This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.mft
File: 7CA2524C6D82550B5D21C13182BD9CC0214433F4.mft (raw, json)
Hash identifier: TvUgpJJhF5Z4F7X2gg7jcaXOPusQzm60Q9j+AuuF6vo=
Subject key identifier: E7:63:B7:DD:A5:A9:CA:C5:C3:4B:56:9E:AE:46:6F:B7:3A:15:D2:8D
Authority key identifier: 7C:A2:52:4C:6D:82:55:0B:5D:21:C1:31:82:BD:9C:C0:21:44:33:F4
Certificate issuer: /CN=7CA2524C6D82550B5D21C13182BD9CC0214433F4
Certificate serial: 141F1B0F4DC7ED6C5C707E50054E5E63E680A317
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA2524C6D82550B5D21C13182BD9CC0214433F4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.mft
Manifest number: 01D3
Signing time: Sat 06 Dec 2025 01:22:18 +0000
Manifest this update: Sat 06 Dec 2025 01:17:18 +0000
Manifest next update: Tue 09 Dec 2025 08:31:18 +0000
Files and hashes: 1: 3130332e36312e31362e302f32342d3234203d3e20313530353039.roa (hash: 0YLohf/ggkakqxRaRFVJUp8vfmU0YPLjnkvCoTzlI1g=)
2: 3130332e36312e31372e302f32342d3234203d3e20313530353039.roa (hash: bUHS7zCDhqnhQezsrNXcG47gU9JfG5NQcO4U+4/bwQc=)
3: 7CA2524C6D82550B5D21C13182BD9CC0214433F4.crl (hash: Qf9hLFP8b/3SyLiDAPvMnvwzViz9qXCBV5LyGQqGJuI=)
4: 3130332e36312e31362e302f32332d3233203d3e20313530353039.roa (hash: PphyhzafZc8USb+ULqaNnnRbeA397pdQzPJ0fXA6bSA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.crl
rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA2524C6D82550B5D21C13182BD9CC0214433F4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 08:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:1f:1b:0f:4d:c7:ed:6c:5c:70:7e:50:05:4e:5e:63:e6:80:a3:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CA2524C6D82550B5D21C13182BD9CC0214433F4
Validity
Not Before: Dec 6 01:17:18 2025 GMT
Not After : Dec 9 08:31:18 2025 GMT
Subject: CN=E763B7DDA5A9CAC5C34B569EAE466FB73A15D28D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1d:b9:7b:eb:4e:7c:38:51:e1:44:a5:bd:ee:
6c:c1:1f:45:aa:56:8c:11:a6:ad:cc:80:ca:7d:70:
22:33:6c:20:42:3f:2f:dd:4e:8e:5f:47:a8:2f:8a:
49:0e:3d:9f:17:f5:39:a1:08:88:71:f7:77:38:b9:
a5:cf:61:be:af:0f:3e:a1:89:33:59:b4:0d:b9:dc:
95:4b:6c:ca:24:de:79:0a:10:a0:be:14:bd:fe:bb:
0f:cc:e5:65:9b:0c:0b:14:e9:a9:7f:af:2c:a1:5e:
ad:3b:ae:9e:43:ae:00:10:d2:ef:fe:4f:9c:0c:20:
a1:e7:84:eb:9f:9b:6a:12:7c:4a:15:b0:1b:e5:3b:
a2:48:3c:67:48:f6:07:87:d1:7f:04:56:51:e8:f8:
04:c1:14:24:dd:0f:b5:c7:77:fe:e5:35:0b:65:4b:
63:a7:63:70:6b:47:76:de:9d:c1:05:b7:c9:c6:65:
80:3d:7e:c8:85:40:4c:06:16:d1:e8:75:56:a3:5b:
72:f3:40:19:30:ce:43:9d:4d:de:bf:58:99:69:9c:
5c:e2:cf:f0:31:05:a0:97:f8:b4:01:f2:91:cc:60:
05:c3:84:f6:a0:c6:7f:ef:be:9f:88:84:46:43:66:
e2:b2:7d:e3:03:34:eb:b2:78:e1:2a:73:ec:1a:67:
0f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:63:B7:DD:A5:A9:CA:C5:C3:4B:56:9E:AE:46:6F:B7:3A:15:D2:8D
X509v3 Authority Key Identifier:
keyid:7C:A2:52:4C:6D:82:55:0B:5D:21:C1:31:82:BD:9C:C0:21:44:33:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA2524C6D82550B5D21C13182BD9CC0214433F4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:48:b7:2e:9e:f5:d9:1b:a0:7a:73:ad:c1:5a:79:0b:ec:d1:
86:6e:35:68:e6:5c:93:4c:1a:d3:07:84:d4:e0:0b:cc:87:84:
e6:79:8e:dd:9d:54:66:9c:ad:ac:04:56:a4:6f:1d:fd:c4:96:
7c:cb:d3:40:53:21:54:65:55:21:eb:cd:f9:29:eb:aa:ef:10:
84:a8:91:ed:59:41:a8:4a:4f:54:03:ac:e2:7d:b0:ad:a8:24:
6d:3d:2b:09:74:30:85:2b:9a:2c:78:91:69:88:db:16:e4:af:
d4:25:48:09:97:c5:d9:98:9a:a0:b2:cd:37:ac:0d:9d:2f:03:
7a:70:03:d1:89:3b:79:97:f9:be:3c:d0:07:3b:23:6b:a1:11:
e7:7f:73:d8:06:f3:c4:4d:0c:d3:56:d3:e8:96:71:8b:9a:a5:
10:c5:23:ba:8c:1e:39:8a:98:bd:5e:72:03:79:3c:00:01:6b:
b1:7c:2e:2f:13:03:10:27:71:e6:77:4a:23:1d:ce:df:42:2a:
0b:4b:7b:d0:dd:73:8e:40:80:90:0f:62:32:33:ff:38:03:6f:
49:6a:b7:42:a0:1a:83:6c:71:07:a3:4f:c9:74:c7:fc:b4:2c:
6d:5d:33:4f:b8:0d:c3:bb:64:8f:f6:12:d6:d4:9e:bd:e4:d2:
f8:15:d6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:08:28 2025 by rpki-client