This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft
File: 9EA3AB422D824FDD9A25622F84924203216B1ED1.mft (raw, json)
Hash identifier: 4nXDwWoQQuQerxPufh+6SrPzDcTNe/exv3IEB0ZbfhE=
Subject key identifier: 70:B4:1F:52:40:94:38:57:FA:2B:ED:7D:40:27:85:B8:D0:BD:1E:9C
Authority key identifier: 9E:A3:AB:42:2D:82:4F:DD:9A:25:62:2F:84:92:42:03:21:6B:1E:D1
Certificate issuer: /CN=9EA3AB422D824FDD9A25622F84924203216B1ED1
Certificate serial: 416A89CC4A39FC3D844FCA623027BFEFA3B32477
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft
Manifest number: 0547
Signing time: Sat 31 Jan 2026 09:12:33 +0000
Manifest this update: Sat 31 Jan 2026 09:07:33 +0000
Manifest next update: Tue 03 Feb 2026 19:46:33 +0000
Files and hashes: 1: 3130332e3134332e3234352e302f32342d3234203d3e20313332363337.roa (hash: 6PlxgJw3wczfPI3pJqCBYAaWPhz8cJ8ggi4impe+Zc0=)
2: 3130332e3134332e3234342e302f32332d3233203d3e20313332363337.roa (hash: BNnKvvCVYuhYuPiWLtu0g7CENyoqMhejtTMBFTTfKsk=)
3: 323430353a363063303a3a2f33322d3332203d3e20313332363337.roa (hash: T7pT3m50bD1TtJQnSE7uRmUGoMQoMkMp3Yiyl2FWmEI=)
4: 9EA3AB422D824FDD9A25622F84924203216B1ED1.crl (hash: bxYP6Y1ph8qlws5lW4P64jnXYKfo2v3hL4MtbGUZ5ac=)
5: 3130332e3134332e3234342e302f32342d3234203d3e20313332363337.roa (hash: BAHkWg5wgdiP9DS/EDI18ZNMV2WT4QoTyiafWi6I7HI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.crl
rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 19:46:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:6a:89:cc:4a:39:fc:3d:84:4f:ca:62:30:27:bf:ef:a3:b3:24:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9EA3AB422D824FDD9A25622F84924203216B1ED1
Validity
Not Before: Jan 31 09:07:33 2026 GMT
Not After : Feb 3 19:46:33 2026 GMT
Subject: CN=70B41F5240943857FA2BED7D402785B8D0BD1E9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c6:06:a7:40:4b:b2:fb:66:20:17:0b:64:98:
40:3a:34:bb:b7:7e:ce:0d:1f:af:6f:bf:01:2b:da:
3b:3a:de:10:d5:f6:e7:96:e0:f9:ae:6c:41:1f:81:
ff:7f:19:08:c8:07:53:24:76:5a:a2:3b:be:3f:25:
f8:4b:36:a6:60:7e:9c:d4:82:4a:ad:dc:67:ed:ab:
1b:05:5b:dc:c1:08:d2:b0:1d:a1:02:53:6b:c6:c1:
7e:b3:26:09:b7:5d:06:12:d0:26:c2:6d:38:cf:ab:
93:58:fb:da:34:24:9f:9e:fa:68:f8:c3:36:d5:42:
d7:f0:bc:b6:24:97:a6:01:c5:78:a4:70:6b:1e:8c:
8b:a5:e4:8c:fe:32:b6:c1:48:2f:74:02:76:a2:4e:
ff:fb:73:79:35:bd:7b:9d:a4:d6:ae:7a:73:42:5f:
67:80:49:b7:bb:4f:83:9b:59:68:77:ab:53:13:20:
38:5e:a1:24:42:3f:72:53:e1:13:a1:1b:44:60:d8:
52:0d:c5:bd:58:60:41:af:79:6c:3e:f6:de:7c:59:
38:a2:30:80:8b:e1:6f:7f:db:37:a7:bc:70:c7:32:
6f:08:f7:47:41:b9:ec:64:2f:df:6e:c2:7a:b9:88:
c2:6b:28:c4:6a:16:a6:d8:e4:c6:78:f6:8a:42:dc:
b4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B4:1F:52:40:94:38:57:FA:2B:ED:7D:40:27:85:B8:D0:BD:1E:9C
X509v3 Authority Key Identifier:
keyid:9E:A3:AB:42:2D:82:4F:DD:9A:25:62:2F:84:92:42:03:21:6B:1E:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:df:3e:61:81:91:18:c0:5b:6f:f6:5b:55:fd:ce:da:7d:41:
f8:a3:cf:21:97:1d:33:22:ae:e4:cb:46:b0:a0:a9:46:ed:4e:
f4:ef:dd:ae:02:52:2a:f9:d6:65:6b:d4:89:b4:b0:b6:98:30:
bd:a8:fe:5d:65:d5:9c:07:b3:0f:31:59:c0:76:cc:6b:de:9d:
45:f6:e3:2d:d1:21:78:d6:82:10:57:5e:5d:9b:42:c1:0e:cd:
3e:f2:fe:fb:bc:91:1a:6e:1b:eb:c9:3b:11:f6:b2:20:fc:b7:
c4:75:d4:c5:c5:42:04:6f:7a:e5:96:33:16:96:48:2a:3b:7d:
21:93:6e:9a:b9:03:52:69:23:01:a0:ca:71:69:dc:b8:85:c6:
71:c2:b0:9c:1d:f7:cd:ae:c1:ee:03:d4:29:d9:2c:71:5b:99:
9b:d0:77:f9:4f:f2:45:03:0b:71:b0:4c:60:7a:17:6a:fe:0c:
a0:29:4a:8b:72:1f:cb:ff:82:b7:3e:64:09:2d:d0:23:4a:c6:
af:4f:f3:3f:5f:73:4d:bf:d6:7c:46:44:d3:83:6c:0a:45:38:
25:7c:c0:b1:9b:b8:f2:cd:af:26:ae:f2:38:d1:59:8e:a2:fd:
aa:49:bd:b3:d0:5b:62:2c:94:da:ea:8f:e2:d9:77:b9:59:15:
23:85:2b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 20:56:47 2026 by rpki-client