This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft
File: F39284EDA8B81E5F498D167C4DB09075943DA23C.mft (raw, json)
Hash identifier: 86pI6cuvueOOvIxBJG40D+yabAdoccYk2EuZVN/hdvU=
Subject key identifier: 24:1B:75:0F:25:C3:B5:3E:94:49:A7:65:0D:0D:2D:14:AB:C4:97:0E
Authority key identifier: F3:92:84:ED:A8:B8:1E:5F:49:8D:16:7C:4D:B0:90:75:94:3D:A2:3C
Certificate issuer: /CN=F39284EDA8B81E5F498D167C4DB09075943DA23C
Certificate serial: 425A3CCC3D5F877266FB695D15A45A78EAD9DB5F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft
Manifest number: 01F6
Signing time: Thu 04 Dec 2025 22:42:09 +0000
Manifest this update: Thu 04 Dec 2025 22:37:09 +0000
Manifest next update: Mon 08 Dec 2025 09:32:09 +0000
Files and hashes: 1: 3130332e39342e3133322e302f32332d3233203d3e20313336313238.roa (hash: ZH95fzIk5wuuT+vd4hIsCcqQWDxd7AjWMS1Ri5F0arI=)
2: F39284EDA8B81E5F498D167C4DB09075943DA23C.crl (hash: op+Lq1+i7doGkaF4kB2etBga4GCsB9Jw0JUXIeh+Lx0=)
3: 3130332e39342e3133332e302f32342d3234203d3e20313336313238.roa (hash: zkN9KM3zjX+gsUQDtCei38obRvmk7IKvdyrKuozTeis=)
4: 3130332e39342e3133322e302f32342d3234203d3e20313336313238.roa (hash: m+kNLMS39T1XrNLiDk6g1NJ5jtLDLBZdzAOZl+Ww9Ks=)
5: 323030313a6466313a363930303a3a2f34382d3438203d3e20313336313238.roa (hash: 1gzxa88JIBim0N0R/uC1nAl7S+pBY42/XBrZ+VIbBR0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.crl
rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 09:32:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:5a:3c:cc:3d:5f:87:72:66:fb:69:5d:15:a4:5a:78:ea:d9:db:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F39284EDA8B81E5F498D167C4DB09075943DA23C
Validity
Not Before: Dec 4 22:37:09 2025 GMT
Not After : Dec 8 09:32:09 2025 GMT
Subject: CN=241B750F25C3B53E9449A7650D0D2D14ABC4970E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f6:0c:2c:3b:2a:8a:d4:9d:87:04:2e:34:51:
a7:49:f7:b4:12:5e:cc:e8:76:38:49:fe:23:78:bd:
7b:1f:cd:0c:e2:0c:59:62:e8:6d:ac:88:92:74:1a:
bd:c7:bd:97:6a:9a:a8:5d:8c:d3:45:64:c9:75:a0:
c1:ae:71:ec:66:11:c6:35:57:4f:8f:8b:15:76:e0:
1e:43:f8:f0:4c:b1:d4:10:3b:de:4b:5b:1b:b0:25:
8e:0f:1d:39:31:03:9f:ff:72:1a:e8:ad:d0:a9:36:
03:58:14:e8:5a:ef:f0:03:fe:4e:85:25:26:9a:46:
39:cd:fc:1f:f1:0d:50:ca:48:90:7e:ac:91:52:e0:
60:c0:3f:c8:44:d8:43:c9:fb:48:84:02:96:e7:2d:
86:ec:72:1f:8c:a1:cb:49:c4:34:2e:c6:18:17:31:
ad:09:61:07:e3:94:e4:2f:2b:8f:4f:87:8b:08:22:
a4:0f:75:f0:d5:42:3a:7e:f3:a3:b6:65:41:8f:f1:
3b:19:32:82:65:ed:a3:c9:d6:af:50:80:31:53:d0:
3f:ea:d3:73:db:28:79:f7:25:59:70:8e:f5:52:7e:
2f:34:48:84:31:72:3c:55:ce:b0:d2:3f:12:88:b3:
1e:f3:e2:5e:6d:e0:6e:5f:06:61:f3:fb:62:e6:5f:
a2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:1B:75:0F:25:C3:B5:3E:94:49:A7:65:0D:0D:2D:14:AB:C4:97:0E
X509v3 Authority Key Identifier:
keyid:F3:92:84:ED:A8:B8:1E:5F:49:8D:16:7C:4D:B0:90:75:94:3D:A2:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:af:59:51:61:33:d7:e5:33:b5:99:5c:6a:12:01:f2:82:f7:
1f:88:ad:c9:6f:46:8a:b4:5d:7d:c1:ce:98:0c:f2:f5:6a:06:
48:01:9d:fb:75:2e:da:09:1a:16:e5:66:8e:5d:2d:90:57:4c:
75:95:54:c0:b4:c4:0f:56:0a:e5:00:8e:f1:0b:2a:43:f4:f9:
ac:a4:ba:1d:dd:98:30:08:cd:6b:fa:13:ba:bf:7b:9c:c3:1f:
15:e8:3b:2c:1a:9b:df:fb:9a:34:c9:1d:27:45:35:2d:fa:b5:
5b:53:95:fc:27:bf:f5:80:53:cb:76:1b:8e:d5:57:67:f3:9b:
51:07:52:6f:ba:40:43:5b:62:18:54:c2:d9:38:f2:8f:10:a2:
b3:2c:70:fd:e9:61:92:0c:ef:b5:e9:4a:e4:1e:4b:7b:33:86:
03:8c:e9:50:71:d3:b7:5c:d8:5f:e0:6b:c5:8d:f1:d3:39:6f:
18:6e:fd:65:1a:54:ce:af:c6:b0:af:3e:ba:44:4b:8a:50:0d:
e5:84:f9:4f:95:ee:87:9e:c3:dd:59:46:06:69:53:7a:b3:a1:
6d:ec:59:aa:41:36:30:d1:6f:fd:8f:77:55:1d:24:94:31:60:
05:56:a9:f0:b2:67:ac:40:3b:3a:82:04:5d:14:88:2f:2a:e1:
3e:98:12:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:00:16 2025 by rpki-client