This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft
File: B197F427572524588487CFDB163A9E512FAE4DF2.mft (raw, json)
Hash identifier: upe9hJYD0qSuYDPQpCpz7/B/PV/GDVGivUvZZiHb+Ms=
Subject key identifier: 73:9F:CA:F7:DF:FF:AC:A6:48:6E:2D:04:7B:FC:0F:F8:7D:6D:3C:F9
Authority key identifier: B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2
Certificate issuer: /CN=B197F427572524588487CFDB163A9E512FAE4DF2
Certificate serial: 7F9C91C8E2B11B3780429E6EA1069C7AF77E5B2E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft
Manifest number: 024F
Signing time: Sat 06 Dec 2025 22:41:27 +0000
Manifest this update: Sat 06 Dec 2025 22:36:27 +0000
Manifest next update: Wed 10 Dec 2025 07:27:27 +0000
Files and hashes: 1: B197F427572524588487CFDB163A9E512FAE4DF2.crl (hash: 4hxSlbaCqhBxCNjgeIvxSY+aI6DAFgumUhh+8ixwqW0=)
2: 323430363a346563303a3a2f33322d3332203d3e20313430343735.roa (hash: sqH8mgq0fr+XiznMLTzogmtodA1+q341U0FlkHOzY5k=)
3: 3130332e3135332e3234372e302f32342d3234203d3e20313430343735.roa (hash: IlIKis9hrjcqU4gajZ2m+r4qTrp6BInf4S11M61jB+A=)
4: 3130332e3135332e3234362e302f32342d3234203d3e20313430343735.roa (hash: BU1Q0ryHM0MlXG1Q7vZvhi4oAbOwc3sWBEiOeckA5Ms=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl
rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:9c:91:c8:e2:b1:1b:37:80:42:9e:6e:a1:06:9c:7a:f7:7e:5b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B197F427572524588487CFDB163A9E512FAE4DF2
Validity
Not Before: Dec 6 22:36:27 2025 GMT
Not After : Dec 10 07:27:27 2025 GMT
Subject: CN=739FCAF7DFFFACA6486E2D047BFC0FF87D6D3CF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7d:2b:05:8f:2d:bb:73:89:09:f9:85:a1:62:
e1:58:9d:14:20:dc:53:6d:de:18:00:75:28:d9:d6:
1f:5e:10:ac:17:03:9d:2b:93:41:c4:cf:af:b1:b2:
b9:17:7f:16:d4:e0:38:f0:4a:5a:d4:a3:f5:8f:4a:
77:77:17:14:06:62:d0:a7:25:c1:75:90:5b:35:fd:
28:38:a4:87:f1:b9:43:f0:3d:f4:96:6d:79:7b:7d:
f3:36:d0:d1:d0:f7:a5:5a:90:21:c4:3b:d5:8e:83:
d4:75:15:c8:72:75:ff:4c:f6:a9:6d:cb:ab:dc:b4:
75:05:50:b2:32:3f:31:e3:b8:49:a3:fe:f0:e0:77:
29:08:14:f3:d5:ee:07:ef:76:25:cf:9e:d4:89:d2:
02:d7:d6:2a:c3:cd:19:bc:89:54:ca:1f:d3:e8:31:
d2:c4:d4:c6:b0:47:26:f9:9a:92:96:83:ee:0d:a9:
86:c1:65:c0:af:73:39:5d:67:63:d6:c7:bf:ae:d2:
66:19:40:d0:b7:90:e0:8a:02:27:4b:26:17:12:0b:
e0:51:98:40:64:e0:02:c7:e4:c9:aa:72:45:ae:19:
f1:be:e9:3f:8f:6c:47:a1:5b:f4:88:c0:f4:66:04:
7c:e8:72:a0:89:ef:4d:95:97:2e:95:b7:7a:22:2b:
29:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:9F:CA:F7:DF:FF:AC:A6:48:6E:2D:04:7B:FC:0F:F8:7D:6D:3C:F9
X509v3 Authority Key Identifier:
keyid:B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:15:42:69:e8:57:12:24:c8:f4:38:d3:9e:5c:c3:41:b7:00:
eb:71:58:66:2a:de:a0:ed:e3:e6:29:8f:96:40:c1:39:9d:ec:
9a:e2:9f:80:68:36:6d:e3:1c:53:77:cd:ca:f8:70:a4:98:a9:
48:78:14:0f:a7:11:8a:00:e8:41:18:7d:b8:1b:84:20:4b:e7:
0a:af:72:2c:f6:97:35:89:0c:4f:16:68:cb:2b:99:21:35:70:
32:29:64:ac:f7:9a:50:df:35:ac:0e:8b:26:fd:6a:fd:f5:fd:
54:b5:8e:75:84:1c:c9:49:52:b8:5e:1c:c9:26:58:6d:4f:c8:
b7:7a:62:cf:72:fb:c4:6d:af:1f:49:c7:34:ac:16:77:ca:52:
47:91:14:fa:d6:b7:2e:79:c7:9f:2e:70:64:cd:ae:04:54:6d:
d3:a9:f9:6c:17:dc:6b:38:7f:9d:97:d7:bc:ed:a0:23:30:8d:
02:39:25:f0:6d:72:a8:82:a7:89:1a:48:2e:6e:59:3d:38:dc:
62:8f:f5:ff:d5:4f:4b:9f:c9:d2:49:1d:63:e6:8c:64:42:e6:
aa:19:6d:d9:79:e2:ef:7d:5d:52:48:2c:25:04:fe:63:2d:dd:
15:53:ca:c5:52:fe:80:d9:0f:ce:26:0a:10:fd:1b:cf:d9:13:
12:ec:85:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:59:32 2025 by rpki-client