This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft
File: D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft (raw, json)
Hash identifier: 6Tl8wqYUFkPUnj+zoCqQoNtJijkEkiJqFYQHmr56a70=
Subject key identifier: 13:9C:8C:0E:9F:67:81:AD:3F:E8:D0:35:0A:A9:06:EA:EA:D6:AF:95
Authority key identifier: D7:28:6D:5F:5B:9A:DD:4C:C1:66:AD:32:51:96:92:F0:C8:90:2B:29
Certificate issuer: /CN=D7286D5F5B9ADD4CC166AD32519692F0C8902B29
Certificate serial: 3752C7A49D66BFA31C0A0382551ACF051EA82BE4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft
Manifest number: 03A0
Signing time: Sat 06 Dec 2025 03:32:20 +0000
Manifest this update: Sat 06 Dec 2025 03:27:20 +0000
Manifest next update: Tue 09 Dec 2025 04:00:20 +0000
Files and hashes: 1: D7286D5F5B9ADD4CC166AD32519692F0C8902B29.crl (hash: H/cET05leAsitoR3Fy2/pvtrWX/dIdfvaWBiJchE4zk=)
2: 3130332e3136392e3139382e302f32342d3234203d3e20313432333531.roa (hash: Cw4pOJ79jeEX4VYPEj0ggp3n3fPwHSaTIPKQamrNGso=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.crl
rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:52:c7:a4:9d:66:bf:a3:1c:0a:03:82:55:1a:cf:05:1e:a8:2b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D7286D5F5B9ADD4CC166AD32519692F0C8902B29
Validity
Not Before: Dec 6 03:27:20 2025 GMT
Not After : Dec 9 04:00:20 2025 GMT
Subject: CN=139C8C0E9F6781AD3FE8D0350AA906EAEAD6AF95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:94:34:12:1a:75:c6:a9:d5:21:87:72:60:da:
f5:45:24:83:24:d2:a3:ff:04:be:0f:96:02:81:fb:
48:2a:30:a2:89:14:4a:c5:2b:7d:9c:74:d1:89:66:
92:81:c7:3b:b2:16:44:28:0f:3f:20:15:60:21:0e:
cb:10:df:8c:f0:a1:d7:cf:3c:63:98:69:d0:d9:1d:
23:72:d4:c5:f9:d2:e4:a4:f8:a9:72:0b:df:1c:7c:
a0:b1:6d:00:e1:c6:6b:c1:00:5d:d2:61:f0:0f:f8:
77:f3:72:6c:76:d0:c5:61:84:9a:29:7e:13:5e:58:
3a:6f:b1:00:22:c9:7e:ac:61:4a:8c:9d:aa:9f:fb:
02:15:7d:eb:01:4e:1a:ee:0b:14:7a:f0:87:9e:0d:
e0:43:eb:0b:e7:3f:6f:a0:03:75:62:79:6e:1f:7f:
ba:76:28:11:a9:28:22:e9:df:1f:32:92:26:f6:71:
e6:02:df:15:4a:42:c3:8c:b6:50:7e:03:7f:da:f8:
f8:95:22:5c:5e:ce:b7:8b:e8:6f:3b:3c:84:f2:a1:
bb:51:22:d5:c7:0b:bc:8a:5e:b2:4e:07:23:45:94:
1a:17:c3:9a:68:35:0f:0e:8a:4c:90:e6:81:f5:bf:
66:8f:3d:d0:ba:3c:3b:6d:cc:4c:bc:49:de:7f:d5:
42:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9C:8C:0E:9F:67:81:AD:3F:E8:D0:35:0A:A9:06:EA:EA:D6:AF:95
X509v3 Authority Key Identifier:
keyid:D7:28:6D:5F:5B:9A:DD:4C:C1:66:AD:32:51:96:92:F0:C8:90:2B:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:c6:3f:f4:4d:00:5a:64:c5:b3:62:86:bf:2f:69:00:75:38:
7c:c5:bc:49:b2:83:1e:dd:d3:b1:42:c9:a7:1d:96:49:19:93:
ac:d4:2b:73:c4:00:3d:c6:a4:3a:ca:78:fc:32:6b:c3:23:f2:
ea:76:01:d1:5b:b1:7b:98:38:3d:28:88:9b:09:63:3a:b2:01:
d6:15:0c:b9:08:59:2e:1f:02:9a:70:d2:4c:c8:75:70:1c:7b:
39:c7:3b:f1:26:7f:69:9a:63:b6:b8:2e:a5:b6:82:bc:62:96:
9e:72:73:55:94:a9:7b:fb:53:e6:cf:cd:c6:ce:fe:dd:40:40:
ea:0f:bc:1c:f2:60:ff:57:d9:cb:56:8d:de:2d:b1:f1:6a:c7:
1f:ec:8d:f1:38:e2:4f:6f:f3:a8:20:09:74:d0:41:35:fc:94:
71:5b:cd:0a:03:99:0d:17:a9:98:13:13:fb:b2:78:0d:d1:2c:
38:0e:f0:31:0f:b9:cb:52:3c:f1:04:a1:20:27:c6:68:a8:cb:
2a:51:a5:2f:6a:99:5e:26:e5:52:5a:10:4a:ae:5e:18:36:58:
7f:48:fa:b2:a7:de:c7:51:11:5c:77:9b:ce:3a:11:63:5f:b3:
e0:79:cc:66:30:2b:09:bd:24:e8:74:19:2d:03:ed:b1:f8:a7:
a1:85:9c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:59:45 2025 by rpki-client