This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft
File: F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft (raw, json)
Hash identifier: anCdEL9ZWxYzSycO0kD3ulc9FS99b9qP5zruQO9H5JQ=
Subject key identifier: A7:DD:70:48:FE:EE:AB:B9:16:AF:D1:02:20:94:29:D3:EE:E6:A4:A8
Authority key identifier: F9:F4:5A:EE:25:35:AA:13:9E:CA:27:28:06:E1:5B:F4:0C:C8:9B:98
Certificate issuer: /CN=F9F45AEE2535AA139ECA272806E15BF40CC89B98
Certificate serial: 42C5F44923EA31EF910D03721143B40258514211
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft
Manifest number: 01A4
Signing time: Mon 02 Feb 2026 06:42:23 +0000
Manifest this update: Mon 02 Feb 2026 06:37:23 +0000
Manifest next update: Thu 05 Feb 2026 07:49:23 +0000
Files and hashes: 1: F9F45AEE2535AA139ECA272806E15BF40CC89B98.crl (hash: oCrHL+8VtHYoLZXNzpUlSeU1UDhJRVuRVjoLO21DBkw=)
2: 3130332e3130352e392e302f32342d3234203d3e20313530393339.roa (hash: hcH6v6RlrdRAjVWDrVOqtAZuasdkitnMnAycrQrkzno=)
3: 3130332e3130352e382e302f32342d3234203d3e20313530393339.roa (hash: fGeye8pNhq5kvXjnhfQRX7MDbYw/hQQCjNdJBXmX1wE=)
4: 3130332e3130352e382e302f32332d3233203d3e20313530393339.roa (hash: 4goMGkXJ7mvm5yoxzX/P6coIIi1YjH1SZnzH4RGSxEo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.crl
rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:c5:f4:49:23:ea:31:ef:91:0d:03:72:11:43:b4:02:58:51:42:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9F45AEE2535AA139ECA272806E15BF40CC89B98
Validity
Not Before: Feb 2 06:37:23 2026 GMT
Not After : Feb 5 07:49:23 2026 GMT
Subject: CN=A7DD7048FEEEABB916AFD102209429D3EEE6A4A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:05:2c:d9:07:3c:c0:2e:c9:9d:78:3c:4c:e3:
c5:bc:b8:1c:fc:31:79:21:f3:60:d0:34:1d:af:67:
73:63:a1:05:52:4d:57:39:b9:ca:8d:68:c7:81:3a:
72:ff:51:f1:02:d3:c5:2a:95:d9:21:02:2b:68:3e:
33:1c:2b:60:fa:d6:5c:1c:8e:2b:b4:36:e1:07:74:
85:d1:2c:57:40:d3:39:31:92:b2:46:43:5f:f0:96:
2b:34:24:c0:92:c1:a8:e1:ca:30:53:36:11:3f:30:
ee:bb:41:86:c8:d0:5d:7e:83:41:03:7a:5f:73:bd:
79:ad:ab:54:4a:e1:81:ac:79:f4:83:55:0a:c5:af:
d2:8b:4e:c0:7e:18:7f:5c:66:d7:6f:c9:c6:a8:6b:
df:da:04:98:18:83:20:38:0f:a8:f9:83:7d:3e:04:
68:55:00:58:60:b8:3d:50:32:e1:77:fe:09:16:eb:
b3:e6:e5:13:19:14:af:d5:cb:00:23:02:91:56:95:
7c:ca:8c:ae:67:ca:0f:ea:c6:19:78:99:17:b6:4a:
9d:4d:ae:8c:5f:1c:d3:a4:bd:30:5e:f7:cf:cd:7c:
9c:b3:8d:84:50:da:01:83:c0:b4:da:5b:ea:29:2b:
f6:b3:6c:7a:f5:82:9c:72:35:a8:02:28:90:d0:18:
da:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DD:70:48:FE:EE:AB:B9:16:AF:D1:02:20:94:29:D3:EE:E6:A4:A8
X509v3 Authority Key Identifier:
keyid:F9:F4:5A:EE:25:35:AA:13:9E:CA:27:28:06:E1:5B:F4:0C:C8:9B:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:45:bf:0d:7a:c8:3a:b6:38:4f:df:57:16:72:6f:52:fb:6b:
81:72:26:c8:c1:0e:90:9e:f3:4b:bb:81:97:54:fd:d2:cb:3d:
2a:c5:59:c2:f8:eb:77:14:7c:2b:27:4b:d3:1e:2b:4c:12:f8:
5a:33:d6:0c:5f:59:35:ec:90:4a:d3:0e:b6:52:cf:88:29:8a:
51:17:81:e1:37:fe:d4:79:a5:29:97:a4:99:7c:20:ca:44:60:
2c:ca:46:4e:46:0c:68:9d:7c:f5:b5:3d:f9:6a:0a:79:87:ca:
b8:08:ba:46:91:0c:c3:c3:87:be:a4:b2:6f:da:35:12:91:05:
ad:a5:0d:0a:2d:d3:0b:be:69:03:57:8f:a7:52:61:66:cc:a7:
d8:26:34:96:0d:ce:99:c0:14:a0:55:9e:a0:94:c1:5f:8d:36:
aa:27:70:6c:42:71:10:03:40:05:52:1d:88:c3:21:82:df:38:
cd:91:ba:f1:ad:bf:83:f1:82:85:a1:47:94:b4:6d:2d:1e:8f:
90:95:30:54:23:48:3b:fc:7e:0d:d7:ba:8b:e1:f2:d7:f8:21:
e0:07:e6:8d:84:0e:b4:63:50:c5:3a:18:c3:7c:a1:6d:8b:c0:
41:75:73:f6:ca:c5:5b:aa:e0:83:c0:7f:55:41:54:8a:aa:c0:
da:14:de:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 14:27:01 2026 by rpki-client