This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft
File: 104297C14501204E355A97BD8ED42B1FB7C82B01.mft (raw, json)
Hash identifier: 3xnqG+/u5FX/4f6vvzPQT6dVcUgVJAL/ghFIBeaHzb0=
Subject key identifier: 5D:A3:BD:A9:D5:4F:64:B5:D2:6B:E3:A3:00:54:69:0C:A2:DD:B6:54
Authority key identifier: 10:42:97:C1:45:01:20:4E:35:5A:97:BD:8E:D4:2B:1F:B7:C8:2B:01
Certificate issuer: /CN=104297C14501204E355A97BD8ED42B1FB7C82B01
Certificate serial: 6C26A140FEC9B6502C2F692BDF6074D278A750E8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft
Manifest number: 0258
Signing time: Fri 05 Dec 2025 15:41:48 +0000
Manifest this update: Fri 05 Dec 2025 15:36:48 +0000
Manifest next update: Tue 09 Dec 2025 00:34:48 +0000
Files and hashes: 1: 104297C14501204E355A97BD8ED42B1FB7C82B01.crl (hash: 48cY7R8Bwle+viCdOVQJEatkWjD8LcIu1eh2f5tYWGY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.crl
rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 00:34:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:26:a1:40:fe:c9:b6:50:2c:2f:69:2b:df:60:74:d2:78:a7:50:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=104297C14501204E355A97BD8ED42B1FB7C82B01
Validity
Not Before: Dec 5 15:36:48 2025 GMT
Not After : Dec 9 00:34:48 2025 GMT
Subject: CN=5DA3BDA9D54F64B5D26BE3A30054690CA2DDB654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0c:eb:32:d3:d4:17:ed:16:80:6a:63:fe:58:
7b:e3:69:a9:87:91:f7:4b:f8:52:e3:e9:3a:c1:c4:
ee:71:a2:e2:58:07:2b:38:92:c6:1a:0b:2e:b5:09:
7f:6b:8c:5f:f8:69:1b:85:59:b2:e9:17:1a:e5:04:
e8:c8:ee:ed:9f:d2:d9:a9:f2:55:78:53:89:5c:82:
d3:d6:44:13:68:82:f8:c2:42:a6:b9:82:d6:9a:c2:
ea:12:10:6c:3a:c0:8e:3a:89:e6:8d:8a:68:46:f9:
7f:78:3b:b4:67:14:33:f7:de:c1:26:4c:76:51:fb:
03:55:f6:b6:95:c4:56:0c:a4:65:73:06:6f:5f:66:
2b:96:8b:5a:d7:62:bf:b6:f6:f0:b0:4d:3a:bf:16:
9c:f6:33:c3:a0:2f:58:30:5b:01:a9:ba:13:bb:f1:
f4:ef:0c:40:31:e2:99:e2:ee:c5:b0:8c:53:b6:13:
ca:81:99:e0:0f:8a:22:14:fe:16:76:d2:36:2b:c1:
8b:f1:95:c4:71:56:d4:75:a0:2f:fd:0b:02:9c:84:
2f:78:b7:55:5b:d6:52:11:eb:4b:7d:0d:e0:a3:65:
fe:1f:ad:e1:0d:23:b7:24:04:43:b4:be:8e:e3:4b:
ca:77:a3:af:d8:f0:c9:7d:01:f8:3e:6c:77:7c:ea:
34:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A3:BD:A9:D5:4F:64:B5:D2:6B:E3:A3:00:54:69:0C:A2:DD:B6:54
X509v3 Authority Key Identifier:
keyid:10:42:97:C1:45:01:20:4E:35:5A:97:BD:8E:D4:2B:1F:B7:C8:2B:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:71:1b:db:33:eb:a9:d3:35:28:b6:08:b6:1b:be:50:32:06:
00:0d:3b:8e:a7:6e:23:77:c8:c5:9f:c3:07:8b:a1:41:21:24:
18:81:c1:7e:ee:5d:3d:9d:b8:c1:2e:59:fc:05:cd:18:b5:82:
22:e9:0b:fe:66:ab:ae:da:24:b3:7b:43:47:39:75:7b:43:d0:
13:ae:5e:8e:4a:73:c9:71:50:09:ce:08:86:28:1f:d6:e1:9a:
db:83:a4:b2:b0:9d:cc:ae:f9:d2:a5:c6:58:e8:fd:27:07:10:
6c:65:cf:de:80:d1:fe:86:af:96:d0:4d:86:74:03:e7:66:7f:
ba:95:ab:c2:90:af:c0:44:24:c3:55:c4:bc:7a:f9:91:3d:1b:
88:ce:2a:59:51:be:c0:33:cb:d0:e4:ea:5c:51:b6:92:15:fa:
0a:e4:f7:79:5b:61:a1:ea:62:b2:a7:be:7e:97:69:94:b5:10:
05:51:63:ea:e9:de:97:1d:1c:41:ae:c2:8f:20:7c:ea:d1:9b:
1d:b7:d6:12:90:ea:fe:31:c7:3e:56:8d:2c:8a:2c:d4:45:2b:
42:0d:d3:3c:b3:24:58:61:ab:28:bc:af:b2:67:31:b8:ea:60:
27:c0:a9:93:c4:e9:eb:e9:17:d3:ae:04:f1:3e:53:b4:c1:05:
bc:5d:f1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:00:10 2025 by rpki-client