This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft
File: 44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft (raw, json)
Hash identifier: X4XjpOI7aJ2MmWIjnO+kzsMWeZgGKuCzmTehivRb4ZA=
Subject key identifier: 2D:37:1E:C9:12:98:06:E7:82:D7:6D:29:5D:DA:33:16:8A:0D:68:6C
Authority key identifier: 44:43:0F:D6:AB:CA:B2:54:BA:E7:AE:F8:6E:5F:5D:77:7F:CC:80:45
Certificate issuer: /CN=44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045
Certificate serial: 722092E251FF9694485361369547B2B19477691A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft
Manifest number: 04E8
Signing time: Sat 06 Dec 2025 20:10:55 +0000
Manifest this update: Sat 06 Dec 2025 20:05:55 +0000
Manifest next update: Tue 09 Dec 2025 21:41:55 +0000
Files and hashes: 1: 44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl (hash: Q5+BlCl2bwKZbWWuug8Ebrxcs8779GZ3L4ty5NlhvAk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl
rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:20:92:e2:51:ff:96:94:48:53:61:36:95:47:b2:b1:94:77:69:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045
Validity
Not Before: Dec 6 20:05:55 2025 GMT
Not After : Dec 9 21:41:55 2025 GMT
Subject: CN=2D371EC9129806E782D76D295DDA33168A0D686C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c5:80:14:4f:24:ba:18:12:b5:41:fc:e1:53:
14:ab:d9:92:02:16:67:04:6e:92:1a:40:1e:08:69:
2b:35:74:61:90:af:78:c8:fa:5b:92:4b:56:ad:4c:
bb:85:75:fa:25:d2:4e:9d:41:73:83:94:e0:1d:ec:
9f:a0:ef:24:df:00:78:b8:ef:45:80:14:2c:b7:8c:
bb:86:66:0f:3b:8a:78:d5:36:e1:48:e8:b3:97:ab:
09:8e:77:d4:1f:89:b0:06:75:37:b4:3c:40:22:f9:
bb:69:9e:de:da:b6:18:b3:47:8f:cc:b2:2a:61:5c:
63:75:48:5e:68:ae:70:47:5c:82:65:0e:2c:2b:a2:
1c:53:9b:c5:e5:1b:1f:b4:5e:de:41:18:b3:7e:62:
03:2d:7b:fc:3f:0f:b4:0d:21:2a:38:d0:fd:45:b9:
14:3b:6f:22:3d:dd:87:6e:13:03:96:b8:f4:62:d8:
51:d8:09:2b:92:a9:fe:ee:2c:b9:cd:0c:f1:95:e3:
3b:6b:0f:32:33:61:ec:a8:14:54:48:ed:0d:10:48:
57:fa:3c:2b:6e:24:df:7d:af:5e:b4:87:89:2d:16:
cd:aa:82:46:ce:c1:9d:c9:5d:79:c9:7b:a9:06:9d:
18:fd:2f:50:c1:78:8d:65:bf:01:07:8f:70:54:98:
e0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:37:1E:C9:12:98:06:E7:82:D7:6D:29:5D:DA:33:16:8A:0D:68:6C
X509v3 Authority Key Identifier:
keyid:44:43:0F:D6:AB:CA:B2:54:BA:E7:AE:F8:6E:5F:5D:77:7F:CC:80:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:2f:d7:b9:24:45:bf:de:8e:96:26:dc:e7:a8:ac:96:56:8c:
84:cb:66:89:5e:e4:7a:b1:5f:1c:ea:2b:bb:7c:7a:ca:75:0e:
72:e3:53:dc:6d:fc:28:d2:01:f4:ac:70:79:5a:38:49:3b:b1:
49:9d:6f:d1:39:4e:60:ad:f3:ee:e7:77:19:53:c7:58:47:2c:
67:40:d1:8c:b6:cf:87:a8:f1:9c:45:c9:be:e9:99:20:af:38:
8d:cb:7a:4d:60:eb:b8:1d:d7:e0:e8:97:b3:b3:db:39:d7:83:
60:6e:b6:b1:63:2a:c6:49:3b:96:eb:6f:d2:2b:69:22:79:e2:
40:ee:3e:a9:4b:49:13:ef:42:25:ac:4a:76:4d:82:3a:2b:89:
72:0a:b9:fb:4e:07:75:45:91:a1:7d:e2:b0:e6:1a:ba:f3:9f:
5a:cd:38:5d:b8:76:17:a1:a6:57:42:e2:94:65:12:24:c8:d6:
46:65:31:d4:4a:94:66:b6:7a:87:9a:2a:4d:44:fc:d4:24:a7:
d7:b2:ca:f2:a6:23:56:cc:d3:9d:29:6e:68:3e:ab:70:a5:c3:
e9:6e:bd:d5:e0:e7:00:c2:e5:7f:35:eb:17:2e:46:43:ac:b1:
c8:a7:ec:c1:9c:61:96:c7:f6:e3:56:9f:92:1e:0f:fe:2a:be:
ed:a7:7a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:58:47 2025 by rpki-client