This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft
File: 14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft (raw, json)
Hash identifier: cKyqbBCNhMyPY7oZEUK6Yr6RTJdffPPtU6/M8YyevNA=
Subject key identifier: F2:D7:FF:0B:B2:5B:3F:FB:BE:75:38:EA:B5:82:78:7A:4A:D7:BB:3E
Authority key identifier: 14:04:31:63:A8:BF:F5:06:00:F1:64:10:DE:27:B7:A0:DE:EC:1E:61
Certificate issuer: /CN=14043163A8BFF50600F16410DE27B7A0DEEC1E61
Certificate serial: 6E1FECFB3F0BFC686C0B62E0B28F77123F371D46
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14043163A8BFF50600F16410DE27B7A0DEEC1E61.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft
Manifest number: 01A0
Signing time: Wed 17 Dec 2025 03:11:23 +0000
Manifest this update: Wed 17 Dec 2025 03:06:23 +0000
Manifest next update: Sat 20 Dec 2025 13:08:23 +0000
Files and hashes: 1: 3130332e3136322e3135312e302f32342d3234203d3e20313431363536.roa (hash: 4gEYG74hLJoWqqDL/9mjAvBzy+wEC65juI9diH8YI3I=)
2: 3130332e3136322e3135302e302f32342d3234203d3e20313431363536.roa (hash: XzO2HW08c8tz8kihLQyrbNCIzWk3BylBcXWZmEuiX14=)
3: 14043163A8BFF50600F16410DE27B7A0DEEC1E61.crl (hash: llfx9eiKUn7iW0012yN5Oy8Ex1mfrv+1nZwXbthxyVU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.crl
rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14043163A8BFF50600F16410DE27B7A0DEEC1E61.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Dec 2025 13:08:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:1f:ec:fb:3f:0b:fc:68:6c:0b:62:e0:b2:8f:77:12:3f:37:1d:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14043163A8BFF50600F16410DE27B7A0DEEC1E61
Validity
Not Before: Dec 17 03:06:23 2025 GMT
Not After : Dec 20 13:08:23 2025 GMT
Subject: CN=F2D7FF0BB25B3FFBBE7538EAB582787A4AD7BB3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:ea:0b:3f:72:47:51:c3:ee:10:21:48:89:87:
ab:5d:ca:d2:0b:15:a6:1a:79:4b:82:4b:2e:13:f1:
6f:b7:03:82:b8:a5:23:ff:09:d7:5f:46:53:39:5f:
e0:8f:6e:ac:32:d3:56:7b:67:7b:77:63:c9:a0:8c:
03:9e:ec:5f:b0:7a:02:b3:44:e0:56:25:f6:51:71:
2c:5f:3e:b3:06:a7:fa:1c:06:09:40:b2:fa:31:eb:
a8:ff:30:46:13:d7:02:fb:66:f3:5b:1f:5d:ec:14:
a4:fa:eb:0b:f4:7a:6e:08:30:3d:3e:5a:70:89:a1:
d7:3a:16:a0:9a:61:22:12:08:ac:26:54:73:2f:ed:
07:0c:1d:4b:52:44:b9:4e:f5:87:d9:ad:3a:e0:19:
c4:13:f3:14:d1:97:9b:2d:e5:7b:2d:35:ae:15:f2:
e5:a1:9f:98:1f:e6:cd:c9:8c:1f:ed:9f:08:46:71:
26:2c:2e:9b:1d:c3:95:a5:6d:c2:d5:9a:bd:62:64:
c3:95:9d:d0:25:68:03:e5:2b:e8:ba:3c:24:7b:f5:
69:56:ea:88:ba:0d:f1:fe:41:b9:55:83:29:bb:83:
82:74:42:67:3d:f4:68:95:1d:5d:5e:02:18:16:88:
e7:cc:16:a5:5b:a3:46:2a:fc:69:33:a2:f2:ca:8b:
c5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D7:FF:0B:B2:5B:3F:FB:BE:75:38:EA:B5:82:78:7A:4A:D7:BB:3E
X509v3 Authority Key Identifier:
keyid:14:04:31:63:A8:BF:F5:06:00:F1:64:10:DE:27:B7:A0:DE:EC:1E:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14043163A8BFF50600F16410DE27B7A0DEEC1E61.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:17:33:0a:69:6f:f7:d4:48:b7:5a:ed:b6:b5:77:c4:43:ba:
7e:0b:15:10:76:18:8c:d3:a2:5a:1c:49:08:82:08:3d:6b:df:
c6:86:56:e0:35:14:e6:ec:c3:f5:4d:00:90:05:ba:55:96:14:
75:51:c2:17:d8:70:26:6e:41:30:56:e2:1a:75:f2:40:85:7f:
81:eb:5f:28:c7:77:ae:b7:e2:a8:e5:a8:61:7e:99:50:46:78:
d5:78:5a:ea:a9:a0:7c:36:ec:02:db:0d:c5:11:07:64:b6:bc:
5e:f0:1b:eb:9c:11:5b:b8:bb:b3:9e:f8:79:d0:bf:ca:ee:22:
99:60:68:09:aa:03:b5:6a:a8:55:c2:be:9a:b5:2b:bf:7e:b2:
9c:61:fb:25:08:71:ca:8d:44:f8:0c:9d:3c:ed:0e:95:ec:c4:
da:42:3d:09:2c:b7:f2:51:03:3a:ed:b1:bc:28:b5:4c:a9:5a:
2c:03:93:05:45:f8:62:be:ef:e5:64:99:c7:d3:e8:bd:1d:bc:
9c:8d:43:d7:4c:43:19:b3:6f:98:49:6c:0f:b6:74:49:5c:eb:
11:2c:f3:71:1e:ec:e4:28:30:b8:a5:d6:31:53:be:89:ec:f2:
82:a1:7d:fb:0f:e1:22:3f:c7:dd:87:a6:b3:53:fa:8f:50:20:
68:66:f4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 14:22:18 2025 by rpki-client