This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft
File: 97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft (raw, json)
Hash identifier: cNMXa3hn8nm0rmU9nMVDNdAcCFxBfrTIDhR/fu3mcQw=
Subject key identifier: 06:DF:D9:05:05:3C:7D:FD:9C:7B:78:8B:1D:59:69:84:60:AE:EC:35
Authority key identifier: 97:A2:5D:3F:DD:AA:C4:37:1D:F4:BE:C7:7A:A5:89:D7:E1:71:45:DC
Certificate issuer: /CN=97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC
Certificate serial: 771164D84F026DDCDC10CEBB23E153F1E8CCCDD1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft
Manifest number: 0323
Signing time: Sat 31 Jan 2026 21:50:00 +0000
Manifest this update: Sat 31 Jan 2026 21:45:00 +0000
Manifest next update: Wed 04 Feb 2026 00:27:00 +0000
Files and hashes: 1: 97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.crl (hash: +8S6zOJUtDwsCT9nhJCKj36swJ3jWQ2Vv126W13Lmas=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.crl
rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 00:27:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:11:64:d8:4f:02:6d:dc:dc:10:ce:bb:23:e1:53:f1:e8:cc:cd:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC
Validity
Not Before: Jan 31 21:45:00 2026 GMT
Not After : Feb 4 00:27:00 2026 GMT
Subject: CN=06DFD905053C7DFD9C7B788B1D59698460AEEC35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:75:b6:9b:bc:b9:f5:23:90:5d:3f:b9:d1:4d:
c3:ad:f4:ef:c0:55:99:17:97:74:6d:37:17:09:60:
34:ce:4e:11:09:9c:44:2a:19:91:a9:03:13:c2:02:
bd:96:a2:aa:3d:56:65:34:0f:73:76:50:7c:a8:a6:
56:76:be:e7:89:3f:ca:49:b2:22:a0:20:09:9c:d0:
9b:c9:9c:f4:9d:5a:93:15:e9:27:b9:42:85:01:fa:
37:2b:2d:b2:fe:e8:51:e3:b8:67:aa:9e:dd:20:8f:
97:60:c4:a3:84:a3:5f:13:41:39:2f:4e:e1:a9:d3:
4c:a9:85:8b:c2:4a:a1:64:96:47:6e:2f:4d:c5:cc:
be:cb:11:a4:d9:20:7b:94:8b:71:f1:dc:91:7e:32:
43:b9:c8:dd:ed:f6:c3:ba:52:b6:48:9b:c5:82:ff:
9c:62:9d:c0:a6:c1:d8:54:6e:80:f9:8d:4b:8f:c2:
7e:2e:7e:41:57:6b:06:c2:89:5c:b8:74:d7:3b:a8:
48:4a:ba:eb:5e:0a:d0:74:f0:3b:ce:19:b8:58:42:
cb:1e:20:2b:19:32:c2:ec:4e:4d:d4:8c:48:d1:cd:
8e:06:7d:ea:18:31:9d:fc:81:74:7c:f2:b7:bb:b7:
0e:a0:4c:df:da:9a:7e:4c:a5:9d:9e:0c:9a:d6:67:
38:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DF:D9:05:05:3C:7D:FD:9C:7B:78:8B:1D:59:69:84:60:AE:EC:35
X509v3 Authority Key Identifier:
keyid:97:A2:5D:3F:DD:AA:C4:37:1D:F4:BE:C7:7A:A5:89:D7:E1:71:45:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:69:ed:1a:68:dc:5b:40:7b:7a:48:c4:36:7f:4b:73:9e:26:
8e:0f:94:ee:5f:db:b7:93:d7:79:17:e5:38:92:ed:07:f3:21:
c9:44:ad:1a:72:bf:7d:a9:09:0e:cb:83:ef:3f:48:fb:12:eb:
5b:12:e1:c5:90:d5:01:80:7e:13:e9:8f:80:61:53:9c:b4:e4:
18:77:fa:77:9d:bd:12:42:c2:99:ef:fd:4c:1f:29:46:1f:0a:
fb:3c:07:b2:07:4e:ef:35:27:67:1e:49:35:1d:4b:9a:cd:9d:
ab:64:b0:a3:ee:82:23:c5:59:c1:1b:1f:dc:5e:7b:1b:1b:43:
07:21:65:f6:a2:cd:02:74:f5:93:ad:08:fa:a9:7e:ce:4c:2c:
54:de:03:11:63:75:0d:d5:75:c4:e5:1d:68:56:ff:46:04:f8:
b1:df:49:68:95:ae:d2:98:f1:2e:ce:a5:3f:fc:ae:84:3e:ef:
3f:6b:ae:61:23:8b:12:4b:b1:f0:8a:25:5b:43:28:4c:59:cd:
66:87:05:e9:93:1d:e3:a2:13:84:c7:b2:ce:00:0b:45:fd:df:
d5:1b:13:dd:2a:6e:c6:e3:f2:62:8c:ad:f9:a8:1d:84:c5:f5:
98:4f:d4:e3:39:1e:11:a7:1f:ec:b1:9b:2d:69:01:87:4f:b2:
4e:df:0d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:42:12 2026 by rpki-client