This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft
File: 292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft (raw, json)
Hash identifier: TB/4U/u15Ej5d2Y/MhLRt4cdt2B2KQsbeFIyU3rm0KI=
Subject key identifier: 84:65:94:5D:C1:30:20:65:3C:6C:A9:C7:B7:E1:8F:F1:AE:02:0E:CD
Authority key identifier: 29:2C:6C:F5:F3:36:CE:0D:75:8E:47:F5:DF:97:78:63:3C:DC:A7:69
Certificate issuer: /CN=292C6CF5F336CE0D758E47F5DF9778633CDCA769
Certificate serial: 244AA958237AB3812E6B611A14269DE5F8F15025
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/292C6CF5F336CE0D758E47F5DF9778633CDCA769.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft
Manifest number: 03AC
Signing time: Fri 05 Dec 2025 02:32:36 +0000
Manifest this update: Fri 05 Dec 2025 02:27:36 +0000
Manifest next update: Mon 08 Dec 2025 13:08:36 +0000
Files and hashes: 1: 3130332e3136362e3133362e302f32332d3234203d3e203137393935.roa (hash: bN0O+3JGtIOaU62palp9MIrngagfeVADVprJx+0r0Fs=)
2: 292C6CF5F336CE0D758E47F5DF9778633CDCA769.crl (hash: OuoK7pjC8CZOt2N1sLMev8GtkL2ysF4ZXEmg2nwB/nQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.crl
rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/292C6CF5F336CE0D758E47F5DF9778633CDCA769.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 13:08:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:4a:a9:58:23:7a:b3:81:2e:6b:61:1a:14:26:9d:e5:f8:f1:50:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292C6CF5F336CE0D758E47F5DF9778633CDCA769
Validity
Not Before: Dec 5 02:27:36 2025 GMT
Not After : Dec 8 13:08:36 2025 GMT
Subject: CN=8465945DC13020653C6CA9C7B7E18FF1AE020ECD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a9:3e:2c:9b:70:9b:70:cd:f9:25:1f:fe:25:
3c:e9:6c:df:a8:2c:ba:53:e3:2a:34:4c:89:ce:2f:
ac:45:d8:06:92:a9:8f:fa:12:fa:58:39:19:ca:47:
14:c5:70:36:6b:dc:4b:ee:6b:e8:03:9a:4a:9a:b8:
68:dd:ab:cc:be:db:3e:a0:49:d6:13:7b:90:4a:05:
8d:bb:f8:1f:7c:fd:cb:b0:78:9b:46:47:f2:fe:38:
34:9d:8c:73:8b:40:0e:3e:39:94:48:43:4d:d1:44:
12:4e:3f:0a:3c:81:86:e8:36:86:fd:45:ff:e5:ab:
39:5b:77:f2:d7:41:06:9b:aa:60:bb:b1:51:ee:2a:
5f:6f:4a:00:a5:e0:d5:03:44:75:f3:fb:23:89:e1:
a0:12:c9:7d:ba:a8:74:a6:59:72:f8:1a:d5:e0:d8:
c8:95:b2:f6:ad:57:bb:1d:c3:74:0e:5b:2f:fd:ee:
5d:d6:48:6e:ce:9a:09:f0:8f:89:8c:2d:82:f7:43:
0c:67:61:ea:8f:dc:ad:62:fc:01:99:7e:7d:01:cd:
b5:78:87:20:2c:7e:95:7c:3c:4a:92:cc:09:c4:5c:
a5:44:b4:e5:f0:69:a4:80:5e:c2:27:0a:de:98:e1:
52:a2:e0:65:80:8c:6f:63:90:46:39:45:eb:46:45:
e9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:65:94:5D:C1:30:20:65:3C:6C:A9:C7:B7:E1:8F:F1:AE:02:0E:CD
X509v3 Authority Key Identifier:
keyid:29:2C:6C:F5:F3:36:CE:0D:75:8E:47:F5:DF:97:78:63:3C:DC:A7:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/292C6CF5F336CE0D758E47F5DF9778633CDCA769.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:6e:55:7a:f5:34:cf:de:ae:6b:46:3f:40:07:03:8a:5c:9c:
f4:df:3f:f1:7a:72:8a:5c:3f:80:ec:a5:88:05:32:e8:eb:9d:
18:0e:69:ab:c7:38:09:9c:9b:d1:96:56:ad:41:dc:4d:f7:6b:
ea:6a:c2:37:5b:48:86:a8:46:48:77:55:d3:3e:94:0b:f2:56:
ff:bf:3e:c3:cf:ba:55:60:78:56:77:32:3c:97:69:51:f0:d5:
c6:70:18:05:8c:8a:f3:1c:f9:a1:a3:c9:6d:3d:94:a7:06:4d:
44:9d:04:21:54:ff:a0:ca:0e:0d:19:7f:a6:7a:7e:c2:c0:7a:
2a:de:12:90:b6:7f:25:8b:54:22:06:21:67:61:d8:39:2e:62:
17:65:f0:68:5e:38:44:e1:db:37:17:27:53:90:b8:31:17:a5:
e0:f9:b4:95:20:68:34:fd:c9:5c:69:73:07:84:ef:b4:1a:94:
5e:f3:5b:81:b5:cf:4b:24:87:77:e7:23:82:77:42:83:38:8b:
c9:5b:83:31:ef:c7:6a:19:7e:a6:d9:b3:0c:22:cc:7f:e9:89:
d6:bb:b9:0f:f0:32:65:d8:44:24:f6:dd:1b:95:b9:fe:ec:6c:
37:63:5c:74:c0:af:01:6b:85:cf:67:e0:eb:ba:3e:1d:ca:94:
07:12:ef:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:55:40 2025 by rpki-client