This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft
File: 818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft (raw, json)
Hash identifier: 2zosX1VWfl/4zRGD+SjiIE9jngkp1QHG5lYrebRWZ+g=
Subject key identifier: FF:31:4A:C4:0A:87:8D:70:11:75:9E:2D:DE:51:B8:F2:2B:59:AB:48
Authority key identifier: 81:88:23:B5:0F:8D:63:E9:D9:53:C4:B7:52:F0:4D:B0:43:7C:A8:E9
Certificate issuer: /CN=818823B50F8D63E9D953C4B752F04DB0437CA8E9
Certificate serial: 7A6F7F99DEA93A6A31C6D626DAE0A4013E1EE02A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft
Manifest number: 052A
Signing time: Fri 05 Dec 2025 02:22:29 +0000
Manifest this update: Fri 05 Dec 2025 02:17:29 +0000
Manifest next update: Mon 08 Dec 2025 07:19:29 +0000
Files and hashes: 1: 818823B50F8D63E9D953C4B752F04DB0437CA8E9.crl (hash: yWTw6WN9zIJL9XFpfdIiBQquhS9UJ/rS0rUHGTbPgow=)
2: 3130332e31392e3138302e302f32342d3234203d3e20313332363432.roa (hash: qNqEjSuCjuvM2nb2P9YufyugF7e/EHHhJHg78hVDerc=)
3: 323430353a336463303a3a2f33322d3438203d3e20313332363432.roa (hash: klLZJtnV+xWW7YQzH2mIJ1a0TeqcgHLxJAezwqgVxkg=)
4: 3130332e31392e3138322e302f32342d3234203d3e20313332363432.roa (hash: 3f3jJh3+oWJeudvuDrAqcUf8ITcTw5/zz4360Ggudd4=)
5: 3130332e31392e3138312e302f32342d3234203d3e20313332363432.roa (hash: oFvKKDxpW/0C/Q3mkSaRj7w7VX6MBfKr//38ErGs2CE=)
6: 3130332e31392e3138332e302f32342d3234203d3e20313332363432.roa (hash: hpPXUQ5gypmdo+ZfR0ZPUxHpoc6PClgxO5mrZ0mqIsY=)
7: 3130332e31392e3138302e302f32322d3232203d3e20313332363432.roa (hash: SLH6hiLVAcjKJgYGlgSHzMZrDl0w7mu4FSwj+uEfhtQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.crl
rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 07:19:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:6f:7f:99:de:a9:3a:6a:31:c6:d6:26:da:e0:a4:01:3e:1e:e0:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=818823B50F8D63E9D953C4B752F04DB0437CA8E9
Validity
Not Before: Dec 5 02:17:29 2025 GMT
Not After : Dec 8 07:19:29 2025 GMT
Subject: CN=FF314AC40A878D7011759E2DDE51B8F22B59AB48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3b:d6:65:4a:6a:07:ca:56:29:5c:6c:68:c2:
ac:4f:2e:71:3a:a3:4d:83:60:a4:a0:91:6f:d3:8c:
b4:be:40:bf:16:2c:15:b7:5e:a3:04:cf:4d:c7:1f:
bd:f7:c5:ee:a0:72:e1:be:fb:55:9f:44:f4:4f:b8:
ce:dd:ae:76:8b:9e:06:c6:f3:90:4b:51:bf:69:a3:
1a:a7:82:4b:7d:e0:e8:3e:a2:c0:31:49:72:fe:05:
7a:50:42:ae:c0:9e:09:b7:11:ae:e8:dd:55:a5:87:
84:c8:70:97:db:0b:aa:cb:0b:84:9f:dd:ad:39:1f:
9e:b1:83:c2:2f:64:52:12:b2:5a:21:c3:a7:52:c6:
85:b9:f2:bf:a7:4b:aa:21:10:20:b3:89:01:69:18:
17:fc:d7:1e:d2:f7:29:99:e3:35:6a:b0:48:b5:1e:
56:a3:11:86:e7:c4:8c:f1:e8:43:31:f2:e4:59:71:
87:40:71:9f:8c:89:84:fa:0f:36:46:99:f0:a4:ac:
26:07:97:d3:4a:b1:87:89:30:3a:bd:d2:12:d7:f0:
fe:e3:47:8d:51:dd:a8:1b:af:02:50:0d:4d:6b:3c:
12:35:d6:c1:c7:96:4d:fc:63:0f:ea:da:8f:c1:ea:
75:7d:0c:0b:02:d5:d8:47:27:39:47:ae:41:60:fc:
86:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:31:4A:C4:0A:87:8D:70:11:75:9E:2D:DE:51:B8:F2:2B:59:AB:48
X509v3 Authority Key Identifier:
keyid:81:88:23:B5:0F:8D:63:E9:D9:53:C4:B7:52:F0:4D:B0:43:7C:A8:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b8:5c:d0:c8:c2:03:d3:04:26:1b:66:84:c5:46:a5:bf:88:
63:09:3b:9e:b1:10:f2:48:5e:20:07:2e:5d:2d:2f:2b:95:2f:
3b:dc:14:81:c7:58:8d:e8:14:52:1f:08:53:64:ea:4f:06:a3:
94:54:20:d1:0c:4e:05:4a:fd:34:b4:15:7e:c9:c6:c2:49:db:
30:6f:cf:0a:ce:5a:d5:55:db:11:4e:59:ff:18:42:00:35:95:
9f:ed:e6:e2:eb:8b:b3:72:9a:b2:1f:12:1f:fd:af:49:62:48:
49:c4:50:1c:f7:85:a6:8c:a5:87:8b:18:78:70:5e:4c:30:50:
b3:47:cf:e5:61:8c:e6:e9:20:7c:13:d7:af:fe:81:a3:2f:dd:
0c:38:1d:18:53:69:8c:09:27:00:3e:dd:c1:a4:e6:bc:1d:8f:
da:9e:b7:5d:4c:b2:56:c8:a5:8f:e7:f3:7c:a9:dc:a0:d5:3a:
e4:84:99:a6:07:8f:72:55:d1:70:f4:ba:70:73:f8:eb:7d:e2:
0b:67:84:6c:c1:4a:f9:27:99:7f:e6:af:27:79:98:48:66:47:
c2:6e:9e:87:48:86:c7:20:f7:d3:2b:47:36:2f:dd:a1:0c:72:
ce:82:ae:67:4c:38:1f:c5:e5:2b:92:bd:4d:66:7c:5c:3e:6d:
34:33:dc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:09:25 2025 by rpki-client