This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft
File: 01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft (raw, json)
Hash identifier: yh++8ic7bo5owLtBFJJwbqxnMw3yPztGm0e1d6ivoBQ=
Subject key identifier: 3D:13:71:70:77:BE:DD:FB:55:3B:A7:96:D1:89:8A:FD:73:52:D8:8C
Authority key identifier: 01:E8:7E:DC:BE:90:1A:9A:E8:6C:F5:E4:1C:BA:8B:24:83:E9:B6:AC
Certificate issuer: /CN=01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC
Certificate serial: 7D41DEFB4A92BF2F5DDF052C174D4964C6FC86D8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft
Manifest number: 5F
Signing time: Sat 06 Dec 2025 16:52:24 +0000
Manifest this update: Sat 06 Dec 2025 16:47:24 +0000
Manifest next update: Tue 09 Dec 2025 17:42:24 +0000
Files and hashes: 1: 01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.crl (hash: TA9UNX4+tFyIDVHODpie4JDQtgfkREnh+1y/cAkg278=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.crl
rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:41:de:fb:4a:92:bf:2f:5d:df:05:2c:17:4d:49:64:c6:fc:86:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC
Validity
Not Before: Dec 6 16:47:24 2025 GMT
Not After : Dec 9 17:42:24 2025 GMT
Subject: CN=3D13717077BEDDFB553BA796D1898AFD7352D88C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e0:10:68:08:43:99:53:b4:c3:aa:5b:5c:90:
46:74:c0:80:59:cf:2f:5b:d3:d9:30:c5:0c:03:74:
82:c4:a1:a9:48:c3:f7:65:66:c1:e3:90:3b:46:bc:
ab:0c:80:9a:07:52:94:28:47:31:10:c9:f7:52:ce:
30:1a:a2:cc:e1:30:27:df:87:7b:bb:de:7d:7f:88:
6d:02:9a:5a:2d:35:e7:5e:97:a3:85:56:26:c4:cf:
55:41:73:d8:1d:7c:7e:df:f3:22:3b:9c:5a:69:8a:
aa:ff:81:d2:81:13:c6:95:0d:c9:43:8e:aa:c0:d4:
d3:28:a1:8a:1f:19:6f:f9:19:5a:f0:56:91:c8:a2:
15:32:0d:a5:22:ab:0f:93:01:c7:58:f5:e1:42:c3:
6a:74:b4:4f:b6:9d:a6:a9:19:7e:c5:e1:49:ed:e6:
06:67:fa:a3:e5:c6:60:4b:cf:8e:3c:ae:6e:21:0b:
f8:d8:18:81:ed:16:2c:a4:36:21:07:c1:74:ad:42:
4b:1e:bb:e0:fb:a2:e2:da:80:76:2b:e6:33:6a:7d:
70:41:a1:ab:f5:22:c2:5b:ce:47:9b:80:77:9e:62:
6e:0e:c0:3d:e9:b0:fe:f7:21:df:2a:34:46:7a:45:
f8:2e:60:73:9e:44:7a:a5:41:1e:f4:95:70:c5:63:
24:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:13:71:70:77:BE:DD:FB:55:3B:A7:96:D1:89:8A:FD:73:52:D8:8C
X509v3 Authority Key Identifier:
keyid:01:E8:7E:DC:BE:90:1A:9A:E8:6C:F5:E4:1C:BA:8B:24:83:E9:B6:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:5b:ad:c2:83:62:9b:a6:d3:e3:03:4a:aa:64:23:45:08:0f:
a1:a5:db:08:13:02:6d:3b:4e:a8:d5:68:16:74:bf:7e:b9:92:
8c:09:3e:4d:81:77:5a:ca:32:76:e7:4c:1a:e7:ef:ad:d7:3a:
00:76:14:01:b1:6a:d9:c8:38:19:6b:25:54:3b:fd:a9:28:57:
b0:8e:e1:8e:32:37:63:d6:de:94:aa:80:96:a6:75:c0:80:53:
77:9f:0c:91:3f:84:a2:94:16:13:5d:55:5d:fe:f0:0a:24:55:
7d:09:f9:f8:8e:40:d5:99:21:a6:70:a5:a3:1d:9b:25:d6:7c:
cf:f8:39:8c:d3:9d:dc:b7:8a:53:55:10:44:4d:e1:7a:6f:4f:
00:50:d3:76:f0:d0:a8:45:3a:35:25:b0:46:0c:59:5a:0c:4a:
53:1f:e1:c0:ac:f1:d7:e9:14:be:d9:24:0a:68:97:ca:07:91:
1d:ad:d1:bd:94:71:18:1b:e1:eb:e0:73:e6:f9:e7:2b:15:cc:
ff:ce:11:d7:0a:19:ef:64:52:02:2e:b6:f0:04:bb:f4:01:d4:
44:06:fb:25:8d:1f:6a:f3:6e:2a:48:e5:bd:c3:4e:8c:2f:24:
99:52:6e:c0:51:b0:75:53:c9:d5:11:a8:9f:a7:7c:db:a7:85:
d4:3b:f4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:50:31 2025 by rpki-client