This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft
File: 07087494011A8BD71E0AB56E4A29820B0C265D45.mft (raw, json)
Hash identifier: fn+DH8CA9wEk0Lsn7GjKJKjfqg8nrko6PwxLUFfH/oI=
Subject key identifier: 65:15:61:BE:6E:3C:CA:3B:BE:F4:72:A9:D1:C0:7F:DC:07:5D:C9:3E
Authority key identifier: 07:08:74:94:01:1A:8B:D7:1E:0A:B5:6E:4A:29:82:0B:0C:26:5D:45
Certificate issuer: /CN=07087494011A8BD71E0AB56E4A29820B0C265D45
Certificate serial: 55D96C8CE8101CF70CB8C0137994DB834183A959
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07087494011A8BD71E0AB56E4A29820B0C265D45.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft
Manifest number: 80
Signing time: Fri 05 Dec 2025 22:51:23 +0000
Manifest this update: Fri 05 Dec 2025 22:46:23 +0000
Manifest next update: Mon 08 Dec 2025 23:19:23 +0000
Files and hashes: 1: 3130332e38392e3234382e302f32342d3234203d3e20313336303939.roa (hash: nJDk2moXVJKOcLf/s2ENaD41Lvuu7Wv1fbgDq/e+7rk=)
2: 323030313a6466303a633330303a3a2f34382d3438203d3e20313336303939.roa (hash: 7vK5kAAznF/vtGtOCVNcNBhvktxpMswh2ctIXuNsU5A=)
3: 07087494011A8BD71E0AB56E4A29820B0C265D45.crl (hash: P02QGX65weKE1lGuHUmYAO61zYCq9vAXJpNGkK3VTvo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.crl
rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07087494011A8BD71E0AB56E4A29820B0C265D45.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 23:19:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:d9:6c:8c:e8:10:1c:f7:0c:b8:c0:13:79:94:db:83:41:83:a9:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07087494011A8BD71E0AB56E4A29820B0C265D45
Validity
Not Before: Dec 5 22:46:23 2025 GMT
Not After : Dec 8 23:19:23 2025 GMT
Subject: CN=651561BE6E3CCA3BBEF472A9D1C07FDC075DC93E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:59:4a:0f:9b:10:ad:4d:c6:7e:a9:44:77:b2:
cc:c2:80:b2:e3:a1:c8:b9:7d:ab:f3:65:bb:58:2a:
4c:42:5d:33:88:1f:35:81:d1:3c:c2:73:a7:17:15:
07:95:03:3b:52:22:3b:56:5b:5d:64:13:68:0c:e3:
c6:af:74:33:f6:cf:f9:9b:6b:18:d2:f9:d5:fb:30:
c5:87:b2:36:4e:d4:cf:fb:18:89:e0:82:89:b6:ec:
89:77:30:1b:24:39:0f:20:fc:3a:f8:04:c7:eb:fa:
12:85:33:f1:13:18:06:4f:b7:99:2d:1f:90:bd:5c:
61:ce:1a:b1:da:36:0b:ee:99:ea:d8:cf:96:b2:dd:
bf:5a:5a:65:d7:6f:e7:14:be:c6:c2:e7:2f:2d:40:
78:08:fd:3d:fb:9f:b3:5e:61:9b:6b:f5:9b:74:14:
20:7c:f2:aa:ec:03:12:53:ba:65:33:b4:72:50:16:
7c:83:9c:69:80:7b:18:66:75:25:a0:04:72:ad:13:
38:b2:83:1a:c9:78:b6:14:ff:ee:44:e5:d7:87:d9:
53:59:da:c7:42:80:e7:ec:4a:b9:f6:19:34:63:47:
1d:4a:0c:47:a0:46:09:64:9f:42:fd:ba:82:a6:39:
0b:d4:46:81:83:7b:f1:17:4c:db:4c:9b:a7:47:e2:
dd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:15:61:BE:6E:3C:CA:3B:BE:F4:72:A9:D1:C0:7F:DC:07:5D:C9:3E
X509v3 Authority Key Identifier:
keyid:07:08:74:94:01:1A:8B:D7:1E:0A:B5:6E:4A:29:82:0B:0C:26:5D:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07087494011A8BD71E0AB56E4A29820B0C265D45.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:9d:60:13:7a:20:41:c2:93:f4:5c:9a:7c:5e:93:94:a9:50:
4c:6b:55:64:e5:1f:87:68:87:e6:ac:ec:a8:51:af:13:2a:94:
8c:16:7c:3c:a4:c1:45:c7:d7:0b:7f:29:e6:01:84:fa:12:d0:
66:38:b3:a4:d2:d9:8f:06:3b:11:19:6d:ac:43:e5:ee:72:60:
12:5d:99:c1:52:6f:e4:b4:04:4c:7e:6e:1b:d0:ca:98:82:35:
3b:a5:3f:6d:7a:ae:6b:1f:73:95:b4:b4:77:ff:53:7c:cd:96:
2c:e4:e4:10:53:5e:78:1e:43:24:50:22:24:6d:0b:20:a6:d4:
39:b3:ad:b8:14:0c:a2:92:ad:95:eb:36:60:c1:01:0f:7b:f9:
fe:d3:34:e5:d3:d0:22:a9:41:68:08:35:f6:cb:da:85:45:57:
8f:0e:07:89:04:a3:31:22:a1:13:50:c9:aa:47:93:1d:72:3d:
97:b9:d0:46:c2:4d:87:1a:20:97:74:fa:95:13:70:e1:f3:35:
a2:90:ad:7c:7e:66:60:3a:9d:8d:05:7a:65:ad:f0:00:26:ed:
f7:cf:97:88:c3:db:93:9a:76:47:64:4f:98:7a:97:fe:1e:ce:
8e:a1:ea:c6:c5:09:8b:67:c7:b9:a7:9b:69:a4:a8:93:04:88:
2a:19:c0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:10:04 2025 by rpki-client