This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft
File: A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft (raw, json)
Hash identifier: J5TZPy89QM25B1FJaAKOKsvFU5WT+whhude8VDqf81U=
Subject key identifier: 5D:7D:E7:53:FF:6A:D3:33:12:A8:31:FC:B6:45:AE:A9:2D:E8:43:31
Authority key identifier: A2:05:D7:D4:B5:01:61:EC:6E:6D:73:C4:A1:D0:52:92:9C:7F:FC:42
Certificate issuer: /CN=A205D7D4B50161EC6E6D73C4A1D052929C7FFC42
Certificate serial: 1DE43A8F88BCC1B9BE4D47A9A88905426AD0316B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft
Manifest number: 01BD
Signing time: Sat 06 Dec 2025 20:41:13 +0000
Manifest this update: Sat 06 Dec 2025 20:36:13 +0000
Manifest next update: Wed 10 Dec 2025 04:44:13 +0000
Files and hashes: 1: A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.crl (hash: I3u14bOhIlWAFcn8WLv0hgOk3d3qIP01THclF44kajE=)
2: 3130332e3130352e39322e302f32332d3234203d3e20313530393435.roa (hash: SpZC59e78RFSMTIi2T0VjoxX/8FXFEY34gXVgn2Wfv8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.crl
rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:e4:3a:8f:88:bc:c1:b9:be:4d:47:a9:a8:89:05:42:6a:d0:31:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A205D7D4B50161EC6E6D73C4A1D052929C7FFC42
Validity
Not Before: Dec 6 20:36:13 2025 GMT
Not After : Dec 10 04:44:13 2025 GMT
Subject: CN=5D7DE753FF6AD33312A831FCB645AEA92DE84331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:67:d8:a0:1a:d7:53:ea:c3:af:70:ab:2b:f3:
11:13:fe:3f:5e:55:b2:75:8c:f2:45:c3:dc:8d:1d:
ef:90:bd:db:24:ee:f4:45:6d:f6:e3:69:b6:b9:7b:
d2:23:65:34:0f:e0:71:db:20:11:94:05:46:07:fb:
6e:91:03:4e:12:98:32:64:6f:7e:a6:ac:42:d0:95:
8d:3b:8f:51:36:4f:a5:f9:cf:74:62:ba:76:ad:7d:
5f:d4:80:fe:f6:30:b4:45:2e:9a:74:97:e6:93:34:
c9:fd:a4:50:58:b9:40:fb:87:c5:f9:8a:62:cd:63:
bc:63:4f:a4:c2:4b:5c:53:25:7e:3a:89:9f:4e:c2:
5f:f6:f7:e2:3f:f6:87:d9:18:45:fd:3c:a8:ba:97:
22:82:61:57:fc:92:2f:d9:d8:9e:b7:2f:b8:38:ad:
aa:98:23:47:07:0c:1c:a1:66:bf:a1:32:e7:4c:a2:
ea:58:69:2c:47:46:59:da:b8:b1:a1:72:7c:67:3b:
b2:55:d4:99:2e:43:da:f0:96:08:dc:7a:2b:a9:92:
44:7d:f5:79:38:b3:fb:83:78:59:94:f8:4b:ab:f3:
0a:76:bf:79:79:a3:d1:1b:22:09:38:53:0a:d1:69:
b9:71:4a:f5:43:16:72:84:8c:21:71:23:7a:e8:08:
24:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:7D:E7:53:FF:6A:D3:33:12:A8:31:FC:B6:45:AE:A9:2D:E8:43:31
X509v3 Authority Key Identifier:
keyid:A2:05:D7:D4:B5:01:61:EC:6E:6D:73:C4:A1:D0:52:92:9C:7F:FC:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:33:39:87:32:98:f1:02:a3:63:99:a9:51:55:ff:99:94:b4:
81:7f:79:4f:b2:48:78:53:f0:d8:44:93:97:7a:65:c1:f7:2c:
7e:61:39:17:10:c6:26:ba:e2:59:c0:74:9a:c3:0b:59:08:6d:
5c:c2:ba:d4:77:b2:f7:ad:ca:b2:56:42:a8:8e:d2:c6:93:6b:
da:e5:0d:2d:ef:f1:f4:e5:72:65:97:85:67:02:d1:98:81:26:
e8:e5:d1:47:60:94:57:1e:20:8e:8e:e0:78:81:18:86:49:e1:
93:c0:76:b8:d2:8e:c9:8c:22:71:fc:e0:ae:82:df:5a:1a:03:
4d:fd:b3:cc:cf:00:f0:9e:ce:10:8e:3a:52:e3:a0:84:80:80:
51:0e:6d:d0:0b:dd:83:8c:03:27:a3:aa:6b:6e:f5:74:84:8f:
20:3b:93:ad:60:54:c5:19:da:47:cd:70:50:cf:ef:3f:2e:3e:
1d:a8:e9:a1:32:32:a5:d4:40:9c:8c:93:f9:b8:82:31:f7:3c:
e7:4d:ad:5a:a2:70:ba:55:42:e4:16:68:fc:f8:e1:0d:ea:fb:
de:5d:2b:31:56:74:9f:41:f8:fb:ab:3d:15:94:31:ea:19:d2:
e7:ab:74:89:0a:b7:62:80:3f:94:58:d6:17:7c:03:22:51:59:
bb:0c:4e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:00:05 2025 by rpki-client