This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.mft
File: 1B42B2BB5674F23468744614CDF9B0B00D510190.mft (raw, json)
Hash identifier: MeJk0LgW21Kc9QmiJ2OZ8PAgcXBeYYgyU6XDMzgDEaM=
Subject key identifier: 09:8A:B8:19:D8:9C:96:D9:38:8E:E7:03:B4:18:E5:65:7E:A0:A1:1D
Authority key identifier: 1B:42:B2:BB:56:74:F2:34:68:74:46:14:CD:F9:B0:B0:0D:51:01:90
Certificate issuer: /CN=1B42B2BB5674F23468744614CDF9B0B00D510190
Certificate serial: 10CA981F84896C8F65D2A7D8D54BE623F8CF6BB3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B42B2BB5674F23468744614CDF9B0B00D510190.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.mft
Manifest number: 01FC
Signing time: Thu 18 Dec 2025 02:22:04 +0000
Manifest this update: Thu 18 Dec 2025 02:17:04 +0000
Manifest next update: Sun 21 Dec 2025 11:28:04 +0000
Files and hashes: 1: 1B42B2BB5674F23468744614CDF9B0B00D510190.crl (hash: aNwcLhOw5PDEQcM2D5mqIKg4ZsIwXv+upT1Dxf7Ax+g=)
2: 3130332e31392e3135372e302f32342d3234203d3e20313530323334.roa (hash: Czzvj4vJQSB2KKayEoKqCf4S1sGvCeEbVuyOD7N/uO0=)
3: 3130332e31392e3135362e302f32332d3233203d3e20313530323334.roa (hash: oFFK8blgpeKf9LD5SV2KXd2JEMT+aIlFev67ub7lEjE=)
4: 3130332e31392e3135362e302f32342d3234203d3e20313530323334.roa (hash: 7jDOzKEybqHgosjfCyx4hqCz0tcDh6a5dAdb4UBUTOc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.crl
rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B42B2BB5674F23468744614CDF9B0B00D510190.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 11:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:ca:98:1f:84:89:6c:8f:65:d2:a7:d8:d5:4b:e6:23:f8:cf:6b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B42B2BB5674F23468744614CDF9B0B00D510190
Validity
Not Before: Dec 18 02:17:04 2025 GMT
Not After : Dec 21 11:28:04 2025 GMT
Subject: CN=098AB819D89C96D9388EE703B418E5657EA0A11D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7f:39:73:50:66:82:ff:bf:97:a9:ea:2e:ce:
d9:9f:63:7c:47:89:db:ca:57:04:d0:c6:5c:43:14:
0f:72:86:ab:07:9c:a6:07:20:32:74:5b:bc:17:60:
43:fb:0b:9f:9a:6e:be:82:94:ce:e9:c5:81:75:ce:
1a:e5:c4:fc:61:05:bb:84:40:d6:a2:0a:61:4d:eb:
55:26:be:5f:c4:84:df:e8:c0:c9:9d:76:fc:86:1b:
59:65:25:f7:c2:c4:01:2a:10:4f:58:24:28:1c:fe:
d9:36:0e:5f:7e:91:24:4e:e1:1b:6d:db:0d:b4:fc:
37:62:59:4b:e6:0f:06:a5:cb:6b:63:f0:74:ac:ea:
5c:06:f8:93:ac:4c:26:2e:fd:18:40:20:9f:ba:97:
1a:1e:64:57:cf:9a:13:56:29:71:f5:31:2e:44:07:
0c:18:1b:a4:f0:83:74:ce:61:d3:c9:d6:bb:2d:6b:
9f:3f:a4:f1:00:7a:b8:fb:ba:6c:71:17:04:52:88:
49:3e:d0:03:b9:05:8f:4c:09:0a:2f:30:1b:83:ef:
56:53:5f:78:65:f8:e8:a5:f6:3a:71:5a:be:0e:71:
95:fc:c7:24:1e:77:32:f2:df:8a:6c:7d:03:75:40:
af:fa:24:04:f5:02:a9:61:5e:03:da:8c:57:06:a4:
eb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8A:B8:19:D8:9C:96:D9:38:8E:E7:03:B4:18:E5:65:7E:A0:A1:1D
X509v3 Authority Key Identifier:
keyid:1B:42:B2:BB:56:74:F2:34:68:74:46:14:CD:F9:B0:B0:0D:51:01:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B42B2BB5674F23468744614CDF9B0B00D510190.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:57:6a:ae:dc:ea:ab:56:54:7f:9b:9b:ff:15:d1:49:c0:18:
75:60:21:35:4b:5d:5d:e4:c5:32:20:c3:ec:da:ea:cf:68:5c:
d2:a4:8e:15:4f:a1:c2:cd:12:44:3a:e1:14:f4:89:b3:21:df:
7f:bf:23:ed:58:6f:52:6d:11:2f:2b:a0:6e:6c:8f:f2:90:07:
2f:69:e5:8c:cc:ab:01:0c:84:49:f2:a5:cf:de:34:4c:ec:ad:
0c:6b:c2:99:34:cc:6e:4a:63:21:10:1a:3a:a6:ea:b8:1e:4a:
ac:a8:3e:e2:fb:e2:b5:3c:d7:9b:1e:2f:e2:fc:47:33:21:1a:
d5:f4:2b:49:0a:48:8b:de:b7:71:f2:69:c9:0d:f4:d4:94:76:
d4:48:e2:d4:61:70:d0:b2:69:b1:52:67:99:d4:de:8a:34:07:
b3:5f:78:64:a0:60:e8:50:c8:d8:10:80:cb:f2:62:f5:fa:c1:
7f:80:5b:bd:0c:7b:2d:ea:2e:5e:53:53:e7:42:01:0f:2c:2c:
8d:7e:8c:6b:45:cc:49:cd:1d:bb:fd:f9:1e:e2:6f:8e:64:a2:
01:16:1f:de:d1:fa:06:61:89:10:e2:03:22:30:94:0b:3e:23:
d1:b5:a7:31:d6:19:a5:5a:b8:81:5e:38:26:14:f6:93:8c:10:
39:e4:fd:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 23:08:43 2025 by rpki-client