This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft
File: 97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft (raw, json)
Hash identifier: F8bo44GswzjB6HUG4K/zNLR1RSV3J3cj1HgbuWnivBc=
Subject key identifier: E9:EA:FA:47:37:F2:B0:B6:FF:38:07:DA:7B:2E:71:35:68:A9:05:FB
Authority key identifier: 97:77:6F:FF:02:B9:0F:FC:17:B6:58:A0:B1:A5:98:DB:EA:88:8F:04
Certificate issuer: /CN=97776FFF02B90FFC17B658A0B1A598DBEA888F04
Certificate serial: 5511100C5EAB46E72A58F189B20F92BEC074BC34
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97776FFF02B90FFC17B658A0B1A598DBEA888F04.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft
Manifest number: 0102
Signing time: Sat 06 Dec 2025 20:21:10 +0000
Manifest this update: Sat 06 Dec 2025 20:16:10 +0000
Manifest next update: Wed 10 Dec 2025 00:04:10 +0000
Files and hashes: 1: 97776FFF02B90FFC17B658A0B1A598DBEA888F04.crl (hash: GOJBjxwsZfjwGwR6za3EiRT+uW0tsxlQ6WOte3XkaDY=)
2: 323030313a6466333a633334303a3a2f34382d3438203d3e20313532333932.roa (hash: DWvVDDRpAMOpRUqp8QzsrLlGUPEfbewyxxzSjcofq2U=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.crl
rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97776FFF02B90FFC17B658A0B1A598DBEA888F04.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:11:10:0c:5e:ab:46:e7:2a:58:f1:89:b2:0f:92:be:c0:74:bc:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97776FFF02B90FFC17B658A0B1A598DBEA888F04
Validity
Not Before: Dec 6 20:16:10 2025 GMT
Not After : Dec 10 00:04:10 2025 GMT
Subject: CN=E9EAFA4737F2B0B6FF3807DA7B2E713568A905FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:49:6a:94:73:0d:cd:2d:8e:1b:1a:df:3d:29:
17:a3:11:85:39:fb:92:94:7b:fd:ad:a0:53:bc:d6:
bb:75:11:e4:b1:73:b7:51:ea:16:5d:18:7b:4b:4d:
47:5a:7b:3a:f5:c0:39:74:86:95:b9:43:6e:91:45:
c1:26:b0:5a:d8:59:3e:d1:0f:30:37:be:3f:c8:6d:
e6:eb:01:a3:d0:e9:4c:9b:99:8c:59:b1:26:a3:58:
59:19:29:6f:4b:2c:c5:2e:e4:14:10:62:bc:95:db:
4e:8a:4c:67:de:00:90:56:b7:cf:46:06:3c:0c:45:
6e:69:75:9d:f5:d6:b3:4f:6f:e4:2f:3a:2b:79:dc:
07:74:35:a8:6c:2d:d9:7e:22:f8:0d:59:b9:72:75:
6f:aa:c8:ca:92:1c:34:39:c2:a0:29:28:12:17:81:
e0:21:83:7e:a3:83:5b:80:98:94:3c:71:44:5f:70:
8e:c2:f6:37:a6:01:f5:4a:1a:51:95:ed:5e:56:32:
26:46:c8:de:7d:23:51:04:ca:ca:99:60:78:ae:dc:
f6:53:be:ba:35:0a:b0:cc:b9:95:a9:eb:71:ca:88:
27:1d:90:3e:60:f0:e4:e9:1a:d4:c3:d6:d7:a2:e8:
53:55:2f:d1:43:32:7b:d3:15:54:77:ba:1e:b0:51:
a1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:EA:FA:47:37:F2:B0:B6:FF:38:07:DA:7B:2E:71:35:68:A9:05:FB
X509v3 Authority Key Identifier:
keyid:97:77:6F:FF:02:B9:0F:FC:17:B6:58:A0:B1:A5:98:DB:EA:88:8F:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97776FFF02B90FFC17B658A0B1A598DBEA888F04.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:bd:a6:60:1f:e7:72:bc:f7:45:77:1f:c3:a3:e3:60:ad:4c:
0d:90:06:ff:6b:3e:9f:0d:b0:a1:3c:e3:f2:2b:7c:6f:2a:2c:
13:63:e6:c0:cc:06:bb:e6:3b:bc:b0:27:b1:dd:6b:a7:ca:de:
4f:a5:17:56:1b:f0:51:d1:14:74:ac:38:31:fd:6e:de:54:42:
5d:80:70:76:43:4b:88:72:ef:e7:26:6f:cb:ef:45:dd:23:2c:
62:17:c9:e8:cc:3c:be:77:fb:47:79:37:3c:4b:55:7d:a5:aa:
3f:88:6e:b9:07:b5:4e:e5:00:fd:2a:ce:0c:6d:bc:db:dd:c9:
11:05:28:8f:eb:d2:59:43:5f:60:5c:82:a0:bc:cd:1f:90:e5:
b5:9e:65:f6:e6:45:4f:57:bd:56:32:30:64:9c:da:e3:af:c8:
e6:6a:62:3f:60:bb:55:4d:36:27:1e:48:0d:bc:75:f4:13:31:
d8:c5:96:de:ca:0b:37:2c:8e:09:28:79:76:e1:31:4e:b1:4a:
34:d0:a8:a8:82:1e:a9:69:2f:76:88:34:af:b0:41:ed:39:c5:
ec:0c:9f:5b:3d:25:b3:02:fc:a1:0e:f0:af:f7:3e:b1:2c:7d:
b9:38:e8:42:8a:b7:8a:24:df:76:5f:84:41:55:bd:ee:c2:6c:
8d:8f:33:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:50:56 2025 by rpki-client