This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/7D9756BA26383A8A80C65F2856105B0FF5154379.mft
File: 7D9756BA26383A8A80C65F2856105B0FF5154379.mft (raw, json)
Hash identifier: n05E2UwcHaqPrWt/Bw0LMRjXrXUag4WIdxsS41YFdmY=
Subject key identifier: AC:9A:DF:7B:3F:5E:10:30:39:88:AA:CE:A1:C6:D3:23:30:F2:2A:A1
Authority key identifier: 7D:97:56:BA:26:38:3A:8A:80:C6:5F:28:56:10:5B:0F:F5:15:43:79
Certificate issuer: /CN=7D9756BA26383A8A80C65F2856105B0FF5154379
Certificate serial: 64322DBFD7C1F35E668039D6C688DAEA69065F23
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9756BA26383A8A80C65F2856105B0FF5154379.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/7D9756BA26383A8A80C65F2856105B0FF5154379.mft
Manifest number: 01EF
Signing time: Fri 05 Dec 2025 02:52:22 +0000
Manifest this update: Fri 05 Dec 2025 02:47:22 +0000
Manifest next update: Mon 08 Dec 2025 10:21:22 +0000
Files and hashes: 1: 7D9756BA26383A8A80C65F2856105B0FF5154379.crl (hash: t/9se/VWo9wNRlj6jd5bnX6PxvXx3qTRJtyk889kCng=)
2: 3130332e3134372e3134302e302f32332d3234203d3e203137373639.roa (hash: jmjpTwFqJBkm3124jZo6u0K/VkEahqOKTR/f2jeIcks=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/7D9756BA26383A8A80C65F2856105B0FF5154379.crl
rsync://repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/7D9756BA26383A8A80C65F2856105B0FF5154379.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9756BA26383A8A80C65F2856105B0FF5154379.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 10:21:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:32:2d:bf:d7:c1:f3:5e:66:80:39:d6:c6:88:da:ea:69:06:5f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D9756BA26383A8A80C65F2856105B0FF5154379
Validity
Not Before: Dec 5 02:47:22 2025 GMT
Not After : Dec 8 10:21:22 2025 GMT
Subject: CN=AC9ADF7B3F5E10303988AACEA1C6D32330F22AA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:53:f4:77:13:74:91:eb:b5:ba:74:62:61:d4:
c5:ad:f5:e9:c8:c5:64:46:68:1a:44:e2:3f:d0:bc:
27:25:85:1b:e5:ac:3b:c9:3b:16:91:61:55:7e:95:
0a:05:b9:b7:dd:f5:55:4f:ab:55:53:f7:c6:bc:ec:
18:ba:37:9a:83:83:ce:be:8e:be:8e:89:f2:ed:31:
b6:38:e3:c7:03:ee:02:95:b6:da:52:e8:63:06:46:
ef:1d:75:9b:07:b3:08:d9:45:5b:57:bb:91:f7:7b:
50:55:2a:3e:b4:5e:c9:c1:df:5d:c2:a3:98:94:0e:
7f:49:e4:da:e9:51:c5:5a:d5:1e:a4:f5:b8:33:f5:
d8:f3:2a:90:3e:fb:08:30:c4:f9:87:f3:99:e3:a2:
ca:39:f9:b2:b0:7d:d7:de:74:14:04:1a:9f:41:22:
66:ef:0d:1d:60:83:b7:c6:d2:08:4d:f5:4f:57:24:
73:be:4c:37:e5:0d:20:8c:07:78:65:2b:d2:e5:47:
11:5e:d3:88:5f:7e:a1:83:83:7b:79:2e:9b:74:c2:
25:49:e4:ab:8e:a2:4b:ad:0a:94:1f:65:47:1e:f9:
42:7c:ab:33:40:52:0a:bf:8c:96:2e:a6:87:aa:a7:
60:f1:32:e8:7d:33:ba:2c:b7:e1:77:a1:07:f4:76:
d2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9A:DF:7B:3F:5E:10:30:39:88:AA:CE:A1:C6:D3:23:30:F2:2A:A1
X509v3 Authority Key Identifier:
keyid:7D:97:56:BA:26:38:3A:8A:80:C6:5F:28:56:10:5B:0F:F5:15:43:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/7D9756BA26383A8A80C65F2856105B0FF5154379.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9756BA26383A8A80C65F2856105B0FF5154379.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/7D9756BA26383A8A80C65F2856105B0FF5154379.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:aa:5f:08:0e:d9:2c:dc:c8:a2:f2:7c:d8:3b:32:27:ea:21:
23:87:08:34:1b:e2:da:b2:e9:55:bd:62:33:02:ab:e9:64:39:
4b:08:ab:ce:61:70:eb:d0:3f:0e:50:12:48:f3:40:1b:e3:53:
21:8c:05:51:9d:9f:ea:89:e0:20:cb:bc:a6:18:7b:23:6b:5b:
5a:9a:bd:35:ab:30:1b:3d:0f:1e:a8:2b:23:b8:a6:a9:58:7f:
35:5c:72:95:df:3c:e6:41:e7:ee:f4:7c:7a:b7:2b:d9:59:50:
e7:99:d4:2e:ca:05:62:9c:a2:bc:42:5f:53:46:72:24:1e:c6:
00:e7:ed:05:70:09:4e:00:c2:30:07:ad:f7:0c:ac:3c:49:af:
c8:21:96:c8:b0:1f:37:75:ac:4c:e6:4c:21:98:1c:26:e9:83:
88:ac:28:22:05:ea:29:9e:bb:94:e4:ec:4b:22:dc:de:09:4a:
24:85:f7:81:14:b8:8d:d7:ed:b1:61:ff:da:a4:16:99:07:04:
13:4d:1a:50:57:b1:6a:0e:f8:c2:db:0e:67:3f:b7:92:a2:39:
90:84:ea:3d:4f:2d:ee:b6:8c:a7:0e:14:86:82:a8:a4:f9:c1:
59:ab:eb:c3:ae:d3:f4:bf:22:31:d9:f4:9e:2e:2c:59:59:13:
33:82:03:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:14:53 2025 by rpki-client