This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/C62A541C7323F6CD238F549B1F8736ED958DEFF7.mft
File: C62A541C7323F6CD238F549B1F8736ED958DEFF7.mft (raw, json)
Hash identifier: tOXtE2aVpZCRIzIk9Fya95oSKVFHN6RgO87aYgoiIh8=
Subject key identifier: 1B:FD:2F:DA:EB:FD:CA:21:9C:5A:14:37:87:00:D8:44:7D:A0:77:75
Authority key identifier: C6:2A:54:1C:73:23:F6:CD:23:8F:54:9B:1F:87:36:ED:95:8D:EF:F7
Certificate issuer: /CN=C62A541C7323F6CD238F549B1F8736ED958DEFF7
Certificate serial: 53D49D589D0F29F720161AB335796A612F2D6B77
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C62A541C7323F6CD238F549B1F8736ED958DEFF7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/C62A541C7323F6CD238F549B1F8736ED958DEFF7.mft
Manifest number: 04D6
Signing time: Thu 18 Dec 2025 17:31:52 +0000
Manifest this update: Thu 18 Dec 2025 17:26:52 +0000
Manifest next update: Mon 22 Dec 2025 04:44:52 +0000
Files and hashes: 1: 3130332e3232372e3134322e302f32342d3234203d3e20313331373433.roa (hash: GBrLCHtlb2Jafhwmf0ULsw2VIcKkSNSTUpaf2LZdkT0=)
2: 3130332e3232372e3134312e302f32342d3234203d3e20313331373433.roa (hash: mHuAtsMxpsqqYgVgU/J4GaS+obKCkf5RQ02z88MxYFk=)
3: 3130332e3232372e3134322e302f32332d3233203d3e20313331373433.roa (hash: OKNkVEc7P0U9abUfRQ+kpCtkFiEHCA5wN5OYP+3DpYM=)
4: 3130332e3232372e3134332e302f32342d3234203d3e20313331373433.roa (hash: KHtiEx3W38SvszbKHvX80D8vQUAYBT6FDdynUOoUkpY=)
5: 3130332e32312e3232392e302f32342d3234203d3e20313331373433.roa (hash: Yue0OeY9zNd13c9ik6Jsx2eyurp8CzVN+CzOusZXP3E=)
6: C62A541C7323F6CD238F549B1F8736ED958DEFF7.crl (hash: 64EFkNcRF4SR2hpbBhG5GtOs37CHx2BQ9+uDFuF5tjM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/C62A541C7323F6CD238F549B1F8736ED958DEFF7.crl
rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/C62A541C7323F6CD238F549B1F8736ED958DEFF7.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C62A541C7323F6CD238F549B1F8736ED958DEFF7.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Dec 2025 03:43:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:d4:9d:58:9d:0f:29:f7:20:16:1a:b3:35:79:6a:61:2f:2d:6b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C62A541C7323F6CD238F549B1F8736ED958DEFF7
Validity
Not Before: Dec 18 17:26:52 2025 GMT
Not After : Dec 22 04:44:52 2025 GMT
Subject: CN=1BFD2FDAEBFDCA219C5A14378700D8447DA07775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:de:9a:a7:3c:ee:02:9f:a5:59:01:e9:e4:17:
39:f0:4e:d5:eb:df:62:6e:b7:fc:e2:f4:ab:c6:e4:
98:41:f6:ae:4a:5c:ba:bc:18:70:c1:5e:6b:66:a8:
88:c2:63:fe:d7:94:85:0f:30:53:1b:d8:60:8d:f4:
a0:1a:0a:43:ae:95:56:0a:00:b1:15:4e:13:5d:22:
60:08:ec:27:bf:54:98:68:90:07:2b:e4:13:ea:d9:
d5:be:d4:3e:fb:90:5a:13:64:d2:7f:44:bc:6f:04:
28:b7:be:1b:c9:eb:9f:3a:40:30:f3:db:84:bc:0f:
fa:33:99:aa:90:bb:dc:fa:8d:e3:35:fd:4f:fd:9e:
73:d5:43:d1:bc:d5:7c:e8:7e:5d:42:52:9f:53:7a:
f3:59:cf:da:2c:0f:22:a5:e5:68:2c:d1:da:8c:c2:
25:e0:d7:c1:69:85:6b:89:0e:35:80:54:01:0d:ed:
c6:dd:01:90:75:21:89:05:35:15:67:06:d3:6f:e5:
c7:ec:d2:5b:08:87:15:c7:86:87:31:34:a2:6e:c6:
95:82:7b:6c:3c:e2:bb:e5:99:c8:43:34:9d:30:31:
16:90:ed:81:b8:a1:fd:19:16:90:c5:6c:b9:42:43:
a3:71:6c:0c:2b:c0:51:95:58:07:a7:02:4a:6d:cc:
fd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:FD:2F:DA:EB:FD:CA:21:9C:5A:14:37:87:00:D8:44:7D:A0:77:75
X509v3 Authority Key Identifier:
keyid:C6:2A:54:1C:73:23:F6:CD:23:8F:54:9B:1F:87:36:ED:95:8D:EF:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/C62A541C7323F6CD238F549B1F8736ED958DEFF7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C62A541C7323F6CD238F549B1F8736ED958DEFF7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/C62A541C7323F6CD238F549B1F8736ED958DEFF7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:d3:4e:2e:2c:74:ac:76:81:e5:5b:4e:21:c5:b5:52:30:63:
ec:fc:a1:99:69:f0:ff:1a:f2:e6:90:7f:0b:48:8e:3c:a5:18:
4c:3b:24:00:bb:ac:8d:b4:2c:d6:65:9a:cc:f2:d3:57:8a:36:
ee:f5:00:c7:c6:72:aa:87:61:b2:03:ba:6d:c7:b1:31:f7:b6:
89:f6:0c:b9:98:2c:9f:f0:c3:4b:2a:e8:b2:d6:43:c9:1f:9d:
8c:88:9e:d2:fb:ec:28:03:1a:fd:20:7d:2e:4e:fa:bd:c1:be:
61:58:5b:75:f3:fd:43:86:a1:ea:51:57:00:cd:b6:00:12:3b:
85:3c:56:86:93:43:45:e1:25:ec:6c:fc:9a:c4:69:10:d6:a8:
d0:21:36:32:2f:d3:08:ef:4a:ea:5e:58:2c:83:3a:c4:76:8f:
ef:3f:fa:b3:b8:b3:bd:ab:2c:92:dc:6f:1e:7f:91:ca:cb:7b:
5a:e2:fd:23:a5:be:7d:dc:f9:32:a2:7c:7d:71:0d:f1:b9:29:
49:8f:a9:5c:c2:4d:a5:6d:28:95:53:1f:6d:7f:ce:cf:2e:d5:
ba:3e:9c:eb:97:3a:b7:f3:8f:9a:df:a4:1b:c1:82:52:9a:8e:
1b:64:2f:f1:0e:18:bf:be:85:f8:18:59:a1:ab:36:2b:cd:58:
f7:57:f5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 15:08:21 2025 by rpki-client