This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft
File: AD2137BA5758D926364E9E038F19A65DC3F1846E.mft (raw, json)
Hash identifier: yFZRdSFSK3FFFVUCP8zABBF5gSP65wAc44V7dD/T5KI=
Subject key identifier: 5E:92:72:B4:A6:7A:07:5F:B2:47:98:85:D7:3D:D3:D8:09:B9:4B:1C
Authority key identifier: AD:21:37:BA:57:58:D9:26:36:4E:9E:03:8F:19:A6:5D:C3:F1:84:6E
Certificate issuer: /CN=AD2137BA5758D926364E9E038F19A65DC3F1846E
Certificate serial: 6028931875B9120FF1E539FF9DE43734E2C34A3C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2137BA5758D926364E9E038F19A65DC3F1846E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft
Manifest number: 0270
Signing time: Sat 06 Dec 2025 19:12:17 +0000
Manifest this update: Sat 06 Dec 2025 19:07:17 +0000
Manifest next update: Wed 10 Dec 2025 04:53:17 +0000
Files and hashes: 1: AD2137BA5758D926364E9E038F19A65DC3F1846E.crl (hash: pCO4XQVb8WnESGpT9EG9xrwy5iA6bZcckPA44widB5Q=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.crl
rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2137BA5758D926364E9E038F19A65DC3F1846E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:28:93:18:75:b9:12:0f:f1:e5:39:ff:9d:e4:37:34:e2:c3:4a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD2137BA5758D926364E9E038F19A65DC3F1846E
Validity
Not Before: Dec 6 19:07:17 2025 GMT
Not After : Dec 10 04:53:17 2025 GMT
Subject: CN=5E9272B4A67A075FB2479885D73DD3D809B94B1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:52:07:b2:41:4d:36:fe:99:a3:66:fb:7f:7b:
d0:20:45:39:cd:47:1d:1f:2e:9a:69:47:d9:4f:02:
af:19:d8:63:80:17:2b:f0:09:46:78:ea:75:41:a7:
b8:45:34:1b:a9:98:c5:b0:ce:4b:0d:b3:1b:21:34:
bc:57:ec:6e:84:5f:cd:bb:58:32:97:5b:9f:79:bd:
f6:ea:90:69:08:e4:dc:8b:35:3a:66:04:1d:2d:a3:
6b:f5:a0:4a:ed:9d:bb:2d:8f:ae:da:66:be:3a:c4:
8c:33:f7:da:98:36:de:a7:36:de:f3:90:72:cd:1e:
f7:f0:61:5a:ea:c5:1b:99:03:d1:cf:d8:92:52:2f:
0f:0e:19:04:0b:41:71:d4:0f:c8:dc:8f:8b:16:e8:
41:5d:75:c0:b8:f5:3b:fa:48:cc:b0:be:e7:49:6d:
f6:06:f4:86:1e:46:50:41:2c:5c:5c:7a:12:04:57:
80:d2:b9:98:69:0a:01:86:51:d8:f4:42:61:bc:f4:
73:b1:7c:fe:4f:cc:94:5c:66:6d:31:f2:3f:c6:3c:
a1:ac:b4:27:13:df:e3:5e:b4:1a:b1:04:26:de:80:
d1:6c:c8:75:a0:d7:d6:7f:a7:19:ea:0a:14:ac:d3:
db:75:08:36:87:8c:8f:83:8f:35:2b:1d:0a:d1:4f:
05:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:92:72:B4:A6:7A:07:5F:B2:47:98:85:D7:3D:D3:D8:09:B9:4B:1C
X509v3 Authority Key Identifier:
keyid:AD:21:37:BA:57:58:D9:26:36:4E:9E:03:8F:19:A6:5D:C3:F1:84:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2137BA5758D926364E9E038F19A65DC3F1846E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e3:c6:10:90:07:0e:a9:e2:54:af:bc:39:4c:cf:1f:74:23:
b3:35:8f:69:7b:92:92:77:8b:25:7c:39:0f:3c:05:d3:f6:69:
4e:c8:45:3a:b4:f3:84:91:d6:75:78:35:e6:2c:a7:a8:82:b8:
f9:c6:99:6f:6f:fb:80:97:19:35:ab:17:01:d7:eb:23:b5:72:
66:b1:e9:7c:70:69:df:36:b8:0f:67:1c:79:cd:6d:52:82:4c:
e8:07:a6:38:f0:63:a8:c8:e6:8c:ec:ea:9e:51:0d:1a:88:88:
bc:ea:02:ca:a0:8d:aa:66:ad:ea:7a:de:d3:29:fd:f0:c5:3d:
d9:20:b7:06:cb:9c:1c:a1:7e:07:06:68:69:fd:81:ed:08:99:
1c:24:49:a5:04:71:91:42:27:4e:1d:f7:2d:1b:8b:b7:88:f5:
b0:ba:76:b0:50:ab:2c:fb:2c:87:63:42:34:43:c7:28:dd:b8:
46:3b:fe:8d:e9:9e:1a:5b:1b:ef:5b:7e:ec:b1:d1:14:28:70:
d1:05:fd:c9:63:0e:3e:1b:fb:66:90:52:3b:0b:30:b4:a3:39:
d5:24:70:8d:50:60:a0:3b:c0:e2:cf:64:ff:24:12:26:b8:78:
d5:74:b2:be:e4:67:2d:e8:d7:66:b9:e4:e4:ee:c1:ab:d7:a3:
12:32:aa:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:09:51 2025 by rpki-client