This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft
File: 579618DB6FFA608F5998FCD968B270AE61BDB97C.mft (raw, json)
Hash identifier: t3uQrE84iLKpy1tqJeGGw+kmaKt0tAB5D02cJ+e61Jo=
Subject key identifier: 63:4B:61:CF:F5:0D:D3:E1:C7:63:B5:8E:42:3D:40:65:B1:3B:33:E2
Authority key identifier: 57:96:18:DB:6F:FA:60:8F:59:98:FC:D9:68:B2:70:AE:61:BD:B9:7C
Certificate issuer: /CN=579618DB6FFA608F5998FCD968B270AE61BDB97C
Certificate serial: 24ED55B81B906745D59275665BA2A1B158A20760
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft
Manifest number: 0219
Signing time: Fri 05 Dec 2025 14:02:17 +0000
Manifest this update: Fri 05 Dec 2025 13:57:17 +0000
Manifest next update: Mon 08 Dec 2025 18:57:17 +0000
Files and hashes: 1: 323430333a613163303a3a2f33322d3332203d3e20313338303732.roa (hash: sIMuid2cN98YAJ+u3L+3la7IfjwgED+cUwmpS2iHGMw=)
2: 3130332e3132332e3132312e302f32342d3234203d3e20313338303730.roa (hash: kHWm0ElDQFUg3ddfCvb6B3R6hoVD6v/wMJbHPMOHCH8=)
3: 579618DB6FFA608F5998FCD968B270AE61BDB97C.crl (hash: dCeY9brwka7D/ahxGEfPbkcqa/C8i07YmBdrJM1D2xQ=)
4: 3130332e3132332e3132302e302f32342d3234203d3e20313338303732.roa (hash: etcdt1rptra2wpD632iI4CEj+HZk7gKrmvWLBgXFbpI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.crl
rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 18:57:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:ed:55:b8:1b:90:67:45:d5:92:75:66:5b:a2:a1:b1:58:a2:07:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=579618DB6FFA608F5998FCD968B270AE61BDB97C
Validity
Not Before: Dec 5 13:57:17 2025 GMT
Not After : Dec 8 18:57:17 2025 GMT
Subject: CN=634B61CFF50DD3E1C763B58E423D4065B13B33E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4a:44:73:a5:d3:9d:2d:4e:36:31:74:58:e8:
95:2c:4e:00:a6:9b:bc:a2:c0:c9:7e:6d:02:db:55:
89:cd:fb:22:c7:4d:a5:ad:01:ba:86:92:0d:83:57:
76:34:de:ce:25:66:54:f9:4c:a2:93:43:9a:e2:32:
38:1b:8f:4e:53:3d:d3:ca:6f:7e:de:b3:86:da:0d:
66:bf:c6:03:23:86:61:a3:23:cc:c2:83:3e:47:2f:
8c:92:4d:ea:b8:ff:d1:ef:00:f0:8c:50:87:85:cf:
fa:2c:63:7a:0f:c2:27:ae:4a:d6:90:6f:60:25:b4:
f0:aa:80:84:bd:83:4c:34:47:71:60:36:3f:01:74:
c7:88:3f:52:7c:99:e1:f0:f4:6e:1d:3d:41:37:74:
a4:92:c9:93:90:b3:3f:64:6a:0c:48:8b:15:9d:dc:
65:11:92:66:32:4a:4f:2f:95:a8:36:9d:7e:cf:64:
d0:05:17:5f:4d:c2:69:a3:fd:78:cf:78:15:77:51:
25:96:8b:d4:88:84:2b:04:bd:64:69:62:34:81:54:
c7:ce:5d:f2:dc:f7:34:7a:08:fe:78:95:31:48:59:
58:98:11:84:ba:c2:6f:51:7c:16:38:6d:97:73:95:
9e:7e:d9:63:e5:f6:a9:29:5c:60:97:18:57:20:9a:
8d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4B:61:CF:F5:0D:D3:E1:C7:63:B5:8E:42:3D:40:65:B1:3B:33:E2
X509v3 Authority Key Identifier:
keyid:57:96:18:DB:6F:FA:60:8F:59:98:FC:D9:68:B2:70:AE:61:BD:B9:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:bd:22:a0:c9:86:a4:2c:fa:62:99:1a:9c:7d:eb:e2:bf:7c:
6b:0b:33:eb:7d:fb:ef:47:2b:46:fe:cb:4e:2f:64:d3:5a:ed:
f4:3f:4b:da:7f:5b:0b:f9:a7:be:b2:9a:37:6e:3c:ff:dd:3a:
18:f1:cf:2f:5f:87:90:dc:11:81:de:aa:de:2a:1b:0e:37:b9:
41:15:37:93:91:a5:1b:75:7b:ec:0a:e0:e4:e0:60:71:5b:c6:
2d:8b:14:56:93:32:3e:26:7c:4f:1e:89:97:ce:d7:0a:e4:93:
c8:38:57:79:ca:0f:f8:96:df:30:a6:db:27:4d:72:41:45:e2:
24:fd:19:a7:97:27:26:6b:f5:0c:d1:82:d1:05:65:b1:2c:5c:
da:9f:5c:9a:58:92:fe:ca:0f:ea:f7:bc:6a:84:96:aa:b2:43:
fa:bf:f0:19:dc:e1:1b:ce:c1:04:ce:55:e3:97:2f:b9:93:0b:
4b:5b:8d:f6:95:00:e4:13:ce:cd:87:d7:3a:97:60:a3:bf:d0:
85:c6:ff:43:90:b2:17:33:c4:e5:3b:92:14:c3:13:8e:a4:2d:
f1:25:6b:97:c0:7f:51:85:a3:3b:24:0f:f7:b4:92:dd:ab:47:
87:2a:71:89:88:36:69:c5:79:3c:39:0c:81:6c:18:6d:12:21:
3a:7d:1d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:14:32 2025 by rpki-client