This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft
File: 809C666CC84F942588E109E6E6C454A9CD0524EB.mft (raw, json)
Hash identifier: pSSqN23HwzG0gq7s1/HZEBNTH6/11vE0j1Po/4FF1Zg=
Subject key identifier: 22:93:70:10:3B:79:90:B1:9D:B0:3F:D4:EC:BB:0C:3C:3B:03:F8:48
Authority key identifier: 80:9C:66:6C:C8:4F:94:25:88:E1:09:E6:E6:C4:54:A9:CD:05:24:EB
Certificate issuer: /CN=809C666CC84F942588E109E6E6C454A9CD0524EB
Certificate serial: 34088679FC8547EF0008EFDB6802FD7F81A8E3C3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809C666CC84F942588E109E6E6C454A9CD0524EB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft
Manifest number: 0233
Signing time: Sat 31 Jan 2026 11:20:48 +0000
Manifest this update: Sat 31 Jan 2026 11:15:48 +0000
Manifest next update: Tue 03 Feb 2026 20:03:48 +0000
Files and hashes: 1: 3130332e3133312e36312e302f32342d3234203d3e20313338313236.roa (hash: JcJ+92BdJBAynj8d5WBKVDE8qMrLGTneeQasC0St1x4=)
2: 809C666CC84F942588E109E6E6C454A9CD0524EB.crl (hash: QDdeJTqFlys4gXZlEe0Cq9aBiO/Bf9nmRnoeH+MKVIM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.crl
rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809C666CC84F942588E109E6E6C454A9CD0524EB.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 20:03:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:08:86:79:fc:85:47:ef:00:08:ef:db:68:02:fd:7f:81:a8:e3:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=809C666CC84F942588E109E6E6C454A9CD0524EB
Validity
Not Before: Jan 31 11:15:48 2026 GMT
Not After : Feb 3 20:03:48 2026 GMT
Subject: CN=229370103B7990B19DB03FD4ECBB0C3C3B03F848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d2:06:8a:76:78:16:18:ea:1f:e9:be:df:8f:
b6:c8:e5:eb:0b:e1:e6:d8:35:89:fc:58:b4:f3:05:
b6:20:b2:9e:0a:60:0d:4c:2e:66:b2:87:dc:9b:62:
4d:9f:13:bd:22:d6:c3:47:63:58:06:d0:8b:6b:b5:
08:c1:cd:6f:c6:51:a5:71:ed:53:54:70:59:ac:0d:
fb:00:69:ce:e8:f2:9c:5e:9f:d3:a2:1f:a9:1b:d1:
bd:54:56:1e:a6:07:b8:b1:f3:99:9b:77:d1:34:da:
86:1a:2e:10:ea:a3:4d:aa:8f:ba:72:f5:c7:e2:88:
53:e2:22:7f:98:27:f1:01:71:e5:d4:ba:05:81:72:
10:bb:9a:63:89:e6:33:db:de:f9:18:8d:78:9a:bb:
e0:29:e1:16:7a:3b:58:68:e7:96:7c:65:da:a4:5f:
67:35:54:9e:61:0f:53:6b:ea:5c:4e:c2:63:fc:7c:
21:11:16:77:33:77:1c:7a:22:f3:7e:33:c2:7f:d3:
67:ad:7a:d3:f1:29:dd:d5:2f:0a:9c:2f:85:b7:18:
3c:cc:ea:bb:ea:b1:26:07:a3:02:ca:4e:d2:d4:d9:
f6:34:7e:ad:b9:1a:e6:c5:a2:2f:46:26:66:0f:18:
74:ee:1e:09:65:b6:89:d7:b7:8b:3b:fb:ab:49:d9:
2c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:93:70:10:3B:79:90:B1:9D:B0:3F:D4:EC:BB:0C:3C:3B:03:F8:48
X509v3 Authority Key Identifier:
keyid:80:9C:66:6C:C8:4F:94:25:88:E1:09:E6:E6:C4:54:A9:CD:05:24:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809C666CC84F942588E109E6E6C454A9CD0524EB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:3f:68:f4:58:2c:f9:6a:87:ac:2a:b2:bc:80:10:8b:c2:7c:
a1:d7:bd:6a:c2:d4:5c:47:ae:99:80:34:70:f5:7c:be:c7:12:
ea:37:1c:ad:15:5c:ab:fd:89:c1:39:61:a6:7c:86:6f:9f:92:
25:05:66:3a:5b:5c:03:79:2f:a5:ff:58:2d:1e:c8:5f:c8:d5:
b4:4e:9b:8f:84:17:43:a0:10:4c:f9:92:ea:55:56:40:ac:20:
4c:cf:d1:9d:7a:88:09:3a:76:59:6c:ec:50:5b:fa:96:6a:fb:
7c:e4:f4:fb:0f:1b:bc:f7:09:9b:25:36:f8:d1:3f:50:33:19:
03:4d:5b:0c:14:d4:e8:79:3f:e2:8b:14:f2:0f:37:5c:73:5a:
28:a7:5b:3c:17:f8:6d:99:39:60:d4:09:80:12:fa:99:e6:14:
99:26:c5:5f:20:46:ae:a6:80:ec:4f:24:cd:89:4c:9c:d0:8b:
1d:c1:88:4b:03:08:f7:18:27:c9:a4:45:66:d1:eb:ba:29:51:
af:02:95:07:0a:ea:3d:7d:89:ec:24:f2:a1:bd:7f:25:e1:20:
3e:65:1a:da:38:e6:df:51:f8:93:af:17:08:43:06:49:f9:02:
1f:7a:e2:99:af:8d:96:d4:48:41:ba:bf:36:58:11:0d:0e:d8:
2f:c7:9d:ba
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUNAiGefyFR+8ACO/baAL9f4Go48MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODA5QzY2NkNDODRGOTQyNTg4RTEwOUU2RTZDNDU0QTlD
RDA1MjRFQjAeFw0yNjAxMzExMTE1NDhaFw0yNjAyMDMyMDAzNDhaMDMxMTAvBgNV
BAMTKDIyOTM3MDEwM0I3OTkwQjE5REIwM0ZENEVDQkIwQzNDM0IwM0Y4NDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC0gaKdngWGOof6b7fj7bI5esL
4ebYNYn8WLTzBbYgsp4KYA1MLmayh9ybYk2fE70i1sNHY1gG0ItrtQjBzW/GUaVx
7VNUcFmsDfsAac7o8pxen9OiH6kb0b1UVh6mB7ix85mbd9E02oYaLhDqo02qj7py
9cfiiFPiIn+YJ/EBceXUugWBchC7mmOJ5jPb3vkYjXiau+Ap4RZ6O1ho55Z8Zdqk
X2c1VJ5hD1Nr6lxOwmP8fCERFnczdxx6IvN+M8J/02etetPxKd3VLwqcL4W3GDzM
6rvqsSYHowLKTtLU2fY0fq25GubFoi9GJmYPGHTuHglltonXt4s7+6tJ2SylAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUIpNwEDt5kLGdsD/U7LsMPDsD+EgwHwYDVR0j
BBgwFoAUgJxmbMhPlCWI4Qnm5sRUqc0FJOswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
NmQ1NzIwMS03ZTJmLTQ5YmItOTQxZC05ZmNhYmU4NjIzZjUvMC84MDlDNjY2Q0M4
NEY5NDI1ODhFMTA5RTZFNkM0NTRBOUNEMDUyNEVCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODA5QzY2NkNDODRGOTQyNTg4RTEwOUU2RTZDNDU0QTlDRDA1
MjRFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZkNTcyMDEtN2UyZi00OWJiLTk0
MWQtOWZjYWJlODYyM2Y1LzAvODA5QzY2NkNDODRGOTQyNTg4RTEwOUU2RTZDNDU0
QTlDRDA1MjRFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAI0/aPRYLPlqh6wqsryAEIvCfKHXvWrC1FxH
rpmANHD1fL7HEuo3HK0VXKv9icE5YaZ8hm+fkiUFZjpbXAN5L6X/WC0eyF/I1bRO
m4+EF0OgEEz5kupVVkCsIEzP0Z16iAk6dlls7FBb+pZq+3zk9PsPG7z3CZslNvjR
P1AzGQNNWwwU1Oh5P+KLFPIPN1xzWiinWzwX+G2ZOWDUCYAS+pnmFJkmxV8gRq6m
gOxPJM2JTJzQix3BiEsDCPcYJ8mkRWbR67opUa8ClQcK6j19iewk8qG9fyXhID5l
Gto45t9R+JOvFwhDBkn5Ah964pmvjZbUSEG6vzZYEQ0O2C/Hnbo=
-----END CERTIFICATE-----
Generated at Mon Feb 2 12:48:45 2026 by rpki-client