This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft
File: A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft (raw, json)
Hash identifier: vnNUBH8CtP0tNzyksKDZiU6PapOzWGJhevwuHfl7zb4=
Subject key identifier: 40:83:91:55:D3:18:9C:20:88:59:6E:C0:77:11:5C:EA:22:30:0E:B9
Authority key identifier: A6:6E:6F:78:7B:7D:E2:EA:2F:F1:C1:9F:30:DF:E2:21:5B:0B:EB:4A
Certificate issuer: /CN=A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A
Certificate serial: 5B4B50B2F20FB20A97FD8FF29DEEAD2E26F0AD9A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft
Manifest number: 052D
Signing time: Sat 06 Dec 2025 07:12:16 +0000
Manifest this update: Sat 06 Dec 2025 07:07:16 +0000
Manifest next update: Tue 09 Dec 2025 07:47:16 +0000
Files and hashes: 1: A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.crl (hash: MEspZo0hskE8BWVylDEoY/nG8Xvpro08memlBos/pBg=)
2: 3130332e33302e3234342e302f32322d3234203d3e20313331373435.roa (hash: Lfmrbgi7I4VUpzGw3wvKThYLzEQmB11Zng6ABNZdlxE=)
3: 3230322e38332e3132302e302f32322d3234203d3e20313331373435.roa (hash: Ctn9Yisa6OnP3ScXQT5GVDtbqvcEhdIPhnJD0xSvFz0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.crl
rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 07:47:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:4b:50:b2:f2:0f:b2:0a:97:fd:8f:f2:9d:ee:ad:2e:26:f0:ad:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A
Validity
Not Before: Dec 6 07:07:16 2025 GMT
Not After : Dec 9 07:47:16 2025 GMT
Subject: CN=40839155D3189C2088596EC077115CEA22300EB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:65:1a:8f:fc:c4:c8:13:41:d0:4d:90:c1:41:
5c:86:d4:ac:dc:94:8d:49:2a:45:9a:25:ae:2e:23:
68:50:02:d4:e9:6e:1d:40:ba:4c:24:29:7c:9a:a6:
55:45:83:b1:fb:70:f0:74:4c:a9:10:c3:03:2a:cf:
78:f7:d5:1d:c0:22:f0:da:45:86:9e:bf:cd:ee:ab:
41:3c:48:80:b7:4a:71:56:90:e1:96:89:2f:de:3c:
9f:85:33:08:71:a9:48:1f:59:d9:72:e8:fa:7d:c6:
7e:a5:5e:e0:f9:bc:65:5b:3d:e5:ba:98:9b:e7:1d:
7c:ba:50:1f:e8:b3:b7:2a:1e:61:9f:10:57:88:22:
bc:60:4a:e2:88:a3:6d:b7:ac:33:2c:bc:12:3d:a2:
11:e3:93:f2:f8:49:1d:c5:8f:22:7c:e9:a1:78:40:
6e:c7:9a:b4:ef:db:01:af:d5:fa:88:83:de:14:a1:
9d:37:7c:de:91:37:0d:a0:a4:d4:ca:8c:49:e0:d6:
f3:47:bb:b1:b0:57:82:5f:23:a4:8c:07:82:5d:07:
a6:6a:3b:2d:37:55:fb:98:2b:85:6a:42:6e:d8:c4:
ea:a5:89:a1:81:3c:e8:76:ab:a5:bf:33:46:82:d5:
95:86:a1:69:3f:2e:f7:aa:7c:c1:ce:ac:13:40:2c:
05:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:83:91:55:D3:18:9C:20:88:59:6E:C0:77:11:5C:EA:22:30:0E:B9
X509v3 Authority Key Identifier:
keyid:A6:6E:6F:78:7B:7D:E2:EA:2F:F1:C1:9F:30:DF:E2:21:5B:0B:EB:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b5:85:d1:6c:a9:e9:21:4d:6b:3f:17:47:c7:0e:bc:ad:da:
e1:29:d2:03:71:cf:d1:3b:e1:f3:54:a0:98:e9:a2:cd:3b:2f:
40:12:9a:eb:23:2e:7d:a0:7e:26:e6:d6:9c:6f:ac:a2:90:cb:
d5:63:58:d8:c7:c2:06:0b:f9:2d:0c:dd:ac:9b:5c:8f:06:8a:
09:b0:9e:f9:e7:bb:2d:33:15:83:d7:98:12:66:02:38:9c:5e:
b3:33:4c:f8:be:f9:22:b9:e1:1c:ed:42:e9:ff:7a:80:40:62:
07:be:ee:9b:97:6c:70:85:1f:e5:68:e0:e2:25:71:1e:27:6e:
7d:8b:a3:3e:b2:0c:85:b2:70:1f:31:10:bf:28:32:0e:65:bc:
30:cc:17:bb:36:74:1e:d8:0e:67:16:69:c5:de:e8:36:38:72:
34:d6:b3:8f:eb:ad:fc:9c:5d:27:b3:1e:a1:1e:bd:d7:b1:e2:
77:48:59:c1:73:0d:c1:41:86:91:4d:be:4a:b1:57:50:cb:83:
86:7a:37:f3:bf:30:f7:c0:ba:ac:b5:4c:c2:18:2f:79:fe:78:
08:cc:a4:2b:20:b1:a9:7d:28:ce:f1:d2:09:a2:9d:15:55:14:
03:e3:e3:8a:b5:88:7f:bd:b2:27:13:db:5f:4b:5f:47:71:08:
44:30:47:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:02:42 2025 by rpki-client