This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft
File: B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft (raw, json)
Hash identifier: 5uzh7xDhRWe3mFFC/6N4ZqhgSvidxuB0LvxLM1IOCEQ=
Subject key identifier: 24:69:55:0E:AC:CE:B2:FB:62:18:A0:DE:FB:12:61:A0:55:7F:CA:C9
Authority key identifier: B7:25:35:E4:EB:8B:31:C6:79:4C:4D:F3:1F:F5:3E:4E:64:91:4C:56
Certificate issuer: /CN=B72535E4EB8B31C6794C4DF31FF53E4E64914C56
Certificate serial: 123892EBC1E94DFE6B2FF2338C86C13E7E677196
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft
Manifest number: F7
Signing time: Thu 04 Dec 2025 22:21:21 +0000
Manifest this update: Thu 04 Dec 2025 22:16:21 +0000
Manifest next update: Mon 08 Dec 2025 03:06:21 +0000
Files and hashes: 1: 3135372e36362e35302e302f32332d3234203d3e20313532343338.roa (hash: 0z+OlDe1hua3zv7OtVHMMPyi/MvPOJjdEV9nI71654g=)
2: B72535E4EB8B31C6794C4DF31FF53E4E64914C56.crl (hash: XanNrYO0YJIxxlHUC8boTN1e3+UzJJuDWUrLGpPwukg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.crl
rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 03:06:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:38:92:eb:c1:e9:4d:fe:6b:2f:f2:33:8c:86:c1:3e:7e:67:71:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B72535E4EB8B31C6794C4DF31FF53E4E64914C56
Validity
Not Before: Dec 4 22:16:21 2025 GMT
Not After : Dec 8 03:06:21 2025 GMT
Subject: CN=2469550EACCEB2FB6218A0DEFB1261A0557FCAC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a4:b2:76:a3:d7:10:e0:fe:61:3c:ba:20:97:
bb:27:6a:9d:31:ff:b3:26:8f:d9:38:3a:f2:f7:bb:
d2:72:11:e7:e9:0b:bd:a1:9f:93:ff:7a:d0:97:a4:
6c:60:f9:a6:e7:7f:bf:81:bd:d5:b8:82:9d:8c:6f:
aa:23:35:e5:42:71:de:91:e9:0e:c1:80:04:f3:ed:
73:c6:96:54:f2:02:6b:20:00:72:0e:a2:26:f0:74:
1b:ca:4d:fd:82:56:04:67:1d:09:b8:c8:69:0b:c8:
d7:f0:22:86:c7:9c:f3:04:da:d7:1a:9a:84:08:a1:
e3:df:dd:96:0f:15:14:23:0d:b7:d1:d0:7d:62:33:
e6:1b:7c:30:02:8c:26:9e:51:19:3f:6f:fb:9f:40:
6e:0e:fa:31:5b:80:4e:fa:95:3c:2e:23:13:c3:5f:
9f:80:a0:75:98:8d:1c:43:c1:9b:03:1a:b4:af:44:
08:94:3b:cc:4d:4d:69:1f:31:33:28:23:2e:51:2c:
34:56:f0:0c:ee:ae:a7:98:a5:03:92:77:4f:d9:0b:
a6:01:31:72:e5:07:9e:af:48:09:57:4a:18:c2:c4:
f2:c9:fd:ec:18:a1:11:dc:4e:e3:71:83:29:e1:a7:
2f:fa:76:d8:04:c1:62:e3:42:97:db:0c:47:07:22:
da:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:69:55:0E:AC:CE:B2:FB:62:18:A0:DE:FB:12:61:A0:55:7F:CA:C9
X509v3 Authority Key Identifier:
keyid:B7:25:35:E4:EB:8B:31:C6:79:4C:4D:F3:1F:F5:3E:4E:64:91:4C:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f5:3c:81:57:eb:ad:1b:91:56:4d:a1:ad:85:6b:68:e7:50:
cf:ef:f1:f7:ca:b8:c2:21:5d:ff:4d:62:29:ae:3d:0c:63:d7:
a8:db:bf:0a:52:57:1a:c9:58:90:f7:51:53:5f:21:8e:c8:46:
98:df:62:24:da:a4:32:bf:8b:94:7a:94:4f:60:7b:a2:91:84:
e8:71:5b:6b:6c:64:85:1e:d2:55:a9:dd:4a:90:78:bf:7b:f9:
f1:67:b0:26:c1:d1:49:fa:4e:27:ba:d3:30:51:9f:d1:ee:b2:
99:66:1e:4a:4d:18:77:4c:71:6c:2d:70:67:fe:44:44:1b:2b:
8b:c1:39:5a:70:2d:01:d5:6b:c8:93:10:97:98:46:ca:10:37:
e6:75:1d:75:2d:d6:ff:b0:66:07:c4:e1:36:2a:ce:05:af:50:
f9:e3:93:ea:d0:dd:2f:ce:0b:18:69:46:af:44:f0:8c:64:33:
0b:25:b2:a7:58:bd:22:0f:07:77:09:fe:bf:f3:ac:f4:f0:07:
67:97:20:f0:40:85:35:25:a2:9d:27:b7:5f:a5:42:57:b9:32:
da:52:eb:43:09:4b:fd:0d:07:c4:0e:96:0e:e8:eb:70:31:01:
cc:b0:05:db:45:c2:2e:65:f8:b9:23:d5:c1:29:62:51:df:88:
2a:10:27:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:21:45 2025 by rpki-client