This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/7D9756BA26383A8A80C65F2856105B0FF5154379.mft
File: 7D9756BA26383A8A80C65F2856105B0FF5154379.mft (raw, json)
Hash identifier: P/LR5mi4cuwQoebzx1w7lnHwRi2MWYNBydnW56cEcfc=
Subject key identifier: 54:F7:B8:D5:87:BF:AA:FE:09:03:8A:41:AA:86:22:0C:87:EE:64:8E
Authority key identifier: 7D:97:56:BA:26:38:3A:8A:80:C6:5F:28:56:10:5B:0F:F5:15:43:79
Certificate issuer: /CN=7D9756BA26383A8A80C65F2856105B0FF5154379
Certificate serial: 4D170D17A3573FA921167991431E693BD0CC70DD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9756BA26383A8A80C65F2856105B0FF5154379.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/7D9756BA26383A8A80C65F2856105B0FF5154379.mft
Manifest number: 01F4
Signing time: Tue 16 Dec 2025 09:32:22 +0000
Manifest this update: Tue 16 Dec 2025 09:27:22 +0000
Manifest next update: Fri 19 Dec 2025 15:06:22 +0000
Files and hashes: 1: 7D9756BA26383A8A80C65F2856105B0FF5154379.crl (hash: cutYmHCeDqTGxG2s7reze0uQ4SHIyURBwS68ri7J3v4=)
2: 3130332e3134372e3134302e302f32332d3234203d3e203137373639.roa (hash: jmjpTwFqJBkm3124jZo6u0K/VkEahqOKTR/f2jeIcks=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/7D9756BA26383A8A80C65F2856105B0FF5154379.crl
rsync://repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/7D9756BA26383A8A80C65F2856105B0FF5154379.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9756BA26383A8A80C65F2856105B0FF5154379.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Dec 2025 15:06:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:17:0d:17:a3:57:3f:a9:21:16:79:91:43:1e:69:3b:d0:cc:70:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D9756BA26383A8A80C65F2856105B0FF5154379
Validity
Not Before: Dec 16 09:27:22 2025 GMT
Not After : Dec 19 15:06:22 2025 GMT
Subject: CN=54F7B8D587BFAAFE09038A41AA86220C87EE648E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b7:41:87:73:52:4c:b4:2a:2f:fc:85:aa:44:
5e:8e:37:35:d2:48:05:ff:53:86:5c:66:8f:e1:53:
8d:d1:e8:8a:e4:54:9a:27:26:93:a6:7c:fb:ec:12:
6c:b6:32:33:70:d8:bd:dd:2e:de:65:b9:13:48:c9:
99:53:3b:6d:3b:14:b9:7a:ad:e5:50:a6:f7:15:57:
ef:b5:8d:5e:5c:0d:be:ab:d6:ee:c9:90:c3:55:f4:
bb:03:55:68:05:2f:88:b2:83:87:46:34:39:52:97:
90:13:52:fe:03:34:d0:e6:bc:4e:b4:c5:8d:d9:9b:
ba:5f:08:53:a9:32:68:e1:81:c6:e4:29:a7:eb:b0:
01:dc:98:fa:d8:ac:32:fe:9c:1c:f6:54:8b:04:71:
91:a8:67:17:63:36:4b:8b:b7:17:9a:40:0b:14:ba:
bb:bc:e0:31:43:a3:22:9c:4f:18:56:78:69:f0:16:
19:8a:ff:27:f6:b0:30:85:8c:e1:87:c2:72:57:32:
fd:0f:15:05:f5:cd:57:f1:a8:89:69:f0:f2:46:5d:
36:69:d0:e7:d1:3c:23:4a:cd:a9:ef:da:fb:9b:21:
62:8d:24:3b:c3:e7:e8:a4:2f:1e:7b:74:dd:a1:76:
76:de:d6:ee:f0:02:aa:ed:5b:2f:17:b4:10:38:62:
8f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F7:B8:D5:87:BF:AA:FE:09:03:8A:41:AA:86:22:0C:87:EE:64:8E
X509v3 Authority Key Identifier:
keyid:7D:97:56:BA:26:38:3A:8A:80:C6:5F:28:56:10:5B:0F:F5:15:43:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/7D9756BA26383A8A80C65F2856105B0FF5154379.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9756BA26383A8A80C65F2856105B0FF5154379.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/7D9756BA26383A8A80C65F2856105B0FF5154379.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:5d:38:32:b7:1f:bb:7c:41:f0:d4:0c:3c:62:6b:48:75:0e:
f4:67:fa:41:65:67:13:b2:1a:6b:bf:2f:a4:35:3b:c1:8a:e3:
82:82:47:71:d8:10:aa:8b:e3:7c:85:98:63:91:0c:a6:1e:c9:
1c:cf:1f:7a:76:e1:be:ee:e7:2f:d2:1c:35:2f:76:44:11:f0:
7e:56:6f:a4:dc:0a:8b:58:f3:c7:ec:0e:0a:97:e6:ba:eb:b5:
5f:2c:9f:21:74:a6:16:6f:b9:4a:9a:da:29:fd:3b:2d:2b:f2:
da:c0:47:a0:63:b4:29:2c:7f:97:12:7b:91:b8:77:6d:d5:71:
4b:72:f7:77:1f:ac:dc:49:e7:16:1b:d5:e9:a7:3f:f8:9f:c5:
26:b2:32:22:b0:39:51:b0:eb:76:d3:c3:6d:3e:58:f9:0d:5a:
4c:0f:4b:94:0b:8d:98:bf:5d:fa:6e:b9:42:de:09:3f:84:e2:
be:45:f6:f3:95:23:45:c5:06:99:25:08:8f:6c:42:3e:4c:79:
00:01:e8:a7:cb:c3:7f:23:87:41:46:65:78:65:a7:f9:f0:63:
cf:03:a1:cd:02:b6:8a:41:49:ef:bb:1c:a9:7d:a4:da:6f:9c:
5b:09:d4:16:5c:4b:19:4b:11:a9:91:86:79:24:bd:9a:8b:8c:
f0:5c:a5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 05:48:43 2025 by rpki-client