This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft
File: E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft (raw, json)
Hash identifier: 3yA7EgcE3lLNFz1J6g0/s69wd2Esy6PWA/yJ6vQwZl4=
Subject key identifier: 95:0B:FD:DC:17:79:D1:B3:0A:6D:6E:00:45:B6:99:CD:54:57:60:48
Authority key identifier: E0:14:E6:ED:03:53:7E:45:35:65:D0:6E:7B:8A:31:AA:8A:05:25:A1
Certificate issuer: /CN=E014E6ED03537E453565D06E7B8A31AA8A0525A1
Certificate serial: 596502155CE0EAC8D2004B74A937060E0F58BF64
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft
Manifest number: 02F4
Signing time: Sat 06 Dec 2025 10:32:26 +0000
Manifest this update: Sat 06 Dec 2025 10:27:26 +0000
Manifest next update: Tue 09 Dec 2025 10:58:26 +0000
Files and hashes: 1: E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl (hash: mQiRLTlY+0lgiArlD6p1swTiojEkgZqkxj+Phdqa94Y=)
2: 3130332e3137352e33382e302f32332d3234203d3e20313437313038.roa (hash: JG72NXt605ww3XbVNf9DT18KzObGZzgsJOiqL+ceVSI=)
3: 3130332e3137352e33382e302f32342d3234203d3e20323135373237.roa (hash: UUOaSFdZB1gNgfcBiLfpj8+sysFmMb8lGgAOYylAanI=)
4: 3130332e3137352e33392e302f32342d3234203d3e20323135373237.roa (hash: uShV8vRhK/SDVf3Twj+hPuhHAzUhqQGJIQPtkavd13M=)
5: 3130332e3137352e33382e302f32332d3233203d3e20323135373237.roa (hash: joRtsTzluk9HUnqI3+6HvaybpCq3OAhZ2eSjEhqFFeA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl
rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 10:58:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:65:02:15:5c:e0:ea:c8:d2:00:4b:74:a9:37:06:0e:0f:58:bf:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E014E6ED03537E453565D06E7B8A31AA8A0525A1
Validity
Not Before: Dec 6 10:27:26 2025 GMT
Not After : Dec 9 10:58:26 2025 GMT
Subject: CN=950BFDDC1779D1B30A6D6E0045B699CD54576048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bd:df:5a:a6:57:f2:88:6d:19:94:f1:ff:a0:
d1:01:10:60:a5:28:12:e2:51:2a:80:df:52:1e:dc:
01:a8:6e:b2:fe:e0:dd:51:78:87:27:2d:de:0b:f3:
82:cb:6c:c9:2a:a4:e9:9b:cc:14:a7:91:89:ca:e1:
d1:f3:5c:f4:0f:55:0e:20:79:b9:17:b1:fa:36:41:
bb:b3:5b:a2:1d:ee:9b:55:55:ec:47:24:1b:e7:c3:
58:13:eb:84:4e:85:63:66:cb:e0:61:16:f2:d2:d8:
5a:48:fa:6d:7d:ab:73:85:df:b2:75:e9:9e:79:2f:
48:81:a2:3a:a8:2c:79:b3:73:0a:cf:fd:73:ed:0f:
ae:f7:d8:f0:a2:0f:f4:59:e7:ec:1e:ba:d9:47:da:
6c:57:9e:da:56:88:08:e4:a0:22:b0:b3:2f:3a:0b:
a1:77:bd:17:ab:d0:27:fa:16:0f:75:82:db:04:68:
37:9d:ab:cd:78:f8:e3:a3:39:69:fa:94:a7:b0:11:
02:72:34:bf:b2:63:5c:e1:a9:9a:96:d0:9e:d0:c8:
80:2a:36:c8:84:33:d8:93:6a:54:db:78:75:7f:0c:
8e:bc:92:a8:91:77:30:40:91:c0:79:37:bb:d5:96:
02:10:fa:c5:f0:ba:57:74:58:a4:08:02:73:9f:1c:
fd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0B:FD:DC:17:79:D1:B3:0A:6D:6E:00:45:B6:99:CD:54:57:60:48
X509v3 Authority Key Identifier:
keyid:E0:14:E6:ED:03:53:7E:45:35:65:D0:6E:7B:8A:31:AA:8A:05:25:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:dc:53:f3:57:1c:53:f7:bf:22:bf:88:d7:d3:09:04:6c:69:
7e:dc:1f:8a:fd:55:df:2c:3e:75:fb:81:64:53:03:41:4a:5d:
7d:83:ff:7c:58:82:72:64:8c:a6:37:64:99:7a:ab:c2:e3:d5:
87:35:90:2c:99:48:c4:3f:89:29:a8:25:d8:de:a6:3c:82:1b:
ad:a9:84:68:1f:05:6c:8f:2f:41:0b:b8:ae:a3:8b:98:94:13:
d6:75:bc:b4:6f:dc:7e:16:91:c9:05:a3:62:d2:27:a4:fe:d0:
1a:03:1e:0c:9a:39:ae:c4:d0:65:31:0d:11:45:02:d4:fb:99:
97:ef:75:94:96:87:db:1e:68:52:5b:26:62:24:6b:7a:06:93:
c8:98:f8:cf:cd:d3:b5:56:b4:b9:c6:b9:6f:c1:ae:45:f3:ce:
ab:39:40:39:95:d9:a5:23:5f:6c:01:ce:06:c3:38:ec:47:3e:
16:38:59:f0:cc:ea:3b:09:f3:f1:ec:7c:74:b2:ad:32:3d:68:
68:86:e7:6f:ab:45:a7:4d:40:85:92:73:7d:4e:86:fb:80:f7:
c6:76:7f:40:63:2a:56:82:69:cc:dc:f1:c1:77:ce:67:44:da:
94:8f:2b:51:46:5e:65:af:87:91:be:88:be:d9:80:cf:2f:d6:
b6:7c:23:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:57:49 2025 by rpki-client