This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.mft
File: 7892183ECB217EAEF2D3DD16491BE535CA5C5A61.mft (raw, json)
Hash identifier: y8CZOKkB6LXdmWYLEgQacMR9o4Te1zPoBSl4pjWZduQ=
Subject key identifier: D1:5F:8B:0F:26:29:7E:13:23:1B:A8:1C:F9:26:16:81:CA:CC:A7:8D
Authority key identifier: 78:92:18:3E:CB:21:7E:AE:F2:D3:DD:16:49:1B:E5:35:CA:5C:5A:61
Certificate issuer: /CN=7892183ECB217EAEF2D3DD16491BE535CA5C5A61
Certificate serial: 35F31FF785F38B7AA2B80C22B3B906052F9245FC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.mft
Manifest number: 0209
Signing time: Sat 06 Dec 2025 04:00:40 +0000
Manifest this update: Sat 06 Dec 2025 03:55:40 +0000
Manifest next update: Tue 09 Dec 2025 12:50:40 +0000
Files and hashes: 1: 7892183ECB217EAEF2D3DD16491BE535CA5C5A61.crl (hash: /hdKgy6E6Lb9ilRs3CpqXzi6OFrQ32/mkv9/jwSgH+Q=)
2: 3130332e3232352e34342e302f32332d3234203d3e2034383030.roa (hash: OSaJ9H+pyoyoyW3zEewmfSIETQNngkI7dg9yZKfTzxI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.crl
rsync://repo-rpki.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 12:50:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:f3:1f:f7:85:f3:8b:7a:a2:b8:0c:22:b3:b9:06:05:2f:92:45:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7892183ECB217EAEF2D3DD16491BE535CA5C5A61
Validity
Not Before: Dec 6 03:55:40 2025 GMT
Not After : Dec 9 12:50:40 2025 GMT
Subject: CN=D15F8B0F26297E13231BA81CF9261681CACCA78D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ac:37:97:22:30:9c:d9:7c:a3:7e:68:12:3e:
a5:59:c6:c4:13:35:9b:aa:1d:7a:05:6a:56:f4:90:
17:d6:fd:ad:da:a1:a9:5f:ae:d2:f0:11:87:6a:73:
00:0e:56:5e:17:ce:e8:e1:d5:aa:75:88:20:aa:2b:
a2:37:26:f7:37:7f:6d:67:42:1b:3d:26:d0:e4:e3:
32:e5:9b:68:a5:b3:1f:c3:37:9a:46:74:d9:dc:60:
a2:37:48:98:36:2e:b4:f3:97:c5:d1:a1:a5:44:cd:
fb:13:3f:f0:5c:47:e9:ba:18:58:e2:47:d2:70:bf:
ff:79:1b:94:f7:9d:f7:63:94:9a:6f:27:42:42:5e:
9b:0a:c2:04:84:fe:59:66:f5:f5:93:9c:a6:61:52:
4f:9a:af:af:20:b6:16:41:a5:26:60:4e:2d:a5:f2:
dd:c1:95:86:e9:18:d1:07:69:d4:83:83:2b:37:17:
bb:26:75:47:ab:0f:b6:21:b7:b1:9a:82:2f:4f:0e:
02:6e:45:da:51:e4:3d:78:35:6e:e1:94:67:5b:5b:
68:52:9a:8f:24:df:89:2b:02:1d:fc:64:01:c2:95:
93:9b:10:9a:cc:44:fc:68:99:81:d7:9f:3d:ff:bb:
03:80:61:3e:d0:85:51:fd:0a:cf:35:a4:10:f8:e6:
b3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5F:8B:0F:26:29:7E:13:23:1B:A8:1C:F9:26:16:81:CA:CC:A7:8D
X509v3 Authority Key Identifier:
keyid:78:92:18:3E:CB:21:7E:AE:F2:D3:DD:16:49:1B:E5:35:CA:5C:5A:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:47:3c:00:10:41:a8:d2:63:fa:73:6f:36:0b:b6:e1:1c:de:
71:41:89:97:35:77:e5:15:ca:b0:9a:77:ab:7b:15:f7:e4:22:
df:41:d5:ad:6f:e3:a7:07:54:ad:cb:cd:ff:8f:ef:7a:2f:3d:
cc:8c:86:99:b9:b4:b1:6d:5f:da:45:05:42:7c:30:2e:18:25:
b9:6e:ed:30:e9:4d:ae:95:37:4b:9b:10:d1:69:d4:e7:f8:1b:
8c:89:36:cc:12:1d:cd:62:80:c1:7e:12:8c:c9:19:8a:ae:0f:
f4:49:d9:8e:67:4a:6a:05:0e:32:c4:75:e7:58:1e:28:a9:b9:
df:ab:d7:00:b6:9f:8a:f3:31:7b:5f:0e:ef:97:93:3e:e0:6c:
b7:b5:22:4e:aa:bf:42:0d:c7:77:d3:9b:b7:4f:e8:68:1b:cc:
27:93:e3:04:e0:94:cf:2e:eb:33:f9:8e:2b:2d:69:23:4a:81:
5c:cd:0b:f2:bd:6d:46:ed:b9:dd:42:32:43:b6:cf:ff:8b:eb:
00:30:a7:d0:67:3e:c7:7d:b5:a0:7a:d1:60:38:59:dc:b4:b0:
24:81:5d:a7:4b:7c:42:df:b7:e0:7a:21:6c:32:b6:3c:2e:a2:
63:66:ee:4f:22:11:ad:0a:c1:40:a7:76:31:82:dd:32:a1:d4:
4d:77:fc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:57:56 2025 by rpki-client