This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft
File: 4496E0D8274284254DC2307A2633342BE95C0DD3.mft (raw, json)
Hash identifier: I+kum/6PGuc88mSwt+hRVNQhdp8w/K8UTYVML0T0yNY=
Subject key identifier: 11:10:29:15:EC:16:71:F9:B9:83:E6:DE:1C:FF:49:2B:F3:A7:9F:EB
Authority key identifier: 44:96:E0:D8:27:42:84:25:4D:C2:30:7A:26:33:34:2B:E9:5C:0D:D3
Certificate issuer: /CN=4496E0D8274284254DC2307A2633342BE95C0DD3
Certificate serial: 46B7AAF8FB42042DB7E7746EB94C2738FE5E0210
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4496E0D8274284254DC2307A2633342BE95C0DD3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft
Manifest number: 014F
Signing time: Sat 06 Dec 2025 05:21:57 +0000
Manifest this update: Sat 06 Dec 2025 05:16:57 +0000
Manifest next update: Tue 09 Dec 2025 14:12:57 +0000
Files and hashes: 1: 4496E0D8274284254DC2307A2633342BE95C0DD3.crl (hash: NX/cOH/q2pv5nGgT8BJ8READV9Fp0nZaBVeCaAte3TY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.crl
rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4496E0D8274284254DC2307A2633342BE95C0DD3.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 14:12:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:b7:aa:f8:fb:42:04:2d:b7:e7:74:6e:b9:4c:27:38:fe:5e:02:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4496E0D8274284254DC2307A2633342BE95C0DD3
Validity
Not Before: Dec 6 05:16:57 2025 GMT
Not After : Dec 9 14:12:57 2025 GMT
Subject: CN=11102915EC1671F9B983E6DE1CFF492BF3A79FEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0f:e1:6b:f9:bd:83:78:58:65:0b:45:7f:88:
21:bf:dd:d2:71:a1:dc:c8:65:cd:c1:60:40:5b:a8:
6c:20:e8:42:62:9d:22:a5:21:7b:13:e0:86:c0:8f:
f4:cc:3c:d3:3e:93:b8:38:60:a2:55:3c:41:4b:f8:
90:9f:5a:57:c5:e4:25:51:6a:f0:81:92:f8:fa:3c:
29:bc:d6:c7:07:b2:10:91:1b:43:84:cc:e0:07:d7:
82:2d:97:9e:00:1a:6e:6d:15:d4:2f:58:de:11:e4:
42:f8:d4:3f:cd:8c:03:aa:e4:eb:dd:a4:50:5f:9b:
69:30:30:5b:a3:e4:74:a1:24:87:bd:f5:00:2c:e0:
00:cc:51:90:99:25:05:03:98:0f:ba:2e:8d:4b:f6:
ed:af:c2:dd:52:b9:c7:cc:f9:9a:96:98:a8:a4:ff:
27:f1:ab:ce:a5:55:da:65:70:f1:b2:b8:26:25:15:
9b:59:71:f4:71:27:b8:f1:16:70:43:c0:53:f3:de:
ad:3f:6e:ce:55:a7:b7:e7:73:71:4c:74:04:a4:53:
f7:d3:c8:35:18:59:52:fe:07:3e:fe:25:1d:4a:21:
17:d4:dc:b9:23:03:fc:30:f4:cb:b4:4b:c1:2f:f6:
01:5e:49:21:04:88:5c:49:ec:91:0b:c9:6e:31:f3:
c2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:10:29:15:EC:16:71:F9:B9:83:E6:DE:1C:FF:49:2B:F3:A7:9F:EB
X509v3 Authority Key Identifier:
keyid:44:96:E0:D8:27:42:84:25:4D:C2:30:7A:26:33:34:2B:E9:5C:0D:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4496E0D8274284254DC2307A2633342BE95C0DD3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:68:58:0c:6c:ec:e6:9d:34:67:70:62:88:5d:d2:60:1c:37:
52:2c:f3:c6:5e:7c:b1:64:bc:88:eb:a8:51:5e:c6:a1:89:f8:
9d:2d:6d:17:b6:4b:eb:60:1e:87:63:4d:7b:53:14:7a:61:c2:
5b:2b:8c:c8:5d:32:af:31:bb:06:e0:57:d1:75:8e:25:1a:86:
f8:d5:88:05:d4:f6:aa:b6:55:8a:bf:ad:a6:20:07:8e:6d:32:
52:ea:35:49:3a:2e:c2:87:f9:b4:85:91:12:14:b7:12:d7:b9:
ec:91:c2:65:b3:ae:43:30:41:17:b8:c2:dc:98:46:44:0a:f0:
20:3e:81:c8:da:43:e7:44:c1:05:8c:e2:c9:7a:38:ea:2d:26:
10:e9:72:84:34:11:16:b3:1b:31:f4:c5:38:e7:e7:60:fe:12:
e6:77:64:35:53:0d:86:d5:0f:ba:f4:77:d6:c3:9b:75:14:6f:
87:e4:e7:9c:bf:d1:a3:6b:66:9f:9f:dd:fc:fa:3d:9e:43:87:
c9:4c:f7:15:73:67:55:ae:42:57:8f:34:19:a1:65:66:4b:0f:
85:25:03:9b:e6:e0:74:bc:78:8f:ba:e2:f6:2e:6c:2a:fa:e3:
de:01:ad:4e:be:9d:b4:99:be:aa:4d:79:be:80:7e:0c:bb:c8:
bb:3d:0e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:07:33 2025 by rpki-client