This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft
File: 314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft (raw, json)
Hash identifier: KLBxrQnlJX808h71JbRpXtqQd3MzxBWX1HnDOQHAcaQ=
Subject key identifier: 10:1F:A6:6A:69:F3:FD:E6:03:45:08:5E:27:E7:FB:0A:3C:F6:AD:E5
Authority key identifier: 31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00
Certificate issuer: /CN=314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400
Certificate serial: 7EA627CA0F10A7357F79DB0B5C8F5641A1CFED62
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft
Manifest number: 01B2
Signing time: Sat 06 Dec 2025 13:00:38 +0000
Manifest this update: Sat 06 Dec 2025 12:55:38 +0000
Manifest next update: Tue 09 Dec 2025 21:25:38 +0000
Files and hashes: 1: 3130332e3135322e3234322e302f32332d3234203d3e20313339343536.roa (hash: 89pUQxfl5rXIPDrZqajzc7VGVg5FDLEc5hZANvDFm/0=)
2: 323430373a373234303a3a2f33322d3332203d3e203538383230.roa (hash: ozUo4nr2ZiT2mHAD8ioZ2hPWQXjTqtcohKzFBlHP+7Q=)
3: 323430373a373234303a3a2f33322d3438203d3e203538383230.roa (hash: 9stbxrDkNUm3gzp6A8jjd9QQ8Ao52PCfqM2rcZOO6+U=)
4: 314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl (hash: SwiaH0JzKCeMFJr43vdrj/Ux7yKTiVQIrJ6NshsK7PM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl
rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:a6:27:ca:0f:10:a7:35:7f:79:db:0b:5c:8f:56:41:a1:cf:ed:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400
Validity
Not Before: Dec 6 12:55:38 2025 GMT
Not After : Dec 9 21:25:38 2025 GMT
Subject: CN=101FA66A69F3FDE60345085E27E7FB0A3CF6ADE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:40:cb:62:a4:2b:45:ab:19:62:99:d4:cd:97:
d1:df:04:15:ad:32:81:b5:9d:0e:2a:92:da:f2:a3:
56:35:4e:71:f6:8b:9f:61:2c:91:73:ba:9b:cb:e1:
43:dc:34:22:9d:ea:8d:8f:98:d2:a8:e9:5f:0c:37:
07:2c:a7:f5:25:b4:52:da:d0:09:81:0d:d6:73:79:
9c:01:e4:61:6a:ec:e6:03:df:2d:f9:6c:ab:c7:f6:
f0:44:91:c8:9e:81:30:44:00:6e:5b:f8:7c:2c:5a:
6c:5c:20:4f:0b:68:f7:4d:ff:a8:80:d2:a5:c2:38:
60:4b:56:9f:06:50:74:59:80:ce:49:95:99:f8:ea:
a8:13:d8:bd:54:f8:f3:5b:0f:7e:8a:0b:16:98:e1:
ca:1b:90:16:a3:d4:ef:92:bc:e9:73:42:af:92:35:
f3:be:48:57:9f:39:e8:05:16:a9:cd:ba:f9:21:f0:
fc:ee:9e:18:34:86:87:a6:71:0d:fb:9d:b2:ef:d2:
80:7a:1e:1f:c2:ee:b6:37:3f:65:5d:d4:ba:fe:8f:
94:ab:e7:10:6d:d3:9a:3e:72:0c:6c:6c:fb:4c:fc:
71:82:3d:79:c3:79:92:b4:41:ae:92:50:d7:ab:85:
5d:e2:fe:bd:1c:4f:16:3d:6e:58:fa:c0:ce:ac:57:
7b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:1F:A6:6A:69:F3:FD:E6:03:45:08:5E:27:E7:FB:0A:3C:F6:AD:E5
X509v3 Authority Key Identifier:
keyid:31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:5f:98:2f:c3:36:60:57:7e:0f:72:a8:31:51:48:72:4e:ed:
3a:88:c9:77:3c:86:1f:a5:96:86:41:f6:ad:1a:90:c8:0e:bf:
38:6f:7b:ca:22:52:34:d7:75:30:0a:d0:17:3c:df:48:01:03:
55:ca:41:ff:12:80:fe:da:12:18:50:29:6b:94:d6:3f:ab:33:
8f:ac:d2:98:ff:af:2f:95:a5:48:df:8d:57:44:15:96:0d:c0:
cf:7f:5e:61:17:fa:83:9e:28:7c:ef:70:d9:9e:d1:13:12:2f:
67:c0:ad:15:a1:a1:d6:21:24:d6:99:b7:bf:17:fe:a9:b9:ef:
2c:47:8f:f5:24:58:b5:98:fe:49:a8:0c:2a:51:21:56:41:ee:
fe:2e:4d:f7:78:a7:64:c8:0b:31:64:a2:b1:5f:98:79:29:96:
50:93:e6:a4:6b:a1:f4:31:e1:70:9b:c7:1d:0d:3f:1d:68:46:
0b:56:65:d0:f7:55:89:19:01:e0:44:97:97:31:ce:d0:19:da:
6b:9e:41:1a:54:d3:3b:9e:c9:95:7a:f6:82:3d:a1:a9:67:2f:
ec:78:8c:62:33:bf:21:0d:bb:93:77:9c:d0:4c:5e:49:2f:ad:
24:4e:27:6f:b4:29:5b:d0:01:9c:6f:13:ef:45:d8:50:86:ec:
7f:8c:61:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:51:35 2025 by rpki-client