This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.mft
File: B247FB55BE5739FCE4EBBD20B84542267C15D192.mft (raw, json)
Hash identifier: BdyxnsXFoe7QUbIbZwJmQf/8J2gVXjiNWKrNKV5Fq9w=
Subject key identifier: 89:8B:94:B4:60:63:59:63:62:10:62:45:4B:3E:14:F2:21:25:1E:DF
Authority key identifier: B2:47:FB:55:BE:57:39:FC:E4:EB:BD:20:B8:45:42:26:7C:15:D1:92
Certificate issuer: /CN=B247FB55BE5739FCE4EBBD20B84542267C15D192
Certificate serial: 609A3E49390676C99811CE751AA97AB19F44BD42
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B247FB55BE5739FCE4EBBD20B84542267C15D192.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.mft
Manifest number: 02B1
Signing time: Sat 06 Dec 2025 04:21:24 +0000
Manifest this update: Sat 06 Dec 2025 04:16:24 +0000
Manifest next update: Tue 09 Dec 2025 16:18:24 +0000
Files and hashes: 1: 3130332e3137362e39392e302f32342d3234203d3e20313439333434.roa (hash: 1SXRbeE4Zo2BpgZYkA81FPjpBzqJO4ahWylO9ct7G/4=)
2: 3130332e3137362e39382e302f32332d3234203d3e20313439333434.roa (hash: 9BKuqPMpOCYVLDkVIwaFy+U4SgMn8wYu59t+XyUcQfg=)
3: 3130332e3137362e39382e302f32342d3234203d3e20313439333434.roa (hash: EI6CAFKMozCEfiPKGQcvscTjTfj7/nkyBcwcx/XBDg8=)
4: B247FB55BE5739FCE4EBBD20B84542267C15D192.crl (hash: jXEuJUUuiZerDcFFAvqYI10COWkorV5ZXmeh97SKdP4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.crl
rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B247FB55BE5739FCE4EBBD20B84542267C15D192.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:9a:3e:49:39:06:76:c9:98:11:ce:75:1a:a9:7a:b1:9f:44:bd:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B247FB55BE5739FCE4EBBD20B84542267C15D192
Validity
Not Before: Dec 6 04:16:24 2025 GMT
Not After : Dec 9 16:18:24 2025 GMT
Subject: CN=898B94B460635963621062454B3E14F221251EDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:45:c9:2d:94:50:75:94:f4:b7:7c:49:14:d0:
2f:93:75:50:7e:1c:a3:76:c8:f3:8b:25:5e:a2:50:
2e:c2:e9:2f:3b:fc:28:d6:7d:4a:4e:b6:bf:e3:73:
58:83:d1:1c:8a:66:b2:72:29:f9:56:a7:cc:0d:59:
a7:90:32:7c:0c:69:3d:9f:e0:b1:7a:f8:d3:31:aa:
d2:ec:09:5a:fc:9f:68:40:c3:da:16:3f:26:dd:13:
2a:a6:1c:e7:c6:38:57:5f:a3:a2:57:86:d9:fa:ab:
02:23:84:f5:d5:ec:3c:76:c2:bb:15:4d:dd:8e:57:
df:a6:a7:98:77:81:9d:42:5c:3e:7c:8d:e5:59:18:
86:21:f5:bf:af:9d:8e:11:f4:c6:cd:ff:de:f7:f8:
26:f1:b5:f3:65:3f:df:1f:0e:1b:8e:7d:63:9f:09:
3d:ca:0d:9a:be:81:62:d3:2d:e2:a8:d2:c3:30:22:
f7:90:c9:72:a3:e3:e8:28:9b:da:b7:a9:c2:59:b3:
53:11:18:ea:db:fc:8c:4b:73:bb:3b:d7:8b:6a:23:
1a:50:98:d2:0a:8a:84:b2:49:ce:f2:24:03:f0:39:
f3:13:b0:c4:88:11:19:b2:81:ce:c4:23:db:e4:08:
9f:8f:5e:ba:a9:a9:f9:38:ce:c7:3e:df:85:d7:d8:
23:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8B:94:B4:60:63:59:63:62:10:62:45:4B:3E:14:F2:21:25:1E:DF
X509v3 Authority Key Identifier:
keyid:B2:47:FB:55:BE:57:39:FC:E4:EB:BD:20:B8:45:42:26:7C:15:D1:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B247FB55BE5739FCE4EBBD20B84542267C15D192.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:64:38:9c:04:56:c1:92:64:a8:44:7c:6d:de:11:68:63:08:
25:2e:81:72:e2:f4:62:7c:c6:94:53:aa:dd:8f:1a:6b:88:70:
43:28:43:91:e2:95:36:70:ef:3d:3c:02:30:62:d5:b5:66:67:
69:55:80:11:7b:a7:5a:77:d3:19:40:5a:e7:d1:6a:8f:ba:75:
c7:38:2d:89:32:fc:e7:54:3f:d0:c1:06:37:59:04:17:77:84:
38:7a:ac:df:99:a2:31:fd:1b:e5:ca:21:f0:5b:87:f3:2f:0b:
94:93:de:6a:e2:14:e6:09:34:f7:5e:63:cd:f9:62:b5:6a:83:
10:bd:e4:78:82:66:c8:e8:91:42:ee:b9:7b:7a:ea:d2:08:1c:
e1:97:64:f4:3a:80:06:27:09:63:7d:f7:5a:15:8f:9d:9c:62:
25:ab:ba:ff:e1:b8:e8:c6:2d:ac:b0:ae:17:ab:d1:00:8c:d8:
5f:86:b6:85:cd:1b:f0:c1:9a:55:c0:15:54:60:fe:b7:af:a1:
2e:fa:85:49:e6:f7:e0:39:e0:15:ca:13:69:48:f8:6a:e4:c9:
78:a0:ea:c2:04:bd:d9:46:ad:14:e1:81:25:00:b9:7b:00:48:
a1:ae:4c:c8:59:2c:a1:63:3e:de:8e:1b:1e:bc:b8:c6:fb:a6:
b2:e8:de:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:10:48 2025 by rpki-client