This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.mft
File: 1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.mft (raw, json)
Hash identifier: JT5ZyBcZkE1fTBLThZAtmlaUfA0E+VOWV3NZ2TUNupA=
Subject key identifier: 35:41:0A:73:A7:43:5E:1C:17:FD:60:D6:F0:CF:C8:AC:B1:2E:7F:0C
Authority key identifier: 1F:4C:46:E1:8F:21:AF:BE:4D:8A:C9:84:60:90:B6:3A:A9:87:82:BB
Certificate issuer: /CN=1F4C46E18F21AFBE4D8AC9846090B63AA98782BB
Certificate serial: 4DEEE86D3696FFCECF18DA65F7157AAE47BAE9DE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.mft
Manifest number: 0134
Signing time: Sat 06 Dec 2025 06:11:44 +0000
Manifest this update: Sat 06 Dec 2025 06:06:44 +0000
Manifest next update: Tue 09 Dec 2025 16:24:44 +0000
Files and hashes: 1: 1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.crl (hash: aSXPP2sqvvOqrSTolxKRxhxgPMgicnPTYcTbcasV4eU=)
2: 3130332e37362e3130352e302f32342d3234203d3e20313531353839.roa (hash: qDLyTdPWSG6q8vGu/DnC4p5fkC9xQVIbSAKqWF4GTxo=)
3: 3130332e37362e3130342e302f32342d3234203d3e20313531353839.roa (hash: y5O1Ppu2ytn4g8GvvxC2f7T0LX+os0fh9M12M0RIzb8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.crl
rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:ee:e8:6d:36:96:ff:ce:cf:18:da:65:f7:15:7a:ae:47:ba:e9:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F4C46E18F21AFBE4D8AC9846090B63AA98782BB
Validity
Not Before: Dec 6 06:06:44 2025 GMT
Not After : Dec 9 16:24:44 2025 GMT
Subject: CN=35410A73A7435E1C17FD60D6F0CFC8ACB12E7F0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a8:b5:1d:00:97:cd:23:79:00:25:50:2c:5e:
b3:66:02:09:3e:67:24:77:d1:2e:d0:30:79:f0:cc:
4a:c3:50:5d:59:83:39:0d:f6:d1:f4:d6:6a:fd:ee:
38:3d:9f:09:16:52:a8:a6:60:ae:d3:3f:cf:b0:28:
03:4f:96:91:f0:13:ce:23:18:af:23:7b:0d:62:e5:
5e:c6:5f:ce:39:42:21:ce:05:62:f7:85:df:5d:92:
a3:db:25:de:f4:d3:2b:57:e3:13:b3:f3:d0:5b:a3:
f1:eb:43:75:a8:ca:02:b2:6c:2e:98:82:2e:18:45:
ad:8e:3c:24:e2:cc:51:f1:8f:e9:6c:e0:e3:ce:49:
62:9c:20:cd:38:93:ad:da:ba:a3:d7:86:56:ae:ee:
30:fe:71:30:56:79:37:e2:5b:f7:48:95:af:80:79:
79:62:a2:c1:33:a5:54:7a:30:d0:de:60:db:8a:9d:
45:ac:fc:5c:12:65:2f:41:4a:37:ee:ad:2f:6b:05:
85:0b:a9:75:0f:0b:11:74:39:fb:50:97:b4:21:37:
b6:80:cf:c5:bf:f6:72:31:c3:d4:2e:a6:5b:0c:d3:
07:64:8d:1c:56:d8:03:b1:6b:19:ae:39:65:ae:b8:
88:25:90:eb:8d:ce:2f:dd:63:96:6b:68:62:cf:11:
ab:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:41:0A:73:A7:43:5E:1C:17:FD:60:D6:F0:CF:C8:AC:B1:2E:7F:0C
X509v3 Authority Key Identifier:
keyid:1F:4C:46:E1:8F:21:AF:BE:4D:8A:C9:84:60:90:B6:3A:A9:87:82:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e6:d7:c7:14:f8:8a:e1:7e:25:9d:86:9b:19:1e:80:32:17:
e2:0e:ba:9b:2e:32:06:fb:77:03:2e:5b:39:80:ff:69:79:0d:
dd:bf:fb:af:06:a0:e7:3a:5d:c0:c8:0c:e7:6f:9a:5b:b9:50:
b1:5f:36:8e:7b:7f:18:4e:aa:f5:c2:50:05:3a:68:b1:d4:35:
54:89:70:ee:29:b4:64:10:5c:6e:2f:ae:44:f7:43:ec:e8:d3:
89:cd:8c:3e:6a:64:14:88:e4:62:4e:aa:dd:06:87:3f:bc:4b:
e0:d5:87:bd:1f:5f:07:fb:da:06:b8:52:13:d7:59:cf:bc:c9:
dd:90:78:ff:0a:a9:52:65:4a:ab:66:df:6d:a0:c2:1c:00:f4:
af:76:57:4c:d5:c3:7c:1b:42:5b:f8:f9:1a:c2:06:34:ba:df:
56:40:98:07:f5:e2:cf:c5:20:8a:4b:e4:67:85:a7:a2:5c:f0:
68:4f:3c:7c:99:b1:7d:b9:2c:29:f8:f5:0c:48:e8:02:a6:8c:
fd:14:aa:78:d4:b3:d8:dc:1f:e3:69:34:9d:f2:95:b4:f0:23:
de:40:68:b9:eb:e8:35:57:96:3a:53:1b:a9:bb:46:c9:c4:cc:
2c:7f:c5:86:ed:90:78:8e:0b:27:d3:4b:d0:90:c2:80:71:07:
ec:43:0d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:12:04 2025 by rpki-client