This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft
File: F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft (raw, json)
Hash identifier: kUg2crQRriMAp8BoWpYBBQre8CNdoSP2hfaqwiswm2E=
Subject key identifier: 16:37:77:36:30:11:3C:52:BE:DB:4E:4D:94:2F:D0:A0:53:ED:F4:00
Authority key identifier: F9:D6:38:DD:A6:C7:54:F5:CF:82:A1:74:AE:82:F9:4D:51:E5:E3:26
Certificate issuer: /CN=F9D638DDA6C754F5CF82A174AE82F94D51E5E326
Certificate serial: 6710EA119427C31600CD73DFFD3315596EC61AF7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft
Manifest number: 03C4
Signing time: Sat 31 Jan 2026 12:21:21 +0000
Manifest this update: Sat 31 Jan 2026 12:16:21 +0000
Manifest next update: Tue 03 Feb 2026 19:33:21 +0000
Files and hashes: 1: F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl (hash: qHB1yGnMhdlgg0n7xbEdN4heYIe1+I7lAsOLz3WQ0WA=)
2: 3130332e37362e3230342e302f32342d3234203d3e20313335343833.roa (hash: UNQHXefmTjjZzqKDptBY5GSq3NLUfCppyUbcC2Dn3FU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl
rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 19:33:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:10:ea:11:94:27:c3:16:00:cd:73:df:fd:33:15:59:6e:c6:1a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9D638DDA6C754F5CF82A174AE82F94D51E5E326
Validity
Not Before: Jan 31 12:16:21 2026 GMT
Not After : Feb 3 19:33:21 2026 GMT
Subject: CN=1637773630113C52BEDB4E4D942FD0A053EDF400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:25:66:50:d0:2b:bd:a8:7e:04:e5:27:b9:6f:
3b:de:ce:9b:18:e3:6a:7f:eb:49:59:33:2c:a3:32:
76:48:8d:dd:91:9f:1d:46:3a:08:f7:d8:78:23:6d:
cc:45:f7:aa:43:5f:74:19:7f:4d:e8:56:41:ca:c3:
17:16:f3:19:f3:cf:2d:67:9a:4c:3f:61:c3:93:a8:
d2:d1:93:9b:9d:dc:a5:03:aa:ed:a5:28:61:de:7f:
47:48:d2:f3:3a:a7:26:40:04:0d:fa:be:bb:4a:31:
2e:56:b0:a1:c6:6f:0d:02:4e:2a:71:a3:27:99:3c:
28:cf:90:9f:b9:bb:4a:1c:c5:cd:13:1b:c9:bf:3f:
f4:4d:bb:a6:6b:bc:b7:4f:9e:3b:8a:8c:47:1f:77:
4c:13:5a:b4:e6:5f:03:9d:5b:63:d3:d7:30:e1:a7:
88:2c:a4:84:8b:0d:6d:df:6e:9b:8a:da:81:8f:aa:
5f:0f:b5:66:ca:0a:0a:c1:ee:e8:1e:cb:9b:3f:2d:
2e:92:df:84:d0:20:c3:c2:bc:41:57:77:77:0d:30:
f3:f3:e1:fe:f8:95:c8:58:f9:74:02:2a:8f:80:da:
16:1b:b1:3c:c0:21:b7:88:61:c9:a4:bc:42:9a:1d:
1c:dd:ab:58:0c:a6:9d:cd:2b:5e:7e:81:0e:b0:a4:
e0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:37:77:36:30:11:3C:52:BE:DB:4E:4D:94:2F:D0:A0:53:ED:F4:00
X509v3 Authority Key Identifier:
keyid:F9:D6:38:DD:A6:C7:54:F5:CF:82:A1:74:AE:82:F9:4D:51:E5:E3:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:59:f3:f8:72:89:9e:71:bb:f3:99:ca:c3:4b:6b:87:1f:4e:
86:e9:cd:cc:d7:2b:1a:ba:fd:a8:0e:42:91:0f:e9:9f:f4:b9:
71:70:8b:30:c6:9f:51:db:49:bb:58:bb:12:d4:a6:cb:a1:2b:
a2:e6:6f:ca:8e:46:8e:b6:fb:18:37:a6:93:0f:4d:48:68:43:
e4:0d:9a:e2:10:27:2f:8d:81:db:e1:ba:8a:4c:97:eb:2b:ce:
f0:8a:2b:5b:22:05:9d:dc:2c:87:b9:68:69:23:5a:61:22:a6:
33:c7:ca:3d:42:cd:22:18:6e:22:f8:a6:5a:b2:db:e9:57:5b:
89:1f:0d:cb:8c:f8:12:b8:dd:5c:69:34:fa:9a:56:94:30:33:
e9:a3:e7:81:3c:77:97:4a:e7:e9:c6:df:c2:70:9e:68:66:3b:
5f:4e:8c:3f:a4:26:0f:6a:b1:5d:5a:9c:d3:51:94:b5:d6:85:
a7:f6:f9:9e:51:11:11:15:24:43:28:f4:bd:8a:0c:22:68:b4:
61:09:9e:ee:fd:1f:ef:a5:34:64:80:d0:d1:85:9b:0e:95:4c:
87:1e:88:d3:37:4b:f6:1d:b4:ed:14:fb:c1:5e:06:19:e9:bb:
b2:56:73:3e:a7:99:f9:4d:2d:d7:62:13:f1:91:b7:62:01:3a:
d0:f6:47:1b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZxDqEZQnwxYAzXPf/TMVWW7GGvcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjlENjM4RERBNkM3NTRGNUNGODJBMTc0QUU4MkY5NEQ1
MUU1RTMyNjAeFw0yNjAxMzExMjE2MjFaFw0yNjAyMDMxOTMzMjFaMDMxMTAvBgNV
BAMTKDE2Mzc3NzM2MzAxMTNDNTJCRURCNEU0RDk0MkZEMEEwNTNFREY0MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4JWZQ0Cu9qH4E5Se5bzvezpsY
42p/60lZMyyjMnZIjd2Rnx1GOgj32HgjbcxF96pDX3QZf03oVkHKwxcW8xnzzy1n
mkw/YcOTqNLRk5ud3KUDqu2lKGHef0dI0vM6pyZABA36vrtKMS5WsKHGbw0CTipx
oyeZPCjPkJ+5u0ocxc0TG8m/P/RNu6ZrvLdPnjuKjEcfd0wTWrTmXwOdW2PT1zDh
p4gspISLDW3fbpuK2oGPql8PtWbKCgrB7ugey5s/LS6S34TQIMPCvEFXd3cNMPPz
4f74lchY+XQCKo+A2hYbsTzAIbeIYcmkvEKaHRzdq1gMpp3NK15+gQ6wpOAHAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUFjd3NjARPFK+205NlC/QoFPt9AAwHwYDVR0j
BBgwFoAU+dY43abHVPXPgqF0roL5TVHl4yYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
NWE3M2QwNC0yMTRmLTQ2YjgtOTc0Ni02MmNkZTg1NTg4ZmEvMC9GOUQ2MzhEREE2
Qzc1NEY1Q0Y4MkExNzRBRTgyRjk0RDUxRTVFMzI2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjlENjM4RERBNkM3NTRGNUNGODJBMTc0QUU4MkY5NEQ1MUU1
RTMyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjVhNzNkMDQtMjE0Zi00NmI4LTk3
NDYtNjJjZGU4NTU4OGZhLzAvRjlENjM4RERBNkM3NTRGNUNGODJBMTc0QUU4MkY5
NEQ1MUU1RTMyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFZZ8/hyiZ5xu/OZysNLa4cfTobpzczXKxq6
/agOQpEP6Z/0uXFwizDGn1HbSbtYuxLUpsuhK6Lmb8qORo62+xg3ppMPTUhoQ+QN
muIQJy+NgdvhuopMl+srzvCKK1siBZ3cLIe5aGkjWmEipjPHyj1CzSIYbiL4plqy
2+lXW4kfDcuM+BK43VxpNPqaVpQwM+mj54E8d5dK5+nG38JwnmhmO19OjD+kJg9q
sV1anNNRlLXWhaf2+Z5REREVJEMo9L2KDCJotGEJnu79H++lNGSA0NGFmw6VTIce
iNM3S/YdtO0U+8FeBhnpu7JWcz6nmflNLddiE/GRt2IBOtD2Rxs=
-----END CERTIFICATE-----
Generated at Mon Feb 2 09:52:05 2026 by rpki-client