This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.mft
File: C4632299E016D269164FA40AEF99CC8602E2B7C1.mft (raw, json)
Hash identifier: Lw+4Sb87EeGwowAu+6MrToUdtsqW5aM93sPcjwYAqQ0=
Subject key identifier: 21:6E:36:DE:97:05:51:CE:F9:A9:EF:9C:A1:C4:C4:AC:A7:E5:E6:2F
Authority key identifier: C4:63:22:99:E0:16:D2:69:16:4F:A4:0A:EF:99:CC:86:02:E2:B7:C1
Certificate issuer: /CN=C4632299E016D269164FA40AEF99CC8602E2B7C1
Certificate serial: 17C6C71AF74F0A16D9767D5629DFCD7B74787E29
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4632299E016D269164FA40AEF99CC8602E2B7C1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.mft
Manifest number: E8
Signing time: Sat 06 Dec 2025 05:31:38 +0000
Manifest this update: Sat 06 Dec 2025 05:26:38 +0000
Manifest next update: Tue 09 Dec 2025 11:18:38 +0000
Files and hashes: 1: 3136302e32322e36342e302f32332d3234203d3e203435333035.roa (hash: gDEeaK4MqvoH1/Rybnd4HP4RdLEQVc8gkFhCRcLn6ys=)
2: C4632299E016D269164FA40AEF99CC8602E2B7C1.crl (hash: khlSnLGPjRRIxSKLyX6HMjYxygzvV46A3NdCYiHSYEg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.crl
rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4632299E016D269164FA40AEF99CC8602E2B7C1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 06:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:c6:c7:1a:f7:4f:0a:16:d9:76:7d:56:29:df:cd:7b:74:78:7e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C4632299E016D269164FA40AEF99CC8602E2B7C1
Validity
Not Before: Dec 6 05:26:38 2025 GMT
Not After : Dec 9 11:18:38 2025 GMT
Subject: CN=216E36DE970551CEF9A9EF9CA1C4C4ACA7E5E62F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:69:88:57:ed:9e:6e:6c:4b:7d:1b:a3:bb:cc:
e0:dd:5c:de:22:db:eb:1d:2b:76:3f:8f:96:e0:5c:
16:22:04:3c:83:e8:60:4f:6e:9a:86:42:1a:d0:b8:
86:22:93:80:68:3f:65:ae:95:f7:21:27:f0:7e:a7:
a7:6c:a9:b8:fa:3a:c3:6c:fd:6b:66:1a:ed:9f:29:
e2:e8:ef:8c:f2:f9:06:ab:4f:fd:bb:9a:c1:a2:59:
dc:a0:11:f9:df:a3:f4:6a:bd:19:e1:4a:72:b8:4b:
4e:b8:49:7d:dc:b6:6a:84:10:03:8e:03:b2:34:d7:
1a:d1:ff:40:32:d4:b3:2c:22:81:ae:95:ed:61:5a:
d3:47:83:bc:48:43:ea:91:9d:03:90:0f:5c:38:d0:
19:8a:4e:06:6f:eb:5a:1a:5d:67:91:b0:72:2b:ed:
ae:bc:3e:75:c7:60:eb:0a:db:29:89:25:24:ab:14:
ba:28:36:82:37:5d:90:d3:17:f3:ac:a3:21:83:94:
a3:70:7e:e2:29:a9:41:66:04:36:ba:2d:db:93:2c:
8f:96:dd:df:a6:c8:19:16:5a:b9:de:dc:d2:1f:a4:
8f:50:ef:d6:ea:e3:88:d8:88:36:c9:87:7b:70:5d:
63:f4:25:17:05:cf:a0:48:c1:da:09:12:88:a0:12:
c5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:6E:36:DE:97:05:51:CE:F9:A9:EF:9C:A1:C4:C4:AC:A7:E5:E6:2F
X509v3 Authority Key Identifier:
keyid:C4:63:22:99:E0:16:D2:69:16:4F:A4:0A:EF:99:CC:86:02:E2:B7:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4632299E016D269164FA40AEF99CC8602E2B7C1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:4a:59:15:b8:7d:aa:c6:dc:e9:62:57:be:5b:f8:a5:dd:47:
37:73:c4:b1:83:ee:b5:85:69:40:cd:a6:db:ab:2b:77:08:a3:
b1:a1:fd:bb:d5:32:78:74:72:2b:61:5a:a8:a0:06:b0:a8:3a:
aa:ed:db:01:dd:b0:20:51:81:7c:90:95:fc:39:cc:ae:8a:47:
2c:bc:0a:4d:50:4f:2b:27:95:80:6a:d8:1f:5e:39:3b:f7:f3:
32:9c:43:dc:ad:d1:41:fc:61:19:41:d8:fc:9c:d8:ad:98:7b:
2e:09:4c:52:d9:b3:fe:d7:ff:d7:f1:ae:47:4b:12:3c:eb:57:
a2:2c:76:ff:4b:af:95:ea:c6:82:5e:73:51:4c:0e:c0:81:40:
cb:0b:36:96:34:17:c3:8c:90:16:62:d9:57:c0:49:1c:c2:5a:
1d:dc:f2:02:45:c7:db:54:09:66:1a:55:f5:fb:f2:76:a5:65:
4b:2d:35:41:dc:79:2b:c2:2b:d3:1b:a0:5b:02:9f:8f:e0:95:
ad:69:49:9a:af:2a:7c:81:51:dd:00:04:e6:b9:e4:18:0f:a5:
bf:df:3b:5c:f4:f9:c1:80:39:5b:26:ae:de:1f:fd:08:47:50:
d6:a1:3e:1c:c6:94:3d:9c:73:b9:56:4e:92:0e:7f:8c:07:d1:
ee:af:08:09
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUF8bHGvdPChbZdn1WKd/Ne3R4fikwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ2MzIyOTlFMDE2RDI2OTE2NEZBNDBBRUY5OUNDODYw
MkUyQjdDMTAeFw0yNTEyMDYwNTI2MzhaFw0yNTEyMDkxMTE4MzhaMDMxMTAvBgNV
BAMTKDIxNkUzNkRFOTcwNTUxQ0VGOUE5RUY5Q0ExQzRDNEFDQTdFNUU2MkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfaYhX7Z5ubEt9G6O7zODdXN4i
2+sdK3Y/j5bgXBYiBDyD6GBPbpqGQhrQuIYik4BoP2WulfchJ/B+p6dsqbj6OsNs
/WtmGu2fKeLo74zy+QarT/27msGiWdygEfnfo/RqvRnhSnK4S064SX3ctmqEEAOO
A7I01xrR/0Ay1LMsIoGule1hWtNHg7xIQ+qRnQOQD1w40BmKTgZv61oaXWeRsHIr
7a68PnXHYOsK2ymJJSSrFLooNoI3XZDTF/OsoyGDlKNwfuIpqUFmBDa6LduTLI+W
3d+myBkWWrne3NIfpI9Q79bq44jYiDbJh3twXWP0JRcFz6BIwdoJEoigEsUvAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUIW423pcFUc75qe+cocTErKfl5i8wHwYDVR0j
BBgwFoAUxGMimeAW0mkWT6QK75nMhgLit8EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
ZTRhYmEwYS0xYzJjLTRmOGEtYTRiNC1lYTcyZDliMmE2MGEvMC9DNDYzMjI5OUUw
MTZEMjY5MTY0RkE0MEFFRjk5Q0M4NjAyRTJCN0MxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvQzQ2MzIyOTlFMDE2RDI2OTE2NEZBNDBBRUY5OUNDODYwMkUy
QjdDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU0YWJhMGEtMWMyYy00ZjhhLWE0
YjQtZWE3MmQ5YjJhNjBhLzAvQzQ2MzIyOTlFMDE2RDI2OTE2NEZBNDBBRUY5OUND
ODYwMkUyQjdDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAMRKWRW4farG3OliV75b+KXdRzdzxLGD7rWF
aUDNpturK3cIo7Gh/bvVMnh0cithWqigBrCoOqrt2wHdsCBRgXyQlfw5zK6KRyy8
Ck1QTysnlYBq2B9eOTv38zKcQ9yt0UH8YRlB2Pyc2K2Yey4JTFLZs/7X/9fxrkdL
EjzrV6Isdv9Lr5XqxoJec1FMDsCBQMsLNpY0F8OMkBZi2VfASRzCWh3c8gJFx9tU
CWYaVfX78nalZUstNUHceSvCK9MboFsCn4/gla1pSZqvKnyBUd0ABOa55BgPpb/f
O1z0+cGAOVsmrt4f/QhHUNahPhzGlD2cc7lWTpIOf4wH0e6vCAk=
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:26:04 2025 by rpki-client