This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.mft
File: 7470038419B67CD1743CE4D96953077ECE6928FE.mft (raw, json)
Hash identifier: RW1U4zrZxP9AlKSt/qskjZrYD5jfC3XlVpUrnTIib/U=
Subject key identifier: 27:42:E3:24:28:22:10:E0:8F:40:43:E6:9C:04:5C:69:AD:30:63:5B
Authority key identifier: 74:70:03:84:19:B6:7C:D1:74:3C:E4:D9:69:53:07:7E:CE:69:28:FE
Certificate issuer: /CN=7470038419B67CD1743CE4D96953077ECE6928FE
Certificate serial: 2EAC60A94833FE340B868FC21FDA605235B0C2FE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7470038419B67CD1743CE4D96953077ECE6928FE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.mft
Manifest number: 01F7
Signing time: Sat 06 Dec 2025 07:31:52 +0000
Manifest this update: Sat 06 Dec 2025 07:26:52 +0000
Manifest next update: Tue 09 Dec 2025 10:06:52 +0000
Files and hashes: 1: 7470038419B67CD1743CE4D96953077ECE6928FE.crl (hash: cSRRpeeLCcSEBJFtA4PaGbdJxuI9vW3rUt75Va76v/4=)
2: 3130332e3135342e35332e302f32342d3234203d3e20313430343739.roa (hash: XMfcxb2cyU/BTawAea91z/0xjspg0vqpK5L29ZTTMeY=)
3: 3130332e3135342e35322e302f32342d3234203d3e20313430343739.roa (hash: tMxmqnyNs+AqUZmzCKA8ba+dMpF5PucwNl1kbWxh19Q=)
4: 323430363a353463303a383030303a3a2f33332d3333203d3e20313430343739.roa (hash: 3w+VK+tvKAA1AfC4liESzr0B7Kk6JlTbtXB9BTFuOGs=)
5: 323430363a353463303a3a2f33332d3333203d3e20313430343739.roa (hash: WKukFhTAk9Wfv4/OtDk/a2nJ3JcuJ/OWKwAPnS7JgvA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.crl
rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7470038419B67CD1743CE4D96953077ECE6928FE.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 10:06:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:ac:60:a9:48:33:fe:34:0b:86:8f:c2:1f:da:60:52:35:b0:c2:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7470038419B67CD1743CE4D96953077ECE6928FE
Validity
Not Before: Dec 6 07:26:52 2025 GMT
Not After : Dec 9 10:06:52 2025 GMT
Subject: CN=2742E324282210E08F4043E69C045C69AD30635B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:39:61:bd:74:6e:fe:19:b7:89:20:04:db:3c:
e4:ef:9c:bc:73:16:a5:f1:5e:88:21:67:b6:93:63:
ca:95:ac:18:4d:8f:10:7e:41:14:77:4e:a0:4a:45:
83:d0:3f:60:69:a0:91:68:66:55:eb:e0:a6:22:8b:
5a:17:27:4f:69:85:8e:c8:a8:62:6b:22:9c:db:d8:
76:67:ea:c7:8a:bb:e6:9d:a1:2b:a1:dc:72:a1:6c:
a3:3e:37:96:e5:06:70:bf:33:1b:2a:ca:b9:d7:42:
85:14:62:a9:75:89:46:a3:ff:83:bc:37:26:31:5a:
e0:17:03:7e:55:a5:78:c1:d4:8a:c5:cc:1e:c3:d5:
65:fb:1b:49:5b:3b:38:7c:15:6c:ad:75:e7:f7:01:
46:fa:16:0e:d1:57:20:5e:e9:3f:0b:45:76:df:1a:
07:8a:e1:c8:f8:c2:51:20:28:f2:b6:20:6e:69:12:
77:8d:37:ea:86:de:6e:e9:be:c3:28:62:12:d3:d2:
7b:68:0a:73:ba:1f:40:4b:bd:85:aa:19:9e:0e:56:
05:2a:1a:7d:25:40:68:45:00:22:a9:31:dc:82:ec:
7b:1f:ee:a8:e9:93:8b:11:4e:25:b0:00:05:6b:d8:
06:bb:49:d8:4d:8a:e3:e4:b5:ad:a3:96:37:06:fd:
27:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:42:E3:24:28:22:10:E0:8F:40:43:E6:9C:04:5C:69:AD:30:63:5B
X509v3 Authority Key Identifier:
keyid:74:70:03:84:19:B6:7C:D1:74:3C:E4:D9:69:53:07:7E:CE:69:28:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7470038419B67CD1743CE4D96953077ECE6928FE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:a5:30:fb:1e:5c:4f:77:08:4d:c1:2a:d5:10:80:b0:b2:42:
4a:33:33:e7:0c:db:20:e6:28:11:a6:92:44:4d:32:7a:0b:00:
1d:8b:16:1d:c8:41:bc:ce:5e:87:c0:00:b7:73:f7:cc:f1:13:
34:62:d4:02:40:2f:99:ed:c3:86:17:bf:87:b6:9b:6e:b1:ca:
30:6c:c5:18:7b:84:8a:39:ba:75:12:08:7f:c2:f1:d3:7d:22:
27:81:eb:45:bc:7b:38:c0:63:76:37:1b:fe:ae:a4:70:85:6e:
c9:d5:1b:f9:3b:33:f3:d7:cb:9f:37:a7:92:1e:bb:b8:32:a0:
fd:0d:0e:bd:64:04:83:69:20:22:fa:4d:b2:6f:86:5c:88:c9:
da:5c:6d:13:ea:4c:b0:bd:41:07:1d:16:82:ef:cf:1a:1e:47:
fb:72:4b:20:97:c1:d6:32:4f:01:5a:db:37:7c:82:14:0f:62:
f0:ab:45:cf:31:c4:5a:a5:d1:1c:70:cb:bd:37:64:1c:1b:88:
dc:bc:c0:25:bd:fd:ac:e3:f0:17:a2:a0:e7:a1:b3:97:c1:c3:
e9:ba:fd:a4:3e:4f:3e:a4:21:ad:4a:37:cc:07:88:15:8e:a7:
a7:bf:39:31:dd:c0:d3:68:dc:50:e4:25:a3:09:d7:ec:95:76:
a4:02:91:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:35:45 2025 by rpki-client