This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.mft
File: 0D3926ADFB47314F1E7D5B92769131D429FC13A9.mft (raw, json)
Hash identifier: ZNUCn/QLPwMMbhOI6NXL+h9XJobC/KPs6CEutNaaJTY=
Subject key identifier: 3B:CB:36:82:76:CD:34:82:F9:97:AD:79:76:A4:F6:B3:67:D3:C3:9C
Authority key identifier: 0D:39:26:AD:FB:47:31:4F:1E:7D:5B:92:76:91:31:D4:29:FC:13:A9
Certificate issuer: /CN=0D3926ADFB47314F1E7D5B92769131D429FC13A9
Certificate serial: 481F45AB0436567908FE66582F4043A818339278
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D3926ADFB47314F1E7D5B92769131D429FC13A9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.mft
Manifest number: 0509
Signing time: Wed 17 Dec 2025 20:21:03 +0000
Manifest this update: Wed 17 Dec 2025 20:16:03 +0000
Manifest next update: Sat 20 Dec 2025 23:07:03 +0000
Files and hashes: 1: 3130332e3134372e3135362e302f32332d3233203d3e20313432333630.roa (hash: fmJerLM1N0ksnlpj4ELJPPRM1ugJcJpRpXiGiX3LpPI=)
2: 0D3926ADFB47314F1E7D5B92769131D429FC13A9.crl (hash: OY4JaVKMahqORXUp84a/MEW5JymlEIgqguuugvpcUBI=)
3: 3130332e3134372e3135372e302f32342d3234203d3e20313432333630.roa (hash: M2s7m3W15+xAk09EIJ5FeWNhzpPtRKiWLuBNFqsp3KM=)
4: 3130332e3134372e3135362e302f32342d3234203d3e20313432333630.roa (hash: PA1MZra2kgeTlH2OybXWdKE8fFAmRO6cgL0fnUFICrM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.crl
rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D3926ADFB47314F1E7D5B92769131D429FC13A9.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Dec 2025 23:07:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:1f:45:ab:04:36:56:79:08:fe:66:58:2f:40:43:a8:18:33:92:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D3926ADFB47314F1E7D5B92769131D429FC13A9
Validity
Not Before: Dec 17 20:16:03 2025 GMT
Not After : Dec 20 23:07:03 2025 GMT
Subject: CN=3BCB368276CD3482F997AD7976A4F6B367D3C39C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d8:09:49:82:c5:a1:57:4a:3a:bc:c1:93:a3:
80:e7:a4:ed:1e:a0:eb:ef:f0:45:09:94:0b:96:6d:
ba:2a:d4:81:48:c8:b6:be:d2:43:18:c0:0c:5f:ef:
50:e5:85:09:08:e9:b3:d2:10:cf:9d:88:d5:ad:31:
8b:c7:42:90:a7:68:d4:3a:d3:73:77:30:f5:07:ad:
46:dd:a7:2f:f7:d9:9e:53:18:ec:6b:0f:02:52:92:
5e:27:7e:7a:cb:0a:13:87:a7:ee:a0:02:92:59:2d:
35:ee:be:37:a5:bf:94:02:2f:f4:1c:c4:59:c7:92:
3d:15:7e:cf:87:49:22:58:64:74:3e:6f:af:fc:7e:
30:c7:37:10:76:01:d1:df:e8:df:64:39:b4:e5:5c:
5a:00:e5:f7:57:c9:c2:7b:6b:73:64:15:d4:c7:54:
d4:29:db:63:80:b1:d7:e6:0c:64:5c:9b:57:4e:58:
4f:ea:fe:aa:e6:72:68:bc:51:1f:62:85:9d:39:00:
e0:1a:bf:45:f2:04:bf:d9:f8:86:6f:80:52:5e:ea:
6b:e2:5b:4d:99:be:a4:55:82:b8:e5:c8:ab:7d:ba:
37:ef:f0:be:f2:ad:92:11:14:56:b3:3b:0b:50:b5:
05:d0:b4:f7:b4:ac:05:1e:ae:dc:56:f4:89:86:a2:
d7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CB:36:82:76:CD:34:82:F9:97:AD:79:76:A4:F6:B3:67:D3:C3:9C
X509v3 Authority Key Identifier:
keyid:0D:39:26:AD:FB:47:31:4F:1E:7D:5B:92:76:91:31:D4:29:FC:13:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D3926ADFB47314F1E7D5B92769131D429FC13A9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f6:9b:39:4b:06:84:80:aa:d0:8c:15:f7:6a:93:01:70:06:
6e:03:7a:85:f0:2a:80:a2:49:55:e8:fc:b3:02:9c:17:b0:8e:
f0:de:bc:49:f1:5d:3e:a5:23:a9:1d:30:2b:c9:af:05:5a:1d:
12:01:69:8b:e4:08:6b:38:8a:4b:28:2d:4b:71:0b:6d:fd:d1:
a1:21:fe:67:fd:2f:db:7b:43:ed:55:df:81:72:bf:66:91:37:
65:73:ee:d7:f3:4f:5b:a1:01:d8:64:a1:d4:16:dc:c1:34:50:
79:4d:81:b8:27:0e:88:8b:bd:d7:b2:28:d2:7b:65:bf:b8:df:
de:72:68:bd:2d:dd:47:c8:01:f4:e2:dd:be:90:0d:d6:83:10:
c9:c1:e0:5b:61:cc:00:16:68:51:7e:8b:e4:b0:4f:d1:09:19:
72:f6:19:ef:fc:23:38:fd:d6:10:a2:00:47:3e:73:39:02:d2:
e1:cc:26:fb:95:3d:3a:dd:9f:6d:f7:a2:40:7f:21:f9:f4:18:
31:7d:6d:db:39:d3:88:83:21:1c:6e:c1:e3:c4:ff:a9:2c:ef:
0c:3d:21:73:43:06:fe:94:89:f3:d2:f4:3c:2c:f6:88:cb:78:
77:dc:ef:37:0e:fa:d9:a3:46:ea:5b:8e:fa:8a:15:02:50:db:
8c:bb:80:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 14:19:29 2025 by rpki-client