This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft
File: C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft (raw, json)
Hash identifier: awI9ah7K8tX24K4A5Xx4Sqf5edoNUiOqPWkZdOMnlbo=
Subject key identifier: 3C:C7:14:6F:99:F9:91:1E:A0:0E:34:5E:0E:DA:41:8D:4D:BF:6A:91
Authority key identifier: C7:84:C8:EE:6F:7C:E3:C8:47:FC:BD:1C:CD:F2:32:72:00:EF:5C:70
Certificate issuer: /CN=C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70
Certificate serial: 0123B3BA261875DD37C1CF3A00516C791A2C0038
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft
Manifest number: 01CB
Signing time: Sat 06 Dec 2025 04:21:03 +0000
Manifest this update: Sat 06 Dec 2025 04:16:03 +0000
Manifest next update: Tue 09 Dec 2025 11:51:03 +0000
Files and hashes: 1: 3130332e3137382e38332e302f32342d3234203d3e20313437313730.roa (hash: SPILoD0YuDgHkCG/UcROiBKV6NuzifUgiPor6w8kdtI=)
2: C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.crl (hash: S9UuPsKTIGvifIPxQy8ZlYWwWsHLXVY3Eub1xczcr6g=)
3: 3130332e3137342e31332e302f32342d3234203d3e20313437313730.roa (hash: EANS/BbBSV3D2lqyFzIlb0gYJ6M3G6ZH8tGtZE5xhF4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.crl
rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 11:51:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:23:b3:ba:26:18:75:dd:37:c1:cf:3a:00:51:6c:79:1a:2c:00:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70
Validity
Not Before: Dec 6 04:16:03 2025 GMT
Not After : Dec 9 11:51:03 2025 GMT
Subject: CN=3CC7146F99F9911EA00E345E0EDA418D4DBF6A91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:60:74:a5:2b:a9:69:59:48:5c:46:93:63:18:
35:77:67:c6:83:a6:5f:65:6b:53:0e:74:58:2f:85:
66:01:da:b8:97:6b:c7:3d:44:e8:0e:ee:31:45:47:
c8:31:90:33:09:39:20:ce:98:d9:29:99:8c:7b:1d:
7b:96:5e:0c:08:7e:24:05:1d:7f:07:d2:1d:6d:ba:
4d:fb:b2:a7:e8:6c:8c:96:1c:c6:a1:6f:66:9f:58:
0d:75:69:98:cd:3a:d1:c2:cf:c6:bc:b8:08:1f:ab:
5f:6a:93:e4:fe:b5:36:71:38:da:11:db:ec:69:a8:
e6:b4:2a:8f:4f:6f:3f:fc:46:a7:3b:66:54:5a:9f:
17:63:53:0d:6b:52:86:4d:e2:aa:47:b7:64:f2:e6:
1f:e4:78:94:6c:6f:d9:50:86:12:f6:b2:15:64:fc:
44:86:a3:b8:93:53:4f:ba:6f:02:9e:c0:81:00:01:
c7:3c:70:68:80:e4:5c:01:97:0c:7a:83:54:be:88:
1c:1d:24:16:eb:a3:48:18:66:be:e3:2d:82:2c:fa:
b7:89:4f:74:1c:18:67:ce:25:32:5a:81:cc:c3:f5:
3a:b2:7d:91:77:3c:a5:2b:58:4e:7f:e0:b4:52:45:
bc:0f:49:1b:eb:cf:27:ce:44:aa:a5:f2:47:98:ad:
ae:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C7:14:6F:99:F9:91:1E:A0:0E:34:5E:0E:DA:41:8D:4D:BF:6A:91
X509v3 Authority Key Identifier:
keyid:C7:84:C8:EE:6F:7C:E3:C8:47:FC:BD:1C:CD:F2:32:72:00:EF:5C:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:2f:b8:c9:dd:46:da:a1:21:3f:45:25:1e:6b:8c:36:d3:e6:
94:3c:9c:5f:1e:1a:9d:6e:ba:ad:ee:c8:7e:d1:11:ae:db:e9:
12:72:7b:ec:6a:6d:03:0f:a7:f1:f9:c9:01:9e:e0:32:98:38:
a7:23:53:f5:d1:ed:02:f7:ec:f0:d2:e2:94:48:a9:30:ee:db:
b0:61:b1:ec:01:3a:bc:85:b0:19:09:ce:a4:67:69:52:59:61:
55:55:1b:78:f7:12:f2:2f:af:88:f6:34:aa:fe:ea:f4:13:d2:
4c:f2:a3:8b:1b:4d:64:49:92:04:eb:ff:eb:a7:82:f7:8c:9f:
97:9a:47:61:18:13:88:62:b3:45:0a:5a:5d:9f:7c:69:bb:dc:
fd:17:06:96:df:19:47:4f:70:68:df:68:75:83:30:93:87:a6:
b1:53:c9:17:e9:d2:70:03:c0:00:43:8a:99:59:f3:d7:fc:a4:
e8:60:ca:e6:22:c5:b6:d8:94:28:22:42:80:72:34:11:5e:01:
27:d7:b1:8a:45:1a:c1:9d:d4:31:2e:d5:7c:dd:c7:24:fd:76:
ec:3f:be:07:42:19:39:e8:a5:9c:61:ab:cf:ea:36:83:57:54:
e2:45:fc:47:c9:6f:ba:01:ba:e5:f8:ff:25:75:24:dc:70:2e:
5a:a8:53:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:58:46 2025 by rpki-client