This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.mft
File: 75890247E178C40DD3F9A5968202F684AEB89D9A.mft (raw, json)
Hash identifier: yFHeD40ES9fI+ZjrvfACG8uUQM63GTNt8qbICktHRmE=
Subject key identifier: 6B:46:21:C8:1E:F8:CA:3D:FC:64:B3:91:32:57:45:30:BF:6B:A3:14
Authority key identifier: 75:89:02:47:E1:78:C4:0D:D3:F9:A5:96:82:02:F6:84:AE:B8:9D:9A
Certificate issuer: /CN=75890247E178C40DD3F9A5968202F684AEB89D9A
Certificate serial: 6AB041E14C393F935D643DD3BF7D8DC9ADA1FF14
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75890247E178C40DD3F9A5968202F684AEB89D9A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.mft
Manifest number: 01F6
Signing time: Fri 05 Dec 2025 02:31:08 +0000
Manifest this update: Fri 05 Dec 2025 02:26:08 +0000
Manifest next update: Mon 08 Dec 2025 12:16:08 +0000
Files and hashes: 1: 3130332e33392e36392e302f32342d3234203d3e20313530323730.roa (hash: ABOgyOC/6WBI7TsB52quJVoJIzB223bKwujKqyNGano=)
2: 75890247E178C40DD3F9A5968202F684AEB89D9A.crl (hash: R9O/J6+O2OjxUAG/LxiA2tZXs7bbiH/EaErtFSdi3d8=)
3: 3130332e33392e36382e302f32332d3233203d3e20313530323730.roa (hash: fXiiGXJRCPKNViYWqCFLLjVfmQD8H4I+YjRRxMPnTUk=)
4: 3130332e33392e36382e302f32342d3234203d3e20313530323730.roa (hash: g6PqLS5mE+1W2ojOPy8XOSM+C1KCNHjLUWlTp/BiYKA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.crl
rsync://repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75890247E178C40DD3F9A5968202F684AEB89D9A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 12:16:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:b0:41:e1:4c:39:3f:93:5d:64:3d:d3:bf:7d:8d:c9:ad:a1:ff:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75890247E178C40DD3F9A5968202F684AEB89D9A
Validity
Not Before: Dec 5 02:26:08 2025 GMT
Not After : Dec 8 12:16:08 2025 GMT
Subject: CN=6B4621C81EF8CA3DFC64B39132574530BF6BA314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:57:ff:b0:c1:05:1a:e7:f9:0c:69:59:04:b4:
f9:99:e7:29:50:47:0a:46:f0:25:01:7d:30:77:71:
33:2a:03:84:cb:9c:83:e1:73:43:a8:bf:ef:bd:97:
fd:82:7d:bd:72:46:9b:a6:84:17:30:9f:60:8f:6b:
1a:80:92:6f:be:23:85:23:d0:c9:f7:78:6a:03:36:
6d:c1:fb:98:0d:38:0b:0e:79:2c:84:0b:d4:fe:1b:
55:79:16:42:5c:3f:dc:1f:ca:29:7f:ac:da:9b:ab:
d4:b5:44:5f:9c:6b:07:aa:ee:ba:41:49:ee:d4:f5:
ac:3d:02:d1:da:fc:af:1e:7f:96:13:28:5e:55:d4:
9f:ee:28:9c:da:2d:20:d5:4d:80:c1:88:12:b9:f1:
09:90:4b:b5:30:c6:77:28:04:40:a9:fb:d1:8a:2c:
ab:0f:23:47:62:2a:89:97:97:88:d6:b2:d1:0d:db:
d5:43:cf:1b:f2:f8:f1:33:21:60:f6:7a:19:8a:df:
6c:21:78:cf:11:3c:04:21:ba:49:28:f6:18:aa:d2:
bb:e7:d7:02:0a:77:ac:6a:fe:c5:4d:14:75:eb:17:
45:8e:c2:c3:3c:2f:e8:0d:a3:df:68:9b:5c:f0:5f:
ca:5c:f1:29:28:f6:48:0a:8b:5a:cd:b4:e4:3d:5e:
97:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:46:21:C8:1E:F8:CA:3D:FC:64:B3:91:32:57:45:30:BF:6B:A3:14
X509v3 Authority Key Identifier:
keyid:75:89:02:47:E1:78:C4:0D:D3:F9:A5:96:82:02:F6:84:AE:B8:9D:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75890247E178C40DD3F9A5968202F684AEB89D9A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:37:04:2e:38:1d:68:b6:72:d1:ef:d6:65:e4:a0:5a:1c:7c:
72:e9:fb:cd:25:a4:b0:ff:b1:50:e6:b1:6b:70:3f:9a:c5:64:
04:a4:5c:e3:67:9e:14:e5:fc:dc:0d:ec:96:ca:59:08:d7:7c:
a4:e1:a9:a7:81:6b:3b:2b:ad:b8:b0:9e:6a:95:cc:2d:ae:c4:
b8:8e:4c:dc:0b:b5:2e:cf:ff:60:fa:bd:e6:39:2d:58:1a:f4:
b7:97:f4:dc:d3:da:3d:60:9b:1c:9d:72:3f:68:cf:e7:b0:8a:
f6:f3:e2:6e:a0:60:15:20:f2:f1:ef:42:6f:40:cd:f1:64:30:
e9:99:e4:0b:44:be:77:c2:6a:29:74:94:94:a9:b5:ed:07:38:
08:a3:dc:aa:b0:77:63:df:a6:d8:ad:f4:e5:31:37:54:ac:9b:
d2:29:23:c5:09:64:ea:8b:d2:6f:40:61:6d:dd:4e:79:45:27:
b3:16:af:53:6d:cc:be:a9:e0:06:e6:7e:1d:9b:9f:05:3a:54:
18:e5:d7:21:a5:3e:a8:0f:66:18:59:3c:3c:b5:b3:73:88:29:
46:01:06:27:13:3a:28:9f:14:a2:44:81:5e:94:6e:fb:ef:29:
3c:6c:9b:06:ce:e9:ce:da:9d:9e:52:32:b4:66:4f:8a:f8:ae:
39:4d:9f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:44:40 2025 by rpki-client