This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft
File: E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft (raw, json)
Hash identifier: /tY7c5d4ufIhCKY4VNIPNcaCDxu/Zs/etLS1NTVM7ew=
Subject key identifier: FF:E8:58:E0:34:EF:48:82:88:1E:CA:E0:59:89:C6:1C:F8:D6:72:1A
Authority key identifier: E1:F7:E7:39:D5:E9:2C:EF:AA:F8:DB:4F:DE:24:B4:02:DF:2F:5F:12
Certificate issuer: /CN=E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12
Certificate serial: 5BDB65F041F7C7B2D0BFB9B41165F673E4401089
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft
Manifest number: 01B6
Signing time: Sat 06 Dec 2025 00:20:56 +0000
Manifest this update: Sat 06 Dec 2025 00:15:56 +0000
Manifest next update: Tue 09 Dec 2025 10:20:56 +0000
Files and hashes: 1: 3130332e3131302e33352e302f32342d3234203d3e20313530393336.roa (hash: uQLjUBISMtz6q/VlBRFK79+EJlW80V1U4JVUQySqyvM=)
2: 3130332e3131302e33342e302f32332d3234203d3e20313530393336.roa (hash: 2f4uu7IrkIZq7UTq+ptH1NLF5HW0iMlWBn9DqvPnp4U=)
3: E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.crl (hash: SGBJUQ5LQoILF5M8mrZlm9rm8DwoE15mPGVjqra9zN8=)
4: 3130332e3131302e33342e302f32342d3234203d3e203438343635.roa (hash: PfXBdlYDWEtVezNTe8gChl6D2vjrU0fVmVCcz01D0ac=)
5: 3130332e3131302e33342e302f32342d3234203d3e20313530393336.roa (hash: CzAMVi4LI/hA4dEq+gFLf1t2OAe5Bjc5LnZkwOWw6KQ=)
6: 3130332e3131302e33352e302f32342d3234203d3e203438343635.roa (hash: t5FEbOLpmmiM+pm5xNk45bS+68qbBIUF8y4AW5jVQqc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.crl
rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 10:20:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:db:65:f0:41:f7:c7:b2:d0:bf:b9:b4:11:65:f6:73:e4:40:10:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12
Validity
Not Before: Dec 6 00:15:56 2025 GMT
Not After : Dec 9 10:20:56 2025 GMT
Subject: CN=FFE858E034EF4882881ECAE05989C61CF8D6721A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d7:bc:20:53:10:c8:c0:d7:4d:2d:5b:42:e6:
b7:de:9e:0c:20:5c:56:6b:b5:43:18:62:df:de:65:
de:ab:64:8c:95:3b:c2:bd:87:4c:28:4a:be:07:a4:
cd:bd:5d:c3:c2:e6:90:b5:47:8a:20:dd:9f:4b:53:
a0:b9:c0:62:34:ba:cd:cc:61:8d:9f:b0:cf:60:47:
a3:ae:c2:57:42:4d:20:4b:be:26:64:ec:ef:cf:85:
41:47:92:52:af:28:b2:1c:fc:5a:06:11:77:1e:4e:
4c:1f:53:b0:94:2f:f6:76:77:ae:54:ca:df:17:c1:
a9:f1:8c:ff:fd:22:81:bb:10:22:5d:67:b5:22:3f:
de:96:aa:13:84:68:b6:07:e0:b5:e4:28:fe:aa:a4:
7f:a0:15:67:73:9b:85:08:7b:3c:b2:8f:f6:e0:a9:
1d:fe:ac:2b:60:89:bc:34:ef:f3:ae:98:87:f5:2b:
e5:85:20:a3:bb:53:13:8b:40:67:d8:fa:87:7c:1b:
db:55:a5:aa:0e:5e:24:cd:69:10:45:f7:d1:8d:e6:
7c:cf:8d:41:33:7e:9e:2f:c0:6c:ba:f0:ac:b3:51:
8d:ce:e7:ed:82:c8:b1:74:a9:77:d0:14:92:b7:98:
cd:8a:b1:02:34:3b:e3:56:4f:a4:10:19:a6:02:23:
f6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E8:58:E0:34:EF:48:82:88:1E:CA:E0:59:89:C6:1C:F8:D6:72:1A
X509v3 Authority Key Identifier:
keyid:E1:F7:E7:39:D5:E9:2C:EF:AA:F8:DB:4F:DE:24:B4:02:DF:2F:5F:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e0:77:76:68:50:f7:80:b7:1d:30:20:9e:76:e5:87:38:9b:
37:bb:c5:ea:a7:b9:4c:92:60:b6:63:f1:df:6f:af:76:b3:c5:
9b:29:1f:f0:84:93:4f:6f:5d:83:72:2f:58:98:76:09:f7:9c:
f7:8d:22:d3:21:f5:fe:99:eb:9a:f2:06:67:b2:e6:b9:6c:bb:
5f:cb:e3:3e:87:c7:1f:16:13:8f:a5:e4:b3:df:29:58:c5:e7:
ad:79:0a:4d:2d:0d:86:09:2a:ce:d9:3d:af:22:fc:24:08:c2:
9f:3b:33:82:14:64:37:df:cc:ce:0f:61:76:46:f2:a7:43:83:
c3:f6:3e:87:34:40:7a:7c:3c:80:8c:21:d6:53:85:9e:67:6b:
5b:d3:0f:de:fe:16:ac:4c:3e:a5:d7:09:e0:90:fa:ad:1b:c9:
96:c7:4c:2b:f9:e4:86:71:7e:3a:8a:36:d0:72:56:84:ed:6f:
56:19:98:a3:57:83:a9:ac:7d:11:f9:23:04:1e:3c:1e:78:eb:
4c:c0:76:c8:f2:96:f6:e6:b3:96:da:bd:90:0e:67:96:bf:03:
7e:9a:80:1f:56:a3:7b:3e:b2:1a:5c:1e:9a:0d:c8:58:12:99:
64:bd:67:47:4c:59:70:52:5d:8e:4a:4a:da:3f:62:4d:40:b1:
35:f4:86:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:34:33 2025 by rpki-client