This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft
File: 9B0395E989465D693E38FF5140C2FABE1631B562.mft (raw, json)
Hash identifier: G+zNpt47h282THtR/0AnJ+WtTqN6Z+0cLxPib04mjqg=
Subject key identifier: BE:47:E9:E9:F3:DF:38:60:75:FB:C0:AD:EB:17:02:05:BB:51:B2:9D
Authority key identifier: 9B:03:95:E9:89:46:5D:69:3E:38:FF:51:40:C2:FA:BE:16:31:B5:62
Certificate issuer: /CN=9B0395E989465D693E38FF5140C2FABE1631B562
Certificate serial: 5F80DD72B850687B4DF4608B0A47757663FB1021
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B0395E989465D693E38FF5140C2FABE1631B562.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft
Manifest number: E6
Signing time: Wed 03 Dec 2025 04:10:05 +0000
Manifest this update: Wed 03 Dec 2025 04:05:05 +0000
Manifest next update: Sat 06 Dec 2025 15:56:05 +0000
Files and hashes: 1: 9B0395E989465D693E38FF5140C2FABE1631B562.crl (hash: y33pl92dej+krTiHcVK/georBqsdsQ8YoLgY5lpZjdw=)
2: 3130332e31382e3233322e302f32332d3234203d3e20313530323331.roa (hash: wUtK6lO7dD/y5QIQIRKJysOh0xNgmCTXdRc7wOm6Gq4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.crl
rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B0395E989465D693E38FF5140C2FABE1631B562.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 12:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:80:dd:72:b8:50:68:7b:4d:f4:60:8b:0a:47:75:76:63:fb:10:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B0395E989465D693E38FF5140C2FABE1631B562
Validity
Not Before: Dec 3 04:05:05 2025 GMT
Not After : Dec 6 15:56:05 2025 GMT
Subject: CN=BE47E9E9F3DF386075FBC0ADEB170205BB51B29D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e7:03:2d:d5:f8:f2:cf:e8:1f:8c:00:3f:41:
84:4c:43:27:85:25:b3:3b:93:07:40:c7:e5:b3:64:
fc:5f:bd:1f:d5:4f:98:aa:d2:9a:02:34:f1:db:8c:
e9:44:1d:4d:f2:b0:2b:5c:95:c1:55:7c:28:cf:d3:
0d:29:4d:02:89:e1:a4:52:14:4e:bc:40:73:72:60:
8e:fa:46:8f:8f:30:58:5f:bf:b5:b6:14:92:75:6b:
44:f4:ea:1d:01:4c:8d:02:25:53:2b:b6:d8:a9:80:
cd:53:fb:72:18:1d:c5:1a:e1:3a:02:0d:8d:7b:21:
23:da:d0:6b:91:56:80:ca:d4:ec:3c:e1:98:c6:be:
10:f6:8e:f7:75:bf:1d:84:77:61:1e:f8:db:f8:5c:
ca:fd:74:f3:79:99:29:f8:54:80:6c:f6:49:ab:20:
9b:bb:10:77:b0:bd:2c:09:c4:0f:6e:21:b3:13:1a:
65:32:19:ef:14:94:17:09:b5:8a:71:49:d9:9b:38:
10:07:9c:76:e3:98:82:44:fd:b1:34:66:57:c2:6e:
c3:a7:e8:1b:c8:a1:75:0b:db:20:27:cc:74:d5:20:
fb:e4:15:98:30:f7:25:e0:ea:34:c5:15:86:73:7f:
14:d9:d0:20:f7:86:32:b4:09:97:c6:ab:e6:b3:63:
73:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:47:E9:E9:F3:DF:38:60:75:FB:C0:AD:EB:17:02:05:BB:51:B2:9D
X509v3 Authority Key Identifier:
keyid:9B:03:95:E9:89:46:5D:69:3E:38:FF:51:40:C2:FA:BE:16:31:B5:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B0395E989465D693E38FF5140C2FABE1631B562.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:77:13:24:21:38:c0:f7:a9:fb:88:ea:ee:e8:e0:27:c5:9e:
7b:42:45:46:8b:2b:4c:fe:ec:11:69:ae:47:ab:5b:03:99:f0:
c0:a3:c5:0f:62:68:2c:83:b1:2c:54:83:d1:c5:64:80:c7:43:
bc:91:db:5b:88:2c:11:ca:52:bd:7a:f1:3e:49:5a:3e:3f:73:
28:d5:b2:fa:d1:a7:3f:7b:ec:84:c4:cf:75:ca:70:58:10:45:
3f:dc:44:b0:1b:a1:a5:da:9a:12:79:cd:f1:f1:c0:f0:68:db:
be:11:75:40:71:76:6a:33:e0:e3:9e:0c:78:bf:a6:fc:33:0e:
f9:eb:b3:08:90:99:7e:ee:06:76:a9:e9:bb:e1:ac:8a:19:6c:
42:d3:57:72:cc:a4:26:86:22:b0:a4:c3:9c:c3:9a:44:52:7d:
72:2c:16:3f:1d:70:44:9c:12:08:32:98:26:3e:08:2a:6c:9e:
f9:b7:7d:5a:ee:49:bb:8a:c0:ed:e6:ff:85:cf:8a:e3:73:98:
3f:db:db:6a:ae:55:1d:93:a2:93:76:7d:69:52:c5:38:b4:7a:
66:22:d0:01:c6:39:77:50:04:c1:d6:b2:bb:26:26:f9:c3:73:
9c:94:ff:33:5d:03:72:e6:1a:b1:95:07:85:13:8b:67:2d:82:
b5:a9:1a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:13:23 2025 by rpki-client