This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft
File: 662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft (raw, json)
Hash identifier: +1g5zPuv0mNBClIeVH3A8X97b8oUOkrx9brtCfdRHAg=
Subject key identifier: EC:27:C6:57:87:47:F8:AD:32:65:75:A1:D5:38:FB:45:03:0F:97:18
Authority key identifier: 66:2A:D5:93:0E:C5:4A:48:49:25:40:9F:C2:E9:C8:D5:C6:E6:18:E2
Certificate issuer: /CN=662AD5930EC54A484925409FC2E9C8D5C6E618E2
Certificate serial: 40BDF88D3369487E579198DEB7537D8E879D666B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft
Manifest number: 052C
Signing time: Sat 06 Dec 2025 18:10:58 +0000
Manifest this update: Sat 06 Dec 2025 18:05:58 +0000
Manifest next update: Wed 10 Dec 2025 01:23:58 +0000
Files and hashes: 1: 662AD5930EC54A484925409FC2E9C8D5C6E618E2.crl (hash: mCtbCTIc8X9ugYURlnsdGOihVdd3+hn55i50COik5Dw=)
2: 323430343a366430303a3a2f33322d3438203d3e203435323934.roa (hash: sXpqmxuNw5KFGHbUuElptIHnlBHgbhE4oyCC4/bbR5g=)
3: 3130332e31392e3230382e302f32322d3234203d3e203435323934.roa (hash: 71g17R0P09F8qrxe26WyVipN7k+nUXzMu0u7MqFMMYI=)
4: 3131332e3231322e3131322e302f32302d3234203d3e203435323934.roa (hash: zQYCa94Kei73ulf+4e/B/4czmcXrLUsguGH7kUJqVxk=)
5: 34352e36342e3235322e302f32322d3234203d3e203435323934.roa (hash: j6P4xsf0fXPdRhsIO6r4r7ICTPC6AJQrGWPof9Fj7po=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.crl
rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:bd:f8:8d:33:69:48:7e:57:91:98:de:b7:53:7d:8e:87:9d:66:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662AD5930EC54A484925409FC2E9C8D5C6E618E2
Validity
Not Before: Dec 6 18:05:58 2025 GMT
Not After : Dec 10 01:23:58 2025 GMT
Subject: CN=EC27C6578747F8AD326575A1D538FB45030F9718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a5:aa:44:9c:d2:b4:e6:8c:e4:2e:3e:bf:49:
fa:6b:02:d3:7e:9f:cb:20:f2:ca:0c:ad:88:ec:21:
a5:73:9c:46:29:b6:b2:11:05:55:18:b2:48:15:2b:
da:e9:fd:ec:aa:ae:3f:19:e7:54:7e:bf:93:90:f1:
4d:54:16:0e:c6:a4:04:07:16:8e:84:71:2c:3e:ae:
d7:dc:04:4b:e5:ae:ff:5b:97:d0:2b:4b:d5:bc:23:
33:f2:2f:9d:8d:b3:06:fc:62:50:62:66:f9:11:46:
37:64:4a:53:62:64:58:71:24:8d:2c:ce:4f:31:4a:
cf:18:38:52:29:09:22:f8:53:52:13:57:c7:97:9e:
8c:87:e5:62:8d:6a:b4:b9:43:77:ee:12:63:61:4f:
a0:1e:ea:24:cf:23:e9:f9:8e:62:06:38:61:1e:48:
ca:35:44:1b:ba:cd:77:56:5b:c4:1f:db:e9:48:b2:
8d:e0:2b:58:94:d5:ed:e5:18:8c:c6:6b:ab:3b:c9:
fb:09:cf:5b:a9:96:cc:43:db:46:fa:37:d4:19:79:
0c:4f:37:e1:fc:b8:60:d2:ee:0d:a7:ea:27:aa:59:
4c:80:5e:ea:e8:23:b0:93:bd:69:e5:b2:1e:ee:26:
dd:6a:4d:bb:94:fb:d4:12:19:65:d0:74:7b:46:27:
cf:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:27:C6:57:87:47:F8:AD:32:65:75:A1:D5:38:FB:45:03:0F:97:18
X509v3 Authority Key Identifier:
keyid:66:2A:D5:93:0E:C5:4A:48:49:25:40:9F:C2:E9:C8:D5:C6:E6:18:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ea:86:bf:a0:78:84:10:29:bc:9c:37:ce:30:46:1a:29:d5:
b4:29:7b:d9:52:26:30:08:18:ed:81:14:85:2a:62:1c:4c:ae:
5e:80:df:7c:05:a4:07:f7:d1:a0:69:02:37:ef:c0:21:f0:7a:
56:b5:f6:0a:f3:52:20:2b:ff:3e:6e:1e:2b:1f:fd:db:2f:d3:
23:d9:5f:0b:d1:e2:d8:f2:ba:77:74:e8:d4:91:bb:af:2c:9d:
01:96:34:fc:4c:90:61:cb:ef:e8:b0:71:16:c9:80:c4:c8:12:
f2:ee:20:58:5b:95:20:a7:b5:7f:c0:a1:1f:bd:52:2f:6c:f3:
46:30:41:06:96:e2:14:f2:d2:ec:3a:34:7d:8c:62:5e:2f:9b:
d6:3e:80:42:f7:3d:37:ce:b4:d4:f9:0a:11:ba:fc:8b:e9:88:
83:b9:c9:fd:79:c5:28:93:3f:76:74:6e:47:ae:09:f2:cd:c6:
80:44:13:aa:1d:cc:0d:10:1c:45:e0:3c:77:1e:64:5d:4b:ce:
87:a7:b0:df:e4:85:96:4c:a1:09:d0:6f:ce:f3:10:9a:87:9a:
c3:af:a1:2a:ca:3a:bf:4b:e4:ab:87:72:d5:4d:93:e0:3f:fd:
d0:27:1b:33:f5:0d:a2:3b:fa:0c:41:f9:8d:59:e3:c9:f5:de:
6d:f3:b4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:55:01 2025 by rpki-client