This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft
File: 10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft (raw, json)
Hash identifier: kcR83Fe3D/YtAoqRIVetzOhXWJ+2aEJJFQBGli6GkKc=
Subject key identifier: 61:0B:0D:EF:D9:3C:6E:FE:23:53:8A:C0:EA:BB:2D:D2:13:05:6E:0B
Authority key identifier: 10:90:2B:F3:AE:C1:65:FC:9C:C3:CD:72:AD:CA:BF:5B:BF:7B:7C:F4
Certificate issuer: /CN=10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4
Certificate serial: 2EA55E5AE98E0C8351F7912A4A66A9A45A94BF7C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft
Manifest number: 0112
Signing time: Thu 04 Dec 2025 19:41:55 +0000
Manifest this update: Thu 04 Dec 2025 19:36:55 +0000
Manifest next update: Mon 08 Dec 2025 02:36:55 +0000
Files and hashes: 1: 10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.crl (hash: b23iySbiA7lfBuXWKuJonNv2hZU0Vqq4zK+V/SGywT4=)
2: 3135302e3234322e3137372e302f32342d3234203d3e20313532303639.roa (hash: iWWMBNz/ap73hzzhd0AgzEZTSYI9UVHD2G0NxQBjFlw=)
3: 3135302e3234322e3137362e302f32342d3234203d3e20313532303639.roa (hash: FzHs2jrisPTXDjeyqpBMhWr9H2CINutW4PdDxdrM/c4=)
4: 3135302e3234322e3137362e302f32332d3233203d3e20313532303639.roa (hash: 859yRYxg6dYMZDhycmHxCWbBfEwXNU7EIcEdV25XiMg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.crl
rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 02:36:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:a5:5e:5a:e9:8e:0c:83:51:f7:91:2a:4a:66:a9:a4:5a:94:bf:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4
Validity
Not Before: Dec 4 19:36:55 2025 GMT
Not After : Dec 8 02:36:55 2025 GMT
Subject: CN=610B0DEFD93C6EFE23538AC0EABB2DD213056E0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9e:51:00:61:e5:12:6a:38:2a:98:ea:b0:45:
3c:33:16:f1:9a:13:e2:b2:e6:02:a4:83:40:cd:16:
fe:d8:56:37:e8:73:ee:4f:76:79:1a:d3:6e:78:11:
2c:55:09:d4:f9:26:7e:52:ba:14:9c:e0:4c:d9:c7:
48:21:73:10:13:b1:0d:29:ec:65:62:d6:fa:55:5f:
aa:74:bd:6a:48:b7:76:f7:9a:84:57:ef:52:80:04:
24:1b:36:12:06:a3:8d:c7:85:3b:64:a7:f9:a3:70:
c4:8c:ef:bb:db:5c:a3:6f:83:b2:bf:67:90:8a:31:
d3:6a:48:d0:e3:f6:d1:27:94:4c:0f:c3:1f:ef:10:
50:00:1e:ab:81:0b:5f:b2:70:ff:43:9b:fe:8c:73:
6a:48:72:24:af:f2:50:df:35:b6:e1:4e:3e:72:64:
4c:b3:e6:d5:7a:6b:ae:ea:24:68:c1:a7:44:e8:40:
00:25:4b:88:3e:00:b7:2a:b8:68:4b:e3:6b:bd:b0:
c7:76:a2:a8:17:36:ee:8d:4b:de:d8:1c:08:c9:0b:
f8:d3:18:25:5e:4d:db:c6:b5:0b:bb:3d:22:13:9e:
e9:6b:bb:c8:64:f1:f6:9e:d4:0f:f0:c9:b1:c4:8a:
b8:aa:c2:0b:95:79:79:a4:48:85:f0:18:33:53:39:
0a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:0B:0D:EF:D9:3C:6E:FE:23:53:8A:C0:EA:BB:2D:D2:13:05:6E:0B
X509v3 Authority Key Identifier:
keyid:10:90:2B:F3:AE:C1:65:FC:9C:C3:CD:72:AD:CA:BF:5B:BF:7B:7C:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:8d:1d:03:20:f8:6e:e1:df:88:20:24:71:c3:58:94:f3:6a:
f2:a8:16:77:ad:ed:84:88:6c:15:73:1e:9f:82:8e:0b:b4:1e:
41:1d:72:5f:1c:7d:f8:7a:7a:8b:fd:8f:6d:cf:35:fa:e7:a1:
df:42:d9:01:25:23:34:87:b7:9c:07:e3:2d:e0:af:6e:03:c0:
e9:46:07:b7:0d:9f:7c:50:ee:64:24:fe:87:8f:4e:97:1e:91:
98:b7:3a:c1:6d:30:74:84:86:70:76:de:62:17:ec:8a:dd:c2:
f1:b5:24:e0:0f:6c:6a:e3:10:83:3a:02:e3:b2:5f:38:4e:b5:
86:ec:ba:a6:16:89:94:28:63:03:75:ad:62:c9:6c:74:bc:1e:
aa:b5:0c:97:38:5e:cd:fb:6c:4e:c4:89:ee:aa:71:42:38:07:
99:38:48:56:77:81:0f:d2:ac:63:e1:3c:8c:53:8b:68:29:7b:
89:be:45:32:1a:90:e7:a3:09:d6:6f:c6:c9:05:02:b1:af:79:
24:06:eb:23:55:9b:f0:3b:56:6f:57:5a:96:b6:f3:0f:28:0c:
5f:27:eb:c3:ff:db:48:76:ab:04:04:43:26:e0:e9:a0:0d:fa:
31:71:ed:13:f7:67:7b:4d:80:6c:cb:0e:48:1c:f3:ef:3e:aa:
29:bc:12:1b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIULqVeWumODINR95EqSmappFqUv3wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA5MDJCRjNBRUMxNjVGQzlDQzNDRDcyQURDQUJGNUJC
RjdCN0NGNDAeFw0yNTEyMDQxOTM2NTVaFw0yNTEyMDgwMjM2NTVaMDMxMTAvBgNV
BAMTKDYxMEIwREVGRDkzQzZFRkUyMzUzOEFDMEVBQkIyREQyMTMwNTZFMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMnlEAYeUSajgqmOqwRTwzFvGa
E+Ky5gKkg0DNFv7YVjfoc+5Pdnka0254ESxVCdT5Jn5SuhSc4EzZx0ghcxATsQ0p
7GVi1vpVX6p0vWpIt3b3moRX71KABCQbNhIGo43HhTtkp/mjcMSM77vbXKNvg7K/
Z5CKMdNqSNDj9tEnlEwPwx/vEFAAHquBC1+ycP9Dm/6Mc2pIciSv8lDfNbbhTj5y
ZEyz5tV6a67qJGjBp0ToQAAlS4g+ALcquGhL42u9sMd2oqgXNu6NS97YHAjJC/jT
GCVeTdvGtQu7PSITnulru8hk8fae1A/wybHEiriqwguVeXmkSIXwGDNTOQpzAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUYQsN79k8bv4jU4rA6rst0hMFbgswHwYDVR0j
BBgwFoAUEJAr867BZfycw81yrcq/W797fPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
N2MwNTUyMS0wMzM4LTRmMzEtYTIwOS00Zjg3OGJlZjYzOGEvMC8xMDkwMkJGM0FF
QzE2NUZDOUNDM0NENzJBRENBQkY1QkJGN0I3Q0Y0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTA5MDJCRjNBRUMxNjVGQzlDQzNDRDcyQURDQUJGNUJCRjdC
N0NGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdjMDU1MjEtMDMzOC00ZjMxLWEy
MDktNGY4NzhiZWY2MzhhLzAvMTA5MDJCRjNBRUMxNjVGQzlDQzNDRDcyQURDQUJG
NUJCRjdCN0NGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGiNHQMg+G7h34ggJHHDWJTzavKoFnet7YSI
bBVzHp+Cjgu0HkEdcl8cffh6eov9j23PNfrnod9C2QElIzSHt5wH4y3gr24DwOlG
B7cNn3xQ7mQk/oePTpcekZi3OsFtMHSEhnB23mIX7IrdwvG1JOAPbGrjEIM6AuOy
XzhOtYbsuqYWiZQoYwN1rWLJbHS8Hqq1DJc4Xs37bE7Eie6qcUI4B5k4SFZ3gQ/S
rGPhPIxTi2gpe4m+RTIakOejCdZvxskFArGveSQG6yNVm/A7Vm9XWpa28w8oDF8n
68P/20h2qwQEQybg6aAN+jFx7RP3Z3tNgGzLDkgc8+8+qim8Ehs=
-----END CERTIFICATE-----
Generated at Sun Dec 7 03:55:26 2025 by rpki-client