This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.mft
File: 71054E3C02E22D607A90FACC4DE7369B65367EBD.mft (raw, json)
Hash identifier: o/DabxjFy4NODVHyKv40Q1cORK8jtnLNaeE5Q8mc2cE=
Subject key identifier: 59:95:41:77:9C:69:6C:E0:ED:7B:83:42:BF:BA:ED:E2:F9:14:07:75
Authority key identifier: 71:05:4E:3C:02:E2:2D:60:7A:90:FA:CC:4D:E7:36:9B:65:36:7E:BD
Certificate issuer: /CN=71054E3C02E22D607A90FACC4DE7369B65367EBD
Certificate serial: 4D14ED9F4E48DF975238F7528981268BB081CA97
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71054E3C02E22D607A90FACC4DE7369B65367EBD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.mft
Manifest number: 0183
Signing time: Sat 06 Dec 2025 13:30:50 +0000
Manifest this update: Sat 06 Dec 2025 13:25:50 +0000
Manifest next update: Tue 09 Dec 2025 19:53:50 +0000
Files and hashes: 1: 3130332e32392e31302e302f32332d3234203d3e20313530323530.roa (hash: WJMrEDY6+yYCu4Iz5tUshsi6eLGdRGAnm2hsfXk5iwc=)
2: 71054E3C02E22D607A90FACC4DE7369B65367EBD.crl (hash: 4cibZKQIcIN/RuUKSwBJT6z+z4jhwpLM7ElTMFzCIzQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.crl
rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71054E3C02E22D607A90FACC4DE7369B65367EBD.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:14:ed:9f:4e:48:df:97:52:38:f7:52:89:81:26:8b:b0:81:ca:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71054E3C02E22D607A90FACC4DE7369B65367EBD
Validity
Not Before: Dec 6 13:25:50 2025 GMT
Not After : Dec 9 19:53:50 2025 GMT
Subject: CN=599541779C696CE0ED7B8342BFBAEDE2F9140775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1a:b8:37:52:26:f1:41:da:d2:e9:46:c6:ae:
04:74:9e:ba:5e:29:80:67:81:b0:c3:55:c5:f8:49:
2e:4a:ec:78:7a:cc:81:a3:7c:80:c0:9d:f3:77:18:
25:06:28:a1:91:07:f4:23:f0:57:f9:5f:3b:b0:62:
8a:ec:11:99:9a:08:04:3f:d0:4b:e9:f7:8b:11:15:
da:94:71:f7:11:83:7c:c4:94:01:5f:61:6f:a8:d3:
63:6c:7b:da:d8:22:ed:6e:50:d3:39:ad:39:bb:c8:
c1:ac:fe:97:ec:30:9f:ef:43:4f:9d:03:89:32:29:
1b:68:af:96:16:46:21:df:35:95:e5:3b:fb:a2:67:
99:c6:ae:9c:cf:b2:65:38:e8:09:44:8c:97:c5:fe:
96:74:83:9b:7c:a3:b4:ba:60:c9:6c:8f:d2:30:2f:
2b:56:48:c1:b3:7e:6d:5c:ab:d7:c7:00:c5:db:95:
69:bc:e5:49:4d:43:ae:0f:57:8b:cc:52:79:7d:63:
5f:39:49:f0:46:02:be:81:09:73:37:c5:dc:5f:0b:
9f:31:67:00:b1:56:11:54:03:64:e0:38:3a:07:84:
1c:cf:5b:1e:ff:f0:af:bd:a0:c4:5f:e7:55:11:d2:
6b:4b:99:e9:f2:18:d5:0f:06:09:2e:4a:3a:44:aa:
ab:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:95:41:77:9C:69:6C:E0:ED:7B:83:42:BF:BA:ED:E2:F9:14:07:75
X509v3 Authority Key Identifier:
keyid:71:05:4E:3C:02:E2:2D:60:7A:90:FA:CC:4D:E7:36:9B:65:36:7E:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71054E3C02E22D607A90FACC4DE7369B65367EBD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:f4:8b:b1:74:1b:8c:d3:5a:93:e4:b3:3f:3b:6d:e6:3e:31:
b8:7e:bb:d6:b4:41:a2:8a:b3:81:b7:72:d0:6f:56:05:b4:94:
52:08:a8:c6:f8:40:68:73:50:4b:75:fd:44:3b:a0:02:62:6b:
08:dc:23:2f:70:37:21:d1:fd:a1:45:76:64:54:d4:62:79:50:
0e:6f:ef:7b:af:26:3f:48:67:7a:f6:90:1b:66:a0:fa:c7:eb:
c6:d5:5d:2e:8d:fa:df:b1:d1:c6:bd:8a:eb:5a:ea:52:bd:b2:
5f:59:db:0d:c5:a5:7f:52:55:8e:37:d1:12:cd:2d:9b:18:44:
44:82:43:6b:97:9b:f4:a6:8e:4f:a3:74:21:78:cd:d3:28:7c:
2a:db:2c:90:3a:07:3e:51:24:83:b0:11:ad:45:fd:25:f9:66:
e0:24:53:a0:a4:23:99:6a:11:29:2d:fe:38:10:e5:c0:1c:6c:
bf:38:55:40:2a:14:0a:2d:5a:ca:f4:2d:4a:c5:99:b4:66:a5:
72:3c:4b:12:11:e2:7d:03:ee:c0:b3:68:0d:cb:c1:b8:13:7c:
27:f6:90:07:77:56:fe:b8:ac:24:39:55:9a:68:1c:e5:2f:05:
cf:6d:bd:b6:48:b1:59:e3:49:ef:04:0a:49:2f:6f:95:67:d0:
5c:c1:09:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:53:49 2025 by rpki-client