This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.mft
File: F52826976E7EBDBF89B93A42A1682E42B84289FB.mft (raw, json)
Hash identifier: zIzMR2w88aQ9B8QAIlqL2wnZJZo9/RpoFb12FNdYCMs=
Subject key identifier: 59:D7:91:6B:21:50:96:9F:B3:2B:16:23:BF:87:F4:98:3D:E2:5F:7C
Authority key identifier: F5:28:26:97:6E:7E:BD:BF:89:B9:3A:42:A1:68:2E:42:B8:42:89:FB
Certificate issuer: /CN=F52826976E7EBDBF89B93A42A1682E42B84289FB
Certificate serial: 7AB3C5A15135E39B0ACE083A01890506C523F4FF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F52826976E7EBDBF89B93A42A1682E42B84289FB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.mft
Manifest number: EB
Signing time: Sat 06 Dec 2025 03:12:13 +0000
Manifest this update: Sat 06 Dec 2025 03:07:13 +0000
Manifest next update: Tue 09 Dec 2025 12:13:13 +0000
Files and hashes: 1: F52826976E7EBDBF89B93A42A1682E42B84289FB.crl (hash: ImbVK3uJlix7WyWh/QmU9iRgzQoRjiJ5fF9S8iXS8+4=)
2: 323430313a613565303a3a2f33322d3438203d3e20313532383130.roa (hash: P+pivHFq6sWXzePMBy9uzAKbTKafmuscGwm8u/xXNts=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.crl
rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F52826976E7EBDBF89B93A42A1682E42B84289FB.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 12:13:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:b3:c5:a1:51:35:e3:9b:0a:ce:08:3a:01:89:05:06:c5:23:f4:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F52826976E7EBDBF89B93A42A1682E42B84289FB
Validity
Not Before: Dec 6 03:07:13 2025 GMT
Not After : Dec 9 12:13:13 2025 GMT
Subject: CN=59D7916B2150969FB32B1623BF87F4983DE25F7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a6:65:52:90:92:e2:81:61:49:fd:f5:77:92:
63:0e:c8:0a:5d:b7:b6:ce:4c:0a:f2:f3:b6:ed:3d:
e1:90:6e:1a:33:47:98:d9:2c:25:a3:c0:bf:98:63:
58:53:72:e7:d7:a1:15:64:91:3c:d8:5b:d6:3e:0e:
e9:7f:f1:49:d1:9f:3b:ab:6b:ee:0b:23:d5:35:6b:
35:43:85:25:65:22:b4:f9:05:3d:3a:5a:ce:43:8a:
3e:1e:35:3a:b0:aa:1b:45:30:01:e4:77:18:32:0c:
4c:a0:33:47:49:9a:e5:eb:27:54:47:bd:81:53:2d:
69:dc:0e:a3:ae:3a:dd:1c:fc:3f:1b:ff:62:db:b4:
21:ac:6e:14:26:cc:05:f1:2c:b4:ee:40:7f:d7:17:
40:76:3b:6b:f4:2b:0c:87:51:7e:79:35:2f:88:d7:
90:bc:7f:86:e0:b2:c3:99:f3:5b:f9:ad:cd:64:74:
c5:89:9c:71:83:0e:c7:df:93:75:58:b5:31:48:2d:
cc:49:40:6c:2f:0b:bc:42:20:7d:79:ea:ab:ac:07:
29:1d:40:07:55:ae:ef:40:fb:15:a1:8a:96:61:8e:
b2:ee:2d:bc:ae:eb:fb:e1:47:58:4a:0f:dd:26:ff:
5c:c0:6f:fa:2a:a2:aa:b1:40:ea:1a:1e:1f:e2:23:
ff:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D7:91:6B:21:50:96:9F:B3:2B:16:23:BF:87:F4:98:3D:E2:5F:7C
X509v3 Authority Key Identifier:
keyid:F5:28:26:97:6E:7E:BD:BF:89:B9:3A:42:A1:68:2E:42:B8:42:89:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F52826976E7EBDBF89B93A42A1682E42B84289FB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:49:cd:ea:a9:e9:d5:98:49:93:ad:51:de:79:7e:65:07:f2:
70:00:91:07:b6:1b:30:0c:3d:75:2a:8d:9d:b0:9d:4c:c2:51:
e0:2c:0d:b4:c6:e9:85:af:3f:2f:30:9d:c2:03:3c:58:23:3d:
68:97:5f:53:a6:43:f3:e0:0b:ad:88:fa:7d:3e:cb:f0:4c:8a:
df:92:80:f0:7f:5b:81:94:14:e6:70:2e:e8:8d:88:41:b0:6b:
bf:48:4d:04:11:58:d6:76:ea:18:15:91:f0:15:dc:b8:e9:bd:
b0:03:0d:bc:25:b2:c7:bf:06:07:3c:da:73:f7:f2:82:16:7b:
5b:43:d9:f5:74:31:82:c3:1a:53:05:59:71:b0:b2:a0:8b:5e:
86:d6:7a:c3:d5:48:66:9b:bf:2d:28:f6:66:de:22:05:09:42:
e8:fd:34:c6:34:86:25:52:28:74:39:12:cd:7f:2d:d3:d2:6b:
e3:ea:7e:28:e0:b8:a1:cc:55:bf:b0:dc:ef:48:eb:44:a5:b4:
65:20:64:9f:8b:7b:95:3c:ca:07:c2:07:da:ec:e3:03:14:3b:
03:69:7b:62:8a:08:14:f9:59:e3:73:f2:c7:b4:1f:48:8e:6f:
f1:08:82:cf:22:45:45:d0:9c:65:35:99:93:75:b8:66:7d:cc:
5b:bc:21:f0
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUerPFoVE145sKzgg6AYkFBsUj9P8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjUyODI2OTc2RTdFQkRCRjg5QjkzQTQyQTE2ODJFNDJC
ODQyODlGQjAeFw0yNTEyMDYwMzA3MTNaFw0yNTEyMDkxMjEzMTNaMDMxMTAvBgNV
BAMTKDU5RDc5MTZCMjE1MDk2OUZCMzJCMTYyM0JGODdGNDk4M0RFMjVGN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+pmVSkJLigWFJ/fV3kmMOyApd
t7bOTAry87btPeGQbhozR5jZLCWjwL+YY1hTcufXoRVkkTzYW9Y+Dul/8UnRnzur
a+4LI9U1azVDhSVlIrT5BT06Ws5Dij4eNTqwqhtFMAHkdxgyDEygM0dJmuXrJ1RH
vYFTLWncDqOuOt0c/D8b/2LbtCGsbhQmzAXxLLTuQH/XF0B2O2v0KwyHUX55NS+I
15C8f4bgssOZ81v5rc1kdMWJnHGDDsffk3VYtTFILcxJQGwvC7xCIH156qusBykd
QAdVru9A+xWhipZhjrLuLbyu6/vhR1hKD90m/1zAb/oqoqqxQOoaHh/iI/+DAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUWdeRayFQlp+zKxYjv4f0mD3iX3wwHwYDVR0j
BBgwFoAU9Sgml25+vb+JuTpCoWguQrhCifswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
NDc1MzM4ZC03YWNiLTRhYTctYmVkYy1kNjQ1OWZkMTM1MDQvMS9GNTI4MjY5NzZF
N0VCREJGODlCOTNBNDJBMTY4MkU0MkI4NDI4OUZCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjUyODI2OTc2RTdFQkRCRjg5QjkzQTQyQTE2ODJFNDJCODQy
ODlGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODQ3NTMzOGQtN2FjYi00YWE3LWJl
ZGMtZDY0NTlmZDEzNTA0LzEvRjUyODI2OTc2RTdFQkRCRjg5QjkzQTQyQTE2ODJF
NDJCODQyODlGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAF9Jzeqp6dWYSZOtUd55fmUH8nAAkQe2GzAM
PXUqjZ2wnUzCUeAsDbTG6YWvPy8wncIDPFgjPWiXX1OmQ/PgC62I+n0+y/BMit+S
gPB/W4GUFOZwLuiNiEGwa79ITQQRWNZ26hgVkfAV3LjpvbADDbwlsse/Bgc82nP3
8oIWe1tD2fV0MYLDGlMFWXGwsqCLXobWesPVSGabvy0o9mbeIgUJQuj9NMY0hiVS
KHQ5Es1/LdPSa+PqfijguKHMVb+w3O9I60SltGUgZJ+Le5U8ygfCB9rs4wMUOwNp
e2KKCBT5WeNz8se0H0iOb/EIgs8iRUXQnGU1mZN1uGZ9zFu8IfA=
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:00:36 2025 by rpki-client