This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft
File: F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft (raw, json)
Hash identifier: LuDU+TVS7vR4hSJr7A3WTjpfKlO3NTfbYgkvVVS68Ds=
Subject key identifier: B9:D7:2D:2C:D9:D1:80:C3:6D:77:16:BF:68:B1:37:65:3F:71:64:68
Authority key identifier: F5:A5:DF:AF:D4:7F:54:DC:54:D5:66:83:E9:1A:5C:17:22:CB:A6:AD
Certificate issuer: /CN=F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD
Certificate serial: 6C09758F7FC102FD1F6FBB1EC89D825F18C2C877
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft
Manifest number: 0215
Signing time: Sat 06 Dec 2025 11:41:11 +0000
Manifest this update: Sat 06 Dec 2025 11:36:11 +0000
Manifest next update: Tue 09 Dec 2025 18:02:11 +0000
Files and hashes: 1: 3130332e3133392e3131322e302f32342d3234203d3e20313338383933.roa (hash: 0a6d0VadEC4mllKiwomZ9jBfURtS2Uj6BdXxHPbtGhc=)
2: F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.crl (hash: CGbjYm9xqrqbiEvTdM7JCW88OIu47abuvn+inw73B58=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.crl
rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:09:75:8f:7f:c1:02:fd:1f:6f:bb:1e:c8:9d:82:5f:18:c2:c8:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD
Validity
Not Before: Dec 6 11:36:11 2025 GMT
Not After : Dec 9 18:02:11 2025 GMT
Subject: CN=B9D72D2CD9D180C36D7716BF68B137653F716468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4e:8c:33:13:f6:81:6f:0e:2d:92:35:fa:15:
48:8e:70:54:a2:c8:c4:09:c3:d5:65:09:3c:bd:ed:
15:a7:a5:82:2f:8e:06:d7:26:7c:e0:fc:50:a6:da:
b5:84:3a:7c:18:db:c2:cf:3b:52:86:ec:45:23:10:
e0:28:6f:c6:2a:24:ec:24:04:8c:ef:4c:af:cf:ce:
46:39:ee:d0:52:cc:47:15:ee:ed:00:6b:25:06:63:
f4:0e:28:96:4e:95:ba:7b:2a:fa:e1:da:72:dd:6e:
07:2c:c8:0a:f0:aa:84:a5:04:0f:c8:4e:b8:07:8e:
81:5a:ca:7b:4a:de:82:79:d0:33:ce:2c:d1:1f:6b:
b5:e3:60:b2:f0:32:a7:94:8f:87:37:d6:24:b3:ec:
4b:18:fb:c6:99:f7:ba:30:dc:73:91:33:34:b3:9a:
7f:d6:a9:0f:e0:74:bf:ad:d3:68:40:02:57:47:ca:
d4:bd:3e:23:c5:ef:94:b7:b9:ac:33:15:eb:9c:eb:
6d:36:ca:36:dc:2c:af:8f:78:97:76:a1:bf:e7:de:
29:c0:3f:bd:ad:24:4a:f2:0e:2c:c5:48:bd:c7:30:
e4:13:e8:aa:5a:59:d4:96:91:07:91:ef:08:16:a2:
15:53:23:90:3a:35:8d:86:ac:6f:34:eb:36:f9:b9:
61:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D7:2D:2C:D9:D1:80:C3:6D:77:16:BF:68:B1:37:65:3F:71:64:68
X509v3 Authority Key Identifier:
keyid:F5:A5:DF:AF:D4:7F:54:DC:54:D5:66:83:E9:1A:5C:17:22:CB:A6:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:22:45:ed:72:07:6e:6f:cf:d7:78:78:f1:c1:56:c3:e4:1a:
6c:a9:72:c6:c3:fa:14:1a:c7:55:c7:24:94:45:41:b6:36:f0:
1f:c3:2d:9a:df:27:05:22:6f:2d:04:09:b7:18:9e:78:ba:c5:
36:ff:49:e5:3d:05:09:13:40:0a:8e:c9:2e:b2:7a:d4:80:1c:
4d:05:d7:b2:c3:60:dd:1f:b0:85:b7:66:e0:49:64:bb:fb:ed:
79:18:55:df:e7:91:f5:f8:cc:79:5c:53:f7:cb:36:c6:ea:76:
01:6b:44:99:d1:cb:29:ce:fe:cc:9a:a2:9f:4b:2a:e5:eb:c7:
7f:a5:14:d3:6a:3a:4f:20:d1:f0:d4:e8:cd:e1:27:b3:ce:32:
9f:37:7d:e7:49:1c:c8:b4:74:69:82:06:4c:49:62:ef:84:df:
51:4b:df:bd:3c:ab:5f:f9:05:7a:b7:0e:b1:59:c8:7d:1a:df:
e7:df:05:43:cd:63:81:1a:eb:d1:dc:c0:09:32:b3:d1:c1:70:
c3:9d:66:b1:3d:77:83:6c:a6:0d:3d:e1:c6:d3:cd:43:1b:16:
49:b2:97:b3:79:ad:c0:b6:11:45:b6:4c:94:f9:10:60:5c:99:
4e:32:5d:c5:e3:41:e9:55:eb:5a:d5:f1:5d:bd:eb:74:81:b6:
18:58:53:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:09:17 2025 by rpki-client