This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft
File: 4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft (raw, json)
Hash identifier: 5hK0j4FSIluct2vnhbYpGpnM+4q+4Ndy/IMSJSd1jgc=
Subject key identifier: 62:90:42:D2:5F:35:91:F3:C4:22:63:12:44:A6:FA:8B:74:52:DE:B6
Authority key identifier: 4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87
Certificate issuer: /CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787
Certificate serial: 1F7FAA47AD559F43237A03A7BD44E4E3694771A9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft
Manifest number: 053D
Signing time: Thu 04 Dec 2025 14:31:00 +0000
Manifest this update: Thu 04 Dec 2025 14:26:00 +0000
Manifest next update: Mon 08 Dec 2025 00:25:00 +0000
Files and hashes: 1: 3232332e32352e3130342e302f32342d3234203d3e20313530323238.roa (hash: Lkl4hSR7NGSEzKzZzmu1qkwANNNPQYa46Fii80W7KSg=)
2: 3232332e32352e3131312e302f32342d3234203d3e20313431363037.roa (hash: ZqT27QjOP9C+x+HxEBPLWbwm+mlgqdclma4hL/DLOAM=)
3: 3232332e32352e3130362e302f32342d3234203d3e20313336383733.roa (hash: S8lyObQBOuPDRueBj8YjzK0Yqke0dcnMl7Vcc48vuVs=)
4: 3232332e32352e39362e302f32312d3234203d3e2039333431.roa (hash: Qjv/mGfQRB5AB46dWcHhxxNcs3aS1PJFtKLeGoBkxi0=)
5: 3232332e32352e3130352e302f32342d3234203d3e2034383231.roa (hash: 8gu4g1bdcjin/i0TEIycNgxzwZksIdfr4ERNzQVV1jI=)
6: 323430323a613530303a3a2f33322d3332203d3e2034383231.roa (hash: moNwAWlPkj0rtokbSnZwVDheKPDbut9HTHNYooRQM7Q=)
7: 4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl (hash: jBErhtYy2xJMlCjEY+sFm/AAM9AkA26R9hCuXeRrilU=)
8: 3232332e32352e3130372e302f32342d3234203d3e20313439373138.roa (hash: DrBIeEQt6yULPW0r6792EagtEDf0ZZCsQyk/153rumY=)
9: 3232332e32352e3130382e302f32342d3234203d3e2034383231.roa (hash: kXwkhbJ+oGBQpIPdrmdbXU4UMfG2qJFbyPtaW45RBFo=)
10: 3232332e32352e3130392e302f32342d3234203d3e20313439373138.roa (hash: d3eM98YfiQHd35IoK+KK/VXjFcXTY4k6PTjZu1TQR90=)
11: 3232332e32352e3131302e302f32342d3234203d3e20313336383733.roa (hash: d7TlxPMnZWo9NiIWBhiGrIW1xBkbQUYDXZcwgsom8Dk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl
rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 00:25:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:7f:aa:47:ad:55:9f:43:23:7a:03:a7:bd:44:e4:e3:69:47:71:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787
Validity
Not Before: Dec 4 14:26:00 2025 GMT
Not After : Dec 8 00:25:00 2025 GMT
Subject: CN=629042D25F3591F3C422631244A6FA8B7452DEB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a3:9e:61:90:09:93:3f:36:1b:74:ba:32:47:
b5:7a:9f:48:a3:1b:e5:1b:1c:d6:e0:29:0c:ee:c0:
fd:c3:95:7b:83:72:ce:7b:14:c1:95:38:d6:7e:6e:
d2:71:8c:c2:c1:a3:28:a1:4b:0d:6e:fc:e4:bc:58:
66:25:fe:c1:bd:1b:4f:bb:37:01:ba:53:61:db:08:
71:21:c2:90:cc:bc:11:33:32:7b:35:da:94:43:ad:
08:35:2b:16:c7:d8:dc:b0:8d:ae:46:63:e9:b9:0c:
ab:b3:85:83:6a:50:25:44:c6:1d:41:9f:19:a5:da:
58:1f:77:70:81:23:a2:da:8b:fa:14:d1:84:6b:e8:
60:38:4b:71:45:3a:e2:79:b9:75:bd:c4:cb:30:1e:
86:b9:3b:ee:92:c7:e7:1e:bc:31:e1:35:95:1c:52:
b1:c1:89:3d:af:eb:b7:71:e9:5f:84:ed:3c:f0:71:
d4:c3:d3:de:83:c0:48:4c:f7:f0:c2:f2:e6:dc:f5:
ba:13:8a:69:a8:83:6b:75:16:ac:8f:8b:f7:21:3b:
24:41:84:88:3f:53:28:c3:82:d7:bd:b6:58:0b:cc:
ae:7b:c7:1d:f2:2e:bd:e9:b2:5f:0a:07:81:4f:0b:
5c:c9:b3:c7:ed:bb:5b:3d:ab:97:1f:7f:0a:61:63:
b6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:90:42:D2:5F:35:91:F3:C4:22:63:12:44:A6:FA:8B:74:52:DE:B6
X509v3 Authority Key Identifier:
keyid:4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a7:7e:20:80:a6:a1:53:f9:49:de:3a:b5:61:35:69:87:00:
c2:a7:28:78:22:62:d6:0a:91:00:27:a6:a8:d0:4f:38:a7:00:
e7:66:94:69:26:a9:22:dc:9a:ad:37:b5:bc:f7:0f:bc:f1:e0:
94:a2:b7:dd:64:4a:e3:f1:48:8d:91:96:ae:1b:c1:86:50:fe:
98:4f:d6:16:11:f7:ad:6b:a1:98:0a:21:3e:b8:3b:52:cb:85:
67:23:fb:e2:ac:ce:1b:48:c6:2c:58:cb:9b:53:1d:13:47:cf:
89:7c:f7:43:f5:a4:91:2a:8b:f6:46:f5:31:23:2b:87:a7:84:
fb:1b:27:30:f9:7e:34:5d:5c:b8:4c:51:f1:f7:50:92:c7:d1:
99:57:94:d0:12:ce:02:82:d5:4c:1c:fd:15:ee:d9:38:d7:f7:
9f:3d:92:40:c7:61:62:16:59:1d:17:4f:95:6e:b2:74:dd:0b:
a8:b1:44:fc:f4:f3:90:e2:3c:94:43:c9:48:a9:e3:ee:3e:cb:
33:60:13:b9:03:2d:24:03:8c:07:f0:84:96:07:a2:e1:31:50:
25:27:34:3d:92:91:e6:bc:04:4a:d1:be:dd:3f:9c:10:40:93:
0b:1a:b7:a8:cb:4c:21:3b:26:76:27:c2:76:5d:70:1b:c3:91:
99:cb:5d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:14:19 2025 by rpki-client