This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.mft
File: C7D4D30314160FDACB9582CF972E90EC10AE206F.mft (raw, json)
Hash identifier: d7ovOmKOLCnXtdL9cPV0jQQfCnZxospllRPRMPQk16c=
Subject key identifier: 13:91:64:AA:1F:68:C9:96:0F:79:C7:C7:E8:F6:B3:6C:9E:CA:7B:F5
Authority key identifier: C7:D4:D3:03:14:16:0F:DA:CB:95:82:CF:97:2E:90:EC:10:AE:20:6F
Certificate issuer: /CN=C7D4D30314160FDACB9582CF972E90EC10AE206F
Certificate serial: 618F628AD9686B71E77176FF7AC091BF6AC699FF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7D4D30314160FDACB9582CF972E90EC10AE206F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.mft
Manifest number: 0532
Signing time: Wed 17 Dec 2025 19:31:38 +0000
Manifest this update: Wed 17 Dec 2025 19:26:37 +0000
Manifest next update: Sat 20 Dec 2025 20:05:37 +0000
Files and hashes: 1: C7D4D30314160FDACB9582CF972E90EC10AE206F.crl (hash: dSH4796GT1MlzcX2TZ8kW0XWTBGinCxqA+qTbEkVBmU=)
2: 3130332e35302e3231382e302f32342d3234203d3e20313333383339.roa (hash: xsM8R50wRfdlN5JweHjZIfTpmduLeILF/fWliK+i37M=)
3: 323030313a6466303a333330303a3a2f34382d3438203d3e20313333383339.roa (hash: 4N6LRCptGvt5p5Z3fi0q5sQmHj3OTG0hHztRBZdu+t8=)
4: 3130332e3134342e32322e302f32342d3234203d3e20313333383339.roa (hash: llGSDUYqSL3OD7TtVsp6ArCR8mqRzLPhfJs1tW9L5wg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.crl
rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7D4D30314160FDACB9582CF972E90EC10AE206F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Dec 2025 20:05:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:8f:62:8a:d9:68:6b:71:e7:71:76:ff:7a:c0:91:bf:6a:c6:99:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C7D4D30314160FDACB9582CF972E90EC10AE206F
Validity
Not Before: Dec 17 19:26:37 2025 GMT
Not After : Dec 20 20:05:37 2025 GMT
Subject: CN=139164AA1F68C9960F79C7C7E8F6B36C9ECA7BF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d5:65:7d:a5:9e:3f:6e:a9:38:9e:83:86:2f:
c2:d5:29:f7:f8:ea:0f:db:3d:2e:92:5f:04:de:ed:
57:71:a3:60:70:5d:29:35:ba:21:51:ba:c4:97:5a:
af:0f:cb:5c:45:73:7d:70:60:d7:b2:a3:37:bb:c1:
be:03:ac:39:f1:0a:3b:33:53:9e:08:03:df:83:75:
78:50:dc:f7:62:c1:f4:7e:3c:45:f5:3b:89:61:6b:
89:3e:ed:ff:07:a4:26:99:26:25:c8:4f:59:7d:dc:
c0:eb:0f:b2:75:e6:b9:44:1b:54:ef:c5:48:2d:f1:
90:10:87:39:96:8a:ef:7d:9c:bc:cc:0f:e2:b3:f2:
7a:17:e9:98:99:f1:05:76:ad:d7:e7:85:5e:be:84:
da:42:73:89:15:6a:17:25:83:59:7d:80:ba:c2:23:
5f:a8:3f:7b:d7:0a:33:f1:f9:bb:f6:69:08:30:e2:
c8:30:3b:7b:02:48:40:06:ac:1f:25:d9:47:b9:da:
6f:a5:59:73:14:01:5c:a3:51:a0:7b:a0:c9:13:e5:
14:f6:43:2e:ef:ce:b6:d0:1e:00:ea:67:63:db:23:
89:2f:e9:25:0c:fa:f6:28:03:11:66:13:d3:31:97:
49:c5:f4:96:ce:22:51:b3:d6:f1:98:1a:5a:f6:ba:
ab:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:91:64:AA:1F:68:C9:96:0F:79:C7:C7:E8:F6:B3:6C:9E:CA:7B:F5
X509v3 Authority Key Identifier:
keyid:C7:D4:D3:03:14:16:0F:DA:CB:95:82:CF:97:2E:90:EC:10:AE:20:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7D4D30314160FDACB9582CF972E90EC10AE206F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:f2:ee:43:6f:85:01:fc:be:c1:b0:40:ad:29:16:17:bb:9c:
18:6d:d2:12:2d:19:f7:db:a5:49:cd:ac:9d:36:94:e5:4c:ea:
a8:2a:2b:ed:0c:9a:dc:0d:11:b1:17:86:97:6c:e6:2f:89:88:
20:67:bf:fe:72:06:df:97:21:6c:b2:f7:bd:42:9a:ae:6a:23:
be:4f:f0:2f:cb:09:82:a0:47:b0:f4:39:7f:f8:6b:bd:39:cb:
d7:a5:a7:a2:a3:c0:a2:51:f0:3d:b8:50:23:45:85:d5:41:4e:
94:0e:ba:cd:98:a6:29:f0:3f:3c:da:c1:e7:a1:50:4f:12:90:
84:72:ab:91:fc:cb:20:3f:b9:97:c0:b2:72:ab:ab:ef:55:a5:
a4:7b:46:7b:70:fe:a5:38:64:f0:28:0a:a8:00:6b:d7:fd:e6:
83:94:af:95:26:8c:28:d3:6f:8e:ea:68:b8:ea:7f:a1:d7:49:
6a:1d:fb:7a:a5:ac:6a:0e:9a:62:fe:30:39:65:d7:d2:d5:f8:
6b:4f:70:bc:36:fc:c0:69:30:e1:d0:98:20:00:c5:2a:64:ce:
55:a0:70:6a:71:88:59:39:16:32:2b:89:2f:f9:b4:18:17:0d:
2c:be:ba:2c:09:75:67:80:3f:3d:66:bc:71:7d:fc:4a:52:59:
8d:e1:9a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 05:47:32 2025 by rpki-client