This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft
File: 1472DDF3B8546A8B201733914AFB7036FC6742F3.mft (raw, json)
Hash identifier: F28aorj3/e2G9VJvb52/uqdQXFx9w116ujRUNws6Vxk=
Subject key identifier: B4:CA:DD:ED:E8:17:9B:E9:44:A7:D4:0C:73:EC:BC:FE:47:91:EB:90
Authority key identifier: 14:72:DD:F3:B8:54:6A:8B:20:17:33:91:4A:FB:70:36:FC:67:42:F3
Certificate issuer: /CN=1472DDF3B8546A8B201733914AFB7036FC6742F3
Certificate serial: 01BFCF1DA3782F3CC23469EADCE7BE34CBB97163
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft
Manifest number: 039E
Signing time: Fri 05 Dec 2025 21:11:49 +0000
Manifest this update: Fri 05 Dec 2025 21:06:49 +0000
Manifest next update: Tue 09 Dec 2025 01:59:49 +0000
Files and hashes: 1: 1472DDF3B8546A8B201733914AFB7036FC6742F3.crl (hash: Y/k/LGDjTaVvpW5Eu1Uce4mYEkaoJKLQEs0sxjV/bns=)
2: 3130332e3137302e3139362e302f32332d3234203d3e203137393935.roa (hash: Kb0M/Ho3VT/nqDiJsvCx89Y+HDOUAdoV9jho+WllLB8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.crl
rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 01:59:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:bf:cf:1d:a3:78:2f:3c:c2:34:69:ea:dc:e7:be:34:cb:b9:71:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1472DDF3B8546A8B201733914AFB7036FC6742F3
Validity
Not Before: Dec 5 21:06:49 2025 GMT
Not After : Dec 9 01:59:49 2025 GMT
Subject: CN=B4CADDEDE8179BE944A7D40C73ECBCFE4791EB90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3e:9b:5b:0a:1d:b0:9a:5f:3f:9e:b7:93:dd:
32:9f:cb:5d:da:d3:11:cd:71:e9:84:d2:3f:cf:f3:
1b:ef:fc:0b:c7:38:81:34:30:f8:ec:8a:23:c3:79:
d0:24:68:ce:ad:ac:c4:97:3c:eb:5a:22:2a:22:6b:
e0:39:5c:13:a4:5a:19:36:65:94:b8:6a:c7:19:84:
45:b4:30:75:46:7a:19:ba:da:52:d2:cf:3c:8d:55:
43:c7:6d:29:ff:75:fd:1e:a5:e4:b9:26:4a:f3:55:
e9:50:d9:ad:67:f0:fc:54:af:50:f1:1b:76:70:46:
6b:17:70:71:40:31:f0:48:a6:3d:5a:27:54:84:6f:
1c:33:87:a5:ed:00:01:7b:aa:43:34:65:a1:5c:7c:
9e:eb:38:2c:3a:cd:44:12:0d:36:d1:58:34:d0:91:
fc:23:35:db:86:de:50:2e:e3:f5:cd:08:43:cc:27:
86:2e:51:7f:c2:df:60:2e:ae:40:44:5b:60:6e:5b:
6a:c4:ee:d2:1a:92:88:3b:b9:d5:b9:1b:2e:c8:64:
26:71:5c:5e:13:41:99:f8:7e:27:2d:e6:fd:45:5b:
f7:e6:d9:10:16:19:b5:a6:a6:72:31:e6:86:86:c8:
e7:62:f7:b9:7a:d2:3f:e3:86:b2:5e:80:58:f7:2d:
1f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:CA:DD:ED:E8:17:9B:E9:44:A7:D4:0C:73:EC:BC:FE:47:91:EB:90
X509v3 Authority Key Identifier:
keyid:14:72:DD:F3:B8:54:6A:8B:20:17:33:91:4A:FB:70:36:FC:67:42:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:da:d8:9d:84:17:5d:3d:38:85:cf:34:ed:57:ac:d8:08:77:
40:bf:21:a0:a8:4c:d3:5d:46:26:c5:4c:66:a4:8d:05:88:fd:
ee:95:1f:1d:07:4a:cc:54:2f:40:99:cf:74:d4:17:62:d2:8c:
49:5f:25:12:41:51:b5:7a:58:54:dd:9a:39:01:01:72:7d:28:
62:4b:ac:34:54:20:4c:65:c5:78:44:50:91:6f:89:7a:81:3d:
d7:81:f7:e4:0a:33:55:76:bc:ef:7b:6e:c4:75:62:36:e6:c9:
db:8d:25:25:c7:ea:56:e3:0a:c3:19:bf:ae:af:fd:8f:62:73:
51:b8:ae:37:bb:f4:51:a8:35:59:51:21:d4:6d:2e:08:b5:1a:
11:bb:a2:07:ce:b1:6c:2f:08:d0:2f:96:4a:17:c1:f3:dd:8a:
06:8a:cb:cc:e9:d6:14:d7:31:0d:ed:11:48:e0:19:c1:e1:b7:
27:94:d6:6c:b5:2f:d9:60:01:70:83:db:7a:86:8a:78:64:54:
26:52:59:c0:0e:f9:71:20:65:fc:32:1f:be:01:ca:a0:a8:57:
0e:d5:53:12:aa:c0:67:e0:8d:72:fd:4a:e3:10:ae:6c:05:58:
c4:39:8d:ea:b8:1d:2a:20:5e:e4:19:a0:17:55:f4:63:d5:27:
7c:4c:53:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:51:15 2025 by rpki-client