This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.mft
File: 83AA9F8209933310C87D9F85BD2379EACC6108B2.mft (raw, json)
Hash identifier: dE9MXvmZ8RtcdliEMO+pRpyAJRPJSV/HVGVQEZ1Ov14=
Subject key identifier: A8:29:6F:EC:D3:85:32:13:96:DB:EA:29:37:C2:59:E2:00:B1:78:85
Authority key identifier: 83:AA:9F:82:09:93:33:10:C8:7D:9F:85:BD:23:79:EA:CC:61:08:B2
Certificate issuer: /CN=83AA9F8209933310C87D9F85BD2379EACC6108B2
Certificate serial: 4081DD4AC9B22C7D44559524ADEA906ED9FC5039
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83AA9F8209933310C87D9F85BD2379EACC6108B2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.mft
Manifest number: 0157
Signing time: Fri 05 Dec 2025 03:41:17 +0000
Manifest this update: Fri 05 Dec 2025 03:36:17 +0000
Manifest next update: Mon 08 Dec 2025 09:06:17 +0000
Files and hashes: 1: 83AA9F8209933310C87D9F85BD2379EACC6108B2.crl (hash: vjm7JdFEw7r4bzDbw986GAxVw27tZMPBXZVer/KyRUY=)
2: 3130332e3138392e3139372e302f32342d3234203d3e20313439393132.roa (hash: /9PZtxYTnuYAjZ8V+irC2Dshf64qaJaF9/SVuE03VjY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.crl
rsync://repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83AA9F8209933310C87D9F85BD2379EACC6108B2.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 09:06:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:81:dd:4a:c9:b2:2c:7d:44:55:95:24:ad:ea:90:6e:d9:fc:50:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83AA9F8209933310C87D9F85BD2379EACC6108B2
Validity
Not Before: Dec 5 03:36:17 2025 GMT
Not After : Dec 8 09:06:17 2025 GMT
Subject: CN=A8296FECD385321396DBEA2937C259E200B17885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a6:26:d6:5a:bc:d8:d2:15:f3:3c:5a:b2:57:
65:6f:c7:0d:f4:01:1e:6e:44:3b:78:24:d0:d0:af:
3e:95:28:c2:c6:df:6e:5a:3e:c9:c6:8c:e8:58:f1:
55:42:71:c1:92:85:cc:b9:66:a2:2f:9d:6b:f0:a8:
03:43:10:c5:9e:28:84:c9:d0:31:a0:c3:36:f9:3f:
dc:ad:7f:2b:01:ab:b9:18:3f:20:6e:8e:cb:d0:bf:
b5:1b:1a:cc:da:41:31:b4:1a:d4:0e:75:01:4f:0d:
b9:66:ce:97:b5:56:97:67:03:06:8f:5c:b7:63:85:
fc:0a:91:73:4d:41:a4:78:b6:f3:4a:26:4c:23:82:
af:7a:d8:02:b3:14:50:f9:68:10:02:97:8a:0c:aa:
a0:59:5a:7d:5b:4b:78:90:37:28:08:a0:b5:d4:54:
36:fb:27:59:5a:72:2b:3c:39:6b:6b:36:bc:d9:64:
69:90:4e:a8:c9:89:a9:66:48:cc:e6:c3:c9:45:cb:
5f:ce:8c:47:48:88:a0:92:c7:ce:d5:f5:28:9a:16:
8a:50:a4:f5:b9:7c:d0:ce:b2:63:f7:a2:91:6d:23:
cf:76:1f:4a:d7:24:7c:7a:c4:14:22:9e:f8:5d:0d:
0d:4b:86:ed:23:61:d5:09:72:5f:37:07:4a:fa:b0:
ab:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:29:6F:EC:D3:85:32:13:96:DB:EA:29:37:C2:59:E2:00:B1:78:85
X509v3 Authority Key Identifier:
keyid:83:AA:9F:82:09:93:33:10:C8:7D:9F:85:BD:23:79:EA:CC:61:08:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83AA9F8209933310C87D9F85BD2379EACC6108B2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b0:c2:d8:6f:3f:77:4d:43:cb:33:ee:52:7e:a6:c2:ef:be:
80:55:7b:83:08:6f:25:40:c4:18:33:01:c7:a0:90:ca:a3:c2:
74:cf:57:86:48:bd:16:75:f2:0a:8c:a3:ad:c5:f6:dc:1d:55:
f7:00:2b:5c:bc:49:4d:bf:38:89:c7:70:63:c1:31:2a:eb:c4:
a8:dc:f0:f9:d2:16:09:cd:a2:68:5e:bd:09:81:b0:52:70:fa:
2c:9d:92:1e:d4:36:22:e0:4f:68:c3:1c:ef:a1:c8:19:5a:3b:
35:74:5a:b4:75:de:5b:7b:31:70:f6:0a:3d:9d:5e:86:33:4a:
cd:d0:db:40:6e:aa:97:d6:2b:24:1f:f3:4f:0b:3c:28:3b:eb:
0b:ee:3a:17:00:cf:9a:f5:99:fb:82:28:e1:ba:3c:62:39:80:
71:e2:26:8b:63:a2:76:ec:a4:16:fb:b3:99:a4:2c:e6:ce:f9:
c7:62:c5:b8:39:b5:76:59:6a:db:79:13:ea:61:d3:87:e4:48:
ef:15:ac:d0:93:2b:60:c4:71:bf:b2:d2:1b:6c:e1:e3:78:bf:
b1:42:01:4d:bb:ef:c2:de:51:8b:bb:e2:cc:ee:74:af:4b:c1:
66:00:91:30:3e:43:72:0d:9e:82:91:be:3e:9f:a0:b2:20:e3:
f5:ee:67:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:51:09 2025 by rpki-client