This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft
File: D6FA07102C8726922074D42DFF59946144A13506.mft (raw, json)
Hash identifier: cgvcaEvT2hzCMgto1oEtuXbiX3x0lLIQcWxPNeuOzW0=
Subject key identifier: 8A:CF:80:91:3F:DC:25:66:30:53:56:4B:F6:AE:F0:1F:DB:4E:7F:9B
Authority key identifier: D6:FA:07:10:2C:87:26:92:20:74:D4:2D:FF:59:94:61:44:A1:35:06
Certificate issuer: /CN=D6FA07102C8726922074D42DFF59946144A13506
Certificate serial: 39EA8390701B36E1C1278DE47AD993B545E2D11C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft
Manifest number: A9
Signing time: Mon 15 Dec 2025 14:32:24 +0000
Manifest this update: Mon 15 Dec 2025 14:27:24 +0000
Manifest next update: Thu 18 Dec 2025 21:29:24 +0000
Files and hashes: 1: D6FA07102C8726922074D42DFF59946144A13506.crl (hash: CWwb9ZGq0FMaGklfGmEDXal+WwYZ68nenMj15OvedEU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.crl
rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Dec 2025 21:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:ea:83:90:70:1b:36:e1:c1:27:8d:e4:7a:d9:93:b5:45:e2:d1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6FA07102C8726922074D42DFF59946144A13506
Validity
Not Before: Dec 15 14:27:24 2025 GMT
Not After : Dec 18 21:29:24 2025 GMT
Subject: CN=8ACF80913FDC25663053564BF6AEF01FDB4E7F9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a6:94:cb:af:38:35:66:9c:93:91:7b:08:13:
3d:36:cb:61:0e:cf:dd:78:27:d7:02:a0:b7:0a:44:
04:fd:79:8c:d1:3c:1f:4e:e6:c2:95:d6:08:78:60:
bb:59:d9:50:4d:c8:c9:de:af:e6:3b:ac:5a:d9:d8:
fa:cf:21:e0:fb:f6:6a:b9:f3:c5:64:e3:d7:3f:73:
d2:84:30:b0:57:86:94:fe:c7:fb:b5:3f:f2:15:0c:
94:06:0b:fc:1e:9a:aa:c5:14:3c:63:8f:dd:26:76:
b7:0b:61:30:19:f7:fc:8e:1d:ee:b8:1c:bb:02:1b:
6a:cc:08:4c:54:71:97:91:60:c1:3d:99:9d:71:41:
69:cd:66:d2:0c:8d:9f:29:1f:f0:19:ac:54:ed:5c:
8f:78:11:69:b0:4a:cf:3e:93:39:a7:4b:f3:d9:d8:
06:25:ea:2d:e9:76:8e:7e:86:53:0b:33:03:be:f2:
b8:3f:3a:8d:74:58:24:75:7c:e0:04:ec:d8:2e:99:
eb:4f:91:68:ce:2e:0d:c5:25:db:fc:1d:70:ff:b6:
8d:e9:a1:20:81:1f:b3:08:eb:00:af:cc:d8:fe:f7:
2e:2e:3e:98:e1:2e:5c:f2:55:0f:63:a7:51:69:59:
da:ae:0a:85:03:82:91:9e:92:fc:99:94:d4:8d:d3:
0f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CF:80:91:3F:DC:25:66:30:53:56:4B:F6:AE:F0:1F:DB:4E:7F:9B
X509v3 Authority Key Identifier:
keyid:D6:FA:07:10:2C:87:26:92:20:74:D4:2D:FF:59:94:61:44:A1:35:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e2:f1:e2:c8:c8:a0:4c:a7:61:ff:c7:42:cb:f6:33:48:f3:
ba:c7:fb:d0:3b:38:7a:c4:1b:ba:02:a8:06:a6:6a:85:14:a6:
6a:f0:99:e3:02:55:0d:1e:14:65:44:01:6d:d6:29:fd:35:ac:
a9:a1:62:f0:b2:3c:af:72:1c:d8:39:94:4c:aa:c6:0e:c8:2e:
40:0a:2e:9a:6c:6d:75:d1:1f:71:27:56:3b:5f:1c:21:71:88:
96:07:18:42:40:b4:93:b2:b9:ac:84:89:ef:f2:cc:f2:78:67:
be:24:54:8c:07:9d:01:cd:28:7d:ef:16:5e:03:af:91:e7:c2:
ff:db:ac:f7:01:1f:f8:f7:23:35:36:bf:23:3c:1d:98:80:05:
e1:61:5e:40:c8:1d:6d:e3:a2:85:1d:bc:88:8e:38:8b:0e:e9:
4e:46:38:7e:71:c3:fd:02:ee:9b:1d:2a:5b:b3:85:bc:41:83:
20:70:e0:fc:33:1f:a3:87:52:4e:74:f5:99:63:62:fb:3e:69:
73:a5:a6:bd:01:c3:c7:0b:05:43:4e:a3:f1:c5:15:23:fe:73:
58:09:51:09:44:cc:c0:2e:66:d0:83:fe:9c:57:49:cf:b6:9c:
b9:16:96:17:77:28:53:12:04:55:85:7c:2a:52:68:cf:e6:6e:
8b:7f:63:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 17:45:13 2025 by rpki-client