This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/926C43E6DACC18978406A2C9C57272491FFF9536.mft
File: 926C43E6DACC18978406A2C9C57272491FFF9536.mft (raw, json)
Hash identifier: OtynWUt0Jn/kdk/q1lt3clSHnxRNoaGAdB3M+HlPF9k=
Subject key identifier: 0E:EA:34:3F:4A:E0:1F:7E:04:5B:4A:E0:74:80:56:61:9F:53:00:64
Authority key identifier: 92:6C:43:E6:DA:CC:18:97:84:06:A2:C9:C5:72:72:49:1F:FF:95:36
Certificate issuer: /CN=926C43E6DACC18978406A2C9C57272491FFF9536
Certificate serial: 54877858DAB080DFAD57E75CF15539019411754C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/926C43E6DACC18978406A2C9C57272491FFF9536.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/926C43E6DACC18978406A2C9C57272491FFF9536.mft
Manifest number: 021F
Signing time: Sat 06 Dec 2025 15:40:40 +0000
Manifest this update: Sat 06 Dec 2025 15:35:40 +0000
Manifest next update: Tue 09 Dec 2025 22:36:40 +0000
Files and hashes: 1: 323030313a6466343a646138303a3a2f34382d3438203d3e20313431303735.roa (hash: lah3Lsyh/1yic09nG6WnhdTFrE8YdyloOKzD5mHdMZ4=)
2: 926C43E6DACC18978406A2C9C57272491FFF9536.crl (hash: hLZcyLK43i9VmNRQXWPFhIZ7XZsRaoSr+GKS72iuYtU=)
3: 3130332e3135352e3232342e302f32332d3234203d3e20313431303735.roa (hash: A/rwCvV0N2IIi5162rcSMrNXLOVO+p2IOyLdZ8Vkj6A=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/926C43E6DACC18978406A2C9C57272491FFF9536.crl
rsync://repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/926C43E6DACC18978406A2C9C57272491FFF9536.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/926C43E6DACC18978406A2C9C57272491FFF9536.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:87:78:58:da:b0:80:df:ad:57:e7:5c:f1:55:39:01:94:11:75:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926C43E6DACC18978406A2C9C57272491FFF9536
Validity
Not Before: Dec 6 15:35:40 2025 GMT
Not After : Dec 9 22:36:40 2025 GMT
Subject: CN=0EEA343F4AE01F7E045B4AE0748056619F530064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4b:3c:e4:b2:b6:35:70:d3:6c:f0:02:d8:b9:
e5:c6:77:b0:50:de:66:56:49:dc:f5:1b:14:58:39:
56:07:19:ec:66:bd:69:e0:20:5b:d3:6a:57:5c:44:
c9:8d:33:5b:85:f2:6b:01:f9:40:ea:e7:67:ba:a6:
5e:8f:7e:6a:51:97:a6:eb:8a:d4:3c:df:cf:0e:7f:
f1:93:81:ba:a7:ee:d6:d0:28:c8:44:83:08:ac:5a:
19:49:7a:c2:26:3a:2f:e2:08:47:0f:18:1b:ca:66:
71:98:1a:52:8f:07:69:78:16:2a:ae:0e:2e:4c:a8:
0f:a5:7b:80:fa:0c:4a:d8:18:43:e8:eb:9f:60:e7:
73:08:50:c7:19:ef:3a:0d:42:39:9e:ec:04:8d:10:
b9:4c:5a:7b:2a:aa:64:68:7a:2c:05:e0:83:aa:c0:
13:df:90:c2:7a:ac:42:4a:2b:b6:02:2d:b1:b9:b9:
f1:dd:f4:3b:27:1e:be:62:1a:01:99:d1:f4:9a:65:
94:4c:74:46:27:c4:c4:f2:40:f4:6a:72:5a:76:ca:
ed:8e:e0:1b:df:b5:56:01:3c:f0:84:b0:e1:e2:fb:
a4:2a:c3:e7:03:c1:a0:3b:dd:7a:61:4c:b4:2c:9d:
01:b4:30:e1:6d:61:a3:39:70:a8:50:ff:2d:d4:af:
f4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EA:34:3F:4A:E0:1F:7E:04:5B:4A:E0:74:80:56:61:9F:53:00:64
X509v3 Authority Key Identifier:
keyid:92:6C:43:E6:DA:CC:18:97:84:06:A2:C9:C5:72:72:49:1F:FF:95:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/926C43E6DACC18978406A2C9C57272491FFF9536.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/926C43E6DACC18978406A2C9C57272491FFF9536.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/926C43E6DACC18978406A2C9C57272491FFF9536.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:5a:41:13:a1:df:d7:35:bf:0f:8c:bb:bf:4b:fb:93:ad:17:
1b:40:e5:73:9c:7d:2a:39:d7:6c:47:66:87:7e:29:0c:07:ff:
6f:e7:7b:07:07:e7:cb:f8:c6:53:ce:93:46:9d:ab:c5:a8:4d:
45:06:63:19:a5:bf:01:b1:bf:ff:4b:a3:56:e8:fb:4a:46:95:
01:94:fe:48:8a:94:d4:11:25:c4:b1:d1:1a:73:5f:78:a0:d9:
01:10:7b:30:2c:7b:09:61:0b:07:90:65:a4:eb:2b:9d:02:4c:
60:79:cb:7e:d5:5a:2d:9c:74:f2:57:e2:95:dd:a7:4b:2a:9d:
98:a3:e1:a2:e6:1b:3d:45:45:ce:39:c9:65:37:47:d6:60:05:
cc:d1:e7:6b:27:84:de:bd:ce:6f:c1:64:13:59:a8:d5:e6:71:
29:1a:38:24:6c:8b:80:31:16:2b:cb:ed:00:12:10:eb:a6:d1:
1e:0b:de:8c:c4:b4:5f:99:09:dd:50:f2:37:4f:3c:08:8a:c4:
11:2c:64:f3:47:64:52:1b:25:70:d7:3f:a9:24:08:1b:cc:96:
1a:60:df:0e:77:9d:90:99:a1:1d:05:65:9b:29:fd:1c:42:1f:
0c:ed:0e:60:d6:72:4b:fe:25:c0:09:4d:c5:d3:e0:f0:5e:29:
66:0d:53:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:18:15 2025 by rpki-client