52:dd:ae:47:ba:ac:5d:a2:c8:e1:0f:20:20:00:5d:54:
1c:12:b0:74:2e:1f:61:3f:9d:54:6e:a0:80:a9:09:7d:7a:0f:
09:f0:b3:c2:92:c5:6d:0f:c8:c9:d8:8c:b5:ca:a3:10:15:1b:
10:df:7d:bb:7a:20:f0:8e:91:dd:e1:12:51:a7:1e:cf:c4:f4:
1e:ca:59:5c:bd:c3:4d:14:89:d2:f0:3f:a1:e0:76:4c:13:38:
10:eb:d4:3d:4a:13:48:82:c4:30:22:8f:3c:7e:3b:23:78:27:
88:4b:b5:77
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUYSHdQ7t9WvUEVM1QVyKo8YJK2CkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQ5NzEzMUI5NTNEOTdDMThENkI3MUY2REU2MzIwOUY2
NTQxREIwRTAeFw0yNjAyMDEwMTE1NDBaFw0yNjAyMDQwMTMwNDBaMDMxMTAvBgNV
BAMTKDZCODNFOEQ3NEQzMEY1OTFGNDNCRTkzMTE3Qjc0QkE3ODg4MjAyQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEgBi1ycfDDk8KQs9wn8Yfm8Kc
HVHp5aA/2yq0hFuGfkTCekxvHWaFRyfWNK1mP7g0REzhGpA8JtyO3Fnzs1xR2J7y
+TgPp9pdigXOUopiyfC0fYbKKqU9ON/9XZNi08bndhcv5qVwDoJdL/eB1MwL0nW4
R10iPIS4nVtihD/R7vq+VB+QV3xMm7KF44NPGRVjB8sKTUAJoNWULYsXtdXA0kM8
C2lLAEHZZDfqtSxwqqhxNDAjhPfGISOVMiXP62pRhYHqC4P1IvXnCOpFqnZzN3Vz
h6FZ323ki7NMdPjLb2/oGU/ES9hpfmGe49ehxjxwuMnGvnbtQhJsH/+ZeGnjAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUa4Po100w9ZH0O+kxF7dLp4iCArswHwYDVR0j
BBgwFoAUnZcTG5U9l8GNa3H23mMgn2VB2w4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
ZGM2Y2NkMi04ODk3LTRhNGUtODFjZS1jMzYxYTVlNjhkZDYvMC85RDk3MTMxQjk1
M0Q5N0MxOEQ2QjcxRjZERTYzMjA5RjY1NDFEQjBFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUQ5NzEzMUI5NTNEOTdDMThENkI3MUY2REU2MzIwOUY2NTQx
REIwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRjNmNjZDItODg5Ny00YTRlLTgx
Y2UtYzM2MWE1ZTY4ZGQ2LzAvOUQ5NzEzMUI5NTNEOTdDMThENkI3MUY2REU2MzIw
OUY2NTQxREIwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIf2aKWcaNCHTQqZUt+mEj+0zlTs/l22rB5N
bla9kUXv+OAUVm3RIQm5QEB25fOkgbAM6y0J93PatIBpUIJNqsJjvjruLXfy59II
BdoL6fbkZ045NzGCppiG5fYLukc1UprcNH/FWSpkQD2unNqbNis9aspV5mizjI8W
4Sl5jlLRpVErJmvQkRY9kAPMoqP+85PkUt2uR7qsXaLI4Q8gIABdVBwSsHQuH2E/
nVRuoICpCX16Dwnws8KSxW0PyMnYjLXKoxAVGxDffbt6IPCOkd3hElGnHs/E9B7K
WVy9w00UidLwP6HgdkwTOBDr1D1KE0iCxDAijzx+OyN4J4hLtXc=
-----END CERTIFICATE-----
Generated at Mon Feb 2 12:47:00 2026 by rpki-client