This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft File: 12345F115AC4B62A51F5274C54C81E86463BD0BA.mft (raw, json) Hash identifier: t6VKENG8kwUl8td7aHNHGxI4nCTAvPAw/6ijW6OE1wg= Subject key identifier: 16:FC:28:71:CA:B1:6B:35:76:C9:4B:E6:97:DA:6D:E4:60:73:CD:C0 Authority key identifier: 12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA Certificate issuer: /CN=A91862140000/serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Certificate serial: 2ECCD02BA92CB6A8233F2A2D27747450FA6E917B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft Manifest number: 0531 Signing time: Fri 05 Dec 2025 17:20:38 +0000 Manifest this update: Fri 05 Dec 2025 17:15:38 +0000 Manifest next update: Mon 08 Dec 2025 19:40:38 +0000 Files and hashes: 1: 55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer (hash: 5GheOB3UnfwRWeCo8/5o8Y/Ft2slsbsMBmf5vac32Sw=) 2: 38322e3135382e3132382e302f31392d3234203d3e2039333431.roa (hash: kXLN0HaZu/PhLPiFi30mit71JHQuO6u1X5gZIB305jg=) 3: 12345F115AC4B62A51F5274C54C81E86463BD0BA.crl (hash: Oktr50Dme9NBVTB114JiIe12mFTCsHMviDcRCLkWOwM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 19:40:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:cc:d0:2b:a9:2c:b6:a8:23:3f:2a:2d:27:74:74:50:fa:6e:91:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Validity Not Before: Dec 5 17:15:38 2025 GMT Not After : Dec 8 19:40:38 2025 GMT Subject: CN=16FC2871CAB16B3576C94BE697DA6DE46073CDC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2f:b4:83:63:10:06:d5:da:d2:86:35:48:62: c4:a2:c2:15:4f:6d:63:90:d3:b2:24:c4:fe:5e:cd: 82:18:85:25:13:11:3d:50:80:ba:a9:22:d0:f8:b7: 9b:ea:d8:e7:c8:92:b6:4c:82:71:00:5f:e8:72:18: 66:ea:98:2f:76:52:90:f7:68:57:43:39:15:58:4d: d5:1e:ef:75:f5:0f:a6:bd:d6:9a:9e:d3:0d:3a:10: ef:25:9c:15:f1:6d:3e:f8:8c:d0:91:1c:c8:02:04: b4:05:77:5d:40:c6:f0:bb:47:f8:46:84:f6:10:72: cd:68:d4:fb:34:02:80:34:dc:a5:16:03:21:b7:7c: 86:fa:e8:97:cd:c4:1e:35:78:94:26:5c:2d:57:91: 39:1c:dc:1e:1f:5a:dc:e9:2a:ac:6c:95:35:54:43: 1e:11:37:62:01:67:ae:fc:9a:44:6e:cb:41:a9:6f: ff:64:66:e0:fe:09:d4:a9:73:35:79:a2:f1:9d:4d: c4:5d:09:7a:61:aa:33:99:3a:a0:93:5d:c0:bd:0b: 4f:2c:11:30:7f:85:92:ee:bf:d7:18:a3:03:1d:2a: 67:da:a8:25:72:80:9a:e9:d3:c0:e5:96:03:8e:68: 71:d8:84:d9:c8:87:f3:17:fd:58:ff:2a:78:60:5a: d3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:FC:28:71:CA:B1:6B:35:76:C9:4B:E6:97:DA:6D:E4:60:73:CD:C0 X509v3 Authority Key Identifier: keyid:12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:c3:f3:9a:ab:86:e6:33:1c:1b:06:4c:3c:27:c7:5c:22:42: 64:50:b7:8e:51:9c:b0:82:1f:e6:7a:54:24:d9:7d:4f:8a:33: 48:9f:94:02:40:66:bc:fc:36:08:42:7c:79:71:33:23:94:c5: 78:86:54:8d:24:55:75:f6:23:55:9e:97:42:70:40:e7:75:ba: 18:ef:0d:4b:3a:95:41:99:98:5c:f7:6b:d6:f7:28:cb:c5:45: 41:49:14:2b:23:fd:b1:72:ce:6d:a7:33:ea:70:62:dc:cd:ef: ea:e3:0e:40:1d:56:41:1c:90:58:24:0b:43:34:89:1d:95:7a: 5b:9a:4f:f8:12:79:ec:d6:86:93:7e:ff:24:0b:aa:53:87:d7: 82:2e:0e:01:c3:d9:c1:6f:00:a8:9c:bf:aa:70:38:79:47:ae: b6:ae:a8:8c:63:0c:31:59:18:09:cf:3a:ce:7b:32:7c:1f:91: 83:f7:f3:b3:ca:ce:e4:82:73:12:8f:37:aa:41:84:0b:05:6f: bb:c6:e7:4c:5c:e1:fe:13:36:f3:59:f6:73:35:04:4f:25:de: a8:5e:87:9d:4b:88:33:17:9a:d9:35:13:cb:38:d4:7f:c6:81: 42:b8:6e:7d:dd:1f:e7:05:f7:68:f6:70:9d:91:93:74:87:a8: a4:0a:ae:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgIULszQK6kstqgjPyotJ3R0UPpukXswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEygxMjM0NUYxMTVB QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBMB4XDTI1MTIwNTE3MTUzOFoX DTI1MTIwODE5NDAzOFowMzExMC8GA1UEAxMoMTZGQzI4NzFDQUIxNkIzNTc2Qzk0 QkU2OTdEQTZERTQ2MDczQ0RDMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMovtINjEAbV2tKGNUhixKLCFU9tY5DTsiTE/l7NghiFJRMRPVCAuqki0Pi3 m+rY58iStkyCcQBf6HIYZuqYL3ZSkPdoV0M5FVhN1R7vdfUPpr3Wmp7TDToQ7yWc FfFtPviM0JEcyAIEtAV3XUDG8LtH+EaE9hByzWjU+zQCgDTcpRYDIbd8hvrol83E HjV4lCZcLVeRORzcHh9a3OkqrGyVNVRDHhE3YgFnrvyaRG7LQalv/2Rm4P4J1Klz NXmi8Z1NxF0JemGqM5k6oJNdwL0LTywRMH+Fku6/1xijAx0qZ9qoJXKAmunTwOWW A45ocdiE2ciH8xf9WP8qeGBa0+0CAwEAAaOCAgkwggIFMB0GA1UdDgQWBBQW/Chx yrFrNXbJS+aX2m3kYHPNwDAfBgNVHSMEGDAWgBQSNF8RWsS2KlH1J0xUyB6GRjvQ ujAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMC8xMjM0NUYxMTVBQzRCNjJB NTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CMzIy QTVGNDFENjYxMUUyQTNGMjdGN0M3MkZEMUZGMi9FalJmRVZyRXRpcFI5U2RNVk1n ZWhrWTcwTG8uY2VyMHQGCCsGAQUFBwELBGgwZjBkBggrBgEFBQcwC4ZYcnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMC8xMjM0NUYxMTVB QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARcPzmquG 5jMcGwZMPCfHXCJCZFC3jlGcsIIf5npUJNl9T4ozSJ+UAkBmvPw2CEJ8eXEzI5TF eIZUjSRVdfYjVZ6XQnBA53W6GO8NSzqVQZmYXPdr1vcoy8VFQUkUKyP9sXLObacz 6nBi3M3v6uMOQB1WQRyQWCQLQzSJHZV6W5pP+BJ57NaGk37/JAuqU4fXgi4OAcPZ wW8AqJy/qnA4eUeutq6ojGMMMVkYCc86znsyfB+Rg/fzs8rO5IJzEo83qkGECwVv u8bnTFzh/hM281n2czUETyXeqF6HnUuIMxea2TUTyzjUf8aBQrhufd0f5wX3aPZw nZGTdIeopAqu6Q== -----END CERTIFICATE-----Generated at Sat Dec 6 20:02:34 2025 by rpki-client