This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft
File: 5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft (raw, json)
Hash identifier: /SUWkr+zgKivCJAnCoV3XH+44aMoG7Y0yiJDKSYZ9xU=
Subject key identifier: 79:95:75:6D:E4:AF:04:C3:50:C5:6C:3E:31:92:74:39:E1:DB:67:9B
Authority key identifier: 5B:B7:E8:A3:AB:F6:DF:6D:46:C3:D5:F9:1E:C3:B7:78:70:CE:6C:61
Certificate issuer: /CN=5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61
Certificate serial: 2B1A8676626CAD72C7BA14539AFDB83A06F59431
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft
Manifest number: EF
Signing time: Fri 05 Dec 2025 14:20:42 +0000
Manifest this update: Fri 05 Dec 2025 14:15:42 +0000
Manifest next update: Mon 08 Dec 2025 22:39:42 +0000
Files and hashes: 1: 5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl (hash: zE3+ghqQzH/AjD93rTirSRhdN5KO7BzbQzKnyjgz58w=)
2: 3136302e32322e37302e302f32332d3234203d3e203538333831.roa (hash: FO3pGbtDCey282ifjhO/l/kBiiy065aX3qH0ZWB4XyM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl
rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 22:39:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:1a:86:76:62:6c:ad:72:c7:ba:14:53:9a:fd:b8:3a:06:f5:94:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61
Validity
Not Before: Dec 5 14:15:42 2025 GMT
Not After : Dec 8 22:39:42 2025 GMT
Subject: CN=7995756DE4AF04C350C56C3E31927439E1DB679B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f4:08:86:04:9a:92:37:9c:d4:46:ea:a3:50:
75:00:f7:2f:9b:a8:c8:4b:f2:94:db:ed:6a:ba:9f:
f5:c0:a9:a1:00:f2:b3:f4:1e:91:76:ea:7c:2c:5c:
31:93:3d:9a:50:72:b7:03:b3:fd:00:37:3d:4b:8d:
87:50:d7:39:f9:e4:5f:88:81:b8:de:91:90:80:16:
00:05:03:c6:82:7d:3d:5d:e4:57:ef:01:74:9d:fd:
49:a9:c4:07:5a:c1:ba:ce:f3:f7:7d:32:c1:c7:91:
01:c9:2f:86:e1:91:66:0d:63:0e:90:0f:95:d0:bd:
a1:8b:f7:66:88:dd:27:c0:2a:8d:59:4a:fe:b5:56:
97:71:91:83:16:2e:06:94:76:a7:33:92:c1:7e:00:
d7:67:70:a5:40:39:8b:ba:b7:e3:13:d0:9e:17:35:
b9:41:48:dc:3f:91:80:14:7b:d0:af:f0:c1:cb:f6:
93:f3:ea:a6:9f:f2:01:88:3a:c3:d2:fa:b2:4a:e0:
1e:03:4e:1f:6e:85:63:53:73:cd:20:46:bf:ee:26:
95:24:20:5f:db:74:0e:09:2f:e8:d4:0e:23:41:2d:
13:10:0b:a6:47:74:58:a4:e4:3c:45:6f:f4:24:06:
f7:5e:8a:3c:ac:d0:b3:21:2a:3a:cf:a5:db:bf:cb:
57:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:95:75:6D:E4:AF:04:C3:50:C5:6C:3E:31:92:74:39:E1:DB:67:9B
X509v3 Authority Key Identifier:
keyid:5B:B7:E8:A3:AB:F6:DF:6D:46:C3:D5:F9:1E:C3:B7:78:70:CE:6C:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:38:c5:6c:59:e5:65:72:63:21:bb:92:a1:d7:5a:eb:a3:10:
04:a0:c6:73:00:a0:67:34:ce:c4:6f:8d:b7:3c:5b:7a:9a:cd:
01:ad:50:40:b8:02:88:4d:1d:e0:23:96:a9:92:4b:1e:27:cf:
a7:59:f6:18:de:a2:19:e7:0f:95:13:09:2c:54:9e:15:93:2b:
67:8c:24:f6:80:6c:8b:ed:a3:33:d3:37:bf:8f:da:cf:b2:74:
8f:84:f5:57:7e:c8:76:2c:24:8c:b7:1d:85:64:7b:e0:70:df:
d9:ee:f6:bf:06:4b:98:df:18:e6:d4:56:af:ea:34:8b:38:29:
0d:93:db:40:29:99:0d:fd:e7:55:0a:3c:29:1c:f9:17:4e:54:
d7:a2:54:df:db:94:e6:08:72:94:9a:fb:98:ff:42:40:70:af:
22:e9:5b:c5:d4:92:65:74:19:ff:5e:ab:a4:6a:7d:3d:1d:37:
8e:f2:76:ae:a7:a9:77:16:14:d4:c2:c4:09:37:3e:43:8e:a3:
84:de:4e:67:cf:28:09:d1:ba:7d:be:25:bc:15:b8:1c:25:3b:
ea:61:53:b5:db:d0:e2:c6:3c:f4:5a:28:7d:60:2e:ef:09:0f:
ea:45:08:74:18:63:a6:ac:fa:25:3c:ea:8b:8c:1e:e7:98:67:
2d:f1:e5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:10:53 2025 by rpki-client