This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft
File: 490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft (raw, json)
Hash identifier: 9a4fFM/I/9PIdxPWVwT1MN1vCbcYn1HFDtiMTe3ZxqI=
Subject key identifier: B1:4B:D5:A0:A4:90:5D:6B:C0:E8:22:D7:FA:AC:DF:0E:3D:12:BE:26
Authority key identifier: 49:0B:3F:BC:C6:F0:FC:65:78:50:96:A1:53:DC:87:BC:50:57:AC:E5
Certificate issuer: /CN=490B3FBCC6F0FC65785096A153DC87BC5057ACE5
Certificate serial: 70AECDAEB18181C1EB7625DAFC495A234DC3A24D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft
Manifest number: 0532
Signing time: Sat 06 Dec 2025 11:01:10 +0000
Manifest this update: Sat 06 Dec 2025 10:56:10 +0000
Manifest next update: Tue 09 Dec 2025 22:52:10 +0000
Files and hashes: 1: 3230322e34332e3131342e302f32332d3234203d3e203435373036.roa (hash: 7fQVmlkjjbtviTL2Fj7ic9MZZ5loTg5W7CHv/vNGE0s=)
2: 3135302e3130372e3234382e302f32322d3234203d3e20313339393338.roa (hash: vA79jR7K7GTqla1cGm5s5aJKIIoqkQL2bUTr0ZcxLOI=)
3: 490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl (hash: xV6FrFgZqN9TZ3hagAwgp3bLxbrjUf67A82jrGfHPXk=)
4: 323430363a613330303a3a2f33322d3332203d3e203435373036.roa (hash: mSVrT9nxgdbO5zEJl0JNWqbaa5yXAY0zHugt4tIrWAI=)
5: 3230322e34332e3131342e302f32332d3234203d3e20313339393338.roa (hash: UzutzzrLFTEOaJSDZubuLTcQodPgB9vcpIjcaAdh8AA=)
6: 3130332e31382e32382e302f32322d3234203d3e203435373036.roa (hash: Og1WIa42Ljyk1coTqcyrLMYu4TjgeM0yBlFnoKhLkxg=)
7: 32372e3132332e302e302f32312d3234203d3e203435373036.roa (hash: uuH+ziNBEr2lIwcdPkvVugSjVKRTjk8bgzFRk7pTIbw=)
8: 3130332e31382e32382e302f32322d3234203d3e20313339393338.roa (hash: ucnqUA3ytkqy/KZQsVBDn5h+vw9Xea+SBX0gdpwdSiI=)
9: 32372e3132332e302e302f32312d3234203d3e20313339393338.roa (hash: 93zBrgb6m1LW3mW3NgO8+L8poGQYWz2Zyn5aV5wC7UU=)
10: 3135302e3130372e3234382e302f32322d3234203d3e203435373036.roa (hash: UD6uPbiybd2gYQ34RwGBqvbNDHuw/OBXgpqqJ4vtt5c=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl
rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:ae:cd:ae:b1:81:81:c1:eb:76:25:da:fc:49:5a:23:4d:c3:a2:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490B3FBCC6F0FC65785096A153DC87BC5057ACE5
Validity
Not Before: Dec 6 10:56:10 2025 GMT
Not After : Dec 9 22:52:10 2025 GMT
Subject: CN=B14BD5A0A4905D6BC0E822D7FAACDF0E3D12BE26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cb:a8:cd:c4:0d:66:bf:48:11:43:05:06:81:
da:e6:1d:01:13:96:0f:77:20:43:02:6b:4e:a3:3e:
b6:ef:7a:be:e5:e6:d9:c0:d8:42:cf:10:c7:42:ea:
4b:ef:58:eb:d8:be:0c:3c:4c:6f:e4:c6:6b:43:62:
cb:97:28:48:43:40:38:32:6e:fa:84:06:5e:e7:76:
a1:da:c8:7d:fb:4e:0d:0c:9d:77:f1:5e:ca:25:c5:
71:f0:ff:90:ed:06:fd:bb:41:d3:07:6e:4c:4e:5c:
33:25:d1:8b:79:d2:92:8e:1c:c8:60:91:f8:19:aa:
6f:5f:e3:ca:3d:25:58:0f:2c:54:4e:c8:b3:dc:39:
3a:fa:e5:34:5c:82:28:ea:97:c8:c5:b8:a5:a9:cc:
40:40:69:23:80:da:ee:f3:5a:7e:b1:0d:c6:e7:cd:
f2:0e:12:1e:9d:4c:67:b5:1e:e1:b9:7a:be:d3:fb:
d5:0b:12:bb:0e:f1:ef:16:ef:ae:6f:ec:81:9e:40:
38:bc:95:9e:80:30:70:7c:15:68:15:97:8b:bf:e5:
fd:e7:b1:b4:34:8f:09:7a:f7:93:a5:b2:3c:dc:6f:
f0:12:96:b7:53:1d:14:9f:26:0c:c3:d1:58:31:02:
af:e7:5a:4f:71:14:92:d6:83:6a:cf:1d:2a:76:5c:
db:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:4B:D5:A0:A4:90:5D:6B:C0:E8:22:D7:FA:AC:DF:0E:3D:12:BE:26
X509v3 Authority Key Identifier:
keyid:49:0B:3F:BC:C6:F0:FC:65:78:50:96:A1:53:DC:87:BC:50:57:AC:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ac:ca:1b:8b:67:82:f5:84:1b:8c:e1:17:1b:1f:e2:03:03:
82:9e:f6:9e:6b:9e:86:7f:69:08:b7:23:d1:e3:2a:4f:df:a4:
7e:86:c7:06:ec:e9:08:f8:9f:49:f0:ca:44:01:71:2a:72:f7:
af:d0:75:9c:fe:65:8b:0e:8c:3f:bf:51:d3:26:42:54:4a:e9:
7f:8b:55:d3:64:fe:2d:e0:25:2d:47:76:32:fb:5e:b2:33:8c:
6e:82:6b:15:fd:fb:0d:ec:b4:46:77:fd:65:b4:fd:64:d5:61:
63:a5:c0:00:0e:7c:fb:1f:6a:33:a5:eb:48:d5:d0:f8:77:30:
a0:a9:96:8a:1f:f7:e5:24:73:4f:0e:77:65:09:0b:c3:72:d7:
ec:e6:6d:2b:1a:86:3c:4d:e6:9a:73:a3:62:78:ef:7c:d8:a8:
3d:2c:cc:cd:2b:c2:77:d0:ae:ba:8c:03:3f:5a:64:f5:05:8b:
9a:a6:6b:75:5b:be:e4:46:f4:e6:0d:2f:7f:ac:a3:e4:fb:c4:
db:41:39:cb:45:49:8a:b6:b5:6f:be:ec:cf:33:4e:cb:f2:19:
52:e9:ee:89:43:fb:71:ef:ba:21:04:60:00:60:74:d5:1f:13:
ee:11:ee:1d:9a:26:89:0d:24:39:64:45:13:1e:07:ed:91:54:
24:2e:e4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:51:17 2025 by rpki-client