This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft
File: A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft (raw, json)
Hash identifier: 0AP3NM5ri3z9bOO5Ov1C017qfX6mBcK13pdaHqUwVqY=
Subject key identifier: C9:D4:1F:6E:E0:26:97:47:6A:86:96:0F:D9:31:52:51:C3:A0:F3:09
Authority key identifier: A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17
Certificate issuer: /CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517
Certificate serial: 30F665FF1E0BA63502C1E94B313B5C48DF0D7EC4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft
Manifest number: 02D0
Signing time: Sun 01 Feb 2026 10:51:11 +0000
Manifest this update: Sun 01 Feb 2026 10:46:11 +0000
Manifest next update: Wed 04 Feb 2026 12:52:11 +0000
Files and hashes: 1: 3130332e372e38362e302f32332d3234203d3e20313331363934.roa (hash: APpcCxdCQsZeZ4X6Dve/zLkKutoUIXdYu4ws8c5i5zE=)
2: 3130332e372e38372e302f32342d3234203d3e20313331363934.roa (hash: +JM0TomazNNUIzDrdeT/2lCB49TQVdyUwiNybNA2Lao=)
3: 3130332e372e38342e302f32342d3234203d3e20313331363934.roa (hash: +OuFRQQCgw1PD5PrziLmo5M1zEaNfWHIcGtXO9rN0mk=)
4: 3130332e372e38362e302f32342d3234203d3e20313331363934.roa (hash: +uqH4dZVRd/BNuma17esD+DC5t8XckmCgoWEZgqVoMc=)
5: A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl (hash: 9n9RBCY4iQT3NrW4/+xqefqP4uQONde0B5/FV3gFazI=)
6: 3130332e372e38342e302f32332d3234203d3e20313331363934.roa (hash: JILAlyEUCKaQwya6IqmIgI2ApwRDLktJQgK62DvR8co=)
7: 3130332e372e38342e302f32322d3234203d3e20313331363934.roa (hash: 71BPyF6TQbJ+TmKpEFmEYqSO/ws8/NivO3sz64KU1XU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl
rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 12:52:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:f6:65:ff:1e:0b:a6:35:02:c1:e9:4b:31:3b:5c:48:df:0d:7e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517
Validity
Not Before: Feb 1 10:46:11 2026 GMT
Not After : Feb 4 12:52:11 2026 GMT
Subject: CN=C9D41F6EE02697476A86960FD9315251C3A0F309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:5d:d9:b1:3d:1b:ad:f4:a6:09:e6:f8:76:a3:
11:73:ce:d1:56:e5:c5:70:08:46:44:9d:87:00:fc:
07:8a:20:b0:33:45:f7:3b:1b:ee:b8:48:fd:16:1b:
01:a8:7e:07:6d:04:20:5d:6f:2e:72:12:0d:3c:86:
7b:72:2f:33:db:60:7c:79:0b:a8:0c:00:83:5e:c0:
de:9c:48:8d:d3:45:8b:a2:38:9f:55:03:2d:83:72:
3c:d2:8e:56:5b:b0:32:25:5a:20:b0:49:69:32:fc:
e7:7c:f3:70:f5:72:0b:6a:a1:2b:d3:5c:aa:6c:d1:
fd:61:62:87:12:56:b8:18:b4:f8:a8:82:dd:44:b2:
63:59:41:74:e2:f8:44:f5:d4:69:bb:c0:9f:e3:f5:
b1:3e:5c:49:c1:de:08:cf:89:12:8d:d2:ea:09:fe:
28:8a:a6:20:a0:e0:e7:20:1c:e9:52:fa:b1:60:fa:
06:a6:c7:b0:aa:f3:be:b8:ea:68:c1:92:8a:a5:31:
56:91:ea:ee:4f:41:43:e4:76:72:69:7c:84:54:54:
e8:96:e1:4b:25:9a:ac:67:46:c7:db:b0:1c:4b:21:
5c:21:39:ca:27:8a:6f:86:27:02:45:0f:09:af:ce:
c4:b5:2e:11:0e:db:47:77:7c:df:2a:0f:e3:ee:85:
68:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D4:1F:6E:E0:26:97:47:6A:86:96:0F:D9:31:52:51:C3:A0:F3:09
X509v3 Authority Key Identifier:
keyid:A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:16:4a:35:27:db:7e:ab:24:9d:0c:ec:16:98:6e:e5:e1:85:
ec:06:99:ba:45:79:dc:55:15:de:bb:a9:e8:fe:7d:b7:23:c2:
0b:2a:9a:d5:47:9b:81:9e:98:65:fd:3f:f0:4e:a9:97:6c:2e:
55:0e:b1:5a:c4:af:39:4b:09:ed:04:53:0c:c6:1b:0b:ae:60:
87:1f:30:86:22:6f:f3:a7:8d:78:9c:c0:05:40:e8:ab:70:86:
91:fd:84:32:7a:e2:00:65:fa:ff:14:33:68:94:c3:d4:75:d9:
39:54:b1:85:6c:2a:88:eb:96:4c:f9:35:23:2d:8f:f0:0c:c4:
48:e3:77:f2:a5:0d:68:1f:7a:c1:b9:f0:98:4f:62:97:f1:bd:
95:60:b2:45:fe:52:3f:0d:02:38:b6:f6:aa:41:af:36:42:6e:
83:bb:78:5d:df:3e:57:9f:b5:22:b6:b7:d7:23:73:95:c3:a8:
e1:a5:27:93:ed:96:82:ce:18:2b:e8:83:a4:d7:80:7f:26:93:
02:08:50:12:7f:e1:d5:01:06:09:53:c7:a5:ff:cf:99:92:64:
8b:28:f2:4e:60:c0:b0:36:d3:1c:7e:f9:44:44:23:45:da:0c:
66:09:e9:06:59:4f:80:6f:01:9b:2f:b1:75:57:c8:c4:62:97:
a0:dd:30:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:45:16 2026 by rpki-client