This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft
File: 639473CD2054A78B39F9AC7A83232462F00E71AA.mft (raw, json)
Hash identifier: vML8m6ZX6yjXSdZRgRn69dVWOVwtVyAhqgs/PbIhvq8=
Subject key identifier: DC:5C:FA:FA:76:FA:5A:FA:A5:29:B3:57:C9:C1:E8:DA:75:AA:55:D9
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 5780BEBBBEE3DFAE2F1E61ACAD6F59A48620D6B2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft
Manifest number: 0D70
Signing time: Sat 06 Dec 2025 12:51:55 +0000
Manifest this update: Sat 06 Dec 2025 12:46:55 +0000
Manifest next update: Tue 09 Dec 2025 23:40:55 +0000
Files and hashes: 1: 323430303a643638303a35393a3a2f34382d3438203d3e203539323832.roa (hash: 0AzZnlQLCCzpiwYH8VB91hQfBqmdrJ+ok40Qb8sCeko=)
2: 3130332e3232382e3234362e302f32342d3234203d3e203539323832.roa (hash: XZ4OJKWgYbKu4ak8HWaN9bEJfkYQKh79GGoEWm0kS2Q=)
3: 323430303a643638303a3a2f33322d3438203d3e203539323832.roa (hash: SgqLAGcMTNBEKnSS7cpl5WafnRLBI8WCT5GxxXyN0zA=)
4: 3131362e3230362e3231342e302f32342d3234203d3e203539323832.roa (hash: mgdd33inbho0w/YafQxmlb4mn2645LWgbd4GjzvqC5g=)
5: 323430303a643638303a323a3a2f34382d3438203d3e203539323832.roa (hash: qLkIroWnbqSVivBGqvgi5oF8E8eNhXgrJocCdlawdNk=)
6: 3131362e3230362e3231322e302f32342d3234203d3e203539323832.roa (hash: QsDPs2mlZqyMZXfjf6Zh+NWMXGWy1j4R+YaYRxdbecQ=)
7: 323430303a643638303a363a3a2f34382d3438203d3e203539323832.roa (hash: 5B7v2ShhK5C4wbhQiHatQFgCi8oUxqkoPlhjyp+Rnaw=)
8: 323430303a643638303a353a3a2f34382d3438203d3e203539323832.roa (hash: /8HKOKl3PxMMPopAmXJsDfZHfFoo7wkQ81V5TqWB1uE=)
9: 323430303a643638303a666163653a3a2f34382d3438203d3e203539323832.roa (hash: u5dDjhuBvBzcqNjKEeW7vizdTx58v6wY4rfkMiHiI5I=)
10: 3130332e3232382e3234352e302f32342d3234203d3e203539323832.roa (hash: /sujTtwH0ddwmWj6UyMseljhgpcNLVkP8+vtS5y3rGg=)
11: 3130332e3232382e3234372e302f32342d3234203d3e203539323832.roa (hash: 4gtV8ZXJhBLgP6alnZmazQL9Du+oKvqI/MvatS0Bbyw=)
12: 639473CD2054A78B39F9AC7A83232462F00E71AA.crl (hash: RNRkLwLtGxQ9PiT5X2fyDntG9E5U7BzfffdXdvHj2Ho=)
13: 3130332e3232382e3234342e302f32342d3234203d3e203539323832.roa (hash: esxHqUt3Xq6PKKXsfFgfUEYi1fJUgVnC6F8M6sDPUJM=)
14: 3130332e3232382e3234342e302f32322d3234203d3e203539323832.roa (hash: kkZ5080z9oUs+jW8iHX1Tzr1MG5R0/keiimPL4Y7DMk=)
15: 3131362e3230362e3231332e302f32342d3234203d3e203539323832.roa (hash: JPYapDBTyTePbdwtE88+heXxGhufXE50JBbJ2fq7FKo=)
16: 3131362e3230362e3231322e302f32322d3234203d3e203539323832.roa (hash: 7JHZWmtz01hYjYbLRHq9pCZCM42A/jGx+qscoYZR+8M=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:80:be:bb:be:e3:df:ae:2f:1e:61:ac:ad:6f:59:a4:86:20:d6:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Dec 6 12:46:55 2025 GMT
Not After : Dec 9 23:40:55 2025 GMT
Subject: CN=DC5CFAFA76FA5AFAA529B357C9C1E8DA75AA55D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:13:36:9e:c6:23:1d:42:a9:dd:da:ae:8a:e9:
9c:37:41:d8:da:ab:3b:97:c9:9a:86:1d:8b:96:91:
14:2e:0f:e2:80:37:51:c5:6f:a4:81:5f:b6:7a:c3:
92:a6:8b:a5:81:03:93:e9:92:50:e4:1e:7e:04:27:
a8:53:d6:83:cd:09:b0:87:82:39:c7:56:90:79:9a:
11:65:c2:b5:d5:b5:a3:c7:a5:5a:a5:3e:24:8b:99:
45:32:48:ef:63:3b:52:45:c1:b9:00:37:3b:e1:e7:
75:5d:13:3a:f3:7d:42:d4:f5:15:9a:b0:64:1a:70:
c5:75:cc:44:b6:93:fa:4e:8b:1a:38:42:dc:33:90:
4f:bc:ad:58:f2:37:8c:38:d5:26:7b:94:ad:f0:bb:
53:1a:91:52:f9:df:f6:0f:43:98:82:c4:83:40:80:
af:9b:80:23:8c:32:73:04:1b:bc:a4:d0:60:f7:7f:
15:e6:da:52:67:c8:ef:5c:f1:c0:62:b2:6d:94:df:
25:bf:ae:f2:46:1f:77:f1:05:68:6b:10:a3:12:25:
6e:0e:bb:46:28:14:a5:ec:0f:a0:3a:98:df:e1:6b:
b4:0b:01:fe:05:2b:c2:92:55:6e:d2:f8:57:2d:b9:
7c:76:46:f6:c3:08:b0:ea:d6:2d:7d:b1:ef:ea:e7:
de:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5C:FA:FA:76:FA:5A:FA:A5:29:B3:57:C9:C1:E8:DA:75:AA:55:D9
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:8d:d5:95:31:07:46:35:7a:a8:85:00:aa:96:b5:0c:50:c3:
b7:a0:c5:ba:f3:b9:88:4e:1e:8d:32:60:33:b7:5a:36:92:f2:
d6:34:c6:cf:8f:d8:fd:cc:85:b5:51:1a:6d:aa:14:22:b4:c7:
ea:8c:25:2f:53:a4:7e:ba:8d:c3:26:0a:b1:1a:61:80:c4:d8:
db:f2:43:5f:fb:35:2a:e2:70:33:5c:0d:a9:e4:86:cc:e1:f7:
12:30:4e:84:d1:a2:99:dd:2d:88:54:65:e0:7b:74:10:f3:69:
92:a9:4a:d8:46:be:71:40:16:02:ee:70:9a:69:fe:13:f9:09:
18:9a:e4:b5:d3:75:d8:e6:19:86:29:e7:d1:eb:30:96:ad:6f:
dc:e0:3a:87:f3:40:b7:aa:d0:9e:f0:21:e5:96:e6:e1:15:9f:
7f:2b:a7:ef:df:cb:c1:0e:7e:35:2e:91:af:24:d2:bb:7c:eb:
d9:d5:d9:f1:26:42:22:87:ac:19:d6:07:30:07:2e:32:04:14:
75:dc:82:32:2e:6f:b0:1d:b3:a2:d4:d7:a3:16:72:4f:10:db:
2e:d3:44:c7:8f:05:2e:62:03:6e:90:9f:41:fb:3a:9c:61:9b:
92:a7:9d:cd:d0:40:17:a8:5f:b5:ad:da:46:e5:3e:86:f2:58:
8a:c9:1b:f1
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUV4C+u77j364vHmGsrW9ZpIYg1rIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yNTEyMDYxMjQ2NTVaFw0yNTEyMDkyMzQwNTVaMDMxMTAvBgNV
BAMTKERDNUNGQUZBNzZGQTVBRkFBNTI5QjM1N0M5QzFFOERBNzVBQTU1RDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsEzaexiMdQqnd2q6K6Zw3Qdja
qzuXyZqGHYuWkRQuD+KAN1HFb6SBX7Z6w5Kmi6WBA5PpklDkHn4EJ6hT1oPNCbCH
gjnHVpB5mhFlwrXVtaPHpVqlPiSLmUUySO9jO1JFwbkANzvh53VdEzrzfULU9RWa
sGQacMV1zES2k/pOixo4QtwzkE+8rVjyN4w41SZ7lK3wu1MakVL53/YPQ5iCxINA
gK+bgCOMMnMEG7yk0GD3fxXm2lJnyO9c8cBism2U3yW/rvJGH3fxBWhrEKMSJW4O
u0YoFKXsD6A6mN/ha7QLAf4FK8KSVW7S+FctuXx2RvbDCLDq1i19se/q596PAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU3Fz6+nb6WvqlKbNXycHo2nWqVdkwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg0NjRhNWItMmZjZS00N2RhLTgw
NDctNjhkMmJkNjNjOWMzLzAvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0
NjJGMDBFNzFBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFWN1ZUxB0Y1eqiFAKqWtQxQw7egxbrzuYhO
Ho0yYDO3WjaS8tY0xs+P2P3MhbVRGm2qFCK0x+qMJS9TpH66jcMmCrEaYYDE2Nvy
Q1/7NSricDNcDankhszh9xIwToTRopndLYhUZeB7dBDzaZKpSthGvnFAFgLucJpp
/hP5CRia5LXTddjmGYYp59HrMJatb9zgOofzQLeq0J7wIeWW5uEVn38rp+/fy8EO
fjUuka8k0rt869nV2fEmQiKHrBnWBzAHLjIEFHXcgjIub7Ads6LU16MWck8Q2y7T
RMePBS5iA26Qn0H7Opxhm5Knnc3QQBeoX7Wt2kblPobyWIrJG/E=
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:02:45 2025 by rpki-client