This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft
File: F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft (raw, json)
Hash identifier: lHfGw36snXaedeF0xVWy3QXwvrBFY+W0kd3u3qzHlCY=
Subject key identifier: 87:7F:B9:70:C3:38:A3:51:F4:88:38:2C:61:48:1C:5D:AB:5A:3F:69
Authority key identifier: F3:18:D1:5D:68:E6:3C:EB:E4:BF:A0:26:A5:26:9F:38:77:BE:13:C1
Certificate issuer: /CN=F318D15D68E63CEBE4BFA026A5269F3877BE13C1
Certificate serial: 6CF72A7589923C2A5AFBA6D1FA4977DF7E8D26AB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft
Manifest number: 0535
Signing time: Fri 05 Dec 2025 21:22:15 +0000
Manifest this update: Fri 05 Dec 2025 21:17:15 +0000
Manifest next update: Tue 09 Dec 2025 03:59:15 +0000
Files and hashes: 1: 3130332e39372e3134312e302f32342d3234203d3e20313431303731.roa (hash: ob6mRc06BCeBAj0X28E3a80wGp9aApab42pA+hcHgrk=)
2: 3130332e39372e3134302e302f32342d3234203d3e20313431303731.roa (hash: u+uBgrPGm+40zgnoGLAagJdkp/O9sV2Z6UZd95b5fdg=)
3: 323030313a6466313a393030303a3a2f34382d3438203d3e203538383230.roa (hash: 5vlCAQxD3Rtm38WM/0l+BFIYmxxS60ewb6v8d3eKIKE=)
4: 3130332e3234312e32342e302f32342d3234203d3e203538383230.roa (hash: bOC+RmVGdVwwtAAFBHuMaIGcTf4BirQnm1dEmryUd+o=)
5: 3130332e39372e3134302e302f32332d3233203d3e203538383230.roa (hash: ky48tvEganYAJKKKh8LACXy3ayIODImWxB2YSjo+hjY=)
6: 3130332e39372e3131312e302f32342d3234203d3e203538383230.roa (hash: LVzLvHlGvkclluFVEiY44EndzlPbN92fYYJEvFwmUZU=)
7: F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl (hash: dESxPiBZS3ucHDDry0tRtUVcsQowa7wCdugYtfyUHQ0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl
rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 03:59:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:f7:2a:75:89:92:3c:2a:5a:fb:a6:d1:fa:49:77:df:7e:8d:26:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F318D15D68E63CEBE4BFA026A5269F3877BE13C1
Validity
Not Before: Dec 5 21:17:15 2025 GMT
Not After : Dec 9 03:59:15 2025 GMT
Subject: CN=877FB970C338A351F488382C61481C5DAB5A3F69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:99:d9:6b:33:9d:b1:9e:47:20:36:4d:db:cb:
e6:44:c6:77:de:62:1f:3b:8d:86:ba:90:b4:c8:59:
cf:1f:a2:c2:98:3f:c1:11:3c:f8:d4:34:6a:c9:d0:
e6:0b:ce:11:13:0e:89:7e:1a:67:2d:e6:42:c8:e5:
ed:3b:44:1d:15:08:1c:e8:9d:98:cb:bb:b5:ab:f3:
df:36:60:e7:9b:98:88:0c:5c:ab:64:9c:e9:bd:95:
53:4b:ed:76:2f:1c:a7:4b:58:94:07:a6:8b:20:d1:
93:08:b7:e8:58:a2:fd:d3:3f:13:73:4f:0b:78:32:
cd:3a:f2:7a:65:05:d5:b0:96:56:77:b1:4f:fe:9b:
1e:30:03:53:10:0b:4b:b5:be:dc:0a:9e:2c:f5:a1:
c2:36:a4:38:90:0a:6b:78:29:3e:3c:69:c7:a9:e7:
b2:c9:26:a3:c6:5d:bd:92:62:bd:c2:c4:f9:1f:02:
2b:ed:09:18:3b:a2:54:c4:91:4b:5c:82:6a:21:0f:
92:45:09:78:a1:c8:61:a0:bc:d2:49:36:f0:e1:50:
6c:e8:95:15:5e:e2:9b:7c:f7:df:1d:62:aa:98:34:
65:3b:fd:81:ae:12:5e:78:77:ae:00:72:21:ab:6c:
7d:66:45:1f:35:5f:39:0b:3f:f4:ad:23:bd:cc:37:
65:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7F:B9:70:C3:38:A3:51:F4:88:38:2C:61:48:1C:5D:AB:5A:3F:69
X509v3 Authority Key Identifier:
keyid:F3:18:D1:5D:68:E6:3C:EB:E4:BF:A0:26:A5:26:9F:38:77:BE:13:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:1b:b7:6b:d5:f0:15:1c:ce:a2:78:00:49:1d:79:02:cf:1c:
6e:e5:30:7c:4f:b4:bb:7a:4d:46:b3:40:cf:ab:39:fc:5c:ec:
04:c5:20:85:61:1b:ac:6b:21:b5:5b:0e:3c:56:86:7d:76:e1:
17:b5:04:da:7c:05:26:cf:f6:54:25:b3:88:76:3b:fc:85:c4:
32:02:05:d4:77:53:9b:0c:72:9f:9e:29:15:cb:2a:da:86:3b:
62:c0:ff:c4:ef:1f:a8:c0:0c:65:42:c9:21:30:b3:44:f1:52:
1f:13:5e:15:d2:6d:91:c8:71:28:27:2a:01:65:7a:ff:4c:d8:
aa:49:27:a2:f3:5d:57:75:b1:e1:a5:6c:38:72:4b:fd:90:6b:
7a:d6:e8:ae:b3:60:6f:8a:cd:75:1e:92:be:43:ba:ae:a4:f2:
fd:37:1e:19:a6:68:77:98:09:ea:b2:61:a6:e5:59:ec:37:e2:
e0:40:cc:73:9e:5a:ee:cb:b3:ef:55:f2:48:fa:d0:58:08:0b:
1e:b2:f0:b4:dd:32:db:00:87:f2:75:cc:07:d2:83:e5:5f:c3:
ea:98:08:e0:81:c5:8b:50:65:5f:01:46:4e:72:77:41:21:a2:
56:86:20:09:90:2d:28:3a:51:c4:ca:e9:87:07:dd:3d:b3:22:
c4:68:40:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:16:23 2025 by rpki-client