This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft
File: 9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft (raw, json)
Hash identifier: WjFq3kS87QhjtVXi6ey8crr4mDj9SfMI2ICAmfvVNuA=
Subject key identifier: 37:82:10:7F:FC:C1:D5:2F:D2:1F:16:B0:04:A4:47:0C:C3:A1:3A:64
Authority key identifier: 94:79:B8:C5:D5:AE:8F:AB:DC:57:A9:AB:54:9A:DD:E2:0B:E8:A4:B3
Certificate issuer: /CN=9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3
Certificate serial: 2919C04A5FDAF4FC41CA71262A73041EC30A7931
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft
Manifest number: 0217
Signing time: Fri 05 Dec 2025 16:22:11 +0000
Manifest this update: Fri 05 Dec 2025 16:17:11 +0000
Manifest next update: Mon 08 Dec 2025 19:48:11 +0000
Files and hashes: 1: 9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl (hash: xOrL4AnFuHzk1eenwv3Qz0ZHkEKg4dsKhcAquaniIwE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl
rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 19:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:19:c0:4a:5f:da:f4:fc:41:ca:71:26:2a:73:04:1e:c3:0a:79:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3
Validity
Not Before: Dec 5 16:17:11 2025 GMT
Not After : Dec 8 19:48:11 2025 GMT
Subject: CN=3782107FFCC1D52FD21F16B004A4470CC3A13A64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:22:c2:a7:0c:32:2c:59:0e:80:f2:29:e8:56:
85:92:bb:e7:89:24:59:ac:62:b4:10:57:37:6f:56:
1e:fe:59:d2:6f:77:71:2b:3e:66:84:30:c2:e1:14:
41:22:eb:50:8d:80:e1:32:2b:06:02:d6:5d:e6:53:
da:5a:5e:fc:a7:f2:81:81:65:41:35:a5:40:b1:a6:
f4:7c:c6:b5:a7:90:a2:55:64:3d:e6:df:b9:22:77:
e5:87:5a:07:7b:80:d3:d7:ba:af:c7:f2:8b:99:0a:
69:ad:3a:22:bd:7c:6e:aa:e8:31:49:8b:b4:a3:e4:
c6:7b:bb:6a:d7:aa:27:67:11:a7:9b:5c:55:af:d8:
5f:e8:3b:ce:af:4e:84:59:2e:c4:4e:d9:f0:af:2f:
db:bc:3e:e8:08:a8:1e:b9:da:3f:af:e9:58:6b:d6:
ec:a0:40:bc:b9:54:6e:5b:2c:57:55:26:be:86:ac:
43:a6:50:95:57:6e:df:45:f7:7d:d9:89:af:9c:8a:
2b:4b:01:4e:7c:4e:00:7b:a5:89:43:b9:07:3c:68:
7c:57:6e:e4:a0:ab:91:99:d9:8b:d4:17:44:df:9a:
f7:2a:9c:cf:1f:c3:9f:d9:54:5f:52:08:da:06:cf:
6e:6e:18:93:64:0c:ed:64:21:ba:36:ef:cc:f4:7e:
43:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:82:10:7F:FC:C1:D5:2F:D2:1F:16:B0:04:A4:47:0C:C3:A1:3A:64
X509v3 Authority Key Identifier:
keyid:94:79:B8:C5:D5:AE:8F:AB:DC:57:A9:AB:54:9A:DD:E2:0B:E8:A4:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:10:10:6a:17:a1:bf:78:31:8b:0e:87:8c:2e:1a:b3:cf:fb:
b3:27:b8:a1:61:6f:22:39:44:8a:27:ad:ab:cc:b9:fa:3c:7e:
b5:14:14:d5:60:61:9a:0d:97:e2:20:58:57:d9:38:f8:e8:9f:
a1:c8:23:8c:f4:81:3a:61:ae:b4:0a:7f:cf:de:1a:df:98:53:
3d:46:65:6d:99:5c:75:23:99:c6:50:89:1a:dc:19:64:35:23:
86:98:9d:9f:70:36:1b:3c:70:75:e1:36:87:99:b1:75:1d:76:
f4:5c:45:a3:21:ba:38:c2:5b:4f:42:4c:2a:ee:af:9e:66:6c:
31:7f:dd:31:bd:30:3d:a9:6e:88:2f:7a:20:a0:20:3b:bb:02:
78:cd:15:48:6f:49:bc:61:23:ae:b9:ad:fb:62:c4:01:e0:c9:
b3:b2:2f:5a:b1:be:8b:40:d6:0e:4a:a6:ee:ff:44:b3:67:05:
f2:bc:e1:67:0a:32:05:fb:09:5d:7e:20:41:9c:1f:a8:2a:c8:
27:02:5f:5b:26:fd:05:4d:ab:08:da:39:d1:10:75:af:16:00:
0a:75:36:ff:71:b7:a1:3b:55:db:35:1d:31:ac:b7:2a:67:79:
48:6a:a0:14:6c:4d:31:2a:0f:23:62:40:23:7c:0c:b2:7d:10:
8f:7a:5e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:09:47 2025 by rpki-client