This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft
File: 4A906D4F534B26A0E62898882630292936CEA54A.mft (raw, json)
Hash identifier: wXZ9iytTTDYLwv6UJAMhGS4VrmMoxIXw9mVU4ZavxB0=
Subject key identifier: A2:74:C5:E3:5E:DC:4D:8B:AE:54:D4:0E:34:A4:CA:4E:FC:C4:80:F6
Authority key identifier: 4A:90:6D:4F:53:4B:26:A0:E6:28:98:88:26:30:29:29:36:CE:A5:4A
Certificate issuer: /CN=4A906D4F534B26A0E62898882630292936CEA54A
Certificate serial: 3F2713457EBAB060770555DCD555DAE80F6BF3B6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft
Manifest number: 015E
Signing time: Fri 05 Dec 2025 23:51:45 +0000
Manifest this update: Fri 05 Dec 2025 23:46:45 +0000
Manifest next update: Tue 09 Dec 2025 05:40:45 +0000
Files and hashes: 1: 4A906D4F534B26A0E62898882630292936CEA54A.crl (hash: Rvm74mG4zKQDKNIRYfIp7wDna0b5E9zp+H3gk0c2W1M=)
2: 3130332e3137312e38332e302f32342d3234203d3e20313432333733.roa (hash: 0SClEliKB0AlO5DzEurqFtVJ6yiiJ9eJczPmmj9dw18=)
3: 3130332e3137312e38322e302f32342d3234203d3e20313432333733.roa (hash: WMWtIWXP3rHM6u9VZyFOIHKvW80yliOmPYEco+tmVZQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.crl
rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 05:40:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:27:13:45:7e:ba:b0:60:77:05:55:dc:d5:55:da:e8:0f:6b:f3:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A906D4F534B26A0E62898882630292936CEA54A
Validity
Not Before: Dec 5 23:46:45 2025 GMT
Not After : Dec 9 05:40:45 2025 GMT
Subject: CN=A274C5E35EDC4D8BAE54D40E34A4CA4EFCC480F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fe:6b:c4:17:f3:78:01:79:2e:95:df:f0:63:
71:f0:1a:8c:b8:41:00:df:df:6a:0a:d5:24:24:21:
19:82:eb:00:55:fd:e6:53:08:5a:31:5a:97:14:3a:
b0:07:d3:78:47:a5:a8:b8:b9:2e:10:0d:2a:11:90:
aa:b9:b7:98:da:0f:d6:8f:0a:b0:fa:1d:80:95:e4:
5d:ef:d0:59:2d:2f:a9:65:11:ae:b6:fe:d2:7d:00:
cb:9c:3e:6a:f0:be:a8:e7:6b:e2:7c:45:7a:40:ab:
2e:83:cc:9f:3f:ae:3c:96:40:16:24:21:d5:f3:97:
9d:dc:e5:86:88:e2:02:0a:60:8d:ef:4d:ac:16:dd:
78:74:dc:e9:b1:42:43:71:3c:72:30:bd:a1:a2:44:
75:d4:d2:ec:3c:2e:a6:6b:97:6d:13:44:8e:d1:44:
5c:55:e1:9e:53:1c:1a:33:16:fd:2e:dc:0e:6a:a0:
cc:a0:fd:5c:b4:6f:f2:58:b0:1e:39:ff:1c:9b:84:
d1:b6:bc:83:2e:09:ab:49:79:06:59:9d:e0:f7:1b:
f7:05:8f:36:26:22:84:23:12:ab:fd:24:94:34:89:
f4:54:ae:13:9a:48:13:65:d6:64:11:29:4c:c3:52:
9e:17:75:99:35:a0:c7:8d:d1:26:5d:4e:41:4c:1b:
74:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:74:C5:E3:5E:DC:4D:8B:AE:54:D4:0E:34:A4:CA:4E:FC:C4:80:F6
X509v3 Authority Key Identifier:
keyid:4A:90:6D:4F:53:4B:26:A0:E6:28:98:88:26:30:29:29:36:CE:A5:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:96:68:9f:a4:c9:bb:47:33:42:65:bb:e0:38:48:ee:c9:f0:
9e:1d:88:0e:6b:55:8e:54:f7:4e:73:a3:c2:66:d8:57:c7:ba:
3f:57:c9:38:a1:98:0c:4a:c1:3e:d3:7f:fb:8a:38:d5:ec:c2:
92:7f:49:d9:84:c6:70:a4:0f:95:26:0a:86:af:ed:9e:5f:f3:
01:6c:62:87:36:3d:ef:a3:4b:c4:16:2b:87:d8:62:5c:b8:1a:
72:d4:34:a5:6d:f6:c9:c5:73:79:ca:b3:22:1a:c6:f6:9e:5a:
37:99:75:69:1b:7b:57:c6:de:9f:2f:f6:19:4a:3b:48:7e:37:
5e:f1:bf:e3:ac:20:2c:8e:25:6d:81:a9:9a:91:39:86:ce:93:
66:93:a3:d6:e1:60:e8:11:40:81:9d:3c:36:70:0c:4e:52:a3:
54:1e:9b:3a:32:39:f0:b1:dc:d9:2e:7a:fd:f5:13:94:88:fc:
da:9d:86:b3:df:d6:13:49:d0:67:f1:be:6d:e2:f5:fa:5d:1e:
ed:52:cc:58:6f:fa:1d:2d:c8:b0:ee:82:2a:2b:44:73:47:6e:
e3:e6:7f:c1:95:69:dc:d2:a9:d3:f8:0b:ec:11:a4:67:f3:94:
80:c5:48:07:30:1f:ed:98:3b:4e:ba:a8:eb:39:e0:7b:76:94:
a8:a0:12:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:44:28 2025 by rpki-client