This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft
File: 094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft (raw, json)
Hash identifier: /KTMG84qYY3dPjmKzPTIgK5TDVwA7G01Xvb09NE8gVM=
Subject key identifier: 53:3B:9E:E8:08:06:DA:8C:C2:73:DE:47:4F:A9:65:43:D8:3D:0D:D3
Authority key identifier: 09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C
Certificate issuer: /CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C
Certificate serial: 3244D24B3380CE8270B14E9E7F19CD70C4E36474
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft
Manifest number: 01E0
Signing time: Fri 05 Dec 2025 08:01:34 +0000
Manifest this update: Fri 05 Dec 2025 07:56:34 +0000
Manifest next update: Mon 08 Dec 2025 12:28:34 +0000
Files and hashes: 1: 3130332e3131322e3134342e302f32342d3234203d3e20323135373237.roa (hash: gknzJmwMhuMcq+HlLpGDVUWG9agAsyWXJWE8G4S01cU=)
2: 3130332e3131322e3134342e302f32332d3233203d3e20313337333334.roa (hash: FvX/FfDWw99zVOmt+3J83lO751Y4wEfpuqgpwws/quk=)
3: 3130332e3131322e3134352e302f32342d3234203d3e20313337333334.roa (hash: kQaBHWFZ09LwTrNpnEcdDDYi9aXzLqVrrUv/bLTySVg=)
4: 3130332e3131322e3134342e302f32332d3233203d3e20323135373237.roa (hash: 8zDZZBY6bA2jEqKH0/3A7Q4sZMdLlbxldDEJxB2ILt4=)
5: 3130332e3131322e3134352e302f32342d3234203d3e20323135373237.roa (hash: 47jeZDZVGJz340J8dcsKd8JOrcaXh6l0x1iSQEe4P38=)
6: 094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl (hash: EQKSBozKljNOjlV56js5SWZYmvXWpFycVMxlrNVQJ5o=)
7: 3130332e3131322e3134342e302f32342d3234203d3e20313337333334.roa (hash: l8Og1lwkQAH4gQfk3H3firj2CW23m1CTXYf/zpu+3Ek=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl
rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 12:28:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:44:d2:4b:33:80:ce:82:70:b1:4e:9e:7f:19:cd:70:c4:e3:64:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C
Validity
Not Before: Dec 5 07:56:34 2025 GMT
Not After : Dec 8 12:28:34 2025 GMT
Subject: CN=533B9EE80806DA8CC273DE474FA96543D83D0DD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:70:82:ef:0d:09:15:c1:92:d8:5b:5f:b4:d1:
16:a4:de:38:dc:32:e2:7c:24:66:79:ab:5e:41:45:
d3:7c:72:23:23:39:60:3b:15:af:62:d9:aa:3f:44:
35:00:34:76:0b:53:d7:c3:71:47:20:d0:1b:8c:43:
4d:27:a8:e9:39:1e:85:9b:88:da:8b:a3:e1:59:28:
c0:ca:e7:c7:26:cd:6b:e7:de:d1:8c:3e:ff:64:43:
67:57:60:32:a4:89:93:96:78:65:e3:69:ca:32:ef:
1e:16:fb:62:4f:98:3d:01:34:65:c3:70:ef:01:1b:
6f:ba:7d:76:d2:a3:01:be:fc:98:7d:70:f0:3a:7c:
9d:7d:27:7d:20:bf:5a:e9:98:a0:7c:21:a9:89:83:
d0:1b:b8:55:b9:5c:e0:3f:a0:77:d6:fb:8c:74:df:
cb:f1:03:30:1e:9e:de:17:5a:a1:0d:d7:1c:ca:86:
82:90:5e:3c:ac:b3:99:9d:e4:42:a8:66:d4:27:88:
38:d7:e5:a1:c4:ea:bb:e5:48:42:1c:51:e7:8a:f3:
f7:4e:2a:0a:2b:ed:f0:92:31:9b:d8:db:d9:62:14:
fa:b9:8d:fc:57:1f:b6:f0:9f:8d:47:fe:c6:a8:18:
b5:e6:6a:0a:b3:c8:1d:00:c5:71:c2:ad:d1:1e:bc:
70:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:3B:9E:E8:08:06:DA:8C:C2:73:DE:47:4F:A9:65:43:D8:3D:0D:D3
X509v3 Authority Key Identifier:
keyid:09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:55:5c:9e:cc:d8:75:ad:5b:6c:a9:8e:f5:e5:73:c7:50:fe:
aa:19:a3:76:2a:43:6f:fe:0c:af:90:dd:ce:d0:25:02:5d:82:
bf:c1:75:9e:e9:76:f4:cd:97:32:6e:fa:37:9e:08:9e:75:fd:
db:72:fc:35:d4:72:94:85:80:b2:df:65:5f:78:c7:e6:55:0e:
7b:58:39:c5:fc:e2:92:b2:20:dd:26:3d:5c:57:1a:fc:5c:ad:
ff:8e:c5:7b:2b:d3:19:e0:66:7b:e0:5a:a8:54:06:30:61:e6:
4b:43:e5:e2:94:8f:05:9d:1c:fc:fa:ee:d7:fd:2e:98:33:25:
8d:d4:87:f9:db:e2:81:9b:11:23:98:cb:b7:7f:2a:6a:7c:36:
7e:6b:ac:fc:66:29:52:38:86:37:b8:15:a0:39:0c:73:3e:c9:
41:e9:30:4c:dc:ef:10:33:e8:35:94:75:f3:14:70:a9:ee:4b:
a2:c0:93:8d:f5:bd:6d:d4:53:47:e4:e3:ce:d5:4f:5e:6d:d9:
79:78:1b:5f:f8:14:eb:73:4d:2c:31:aa:95:54:73:dc:0b:08:
21:33:ee:d9:26:0a:5e:76:5c:5c:b1:08:20:f7:61:1d:56:1c:
06:8c:2b:ec:f2:28:51:e1:73:39:6b:2c:2b:4c:c1:e5:23:04:
63:b5:a0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:16:13 2025 by rpki-client