This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft
File: DBF597EA29EF8A70656446AF75CF33F0618E8282.mft (raw, json)
Hash identifier: sk2pEEmOo6AhapkltNcPzySfLLVNHIrF4fkbbu5nlp4=
Subject key identifier: E5:86:66:A3:12:08:17:B6:87:7E:47:7E:DD:C9:5B:3C:7F:98:87:F6
Authority key identifier: DB:F5:97:EA:29:EF:8A:70:65:64:46:AF:75:CF:33:F0:61:8E:82:82
Certificate issuer: /CN=DBF597EA29EF8A70656446AF75CF33F0618E8282
Certificate serial: 4E3BE83FD2DFDE45B438683AFE195059CCC76BBC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft
Manifest number: 052E
Signing time: Fri 05 Dec 2025 01:22:21 +0000
Manifest this update: Fri 05 Dec 2025 01:17:21 +0000
Manifest next update: Mon 08 Dec 2025 08:48:21 +0000
Files and hashes: 1: DBF597EA29EF8A70656446AF75CF33F0618E8282.crl (hash: b8xMupUXSW9xG/7rf5w52gGRr+NCYKa1XFqnrj+Qcoo=)
2: 3135302e3130372e3133322e302f32322d3234203d3e203233373536.roa (hash: fVRsxuz3woE7uahLGANS8nBiT+UdU+qUUJ2Y/SNoU9E=)
3: 3130332e3234322e3230342e302f32322d3234203d3e203233373536.roa (hash: WzW/Sss6A/kpJfugXeZWPxd++ZE3y6mEfaDI33YMU+M=)
4: 3131372e3130322e3232342e302f31392d3234203d3e203233373536.roa (hash: TuGeKAZ5K1Zu0PRUHP6LxUEiVAWHwbRLn6V580rSqpM=)
5: 323430363a363230303a3a2f33322d3438203d3e203233373536.roa (hash: RDF8kXfxQQ2EWR27pMBSl3bUi8DuM2mKbwzECDZeSOA=)
6: 3230322e362e3232342e302f32302d3234203d3e203233373536.roa (hash: RLSgg2xBR0eY1oQJ2Fkz63ShTm+IebfyQIgkaUmONdM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.crl
rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 08:48:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:3b:e8:3f:d2:df:de:45:b4:38:68:3a:fe:19:50:59:cc:c7:6b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBF597EA29EF8A70656446AF75CF33F0618E8282
Validity
Not Before: Dec 5 01:17:21 2025 GMT
Not After : Dec 8 08:48:21 2025 GMT
Subject: CN=E58666A3120817B6877E477EDDC95B3C7F9887F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c2:fc:5b:7d:31:c7:68:8c:c4:ed:86:1b:53:
a7:40:73:5d:01:74:4a:d6:c3:a0:ab:b3:b4:7d:a5:
05:13:db:23:68:19:b8:90:89:de:34:c0:d4:28:bc:
d0:43:aa:42:8a:e9:35:32:26:af:0e:f8:88:0d:26:
35:0a:ac:b7:95:00:75:86:5c:b9:82:1f:23:c1:eb:
a2:98:37:44:4c:29:87:1d:34:7a:2c:5d:77:59:45:
d0:98:8f:c6:f5:09:8a:e7:e7:e0:5b:c8:18:43:6c:
3e:54:88:8d:3e:83:aa:fc:71:4f:56:0d:f6:b9:6d:
9b:0d:50:d4:a7:c8:4e:64:68:a4:ec:e4:cb:74:06:
a3:f4:d4:12:79:e4:3a:ec:2a:41:45:92:63:ff:7c:
f0:b6:34:79:9b:e0:ec:0b:b9:60:cf:9f:c3:04:7a:
ea:27:dd:ab:49:b3:15:62:c0:56:43:41:6f:d7:05:
70:b7:2a:e9:e8:87:6d:8b:e1:ee:f0:dd:9e:b9:3c:
1b:ad:8b:75:b3:a5:e4:83:c3:4c:33:79:f8:ca:6f:
66:50:da:ab:b2:2f:66:5e:df:98:7a:2c:2c:6d:5f:
2e:82:95:b2:7c:52:42:79:f2:ad:94:83:db:12:a1:
6e:e9:58:24:5d:9d:e2:b6:2f:75:b4:f3:78:1a:36:
2c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:86:66:A3:12:08:17:B6:87:7E:47:7E:DD:C9:5B:3C:7F:98:87:F6
X509v3 Authority Key Identifier:
keyid:DB:F5:97:EA:29:EF:8A:70:65:64:46:AF:75:CF:33:F0:61:8E:82:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:9a:ae:d0:b0:b9:a5:73:16:58:8f:4e:ec:6e:4c:c1:c9:ea:
95:61:af:98:6b:d0:da:1c:d5:7a:78:45:9a:3d:6e:50:f9:ed:
0c:02:6c:f2:26:00:f4:b9:44:15:23:f0:10:59:53:5d:1c:f0:
d1:e0:4e:dc:5b:1c:45:33:63:44:5c:00:73:b5:85:6a:cc:b5:
39:99:3e:5f:d6:01:55:77:b5:8e:7a:ca:3e:a9:b8:2f:f1:b8:
18:61:b8:78:da:b4:04:57:4f:b8:35:54:2d:17:20:b1:25:0c:
a7:1c:06:24:10:aa:e8:34:10:34:cf:95:70:02:31:58:17:72:
bc:b6:30:8b:ea:ea:d5:7d:a2:cd:19:2b:18:0b:ce:0e:6f:5b:
d4:46:4e:e3:eb:4e:82:80:55:16:d9:01:c6:5f:2e:f0:79:84:
5e:05:95:cc:ca:fe:f8:01:fc:54:45:e1:45:b6:b7:43:f9:7e:
ec:29:1d:e9:b6:1c:64:e2:bb:09:e4:8a:30:60:86:87:c5:60:
c4:66:43:93:2a:bd:5b:47:8a:19:b1:a6:51:6c:63:23:f6:54:
92:b3:58:1f:c2:91:ad:16:c4:3d:a3:75:b7:6e:70:d7:c6:44:
39:74:77:ee:7c:e6:1a:fc:04:fa:8c:c8:ff:0f:d8:51:2a:d7:
fb:8e:e9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:59:26 2025 by rpki-client