This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft
File: 1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft (raw, json)
Hash identifier: rrna/EhxnRsXKM4TSKDAVzkAjQ2LHAia5qPw5LJn1g4=
Subject key identifier: 1D:84:33:57:91:72:1F:0A:08:34:2A:90:25:92:BC:DA:D4:25:5F:97
Authority key identifier: 1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F
Certificate issuer: /CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F
Certificate serial: 25DC28D97F23106162B18873FF22390191553081
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft
Manifest number: 01A3
Signing time: Fri 05 Dec 2025 01:51:40 +0000
Manifest this update: Fri 05 Dec 2025 01:46:40 +0000
Manifest next update: Mon 08 Dec 2025 12:25:40 +0000
Files and hashes: 1: 323430313a326334303a343a3a2f34382d3438203d3e203338353233.roa (hash: x8GA7f+9To0zJWTPLU22XKkbJl3cpNPeZ955m1OcAKM=)
2: 3131372e37342e3131322e302f32342d3234203d3e203338353233.roa (hash: r7mX7DIOfxP1tvfX/0nO3uk5UJScpK1uxXF4s8uBd2k=)
3: 323430313a326334303a313a3a2f34382d3438203d3e203338353233.roa (hash: OfppjjTpXFLmh5Aj/BiOiyknKtfPtzPHg2/eqJ5W1oI=)
4: 3131372e37342e3131392e302f32342d3234203d3e203338353233.roa (hash: xNJ7kcT79xuTCgJoNY2LlV0p8gctQ3BS6QaupCIi9OQ=)
5: 3131372e37342e3131372e302f32342d3234203d3e203338353233.roa (hash: V8HVQOfgmh/cc0nhLeaxvvDoxZedeMVRv4rqy3Nfh7U=)
6: 3131372e37342e3131342e302f32342d3234203d3e203338353233.roa (hash: wmUZdQN9smMnqKDgMvZP3VM5NikSry3YiZ+HF4rDvwk=)
7: 323430313a326334303a3a2f34382d3438203d3e203338353233.roa (hash: ibJZHZEEwuIaueWUBS974XsPSfaJnljHAhKebn2nItk=)
8: 3131372e37342e3131382e302f32342d3234203d3e203338353233.roa (hash: 4fKehzLVKMt4BtIz5yX0ZNeUtM2OU5RTZbzjb0CfeGg=)
9: 323430313a326334303a353a3a2f34382d3438203d3e203338353233.roa (hash: B1+mJ2NWxCErJO3eSkTT+IRh+1v8gS/UXtodN0rllAY=)
10: 323430313a326334303a323a3a2f34382d3438203d3e203338353233.roa (hash: hqbmI1+UoUPoz5aHKEefU2aqzgzzxdPZgTYT+n6aATQ=)
11: 323430313a326334303a333a3a2f34382d3438203d3e203338353233.roa (hash: n2kJmjfaGbSRfn1pQASrz7hUspqtdNSxVZot/XzEk0w=)
12: 3131372e37342e3131362e302f32342d3234203d3e203338353233.roa (hash: 4k9C18S/gej3vBFzU0qeNrYGkLmZVXuYXMm+WSQ8DFw=)
13: 1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl (hash: xJsfLWQLf0AlKRkiAylG3a3Hkceatq9SsuyqLhhbF+U=)
14: 3131372e37342e3131332e302f32342d3234203d3e203338353233.roa (hash: SrvCxxwtOAUSUTutTIMfTF6gsLrsVsYaxkHmFerjnWI=)
15: 3131372e37342e3131352e302f32342d3234203d3e203338353233.roa (hash: IzPZz6vu3cjWO+ZYwd6eSMpiSKGTjsqFFoCVeTSJVZ8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl
rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 12:25:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:dc:28:d9:7f:23:10:61:62:b1:88:73:ff:22:39:01:91:55:30:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F
Validity
Not Before: Dec 5 01:46:40 2025 GMT
Not After : Dec 8 12:25:40 2025 GMT
Subject: CN=1D84335791721F0A08342A902592BCDAD4255F97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4e:ef:37:cc:27:18:94:b4:c7:98:32:3c:3d:
53:cd:f7:b6:2f:f4:cc:b1:a5:dd:8c:0f:88:21:e4:
63:9e:58:52:b6:85:db:6b:e5:cc:2e:b2:71:af:a4:
5a:0e:70:3d:26:42:2e:de:e9:92:b8:07:38:f6:e6:
d3:14:30:71:40:10:10:7c:da:9a:8e:59:e4:12:42:
6f:03:b1:ff:86:f3:d2:5f:a5:d9:fc:3b:d4:69:c4:
c6:a4:dd:8e:29:d5:32:12:8d:5f:34:d0:25:00:f6:
ea:3d:77:0a:9d:e5:e1:e3:44:a5:19:26:08:89:b6:
3f:23:67:3c:8a:e6:18:72:12:bf:70:70:d3:f4:6a:
77:e7:15:aa:7d:d2:65:a6:ff:62:7b:11:ab:0e:5e:
3d:06:f2:84:64:59:9b:5e:91:f8:06:30:55:41:1f:
7d:5f:51:13:b8:56:72:da:ea:10:92:df:48:6b:46:
b5:5b:9e:4b:ac:79:0f:c3:7d:35:3d:ee:be:ef:6b:
4b:f9:ac:a9:9c:db:a5:c3:59:1f:f6:e1:2d:6b:fa:
4e:25:c7:46:b6:dc:f9:92:53:33:0e:66:59:1b:4f:
cd:28:9d:0d:0d:46:80:6a:aa:cf:1f:0e:4b:88:71:
9e:43:14:c7:b1:20:43:01:7b:4a:5c:ba:26:b8:ef:
02:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:84:33:57:91:72:1F:0A:08:34:2A:90:25:92:BC:DA:D4:25:5F:97
X509v3 Authority Key Identifier:
keyid:1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:18:c3:c0:e5:93:b4:ac:aa:aa:cb:0f:9a:42:07:e9:03:ac:
43:a7:d7:82:dd:29:de:24:63:3f:20:93:23:ca:b8:9e:cd:de:
2c:7f:98:7a:46:fb:9f:9f:78:46:61:33:8c:0a:01:f8:9f:99:
04:3b:7a:9f:28:43:98:f5:5d:48:06:52:d9:43:c1:ff:51:1a:
5a:ae:84:7f:8e:74:6e:04:d4:ae:e9:fe:ea:1e:7b:7d:86:60:
fb:31:d6:9e:2b:12:67:a8:e1:43:28:40:8d:fa:4a:ec:f5:c1:
52:62:4f:9a:b7:f6:6c:54:c2:bc:ee:fa:16:99:2e:40:6b:0c:
cb:b0:8b:ab:0d:99:bd:60:9f:97:b5:cb:41:c3:2e:93:42:b6:
be:1f:ea:f2:15:10:06:4b:24:50:7a:f1:d1:80:26:d0:cb:93:
41:a7:af:32:83:13:f0:66:0d:d0:05:f4:59:29:dc:37:d0:c4:
5e:e2:ca:51:63:91:38:e1:35:b7:dc:26:da:b3:e1:7f:37:ca:
0a:9d:02:f2:e4:2e:b7:c2:60:7f:33:4a:d7:33:e5:37:ba:60:
d0:e8:cd:1c:b3:99:07:18:01:20:73:7e:ed:e1:61:2e:88:0e:
4d:68:44:ad:7b:d0:40:98:8d:2f:77:31:f1:82:4e:b0:10:b2:
fe:f6:bc:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:49:44 2025 by rpki-client