This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft
File: B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft (raw, json)
Hash identifier: gTTCNe1isA5JcjfTf5SYp4e7nL6pldXMlPwZocojecc=
Subject key identifier: 8D:6A:C2:78:75:5A:8B:6E:A3:53:22:B0:2F:A4:9F:42:D5:97:3E:C4
Authority key identifier: B7:A3:DE:01:7F:B3:D7:40:B2:93:22:D8:18:D5:C6:A8:FE:6D:4C:30
Certificate issuer: /CN=B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30
Certificate serial: 592A02D8A6F64BC6BB7BF2085EAF0AEC08B8233A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft
Manifest number: 013F
Signing time: Sat 06 Dec 2025 00:31:21 +0000
Manifest this update: Sat 06 Dec 2025 00:26:21 +0000
Manifest next update: Tue 09 Dec 2025 08:52:21 +0000
Files and hashes: 1: 3130332e3231352e36302e302f32342d3234203d3e20313531353033.roa (hash: c5Ptunx0DxSg1RC8HNdaw2kkwRNC2sVu1ggTOO3Xchs=)
2: 3130332e3231352e36312e302f32342d3234203d3e20313531353033.roa (hash: D+929vyik9rLnra49U9ffY9oB4C7JSkmWEo+cZ0qzyk=)
3: B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.crl (hash: 1LVDF1J2bOYcxYELCy57DD7O7mGOmAS+/Xk6Ymw6KFE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.crl
rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 08:52:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:2a:02:d8:a6:f6:4b:c6:bb:7b:f2:08:5e:af:0a:ec:08:b8:23:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30
Validity
Not Before: Dec 6 00:26:21 2025 GMT
Not After : Dec 9 08:52:21 2025 GMT
Subject: CN=8D6AC278755A8B6EA35322B02FA49F42D5973EC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:72:07:18:f0:50:00:e9:03:cb:52:8d:25:d1:
44:e1:97:6d:9a:80:f8:92:f7:9b:3f:03:9c:92:4c:
09:00:5e:4e:f8:2c:27:93:1f:97:6a:6d:52:0b:b5:
ae:2e:a5:e7:82:8b:a2:14:53:47:23:f2:6c:54:73:
36:b4:ba:4f:15:24:be:64:1f:4a:35:9a:08:9c:c7:
1d:76:2f:f8:c1:f9:9d:0b:0c:32:2c:13:6d:46:6d:
ad:82:89:41:1e:18:1f:9d:84:bf:09:86:13:f7:d2:
15:12:21:73:41:5d:19:8b:ba:78:09:51:2c:d0:20:
ef:0e:a1:07:7e:28:a4:74:19:23:9e:4f:41:9d:c5:
78:89:09:cd:37:b0:78:32:27:6d:0b:bb:55:e3:c1:
8b:85:ed:b3:f7:e8:1b:ae:9a:68:50:0b:14:63:52:
a2:2c:04:4d:3d:cd:a6:52:15:16:fd:da:95:90:f2:
2f:b1:57:cc:33:8d:f1:eb:b0:e0:97:09:0a:27:01:
84:a5:d5:b1:9f:07:95:2f:fa:40:90:9f:85:1d:57:
d1:c0:ae:31:5e:ba:89:e4:ec:d5:27:58:49:88:0e:
89:42:79:28:7c:50:74:50:82:22:f1:54:37:10:c1:
29:93:e6:b3:72:15:4a:e3:90:40:81:55:e2:45:30:
65:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6A:C2:78:75:5A:8B:6E:A3:53:22:B0:2F:A4:9F:42:D5:97:3E:C4
X509v3 Authority Key Identifier:
keyid:B7:A3:DE:01:7F:B3:D7:40:B2:93:22:D8:18:D5:C6:A8:FE:6D:4C:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:32:30:36:d1:34:b5:8b:5d:03:50:48:56:46:8f:65:e0:de:
ae:8d:68:2f:5f:76:77:88:b7:c3:db:88:84:5f:0c:29:10:a1:
3a:6f:ac:7c:74:b2:66:f4:77:02:de:ef:cc:f4:cb:bb:f2:af:
22:36:24:81:a2:0d:24:bc:c4:3e:df:e1:33:af:92:f3:c7:9f:
87:ba:dd:2e:90:ea:e9:ad:ee:05:7e:ba:d0:00:91:a0:aa:ac:
cb:f0:46:ff:4c:c3:db:68:ff:b1:d1:60:60:1a:ef:97:6e:f6:
b3:eb:e6:27:38:d5:9a:d7:08:e2:a1:50:05:e9:76:c3:5a:e4:
a4:92:0d:57:8b:0b:a8:c0:07:51:b8:ee:70:a3:b4:59:82:13:
5f:fe:e3:e7:55:8e:67:cf:47:9d:bd:e9:82:f2:41:90:3b:71:
90:e2:26:c8:d3:6a:16:86:b5:92:65:60:3d:82:ab:04:ad:c1:
61:56:d1:b5:25:13:98:dd:44:dd:03:3d:6e:ca:ae:9b:94:9d:
09:ea:88:86:18:32:03:98:1d:9b:5d:ff:03:4f:fd:19:d5:51:
54:5d:71:74:58:b0:de:13:f4:bd:de:37:c6:19:49:7d:6a:9a:
76:39:de:b3:1a:2c:8c:da:7d:c0:4e:6c:48:5b:4c:2b:a7:95:
8f:f6:b9:21
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUWSoC2Kb2S8a7e/IIXq8K7Ai4IzowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdBM0RFMDE3RkIzRDc0MEIyOTMyMkQ4MThENUM2QThG
RTZENEMzMDAeFw0yNTEyMDYwMDI2MjFaFw0yNTEyMDkwODUyMjFaMDMxMTAvBgNV
BAMTKDhENkFDMjc4NzU1QThCNkVBMzUzMjJCMDJGQTQ5RjQyRDU5NzNFQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDcgcY8FAA6QPLUo0l0UThl22a
gPiS95s/A5ySTAkAXk74LCeTH5dqbVILta4upeeCi6IUU0cj8mxUcza0uk8VJL5k
H0o1mgicxx12L/jB+Z0LDDIsE21Gba2CiUEeGB+dhL8JhhP30hUSIXNBXRmLungJ
USzQIO8OoQd+KKR0GSOeT0GdxXiJCc03sHgyJ20Lu1XjwYuF7bP36BuummhQCxRj
UqIsBE09zaZSFRb92pWQ8i+xV8wzjfHrsOCXCQonAYSl1bGfB5Uv+kCQn4UdV9HA
rjFeuonk7NUnWEmIDolCeSh8UHRQgiLxVDcQwSmT5rNyFUrjkECBVeJFMGUZAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUjWrCeHVai26jUyKwL6SfQtWXPsQwHwYDVR0j
BBgwFoAUt6PeAX+z10CykyLYGNXGqP5tTDAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
NjE2YzA0ZC1kOWUwLTRjMWYtOGExNC1lMjNiZjI3NDQ1OTIvMC9CN0EzREUwMTdG
QjNENzQwQjI5MzIyRDgxOEQ1QzZBOEZFNkQ0QzMwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjdBM0RFMDE3RkIzRDc0MEIyOTMyMkQ4MThENUM2QThGRTZE
NEMzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYxNmMwNGQtZDllMC00YzFmLThh
MTQtZTIzYmYyNzQ0NTkyLzAvQjdBM0RFMDE3RkIzRDc0MEIyOTMyMkQ4MThENUM2
QThGRTZENEMzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEMyMDbRNLWLXQNQSFZGj2Xg3q6NaC9fdneI
t8PbiIRfDCkQoTpvrHx0smb0dwLe78z0y7vyryI2JIGiDSS8xD7f4TOvkvPHn4e6
3S6Q6umt7gV+utAAkaCqrMvwRv9Mw9to/7HRYGAa75du9rPr5ic41ZrXCOKhUAXp
dsNa5KSSDVeLC6jAB1G47nCjtFmCE1/+4+dVjmfPR5296YLyQZA7cZDiJsjTahaG
tZJlYD2CqwStwWFW0bUlE5jdRN0DPW7KrpuUnQnqiIYYMgOYHZtd/wNP/RnVUVRd
cXRYsN4T9L3eN8YZSX1qmnY53rMaLIzafcBObEhbTCunlY/2uSE=
-----END CERTIFICATE-----
Generated at Sun Dec 7 05:17:10 2025 by rpki-client