This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.mft
File: 92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.mft (raw, json)
Hash identifier: bp9OtFs8u+KZ8TRGfuWog6qe9BcAayMIcimV2P2NnAM=
Subject key identifier: DD:92:1F:F1:32:F8:AF:DE:67:A1:6D:A6:B4:8D:65:D0:24:26:ED:55
Authority key identifier: 92:E0:AE:79:CB:F4:6A:2D:C2:4C:DD:3A:7F:D4:8A:84:2B:CF:EE:8D
Certificate issuer: /CN=92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D
Certificate serial: 51B87C91F61B05CEE22BD9F020BD4439339F47C3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.mft
Manifest number: 0114
Signing time: Sat 06 Dec 2025 19:11:09 +0000
Manifest this update: Sat 06 Dec 2025 19:06:09 +0000
Manifest next update: Wed 10 Dec 2025 01:50:09 +0000
Files and hashes: 1: 3135372e32302e3233362e302f32342d3234203d3e203538333639.roa (hash: bfQroZp46y/yg4SRsgG4Dw7Km0ZcaitbZyshPVWtdM8=)
2: 92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.crl (hash: wTpA0Z7SuY3AIxAD/JUgAojJjiUkJLhVnbCBoubmcU8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.crl
rsync://repo-rpki.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 06:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:b8:7c:91:f6:1b:05:ce:e2:2b:d9:f0:20:bd:44:39:33:9f:47:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D
Validity
Not Before: Dec 6 19:06:09 2025 GMT
Not After : Dec 10 01:50:09 2025 GMT
Subject: CN=DD921FF132F8AFDE67A16DA6B48D65D02426ED55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8f:34:dc:f0:5d:20:67:c6:83:56:70:7a:05:
5b:29:3c:24:08:72:c5:ad:10:08:1f:f2:7a:27:8b:
d0:57:f6:ab:f3:8c:1e:21:84:74:21:90:f8:7c:35:
59:ed:ae:8f:8e:f0:3b:88:fa:45:a9:e0:0b:e7:22:
64:af:67:3e:3b:0b:b5:35:0d:6c:4e:67:b5:f5:40:
ee:10:e3:55:d6:37:4b:5f:2b:30:40:a0:cf:e6:0e:
21:08:da:12:1f:c2:e8:e5:3c:3c:80:b6:77:47:fd:
36:c2:d3:a2:d3:c5:2c:1b:a2:b3:0b:ca:9a:3d:25:
26:e4:68:03:6c:28:49:a6:e5:c7:63:48:1a:97:b6:
a4:43:de:4e:0b:74:83:01:2d:2d:38:a2:34:36:00:
17:56:a6:12:8c:22:b8:97:26:58:93:82:9c:22:c7:
0d:8a:20:cb:3a:29:9f:9b:ce:1b:c1:d1:4b:65:65:
7d:dc:75:01:01:90:62:b5:5a:b1:2b:fe:f3:5e:ae:
68:47:f5:90:0e:01:6c:a6:d4:ab:f9:5c:74:29:c5:
09:13:43:65:29:f8:74:73:fb:94:c7:93:87:bf:82:
b5:c1:ff:3b:ab:3e:7e:1e:5f:17:6c:7d:5e:97:70:
fd:09:b8:c6:63:28:d8:ac:89:13:24:93:d7:2f:de:
24:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:92:1F:F1:32:F8:AF:DE:67:A1:6D:A6:B4:8D:65:D0:24:26:ED:55
X509v3 Authority Key Identifier:
keyid:92:E0:AE:79:CB:F4:6A:2D:C2:4C:DD:3A:7F:D4:8A:84:2B:CF:EE:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:1a:09:f8:7b:42:87:a6:4a:5c:c0:fc:93:ea:85:32:95:7b:
c8:af:de:ff:7b:9d:22:31:f0:6b:fc:32:79:7d:44:93:e7:28:
70:70:e0:0e:1d:f1:08:7b:0e:97:03:1f:9d:fc:2c:81:d9:42:
37:32:c0:0a:44:74:74:ed:2a:c8:dd:91:b0:8f:fa:e1:3f:52:
ad:8c:2a:ba:a5:9e:f6:5e:8d:1b:63:d8:a0:9b:a2:55:1c:fa:
a6:da:71:0e:61:56:8f:27:f3:62:9f:97:a3:4e:2a:0a:bf:61:
6e:6b:53:e5:79:e5:a6:3a:cf:c4:77:e2:da:30:6f:d0:7a:f1:
f7:66:70:02:2f:2d:63:fb:74:99:fd:bf:fc:ce:ad:b1:c8:64:
2d:9c:14:dc:be:81:c2:11:36:ec:e8:7e:94:ae:23:d8:d0:bc:
6b:f4:9a:75:05:64:0e:22:cb:d8:93:20:e2:bb:a2:50:06:67:
ce:d7:9e:cd:b9:a3:57:78:b4:4e:b9:3e:b6:4d:89:6c:1d:84:
b9:c3:9e:de:72:03:b2:a0:d1:cd:b3:6b:73:f0:44:66:4b:b5:
e7:11:7e:af:3d:3b:16:81:69:51:cd:42:5a:06:bd:33:6a:b9:
81:50:0f:9c:35:b8:0f:71:d1:ea:46:2e:57:8e:43:9e:d0:6e:
f6:50:f5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 09:21:09 2025 by rpki-client