This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft
File: 7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft (raw, json)
Hash identifier: +blpwnBT/8cqk6zTxgzkRw3EK/gNEazE7t6sbGH/BLk=
Subject key identifier: 7A:A2:E5:90:04:41:1D:0E:71:03:09:7A:39:8F:6A:C4:99:82:62:BF
Authority key identifier: 7B:94:59:74:A7:9E:8C:77:CB:02:F9:44:95:BA:9F:87:BA:A0:E0:38
Certificate issuer: /CN=7B945974A79E8C77CB02F94495BA9F87BAA0E038
Certificate serial: 3DCF75FA45C190382C165D4BF17296F5982090C0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B945974A79E8C77CB02F94495BA9F87BAA0E038.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft
Manifest number: 03AB
Signing time: Sat 06 Dec 2025 19:12:12 +0000
Manifest this update: Sat 06 Dec 2025 19:07:12 +0000
Manifest next update: Wed 10 Dec 2025 03:50:12 +0000
Files and hashes: 1: 3130332e3136372e33302e302f32332d3234203d3e203137393935.roa (hash: jJAIyVbfrGhaQ1dlxzFUdHOYskMs8jKydFWI9VuwVq4=)
2: 7B945974A79E8C77CB02F94495BA9F87BAA0E038.crl (hash: zzxxo99ojwndMk8kOqYLUI1tfUgw5KJGAhqzvteMZkw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.crl
rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B945974A79E8C77CB02F94495BA9F87BAA0E038.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:cf:75:fa:45:c1:90:38:2c:16:5d:4b:f1:72:96:f5:98:20:90:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B945974A79E8C77CB02F94495BA9F87BAA0E038
Validity
Not Before: Dec 6 19:07:12 2025 GMT
Not After : Dec 10 03:50:12 2025 GMT
Subject: CN=7AA2E59004411D0E7103097A398F6AC4998262BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:0d:1f:61:14:b5:8b:59:08:fc:25:7d:a7:25:
d6:35:16:33:fa:3c:5c:20:ff:7e:bf:3d:b7:a1:2c:
15:6c:93:f4:0d:6f:00:49:1e:00:79:63:3c:0b:98:
69:77:30:0d:24:2d:c1:ae:e6:bf:9c:1a:96:0d:a4:
9b:7a:e4:42:56:a7:59:e6:9a:45:17:f8:5d:76:a1:
48:6f:9a:7d:ca:b4:58:2f:fb:55:70:1b:cf:62:9a:
fe:da:ae:88:df:c1:67:05:bf:03:9c:e7:1e:9c:30:
f5:82:b9:b3:da:d3:bc:eb:48:16:da:6b:35:2c:d6:
f8:0c:a3:04:c0:64:91:2a:69:b0:f1:be:f7:1b:46:
ca:8d:99:5a:32:23:5e:5d:de:d4:1d:06:20:69:38:
85:08:af:e2:0a:6e:b5:79:8a:37:ce:a4:2f:4a:1e:
f6:cc:c5:87:71:ab:8e:fa:a2:20:74:fc:12:ed:8e:
ed:39:af:33:8b:02:c5:06:4a:79:fa:1c:43:ab:ae:
51:97:a9:68:f6:b0:37:9a:af:5d:37:8c:6b:32:0a:
cf:ca:df:c0:8a:da:a8:16:78:07:c1:fb:16:72:e8:
a7:18:d1:bb:35:2d:bc:db:68:5e:8e:b4:8b:c3:26:
16:7b:39:9f:de:c4:6f:be:1a:26:66:93:46:22:46:
e8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A2:E5:90:04:41:1D:0E:71:03:09:7A:39:8F:6A:C4:99:82:62:BF
X509v3 Authority Key Identifier:
keyid:7B:94:59:74:A7:9E:8C:77:CB:02:F9:44:95:BA:9F:87:BA:A0:E0:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B945974A79E8C77CB02F94495BA9F87BAA0E038.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:bd:21:fa:ba:fe:f6:42:78:83:4a:d5:17:40:16:6a:77:c2:
35:c5:85:89:27:fe:27:5d:98:a9:f5:a9:69:b7:3f:3c:6d:73:
83:be:1e:f4:19:23:d1:6e:03:a0:03:d3:b7:23:c8:e8:ac:0e:
5d:a1:87:d2:e5:22:29:40:11:d4:56:8c:a3:56:d7:72:64:44:
c5:3e:0b:59:a2:29:04:42:1d:3a:b3:f8:6f:1f:01:f2:3b:ce:
b5:cd:11:1c:b7:4e:f7:d1:a4:39:ec:d6:a9:7c:9e:d4:7b:d3:
5f:0b:57:d6:5d:41:08:b4:ac:76:03:05:e9:93:9b:8e:80:fe:
96:de:71:a6:9e:be:aa:6e:25:fb:eb:44:c7:4c:0b:b9:92:24:
61:ce:ca:bb:82:d2:9f:8b:ac:27:21:8a:24:cb:e0:ff:6e:f8:
f7:c6:ce:5d:1c:50:92:54:67:4c:35:cb:0c:e4:c4:5c:24:9d:
e9:b6:c0:25:85:ce:95:34:a5:b9:c7:96:8b:f0:1d:95:ad:27:
6a:bd:d8:21:9b:c4:c8:cc:a1:0f:6c:45:b4:ff:33:17:4c:af:
41:ba:e9:63:18:7a:a7:da:5c:f3:20:89:6a:c0:b7:8d:55:73:
43:93:01:78:6b:1c:90:d9:ac:a2:78:26:a4:32:5b:fe:c6:a5:
00:6d:82:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:50:20 2025 by rpki-client