This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.mft
File: 7195906BF48238F96B0510D75000910A519133F7.mft (raw, json)
Hash identifier: d/qyuzdpbIJ2frzUhQlK1MznQ/KvtLyP/hPXwAICYwI=
Subject key identifier: 6D:8A:B3:30:7C:6F:A9:C4:EF:FF:74:05:98:F5:1E:DE:2D:94:10:36
Authority key identifier: 71:95:90:6B:F4:82:38:F9:6B:05:10:D7:50:00:91:0A:51:91:33:F7
Certificate issuer: /CN=7195906BF48238F96B0510D75000910A519133F7
Certificate serial: 1BFCA3205B8E6A61A47EBFC831B79CED1FBB5D4F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7195906BF48238F96B0510D75000910A519133F7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.mft
Manifest number: 01C5
Signing time: Sat 06 Dec 2025 11:11:36 +0000
Manifest this update: Sat 06 Dec 2025 11:06:36 +0000
Manifest next update: Tue 09 Dec 2025 17:55:36 +0000
Files and hashes: 1: 3130332e3136382e3135312e302f32342d3234203d3e20313432333131.roa (hash: s6WBhLaUVIxSMrwUa1GyQKxiSJ5Lxm0zhF+JRIxoxjM=)
2: 3130332e3136382e3135302e302f32332d3233203d3e20313432333131.roa (hash: vej87BChpsakmxUSnkAXWyF/hseNZHZfP/+A76YToPE=)
3: 7195906BF48238F96B0510D75000910A519133F7.crl (hash: uY5o0aB2KB9wTGR+v/xty5BHQwTWkhRK5csoSqU+aKs=)
4: 3130332e3136382e3135302e302f32342d3234203d3e20313432333131.roa (hash: FbNYGlqllOlMcgZqW/AYQTW3Ig+jNpTHmcZ/SLk/YWc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.crl
rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7195906BF48238F96B0510D75000910A519133F7.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:fc:a3:20:5b:8e:6a:61:a4:7e:bf:c8:31:b7:9c:ed:1f:bb:5d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7195906BF48238F96B0510D75000910A519133F7
Validity
Not Before: Dec 6 11:06:36 2025 GMT
Not After : Dec 9 17:55:36 2025 GMT
Subject: CN=6D8AB3307C6FA9C4EFFF740598F51EDE2D941036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:20:2f:ea:55:0b:9a:77:87:66:4f:6e:26:ac:
9a:cb:aa:18:a7:9b:c5:ba:34:dd:47:f6:cb:dc:33:
4c:8f:8f:30:22:37:e2:10:cf:6f:47:fc:09:c2:3d:
c5:50:12:a4:86:48:1b:cb:25:ab:eb:41:0a:00:38:
ed:a3:20:52:cb:e7:a0:6f:a4:82:b0:94:cc:44:6c:
5c:fe:2a:19:84:4c:27:da:05:a2:52:09:82:52:98:
95:aa:0a:68:8d:da:62:13:7e:66:a5:b8:52:fc:23:
7c:17:53:7a:3a:94:a5:25:15:7a:04:20:04:d0:ed:
34:54:7b:86:c5:b7:dd:e3:dc:96:54:ee:a4:24:3c:
8f:d1:1b:e7:17:da:01:d6:44:53:16:c0:dd:9a:b2:
37:e3:aa:a9:0a:f3:7e:29:d2:9f:74:e6:61:a7:e5:
f6:22:8e:59:73:55:f8:2d:c0:ae:2d:6a:9b:53:f0:
ba:a9:e8:8a:67:04:12:d2:43:b5:50:cf:b2:9f:41:
2b:93:55:98:1d:c4:cb:e3:24:fc:0d:35:c7:92:a2:
16:b4:bd:0f:7f:69:dd:cb:66:43:22:d1:ab:cd:9a:
c8:da:a9:3d:a3:08:1e:eb:c3:36:71:13:c1:42:ef:
5f:c2:23:9e:ed:34:06:8b:2d:d6:50:9c:a2:2a:63:
7d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:8A:B3:30:7C:6F:A9:C4:EF:FF:74:05:98:F5:1E:DE:2D:94:10:36
X509v3 Authority Key Identifier:
keyid:71:95:90:6B:F4:82:38:F9:6B:05:10:D7:50:00:91:0A:51:91:33:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7195906BF48238F96B0510D75000910A519133F7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ae:e7:e8:e4:63:20:33:50:f3:2a:45:03:6f:de:d6:1c:c1:
3f:15:27:ea:38:ed:58:9c:49:09:00:91:4c:b0:84:cf:ee:ad:
22:00:04:37:47:4e:3a:d9:9c:6f:00:2f:1f:4c:75:75:4a:1a:
41:08:1a:f8:8e:68:04:e6:a2:21:b2:fa:52:f9:c5:23:40:09:
32:6f:94:75:7e:62:b8:b0:c6:c0:11:a6:4f:4f:1b:a1:3a:a7:
7d:fd:33:f5:fc:02:23:c4:23:df:79:4e:c8:52:92:6c:cf:a2:
42:1d:ca:79:76:7b:c4:31:39:93:2f:00:d2:0e:16:3a:e3:5b:
e7:1a:f1:cf:0c:1d:0b:4a:c9:0b:e4:e4:08:58:a7:0e:12:b3:
cb:77:31:35:ca:43:66:9f:13:79:f7:fb:11:76:08:34:8f:57:
e8:b6:e5:71:1f:f5:57:61:2c:f0:17:c4:90:4d:0d:18:33:34:
2e:11:7f:29:78:01:cd:67:74:99:d8:9f:b9:9c:fb:b0:dc:ec:
1b:c0:ee:f9:49:cc:14:3e:21:db:11:fc:43:49:68:ad:65:d6:
f0:82:c9:49:62:8e:ab:51:b7:28:e5:4a:f5:f4:9d:c8:26:12:
f0:31:b0:2c:e1:70:cb:eb:05:8f:68:e1:95:c9:bb:8a:cd:40:
e9:9c:7b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:41:44 2025 by rpki-client