This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft
File: 6886844AB176920850E0984917E9713667D0A025.mft (raw, json)
Hash identifier: x8JgOu38DgCCglaA8xN9rN/k0TYNQXWR05Qi575R0CQ=
Subject key identifier: 66:27:48:54:7D:1F:98:D2:3A:3F:AE:4F:04:32:AF:D2:05:51:09:1F
Authority key identifier: 68:86:84:4A:B1:76:92:08:50:E0:98:49:17:E9:71:36:67:D0:A0:25
Certificate issuer: /CN=6886844AB176920850E0984917E9713667D0A025
Certificate serial: 3D38F33D599F6C18590F57F299F5B0DC8E532738
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft
Manifest number: 01E8
Signing time: Fri 05 Dec 2025 05:52:24 +0000
Manifest this update: Fri 05 Dec 2025 05:47:24 +0000
Manifest next update: Mon 08 Dec 2025 09:14:24 +0000
Files and hashes: 1: 3130332e35312e3130362e302f32342d3234203d3e20313337323839.roa (hash: oHaPvJW9wiPw6s3g8J+9ty85JMlTJ8ChGgOpurTLBaY=)
2: 3130332e35312e3130372e302f32342d3234203d3e20313337323839.roa (hash: 9EmMFN9j1NU/nvOY8wiv0XwdZICwg892ouExOsJJt8g=)
3: 3130332e35312e3130362e302f32332d3233203d3e20313337323839.roa (hash: DIUdo24NgyOlqJkMr4yBSWfhyJtglfGHEA0tVVMrxoY=)
4: 6886844AB176920850E0984917E9713667D0A025.crl (hash: G86qlwSF6x4CmlQiqEBm3vZD5mMz/p+N+MOLmKSPplw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.crl
rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 09:14:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:38:f3:3d:59:9f:6c:18:59:0f:57:f2:99:f5:b0:dc:8e:53:27:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6886844AB176920850E0984917E9713667D0A025
Validity
Not Before: Dec 5 05:47:24 2025 GMT
Not After : Dec 8 09:14:24 2025 GMT
Subject: CN=662748547D1F98D23A3FAE4F0432AFD20551091F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fd:bb:bb:a7:36:83:ce:10:dc:ac:a9:c4:49:
0c:e8:fc:88:b6:03:94:7d:e8:26:a0:cd:fc:79:9e:
70:fb:c0:e4:3f:d7:c2:43:47:d6:2b:2f:04:62:bb:
be:a9:d5:69:33:4c:6e:54:58:99:9e:a1:89:bb:91:
bb:17:0c:09:44:54:20:29:94:d8:0f:22:01:e4:7e:
ca:67:89:0c:eb:ef:11:ae:2a:73:ad:87:51:8d:77:
4d:f5:6d:42:02:0d:82:ea:df:82:9f:87:fb:9c:e6:
af:25:0b:52:65:2a:a4:8e:7b:de:be:cb:a2:a7:88:
de:f9:0d:ac:12:ea:ca:89:a8:af:84:b1:2e:cc:5c:
93:8f:06:33:96:77:7b:41:81:b2:a9:1c:57:a7:1b:
b7:dc:a1:c2:2c:a8:31:28:d7:3a:6a:4a:99:bb:2a:
e0:e5:76:83:07:bf:1f:b6:42:83:b2:6d:36:a5:ed:
f8:4e:3e:7c:23:ae:1f:5b:df:40:b9:44:7c:bb:ab:
66:90:1f:1c:20:5b:ae:97:64:91:97:d2:23:c8:4f:
b8:f6:88:ec:92:92:a0:96:2b:5e:65:e4:1d:9d:54:
37:30:eb:45:02:ea:6c:dd:2f:7b:5d:22:6e:55:cf:
2f:a3:72:53:d8:71:d2:d0:56:ff:10:5e:97:64:5b:
a1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:27:48:54:7D:1F:98:D2:3A:3F:AE:4F:04:32:AF:D2:05:51:09:1F
X509v3 Authority Key Identifier:
keyid:68:86:84:4A:B1:76:92:08:50:E0:98:49:17:E9:71:36:67:D0:A0:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:72:51:37:f8:28:2f:d9:89:ce:91:5b:d0:13:56:a0:57:36:
cb:9a:3c:5f:4d:bf:81:3f:d0:01:87:78:1b:5e:2a:ea:1f:25:
61:16:ce:96:38:72:eb:34:ff:20:9a:10:a7:36:a6:37:14:ad:
17:c4:18:5d:db:78:61:98:6a:00:91:8b:f5:47:53:0c:15:e9:
ea:4b:d7:db:e0:ef:a9:ec:0d:13:dd:bf:d3:1e:ba:1a:70:5c:
8c:11:50:90:1a:9d:75:63:e5:d6:37:06:e8:ef:89:6a:23:73:
a3:e2:8a:30:d8:0c:b8:18:34:fa:2e:6e:db:7c:48:64:f9:aa:
e0:40:44:e0:20:d3:20:ce:99:b4:40:01:8f:f0:dc:65:3a:63:
bf:90:af:12:f2:ad:fa:75:10:0d:04:14:3d:af:6c:59:72:fd:
cc:a2:44:6e:2c:eb:45:18:1d:8a:93:ff:40:b4:73:92:d4:11:
7a:8f:a0:7c:4c:4a:20:39:6a:65:bd:2f:ee:49:79:d8:73:ca:
64:27:fa:a4:82:f2:7c:a2:e7:54:4d:b3:bd:8b:45:75:48:a3:
5d:2a:c7:34:43:ea:c8:dc:4d:72:18:74:22:75:91:fe:94:a7:
30:73:ee:1f:d6:6a:50:da:4a:f5:11:39:ef:61:c1:d6:f7:1b:
8f:26:68:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:09:41 2025 by rpki-client