This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft
File: BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft (raw, json)
Hash identifier: NZx3b61yaPmOgbnpNi4WSaJTPV5+gv9eq3N+oGNufXU=
Subject key identifier: 91:40:B3:35:D7:42:EF:0D:C8:EA:7D:20:7E:74:69:4E:91:A7:22:D1
Authority key identifier: BB:9F:73:96:40:FA:A3:D9:05:27:D7:B5:7D:2D:1D:99:93:A4:2B:D1
Certificate issuer: /CN=BB9F739640FAA3D90527D7B57D2D1D9993A42BD1
Certificate serial: 6AF1DDFBD6FC29A9602D451AC8746C1084BFE2F5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft
Manifest number: 020E
Signing time: Sun 01 Feb 2026 04:20:56 +0000
Manifest this update: Sun 01 Feb 2026 04:15:56 +0000
Manifest next update: Wed 04 Feb 2026 11:15:56 +0000
Files and hashes: 1: BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl (hash: jbe/tQBj+FEky6d3MGmBWGcZC+2QqQEks5cH+0UIN1M=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl
rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 11:15:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:f1:dd:fb:d6:fc:29:a9:60:2d:45:1a:c8:74:6c:10:84:bf:e2:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BB9F739640FAA3D90527D7B57D2D1D9993A42BD1
Validity
Not Before: Feb 1 04:15:56 2026 GMT
Not After : Feb 4 11:15:56 2026 GMT
Subject: CN=9140B335D742EF0DC8EA7D207E74694E91A722D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:43:33:a3:68:13:b9:64:a9:d0:7c:9b:97:df:
4d:5c:72:da:6e:30:8f:b7:30:d6:1d:c4:c8:33:ad:
2f:62:84:a7:38:d5:69:66:6f:30:ae:9a:ec:93:d1:
bf:23:24:93:11:88:e4:a5:b1:bf:4c:7b:e1:d6:ab:
6c:78:51:ff:d7:74:56:3d:62:e2:22:01:c8:5a:bf:
47:b5:1a:d6:bc:8a:e8:69:ca:f8:a5:74:94:af:43:
9b:70:1e:d6:49:cb:fb:a4:fd:27:e6:c0:bf:4f:bd:
d6:c4:9f:5f:6f:71:4b:f6:a0:4c:ea:0c:78:f1:2d:
36:c3:17:b2:bd:04:b2:a6:17:e5:2a:8a:a3:e0:e5:
07:e8:ef:ad:92:7d:ad:1b:16:9a:69:b9:fa:70:f8:
e1:7a:12:32:fd:7d:5d:3a:e2:0f:58:a8:43:89:44:
cc:03:56:12:d6:f0:1d:b7:15:ca:f3:9c:2e:75:91:
a9:2f:9f:f9:1d:5b:60:f4:03:b8:83:92:3f:07:12:
de:53:24:be:0e:6b:5e:d6:0e:97:60:44:62:1b:ba:
73:37:22:65:35:51:eb:d8:9b:46:38:9b:15:8a:b4:
28:47:dc:91:b4:1a:18:07:5c:cb:69:9c:86:37:00:
0d:88:7f:ed:c5:5b:e9:b5:0c:55:08:0a:79:f7:65:
17:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:40:B3:35:D7:42:EF:0D:C8:EA:7D:20:7E:74:69:4E:91:A7:22:D1
X509v3 Authority Key Identifier:
keyid:BB:9F:73:96:40:FA:A3:D9:05:27:D7:B5:7D:2D:1D:99:93:A4:2B:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a0:36:0e:34:f2:59:f5:ae:2c:39:a9:2d:11:78:1c:69:b7:
32:e0:c7:f9:63:c0:f0:2e:fc:f8:15:eb:90:30:52:78:3d:6f:
b3:33:2b:dd:a5:7d:bb:9f:76:b1:1e:00:d9:7f:d7:3a:be:0e:
f7:11:77:73:ad:2e:25:85:fd:02:aa:1c:d9:30:a3:e6:32:52:
b9:57:34:b2:a3:80:2b:ae:2d:cf:3c:60:bb:70:5c:5e:5c:de:
3d:30:ef:2e:de:7e:84:d2:bf:62:94:95:1b:6d:be:cb:b6:c7:
00:dc:0e:65:94:6a:5f:e7:6c:65:c6:0e:d4:4c:bb:f3:27:66:
ed:b8:ad:37:49:a5:3f:b0:83:ff:f9:18:e8:9c:8d:45:3f:27:
3d:f3:df:60:48:02:cc:88:c0:bf:81:3a:4d:49:74:02:56:7b:
90:5b:32:3e:3a:9b:3e:27:4c:f9:7e:6f:2e:d5:2c:aa:9b:9e:
17:fa:7e:04:d8:cb:ca:ee:48:fa:ea:08:02:5b:4f:8e:3f:f4:
b5:36:a0:e3:cc:dc:91:25:e0:9f:ae:97:53:ba:c1:c3:cb:ce:
ee:ca:bd:d2:e3:fd:2f:d7:69:a1:96:6c:7e:cc:e2:8d:be:b3:
d3:02:f5:e2:7c:3d:ec:56:52:25:92:07:8a:6f:b7:4a:a6:4b:
bb:3b:da:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:49:51 2026 by rpki-client