This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft
File: 7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft (raw, json)
Hash identifier: yY2hLZoparkRT1GMWp6bUdbELdLmblchug30e6Bok4A=
Subject key identifier: D2:53:BD:FA:3B:B3:EE:94:C9:7C:9B:1E:FB:3A:0A:BA:EA:55:DA:9B
Authority key identifier: 72:71:65:5D:63:18:EC:B0:B7:97:B4:6C:6E:CF:BC:3D:D2:E3:25:04
Certificate issuer: /CN=7271655D6318ECB0B797B46C6ECFBC3DD2E32504
Certificate serial: 3EBAF33892D75ECEB1F7EE988EEC8CEAE43CFD09
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft
Manifest number: 34
Signing time: Sun 07 Dec 2025 01:21:31 +0000
Manifest this update: Sun 07 Dec 2025 01:16:31 +0000
Manifest next update: Wed 10 Dec 2025 09:48:31 +0000
Files and hashes: 1: 7271655D6318ECB0B797B46C6ECFBC3DD2E32504.crl (hash: ZC8fPwMJuU/rIAlvN9Sr6wF3mWlmcA8MWSe7ZOTOCuI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.crl
rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:ba:f3:38:92:d7:5e:ce:b1:f7:ee:98:8e:ec:8c:ea:e4:3c:fd:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7271655D6318ECB0B797B46C6ECFBC3DD2E32504
Validity
Not Before: Dec 7 01:16:31 2025 GMT
Not After : Dec 10 09:48:31 2025 GMT
Subject: CN=D253BDFA3BB3EE94C97C9B1EFB3A0ABAEA55DA9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0b:b5:b5:04:b6:1a:3f:5e:2e:be:42:78:b4:
54:b3:73:f7:f2:76:12:08:a9:58:fa:62:4d:cd:31:
46:78:11:60:8e:a0:ce:22:4b:9a:f5:76:31:69:df:
49:36:0b:45:61:5c:c8:f2:06:9c:79:67:b7:6e:42:
74:64:41:e3:94:db:82:e2:ef:3a:6e:2f:d8:6b:a5:
6c:b4:20:b7:95:29:cd:a0:ec:3a:e2:17:d2:2e:64:
23:75:e6:cb:11:b3:8c:fc:00:74:5b:a4:f9:6a:8e:
90:49:b9:75:96:d6:ac:0c:67:c3:2c:b5:0d:0d:96:
df:a1:dc:2a:a9:4b:21:7f:db:72:aa:d8:55:48:a0:
a9:36:cc:73:16:1d:b1:e1:ff:b1:c5:06:37:e3:fa:
e8:08:67:a9:71:57:23:ed:ba:ca:a2:dd:c4:d2:b9:
b0:d5:d2:d6:24:31:5c:b4:8d:47:df:83:89:b3:83:
6a:62:bb:34:9a:d9:ba:00:8c:f9:b3:bc:b0:5f:d4:
cb:45:58:67:7c:a0:37:bf:ed:1a:07:f7:2e:63:ed:
5a:33:5c:f9:86:b9:38:45:59:62:fc:3e:d4:13:5c:
14:91:44:07:e4:bd:dc:90:bc:7f:a7:90:f1:66:a8:
5f:c5:6d:fc:1c:a7:1f:dd:e1:08:1e:f1:03:bd:0f:
28:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:53:BD:FA:3B:B3:EE:94:C9:7C:9B:1E:FB:3A:0A:BA:EA:55:DA:9B
X509v3 Authority Key Identifier:
keyid:72:71:65:5D:63:18:EC:B0:B7:97:B4:6C:6E:CF:BC:3D:D2:E3:25:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:85:81:e1:0d:16:a7:03:dc:c2:e5:98:db:31:7d:ed:73:60:
58:33:81:8f:6b:1e:60:74:09:61:97:86:4b:e6:e0:ba:5f:65:
6f:ed:58:22:0f:25:ec:1e:60:d3:ad:22:b7:85:ac:5d:1b:cd:
2f:4d:89:3f:10:bb:78:c2:10:84:36:63:eb:17:18:5f:d3:c0:
d8:6f:5c:d8:4b:63:a2:d6:c0:68:44:0e:b7:7f:61:4a:9f:33:
86:5a:44:93:da:fd:99:f7:d4:ee:37:61:f1:aa:36:f6:b6:65:
61:ff:44:15:68:8e:68:1d:c7:65:ca:d0:f0:fc:87:9f:72:b2:
03:72:2c:3d:84:9a:c8:0c:70:b7:1e:6a:ff:81:bf:f7:ea:b4:
6d:53:42:7c:cb:7f:57:0b:33:7c:26:f3:e3:6a:3b:68:ad:79:
4d:49:d2:ae:d0:a4:88:f1:19:22:e7:43:b0:09:5a:bf:7c:84:
30:37:41:b3:9b:7b:85:0f:db:c6:2f:13:2f:15:80:f5:51:bb:
d9:a5:03:9d:dc:0c:db:ab:a7:b1:86:35:e9:c6:12:db:94:cb:
6e:66:10:ef:e2:c7:0a:ec:69:82:43:e3:f6:c7:6c:5a:7c:91:
d0:63:72:e9:98:33:6e:41:83:aa:cd:02:d9:ad:bc:36:ae:66:
4f:64:4f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:56:18 2025 by rpki-client