This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft
File: 919B60E4D7E1171B6624F318ADA1B74502A3A018.mft (raw, json)
Hash identifier: lY0bib0j8NiFjn0SC1OVxpCdww5nAfcVTDNNR34Ij/Q=
Subject key identifier: BE:C6:D2:C8:FC:90:CC:0F:38:49:92:91:DC:B6:8D:AE:9C:40:80:75
Authority key identifier: 91:9B:60:E4:D7:E1:17:1B:66:24:F3:18:AD:A1:B7:45:02:A3:A0:18
Certificate issuer: /CN=919B60E4D7E1171B6624F318ADA1B74502A3A018
Certificate serial: 2E6BB8C8A90ABB28A647E81B9E746C0C4136941C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/919B60E4D7E1171B6624F318ADA1B74502A3A018.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft
Manifest number: 052B
Signing time: Sat 06 Dec 2025 23:10:43 +0000
Manifest this update: Sat 06 Dec 2025 23:05:43 +0000
Manifest next update: Wed 10 Dec 2025 04:52:43 +0000
Files and hashes: 1: 3130332e3130362e3131362e302f32342d3234203d3e20313336383836.roa (hash: orZMBlY9QwaffF3Sj5GAYnuUKegFXWi6cel4pBtcO+Y=)
2: 919B60E4D7E1171B6624F318ADA1B74502A3A018.crl (hash: BRM9h1YdQkaWd0xlMBAxPHcBrnf9pOQldtSm1N+56BY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.crl
rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/919B60E4D7E1171B6624F318ADA1B74502A3A018.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:6b:b8:c8:a9:0a:bb:28:a6:47:e8:1b:9e:74:6c:0c:41:36:94:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=919B60E4D7E1171B6624F318ADA1B74502A3A018
Validity
Not Before: Dec 6 23:05:43 2025 GMT
Not After : Dec 10 04:52:43 2025 GMT
Subject: CN=BEC6D2C8FC90CC0F38499291DCB68DAE9C408075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1d:27:5b:c1:99:cb:f8:d1:1f:a3:8f:a4:ac:
ab:ab:49:37:49:1a:eb:75:45:87:91:e4:ef:1e:e0:
3b:dd:ef:9b:a8:d9:5e:06:35:42:c8:cd:43:1b:ed:
19:f5:df:65:07:5a:9b:e2:b1:2d:4f:7d:a1:fe:66:
a0:32:c3:cc:73:6f:8b:73:b3:40:33:ee:7a:b4:7b:
d1:4d:b9:1d:9c:1f:8c:d0:0b:5f:8b:55:ba:b5:fa:
f3:68:4b:f5:5c:ee:b1:0d:99:1e:7d:16:13:c2:b9:
f4:2b:9b:04:2c:91:d0:24:3a:5e:c2:c9:8a:57:d9:
02:7e:a6:d3:e3:e0:6e:c8:56:c9:a7:cc:dc:63:95:
4f:c4:ec:4b:cc:11:b7:d7:2e:bf:16:40:ca:17:c1:
27:e3:46:e9:f2:39:a1:8e:d2:bb:91:c3:f0:92:b2:
8d:7e:c7:c1:db:dc:b8:0a:1a:38:4f:41:26:58:8a:
9c:84:5e:35:bb:a6:bb:92:38:8b:47:28:4f:8e:94:
95:84:1a:f0:e0:dd:f3:34:d8:50:44:3c:9c:6c:77:
32:a9:b7:5e:9d:28:b0:b8:53:e8:e0:a3:d9:1e:dd:
27:11:4b:70:56:ef:bb:85:cb:1d:2c:c0:19:2c:6f:
0e:87:51:5a:57:4c:18:8e:85:7b:fc:f9:85:7d:18:
3a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C6:D2:C8:FC:90:CC:0F:38:49:92:91:DC:B6:8D:AE:9C:40:80:75
X509v3 Authority Key Identifier:
keyid:91:9B:60:E4:D7:E1:17:1B:66:24:F3:18:AD:A1:B7:45:02:A3:A0:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/919B60E4D7E1171B6624F318ADA1B74502A3A018.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:df:83:64:5f:e9:04:b6:bf:53:a2:45:2a:86:28:a8:79:bd:
3a:81:bb:e5:27:84:0f:60:ab:37:66:78:01:02:6e:57:e1:d3:
e9:3a:c5:c1:c2:f4:11:2b:5d:2a:f7:77:6d:6e:1d:f8:ee:74:
ad:f1:63:8a:70:9a:f2:6b:80:21:e2:ce:01:cd:25:46:f8:59:
74:1a:d8:48:6e:82:24:90:31:26:73:be:11:e7:a6:dc:f5:31:
60:f0:c2:6b:40:39:af:f0:e3:31:d6:65:4b:65:9f:0b:33:d2:
66:66:1c:75:79:b5:21:7d:0b:ab:47:1a:45:dc:5e:a9:99:42:
74:e0:50:f6:7a:d4:1c:98:10:4e:90:e0:be:0f:11:84:18:48:
c2:82:3f:2f:5b:d9:d0:6c:1f:0c:f9:7f:80:a7:5c:41:c6:f3:
2f:7e:56:5a:b6:c4:9a:40:7c:77:c2:ee:3e:32:ab:30:8c:fa:
b0:19:89:34:fc:41:9d:a2:dc:2c:8d:7a:1e:1b:35:82:aa:d2:
4a:eb:15:25:21:23:a4:e6:c7:cf:8d:70:e0:55:8c:bf:b5:6a:
e9:e3:9a:91:d8:8f:46:3c:3a:c1:7c:3c:bc:30:8d:77:90:8d:
7a:74:d8:f9:bf:48:e2:02:d7:aa:07:c9:e0:47:f0:ee:af:17:
ca:8f:b3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:37:40 2025 by rpki-client