This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft
File: 00EE953FD699788668C724460F4D8D420238194F.mft (raw, json)
Hash identifier: JSsL0NqwM9kFOvzvMNZxzZRiryWcJesVNO49+YUbFY8=
Subject key identifier: F9:77:02:A6:EE:BF:A5:D7:5D:9D:0F:08:53:D9:46:4B:2F:CB:D9:81
Authority key identifier: 00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F
Certificate issuer: /CN=00EE953FD699788668C724460F4D8D420238194F
Certificate serial: 636CCF3B4B0810EDD004551F2BD5060424124D22
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft
Manifest number: 022C
Signing time: Fri 05 Dec 2025 18:30:40 +0000
Manifest this update: Fri 05 Dec 2025 18:25:40 +0000
Manifest next update: Tue 09 Dec 2025 02:31:40 +0000
Files and hashes: 1: 3132322e3132382e31382e302f32342d3234203d3e203436303435.roa (hash: bvNupIpWmDhaL8rFDaTnVFDhI5fuAg0k+27/VGkzYJs=)
2: 3132322e3132382e31372e302f32342d3234203d3e203436303435.roa (hash: P5LJ10k2BHWyFCmNYnH84ZTaEVA9KJ8Poi0f/ODMh70=)
3: 3132322e3132382e32302e302f32342d3234203d3e203436303435.roa (hash: FgOjY7TNj+vVOTY+T0f+/7XZ2PEhUJFN/481ZR8iBC4=)
4: 3132322e3132382e32322e302f32342d3234203d3e203436303435.roa (hash: ebM/F6KIH60LQhN77naN07o0NG2yDX1tXydmaED/mYQ=)
5: 3132322e3132382e31362e302f32342d3234203d3e20323632393239.roa (hash: V10gFKQc+WgMolRvJOryKxPX23lt9/y0uKRD456elbI=)
6: 3132322e3132382e32312e302f32342d3234203d3e20323632393239.roa (hash: oOdkzUMhWiV8RYKVpP+DjzstiVGxbGTPIWzG22cdnjM=)
7: 3132322e3132382e31362e302f32342d3234203d3e203531323032.roa (hash: SFv+wuFNNUXZIPzGgJ8H4FmCqsXvXTtUEEjtGiij04Q=)
8: 3132322e3132382e32312e302f32342d3234203d3e203531323032.roa (hash: rkVkBOM1gxwGdr/crh5svI3UEvA+KgJo/zG78neJc4s=)
9: 3132322e3132382e31362e302f32342d3234203d3e203436303435.roa (hash: sAwAc9IZ0DLVOhouh4zmTpqaxK9YADxytwY1+gNq8u0=)
10: 3132322e3132382e32332e302f32342d3234203d3e203436303435.roa (hash: jtfCyTfV0URchGl+wzEZEXq1ZK6wyh3Rdim0gK9JxbY=)
11: 3132322e3132382e31392e302f32342d3234203d3e203436303435.roa (hash: +0IYJt+ldEx6hRx5/LkWzdAnyMowfs90g5flb4WhwNI=)
12: 3132322e3132382e32312e302f32342d3234203d3e203436303435.roa (hash: YWPfLwfnjAzwyRdQ8HMatujMpctNGsrqPWB+mJd3o7c=)
13: 00EE953FD699788668C724460F4D8D420238194F.crl (hash: 7mbmuS6DgETu8JmPYUpTaUGiuY4Zaf7Jba2S2yPFPTg=)
14: 3132322e3132382e32322e302f32342d3234203d3e20323032363733.roa (hash: s40PNuPdNfcWQatEkq0oOjj78y3YVxe60B1MhUs2hPU=)
15: 3132322e3132382e31362e302f32312d3231203d3e203436303435.roa (hash: /6F+dCYfhj8nILz7NzSN2rSqER4M9P3bFQ45j14GuDI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.crl
rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 02:31:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:6c:cf:3b:4b:08:10:ed:d0:04:55:1f:2b:d5:06:04:24:12:4d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00EE953FD699788668C724460F4D8D420238194F
Validity
Not Before: Dec 5 18:25:40 2025 GMT
Not After : Dec 9 02:31:40 2025 GMT
Subject: CN=F97702A6EEBFA5D75D9D0F0853D9464B2FCBD981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:14:15:7a:dd:57:04:9f:e6:10:60:c7:67:e7:
8c:be:cb:ad:5b:9d:d3:96:89:32:84:4b:8b:cb:89:
a4:45:22:1e:87:4b:e5:9b:5a:17:4a:7c:bf:5e:2c:
92:57:7c:32:20:aa:46:29:c8:82:74:61:58:30:57:
08:f1:3b:74:68:e5:9a:62:4b:1b:cf:56:9f:9a:ae:
40:4f:12:6e:06:48:27:10:ba:a4:71:af:de:82:8d:
19:f9:6b:c5:a8:ac:c5:ca:a9:06:11:18:0f:4f:83:
22:d2:a0:c8:94:df:65:db:f4:5a:80:ee:a3:02:16:
5f:3e:c2:bb:2b:23:ba:65:91:45:4c:06:11:c7:44:
0d:51:c6:93:67:ab:fa:1c:21:26:3a:93:12:27:ea:
87:92:1b:cc:6c:0b:fc:0a:2a:03:d1:2f:4f:a9:78:
8b:09:c2:22:1b:17:8a:9a:7f:c8:db:73:a5:66:35:
de:48:25:49:fe:66:09:2d:fb:af:9a:6d:f7:0d:f0:
5c:51:37:7b:28:73:03:0f:c0:75:a8:75:de:c3:83:
64:db:90:50:92:0c:4c:1a:e9:9b:3d:fb:32:de:98:
76:4a:6c:67:b5:d9:b5:0b:e1:9c:2d:26:6e:f9:de:
81:03:36:39:67:20:d0:c1:fd:0c:20:b7:ee:39:0d:
1d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:77:02:A6:EE:BF:A5:D7:5D:9D:0F:08:53:D9:46:4B:2F:CB:D9:81
X509v3 Authority Key Identifier:
keyid:00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:10:d2:d5:ff:4b:b6:c2:c0:e4:07:b6:d5:47:5f:3f:8c:6a:
85:63:f0:5f:24:02:11:6a:a2:3f:90:ff:53:b2:53:99:00:65:
4f:b5:a0:f6:ca:1b:a6:3d:5a:c4:f1:65:2e:65:ea:39:98:fd:
98:c4:0c:37:48:d7:eb:19:8e:06:8b:c8:cb:fe:24:1e:96:45:
9e:21:b8:a1:55:15:73:8e:a8:88:3e:bc:db:05:08:f6:f2:86:
13:07:49:9b:35:ba:55:f5:62:fa:e0:45:23:fc:e6:40:39:3a:
9d:ce:ac:ec:9a:a0:3a:5b:cd:b3:d9:60:ba:22:83:96:da:a1:
1e:f4:07:58:6a:4f:f3:0c:64:8f:96:49:1b:9c:a6:24:75:be:
a6:48:ae:87:66:10:e0:4d:80:07:08:85:62:1a:5e:f2:65:0f:
41:5e:be:5e:19:69:f8:1e:67:ef:97:c0:95:44:2b:29:96:f7:
71:23:35:3d:41:97:30:7a:3d:96:24:61:8c:21:e8:e2:82:df:
3e:78:6b:b8:ba:5a:a9:9b:c1:d0:1a:93:51:2e:ae:98:3c:e7:
20:d2:1b:79:ff:7c:79:48:fb:f8:60:9d:57:9e:27:51:86:0a:
09:56:c2:f8:24:8d:84:29:f3:80:93:87:1e:e5:e8:f7:ea:0c:
7c:fe:b5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:10:24 2025 by rpki-client