This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.mft
File: 4515472806DD01B59715410103D51C05E4F28B96.mft (raw, json)
Hash identifier: bARcWWEQE9HblWxipxBvgHRlfGa/YJIKC4wqgtZ19cM=
Subject key identifier: BF:6F:8F:3A:70:76:81:A7:AD:C3:D3:7C:53:EC:DD:72:4B:00:92:0B
Authority key identifier: 45:15:47:28:06:DD:01:B5:97:15:41:01:03:D5:1C:05:E4:F2:8B:96
Certificate issuer: /CN=4515472806DD01B59715410103D51C05E4F28B96
Certificate serial: C184BDC4182718FFABC728C0494587959DB8FC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4515472806DD01B59715410103D51C05E4F28B96.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.mft
Manifest number: 0258
Signing time: Sat 06 Dec 2025 12:12:01 +0000
Manifest this update: Sat 06 Dec 2025 12:07:01 +0000
Manifest next update: Tue 09 Dec 2025 14:21:01 +0000
Files and hashes: 1: 3130332e3137332e3134322e302f32342d3234203d3e20313437303930.roa (hash: HBcmtBf124LaJLrEpyA0+OcG5c4rLC3yDarVnj9n8nQ=)
2: 3130332e3137332e3134322e302f32332d3233203d3e20313437303930.roa (hash: Tu/lmXG1SR10FA6Mlg+q8BJ0wAM8BZdiNc8TMtD2S9s=)
3: 4515472806DD01B59715410103D51C05E4F28B96.crl (hash: Hk1iZokAz/xov42aUHjlbrPd+jC5Kxi7OgzsqteZ3O4=)
4: 3130332e3137332e3134332e302f32342d3234203d3e20313437303930.roa (hash: vRlgOXUVxZU3L35iv5K0e1tNJbS3jxz2tstDvvGIpOA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.crl
rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4515472806DD01B59715410103D51C05E4F28B96.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 14:21:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
c1:84:bd:c4:18:27:18:ff:ab:c7:28:c0:49:45:87:95:9d:b8:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4515472806DD01B59715410103D51C05E4F28B96
Validity
Not Before: Dec 6 12:07:01 2025 GMT
Not After : Dec 9 14:21:01 2025 GMT
Subject: CN=BF6F8F3A707681A7ADC3D37C53ECDD724B00920B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:eb:ed:f3:5d:dd:2b:22:f3:4d:49:2d:93:ad:
75:2a:cf:8c:6c:64:a8:37:11:c0:ba:df:da:96:46:
5c:7f:a2:e1:9f:ff:30:3c:bf:84:ed:9e:40:19:41:
a4:2d:75:34:e6:66:24:cb:28:ed:5d:c1:96:e0:ae:
7f:ed:80:00:c0:c0:12:48:c6:0c:3e:18:c8:50:4a:
37:08:bf:6f:2a:04:df:e3:e0:61:2b:a2:61:43:0a:
02:f7:39:6c:ca:6f:61:5c:42:5d:cb:da:d2:f8:f0:
b2:cd:22:92:5c:88:8b:04:5d:5a:87:4c:74:0e:ec:
c8:cc:14:b5:d5:bf:fc:07:af:75:9e:64:9e:98:92:
0f:b7:07:89:91:24:33:a6:3a:50:99:5a:58:fd:27:
14:14:b7:6f:1c:da:54:ed:03:07:cf:d6:a7:5a:03:
7a:15:b5:9a:87:f6:e0:82:57:06:86:5a:48:d8:80:
6d:f9:85:f1:00:55:d5:88:0c:e3:2d:e4:32:1a:3f:
66:f9:fe:11:78:6f:73:36:41:dc:cb:26:8c:9d:32:
9a:81:a0:58:eb:50:fc:77:80:97:74:60:4f:62:38:
f9:c0:da:35:96:65:2f:fe:e3:2a:a7:b4:c3:38:97:
15:bb:a7:07:a5:08:0e:4c:11:39:f3:e4:80:10:36:
2c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:6F:8F:3A:70:76:81:A7:AD:C3:D3:7C:53:EC:DD:72:4B:00:92:0B
X509v3 Authority Key Identifier:
keyid:45:15:47:28:06:DD:01:B5:97:15:41:01:03:D5:1C:05:E4:F2:8B:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4515472806DD01B59715410103D51C05E4F28B96.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:34:f8:ef:93:f2:e4:71:f5:85:6d:95:17:d3:40:d8:ae:04:
e9:19:ab:f0:e8:f7:85:93:30:7b:1e:f5:3b:25:6c:15:7f:34:
19:97:fa:bc:c4:e5:9d:28:1c:e0:50:bc:3e:c5:53:01:aa:c0:
9e:b7:fa:dc:0d:90:5f:98:d0:9b:ae:18:9e:82:90:1f:7a:b1:
0c:64:82:83:ab:8d:1d:bd:70:dc:2f:a2:aa:3e:71:ae:f3:b5:
de:21:b6:17:fa:1a:50:a7:0c:63:a4:f7:0d:ff:a6:53:ea:00:
71:6b:fd:c9:4b:ed:73:3b:e7:c1:69:b8:51:6f:6c:48:92:49:
92:d6:e3:28:66:44:59:d3:da:fd:92:8c:66:02:3c:e2:a4:54:
99:d6:65:1c:63:96:2a:e2:0a:7c:1d:62:b8:f1:d2:c9:31:80:
05:12:f0:f3:be:df:cc:6b:97:e9:cf:3e:2e:89:1e:f7:6a:ca:
8a:da:d9:01:b8:64:47:01:bf:b5:2a:aa:ae:ef:35:00:b5:e9:
0a:37:ae:72:26:4a:82:70:a6:ef:c0:12:47:54:b7:e2:0f:a8:
63:6a:7e:33:71:5b:e0:60:a9:b7:dd:c7:b7:e1:92:1f:90:e1:
aa:4d:0d:26:7b:92:75:71:5e:d8:6b:9e:e3:f8:0f:90:3c:2e:
81:54:47:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:20:50 2025 by rpki-client