This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft
File: 9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft (raw, json)
Hash identifier: 6yFf9Zlxsve5D6ZLMezh6QnPfuhliipFhF6+wn0o+UA=
Subject key identifier: 85:9F:BF:DD:AB:6C:32:04:8A:27:3B:78:10:12:96:D5:BD:FA:64:87
Authority key identifier: 9C:0D:BD:7A:E1:93:2E:6B:9D:09:83:FC:48:E3:21:43:D8:A4:CF:93
Certificate issuer: /CN=9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93
Certificate serial: 296C2ED732258C1B1E47FA899A6041BCA530E343
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft
Manifest number: A9
Signing time: Tue 16 Dec 2025 18:01:36 +0000
Manifest this update: Tue 16 Dec 2025 17:56:36 +0000
Manifest next update: Sat 20 Dec 2025 02:11:36 +0000
Files and hashes: 1: 9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.crl (hash: l36HqwxBICFAQg6okdoQqh0EKntnMhBeYZBTgHAg7Ks=)
2: 3136302e3138372e3233312e302f32342d3234203d3e20313533313430.roa (hash: mdfPWkwanzfVl6roK/rM6ll9riZUs320X01YsS/31ms=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.crl
rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Dec 2025 02:11:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:6c:2e:d7:32:25:8c:1b:1e:47:fa:89:9a:60:41:bc:a5:30:e3:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93
Validity
Not Before: Dec 16 17:56:36 2025 GMT
Not After : Dec 20 02:11:36 2025 GMT
Subject: CN=859FBFDDAB6C32048A273B78101296D5BDFA6487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:68:8f:ee:24:e6:7c:25:df:92:91:96:39:a7:
4f:1c:b3:07:4a:43:8c:24:d0:7f:c2:56:06:af:36:
08:1d:dd:37:eb:ac:d8:60:64:a6:ed:6a:09:e9:db:
eb:11:22:10:ca:d9:e6:61:07:96:e1:c0:e3:ee:d8:
ff:6c:27:15:69:e0:dd:75:a0:b9:d3:2e:65:91:b6:
90:66:7c:ac:55:c3:3a:09:09:19:83:e6:a2:54:ca:
40:80:68:e4:e8:66:9d:84:a0:ec:8c:bf:9d:d5:a3:
29:fd:48:22:8e:7c:08:76:7b:0c:47:60:d2:1d:10:
e0:17:2c:57:27:a0:33:8b:5a:92:16:34:5c:9e:5b:
e0:d0:d0:a6:99:ec:72:a0:da:9a:b4:1a:af:75:bc:
52:b9:59:48:13:84:f5:be:69:1e:23:b6:02:8f:46:
55:5a:71:2d:0c:b6:bd:f5:06:33:8c:44:49:fc:35:
6e:b5:6f:dc:c8:53:e8:b4:c0:55:9c:bf:6f:19:eb:
59:b6:c2:23:70:3b:7f:77:1d:da:c1:0c:9b:dc:bd:
4a:e0:c9:ff:19:dc:72:a6:6b:83:9d:b7:c1:a5:73:
26:72:34:dd:7d:24:3f:1e:90:2b:b9:c5:2a:0c:0b:
4d:24:c0:6f:af:bf:c4:87:15:92:4f:54:44:d9:41:
75:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9F:BF:DD:AB:6C:32:04:8A:27:3B:78:10:12:96:D5:BD:FA:64:87
X509v3 Authority Key Identifier:
keyid:9C:0D:BD:7A:E1:93:2E:6B:9D:09:83:FC:48:E3:21:43:D8:A4:CF:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:8d:d3:1b:39:03:51:95:4b:63:43:f9:4c:2a:d8:0f:0e:60:
4c:6b:b1:7c:0c:b8:41:84:7f:f1:ce:f4:0e:1f:3d:7f:f3:97:
f7:20:1c:9c:08:f2:42:84:f7:d7:44:b1:0a:77:0d:c1:94:7c:
a4:6f:82:a7:64:67:f9:45:2f:de:aa:33:40:04:4a:11:33:0d:
05:d9:66:79:ec:41:f7:b3:da:81:0a:f1:65:2f:ce:19:55:d1:
86:18:7f:8b:5a:b8:5c:24:d2:4f:b1:e2:60:4e:3d:ad:35:bb:
c8:ab:00:4e:db:49:aa:52:0f:29:ad:90:e8:83:df:d0:5e:07:
1e:94:31:f6:17:d2:aa:50:0e:e4:33:a4:4c:15:0a:9e:45:95:
54:c3:4c:b2:96:91:ed:e9:03:e9:e5:7b:cc:49:31:9a:e9:75:
9b:30:29:01:94:90:db:64:24:de:38:de:af:45:4b:29:ae:3a:
8c:fd:30:3a:4b:93:09:ce:84:1d:87:03:a3:e4:c1:88:2d:b3:
5c:3f:28:50:57:cc:94:a2:40:51:b3:29:01:df:7c:55:90:f7:
54:4a:f3:b8:28:1c:33:80:75:b4:20:27:c4:50:e8:93:ef:9e:
27:5f:ec:9d:6a:0c:62:16:d0:69:c5:bf:fe:35:ed:dd:e7:8c:
2f:00:9b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 11:11:00 2025 by rpki-client