This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft
File: 662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft (raw, json)
Hash identifier: 24XOXahoOs1v6IYjeKwFqgqJ7Uz240qNy2EQrFtKEPI=
Subject key identifier: 8A:99:2B:B5:02:37:C5:64:A7:05:67:B5:F6:B3:C4:1A:04:0D:6F:0E
Authority key identifier: 66:2A:D5:93:0E:C5:4A:48:49:25:40:9F:C2:E9:C8:D5:C6:E6:18:E2
Certificate issuer: /CN=662AD5930EC54A484925409FC2E9C8D5C6E618E2
Certificate serial: 3D3E772880B37B812E926BE2A3A84B463342B2C2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft
Manifest number: 0531
Signing time: Thu 18 Dec 2025 09:00:59 +0000
Manifest this update: Thu 18 Dec 2025 08:55:59 +0000
Manifest next update: Sun 21 Dec 2025 16:30:59 +0000
Files and hashes: 1: 3131332e3231322e3131322e302f32302d3234203d3e203435323934.roa (hash: zQYCa94Kei73ulf+4e/B/4czmcXrLUsguGH7kUJqVxk=)
2: 34352e36342e3235322e302f32322d3234203d3e203435323934.roa (hash: j6P4xsf0fXPdRhsIO6r4r7ICTPC6AJQrGWPof9Fj7po=)
3: 662AD5930EC54A484925409FC2E9C8D5C6E618E2.crl (hash: DTlIbo39+WTRPkbRrQThDic6zXbULq4dUEvokuAe2uQ=)
4: 323430343a366430303a3a2f33322d3438203d3e203435323934.roa (hash: sXpqmxuNw5KFGHbUuElptIHnlBHgbhE4oyCC4/bbR5g=)
5: 3130332e31392e3230382e302f32322d3234203d3e203435323934.roa (hash: 71g17R0P09F8qrxe26WyVipN7k+nUXzMu0u7MqFMMYI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.crl
rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 13:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:3e:77:28:80:b3:7b:81:2e:92:6b:e2:a3:a8:4b:46:33:42:b2:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662AD5930EC54A484925409FC2E9C8D5C6E618E2
Validity
Not Before: Dec 18 08:55:59 2025 GMT
Not After : Dec 21 16:30:59 2025 GMT
Subject: CN=8A992BB50237C564A70567B5F6B3C41A040D6F0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fc:3d:20:e1:bb:e1:70:84:23:0a:3b:6f:1e:
db:44:d3:f4:29:0e:7f:6b:e4:59:fb:c5:9e:79:9e:
22:54:0b:c8:db:90:16:e6:92:a7:16:f8:9c:20:0d:
7c:cb:35:8e:05:bd:52:ab:46:bf:3a:91:7c:68:d5:
6a:fa:66:f4:c9:d3:09:4c:c7:e5:ce:13:69:1d:2b:
bc:12:c2:51:0e:3b:bf:1d:4d:47:a2:cf:98:57:65:
5d:26:0e:45:e2:49:14:99:3d:93:c9:dc:ef:a9:ff:
91:d5:00:ca:81:86:97:ee:26:37:30:7d:78:8d:7a:
cc:5f:40:c7:28:d7:ad:dd:4f:c3:97:b6:21:bd:50:
a4:7f:a9:70:81:c8:06:21:34:6e:32:9e:f4:ef:74:
00:70:d8:7e:0f:dd:b6:0a:82:16:bc:59:c4:86:60:
41:ab:11:6b:fe:29:2d:51:c3:44:fe:bb:eb:26:c0:
69:b0:3e:e8:1e:79:3a:89:4a:22:7b:8a:ca:d3:83:
12:54:7a:4d:3c:78:c3:65:f7:c8:bd:d2:7b:40:30:
d7:eb:9d:41:58:7e:99:8e:ae:e5:e8:63:10:56:80:
ac:a7:9c:b4:9d:5e:b7:5d:28:f3:3e:ed:94:40:04:
0b:bb:53:47:a0:88:4a:d5:62:4b:bf:9d:cc:50:54:
52:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:99:2B:B5:02:37:C5:64:A7:05:67:B5:F6:B3:C4:1A:04:0D:6F:0E
X509v3 Authority Key Identifier:
keyid:66:2A:D5:93:0E:C5:4A:48:49:25:40:9F:C2:E9:C8:D5:C6:E6:18:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:2d:95:0c:0a:5b:ca:23:81:85:1d:9f:52:85:85:59:7d:b4:
c5:68:8b:79:03:60:2e:d3:13:19:c1:da:e9:7f:f9:78:8a:c3:
e0:fa:69:a8:d8:1a:49:35:6d:db:8b:b5:27:86:70:04:52:a9:
51:11:f0:ab:f4:01:66:b3:87:80:61:e0:ea:60:d7:8f:03:9b:
55:60:1e:48:1d:1b:f0:52:c1:c8:1d:0f:07:6e:55:a9:bc:77:
49:41:76:c8:0b:b0:9d:13:40:61:4e:cc:2e:f4:b9:41:68:ad:
52:a1:22:e9:3d:02:a1:73:2c:59:4c:df:6e:55:bc:2c:34:cd:
18:79:89:0d:a3:e9:06:29:4c:70:53:ed:6a:be:fd:2a:fe:45:
83:85:5f:b8:c8:3b:e1:30:61:48:c4:b7:6d:1b:2c:ad:d0:29:
ee:5a:25:00:2e:f6:cb:8e:f1:00:b7:cc:96:c2:7d:83:6c:1a:
50:84:58:12:f1:f9:4a:93:df:ac:6e:23:bb:e8:7b:93:c8:fd:
ce:3f:ad:60:05:87:4e:40:22:02:52:28:f2:9b:47:54:45:49:
e8:ce:80:3a:ba:d3:64:49:1d:1a:77:36:f4:69:d1:36:41:a0:
18:8f:33:4a:7c:7e:dc:27:7d:95:33:be:89:8c:c7:68:bd:39:
51:ab:af:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 22:07:41 2025 by rpki-client