This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft
File: BE82B469998A9E829F882655C99A5A05535A1AD4.mft (raw, json)
Hash identifier: HZ6pQvThphvvhwCEXUMhepDUg5MPYKlgt9C/eH6SjfA=
Subject key identifier: 66:E7:CE:24:AB:55:76:87:2C:62:5A:0B:17:E6:E3:F1:FB:6F:CE:E7
Authority key identifier: BE:82:B4:69:99:8A:9E:82:9F:88:26:55:C9:9A:5A:05:53:5A:1A:D4
Certificate issuer: /CN=BE82B469998A9E829F882655C99A5A05535A1AD4
Certificate serial: 780E3EFDAD5892CCFBAE3672B87C5E6349CBCFD6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE82B469998A9E829F882655C99A5A05535A1AD4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft
Manifest number: 04C1
Signing time: Fri 05 Dec 2025 07:21:16 +0000
Manifest this update: Fri 05 Dec 2025 07:16:16 +0000
Manifest next update: Mon 08 Dec 2025 08:58:16 +0000
Files and hashes: 1: 3130332e3135382e32302e302f32332d3234203d3e203236353631.roa (hash: g+ewJ+/FWnlKat+gPQr1tVTj8PjlEaEamMvWQs+8H98=)
2: BE82B469998A9E829F882655C99A5A05535A1AD4.crl (hash: Ca5wd/4j8PdgjygsiiLkzgW5Hs/qxMjQn6Rbi+piDao=)
3: 3130332e3135382e32302e302f32332d3234203d3e20313431353833.roa (hash: 5crcrbB/LN7ILCPXkvbBRWMtAP/t3GajDPBToG3xT7s=)
4: 3130332e3135382e32312e302f32342d3234203d3e203438343635.roa (hash: Y2HrxpbOCYLMY6XBSkrTiPuTnGk3sto9vtxHqBDKXLo=)
5: 3130332e3135382e32302e302f32342d3234203d3e203438343635.roa (hash: 2W1FqoGYBbRpSENvlyzwmtu3q2K4HpvO3Z6Fc5DZvEU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.crl
rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE82B469998A9E829F882655C99A5A05535A1AD4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 08:58:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:0e:3e:fd:ad:58:92:cc:fb:ae:36:72:b8:7c:5e:63:49:cb:cf:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE82B469998A9E829F882655C99A5A05535A1AD4
Validity
Not Before: Dec 5 07:16:16 2025 GMT
Not After : Dec 8 08:58:16 2025 GMT
Subject: CN=66E7CE24AB5576872C625A0B17E6E3F1FB6FCEE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4f:e1:ff:67:50:d9:65:f0:0d:59:a9:4c:e7:
18:e6:cb:de:38:39:89:a9:75:0f:24:b5:39:c0:e2:
6f:52:4d:1f:5b:25:3f:58:42:19:55:37:07:c3:02:
68:aa:aa:e3:5d:e5:7d:19:00:86:82:fb:de:3d:c2:
06:72:49:e6:db:8f:dd:95:33:69:ee:f6:e9:e6:0a:
90:c7:d8:90:a7:75:79:ed:56:2e:33:5b:49:7e:3e:
2b:3f:40:94:45:40:42:ba:53:7c:f7:d9:ca:01:6f:
92:11:6e:9f:53:a5:5c:7c:13:79:51:d4:c4:0f:d2:
5b:ae:e8:67:e2:7e:5f:6b:01:83:ea:ef:b3:e6:78:
b1:be:43:dd:91:e8:32:2f:db:94:a6:e2:8b:b8:f8:
23:41:a6:71:0c:4b:99:e2:2a:92:25:95:07:42:b6:
b8:e2:6f:a2:25:f6:0c:22:93:4a:c4:97:5d:90:2a:
70:6f:ce:d7:49:82:a4:7b:51:e3:59:7e:5d:e0:e4:
88:5c:7d:67:d3:d0:f7:63:cc:38:df:8e:36:dd:1c:
9e:be:eb:28:92:09:bc:cf:a1:9d:83:a8:53:61:e6:
61:ac:b7:00:5f:2f:d9:77:c2:09:f2:3a:4d:1b:b2:
d2:63:1a:5e:ce:cd:cf:d6:4f:a0:30:8e:f8:78:50:
9c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E7:CE:24:AB:55:76:87:2C:62:5A:0B:17:E6:E3:F1:FB:6F:CE:E7
X509v3 Authority Key Identifier:
keyid:BE:82:B4:69:99:8A:9E:82:9F:88:26:55:C9:9A:5A:05:53:5A:1A:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE82B469998A9E829F882655C99A5A05535A1AD4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:9f:e8:1d:96:ed:e3:a7:3d:00:c9:25:91:a2:44:70:18:75:
ed:6d:77:40:66:3a:78:fb:46:92:90:0b:c3:7b:00:05:0d:ba:
9c:f8:e1:c4:5d:ff:64:38:6e:58:68:06:16:6a:6a:50:71:c5:
db:15:6d:2f:ad:b4:05:e9:e5:a8:11:3a:30:d2:0a:3d:0b:a4:
7d:b0:48:79:4b:7d:d2:d8:1b:ff:e5:93:ee:b8:8b:5f:dc:48:
f5:da:54:a7:af:04:99:a3:37:8e:06:93:17:ed:af:49:b3:02:
cb:ce:80:84:dd:b4:86:0c:4d:32:14:cd:55:c9:1f:9f:1e:f9:
97:5c:20:8a:51:b0:e4:b4:0e:a4:b4:9e:7a:ed:73:c7:bf:c2:
28:8e:44:df:ab:eb:40:21:bd:9a:fd:e6:d1:55:0c:9b:4d:ce:
5a:d0:96:41:03:24:a5:7f:2a:80:15:dc:24:ad:c0:a9:a1:cc:
2c:91:96:d4:3b:4d:74:0d:39:ce:01:aa:fd:6b:3e:a3:09:8d:
cc:29:e5:9d:3f:a1:ff:8a:ab:70:65:68:19:25:1a:7b:97:11:
f2:3b:ad:f0:84:a7:4d:fb:eb:b6:7d:19:58:e3:fc:79:a9:8e:
6b:9c:0f:cc:81:a6:89:f6:a7:d4:94:2b:14:b8:75:36:ca:7f:
b9:87:9a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:17:51 2025 by rpki-client