This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft
File: A0021383E40D55B69009CDEA313E654C3CE463B0.mft (raw, json)
Hash identifier: XJMRruntUMIsSR7S9edCBLe3G0ROmraEUdjxBdpbtE4=
Subject key identifier: E3:4C:61:94:C1:CA:B0:7C:4B:23:CD:1D:84:ED:57:7C:BB:B1:33:F3
Authority key identifier: A0:02:13:83:E4:0D:55:B6:90:09:CD:EA:31:3E:65:4C:3C:E4:63:B0
Certificate issuer: /CN=A0021383E40D55B69009CDEA313E654C3CE463B0
Certificate serial: 62E5A937A836AB137BB56A58B84F548120610467
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft
Manifest number: 047D
Signing time: Sat 06 Dec 2025 03:31:43 +0000
Manifest this update: Sat 06 Dec 2025 03:26:43 +0000
Manifest next update: Tue 09 Dec 2025 11:50:43 +0000
Files and hashes: 1: 3130332e3135382e3139332e302f32342d3234203d3e20313439373035.roa (hash: DmjamGqZJwfby4ZsZWwAD877kDOxqIbRWEyViTJ9Klo=)
2: A0021383E40D55B69009CDEA313E654C3CE463B0.crl (hash: ewN1RVY7IrMU5EpK4JxjfN3XGxv/e4zAlUH4JFXZ+Wc=)
3: 3130332e3135382e3139322e302f32342d3234203d3e20313439373035.roa (hash: zzYEb/fwe0SxrS/0Hgs2jLEQVjX3qR9GD9AYVGEuUXM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.crl
rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 11:50:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:e5:a9:37:a8:36:ab:13:7b:b5:6a:58:b8:4f:54:81:20:61:04:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0021383E40D55B69009CDEA313E654C3CE463B0
Validity
Not Before: Dec 6 03:26:43 2025 GMT
Not After : Dec 9 11:50:43 2025 GMT
Subject: CN=E34C6194C1CAB07C4B23CD1D84ED577CBBB133F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5c:df:59:15:aa:66:53:6d:4b:26:4a:17:34:
3e:98:20:f3:5d:c3:e0:24:d2:37:eb:72:cc:6f:d1:
c7:55:f0:45:28:64:3f:2f:30:20:60:38:59:1f:47:
a1:51:f4:be:26:30:21:e7:0b:39:ae:24:ec:ad:79:
86:37:dd:c3:96:4f:c0:1d:6e:b3:34:3a:03:a9:90:
c5:f6:83:4f:60:3f:c1:32:68:5e:f1:e2:fb:6b:af:
84:96:fb:ba:3e:5f:c5:8c:c8:63:d9:b0:8e:76:aa:
e9:2c:c0:57:a4:52:e7:97:13:2b:17:d3:e8:b2:3c:
25:be:c7:4b:23:dc:a4:51:cd:6b:90:fb:c6:0d:9c:
d0:df:35:ec:86:c5:86:8d:56:ee:c4:f6:b8:04:0b:
9e:a6:8a:00:af:de:56:d8:b2:7f:85:d8:4a:95:01:
f6:73:09:82:b2:ed:bf:f4:0c:46:cd:24:3d:31:cd:
eb:a0:a4:bb:be:9f:0a:69:df:87:7a:06:41:bf:71:
03:2e:ba:ce:52:c6:1b:be:82:19:dd:1d:8b:e7:3b:
5a:52:08:53:ac:c1:53:49:b9:6d:fb:94:71:07:10:
0c:9d:2d:5e:91:48:ce:d9:9b:a0:79:53:1c:8f:5d:
07:dc:ee:66:c3:ce:be:af:c8:95:fd:b0:cf:14:89:
01:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4C:61:94:C1:CA:B0:7C:4B:23:CD:1D:84:ED:57:7C:BB:B1:33:F3
X509v3 Authority Key Identifier:
keyid:A0:02:13:83:E4:0D:55:B6:90:09:CD:EA:31:3E:65:4C:3C:E4:63:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c3:9a:c5:00:60:22:51:92:5e:87:01:07:8c:d1:6e:42:21:
5b:91:8a:8f:b5:63:ca:05:d7:c6:26:a4:a7:08:88:93:64:d4:
f3:19:a4:bc:4c:2d:25:90:55:67:b4:2b:92:28:91:28:f6:b6:
ac:be:29:70:10:7c:0f:30:a7:19:2a:78:0f:0e:c1:74:4e:94:
29:42:73:cb:87:d1:1d:07:f3:14:e6:36:8b:97:fa:c2:07:4f:
ed:f0:b2:b1:52:67:ab:73:16:53:99:db:4c:66:11:d1:aa:88:
37:34:7a:de:73:3a:83:95:15:31:aa:eb:62:c0:69:aa:a2:ce:
25:13:59:1e:62:e9:b7:bd:ed:a9:f7:b0:13:e3:a5:cf:89:60:
5b:cf:76:f0:ac:e3:3c:1c:75:fc:8c:9d:05:cb:e6:41:df:d9:
2e:d5:41:38:ca:bc:29:27:76:70:28:d4:37:62:e4:69:62:7a:
a1:ca:f8:47:11:ba:e4:19:49:bc:44:24:2a:ed:7e:da:02:7e:
af:b4:8d:69:9e:65:5a:19:90:a8:3c:81:95:75:60:63:73:ec:
ba:fa:41:c4:19:85:77:a1:86:e8:ea:f8:b9:f0:5e:1f:af:04:
5d:b7:a5:5f:94:c3:68:18:3a:4d:65:b7:3d:3f:ea:84:79:e2:
3a:b1:cf:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:52:51 2025 by rpki-client