This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft
File: 48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft (raw, json)
Hash identifier: M9BF4Uyw1io/tbIRc5gP+Szpumzwzwe8evy4GrITUXI=
Subject key identifier: 19:00:61:0F:6A:E7:CF:7F:E6:0E:95:38:52:55:DF:2C:55:30:B7:EE
Authority key identifier: 48:C1:26:F9:8E:BA:7D:2F:C4:EA:85:78:A5:46:9B:E9:0C:AF:F6:77
Certificate issuer: /CN=48C126F98EBA7D2FC4EA8578A5469BE90CAFF677
Certificate serial: 39B2C96BE300A03858264F39E094EF759C9E8CB5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft
Manifest number: 0277
Signing time: Wed 17 Dec 2025 17:31:50 +0000
Manifest this update: Wed 17 Dec 2025 17:26:50 +0000
Manifest next update: Sat 20 Dec 2025 23:19:50 +0000
Files and hashes: 1: 48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.crl (hash: 8gFXj8W5OqeR7iqJzS7WKsUOYbie0Rj682mwz7DDh0E=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.crl
rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Dec 2025 23:19:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:b2:c9:6b:e3:00:a0:38:58:26:4f:39:e0:94:ef:75:9c:9e:8c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48C126F98EBA7D2FC4EA8578A5469BE90CAFF677
Validity
Not Before: Dec 17 17:26:50 2025 GMT
Not After : Dec 20 23:19:50 2025 GMT
Subject: CN=1900610F6AE7CF7FE60E95385255DF2C5530B7EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a2:f3:f8:2f:13:22:ef:be:65:86:38:4c:de:
f5:b0:e0:ac:ae:87:3c:dc:75:0b:16:fa:82:7b:0b:
ae:cd:86:4b:08:1a:22:4a:63:c1:15:e0:1a:a8:d0:
35:9e:05:25:64:63:db:0b:84:ac:cf:79:79:a7:f1:
ea:57:30:a1:8a:a9:f2:07:a4:be:88:8d:8b:93:6f:
3a:7f:0c:3c:c1:fd:12:9d:80:1a:bc:73:1a:c1:ad:
d2:6c:e4:1f:b0:c5:5c:95:13:85:ef:c8:b5:c6:8b:
99:17:83:69:e0:69:a3:71:04:b6:c1:7d:18:66:2c:
a9:75:c1:e4:e5:ec:f8:a3:7f:ae:cb:9d:57:63:d9:
a4:46:11:f8:05:14:03:8d:ab:c9:5d:f7:51:c2:51:
90:66:fa:e4:b4:9e:87:b3:97:63:80:f9:68:b1:de:
65:03:19:57:8c:e0:96:97:fe:c3:ac:46:c2:3d:fd:
56:0c:9f:38:97:a3:7a:a3:f7:5d:20:da:2b:55:55:
76:af:8b:cb:8e:36:11:ee:d3:76:9f:12:7a:6a:df:
25:1e:40:33:d4:37:ed:31:66:7a:01:5b:ec:0b:1c:
96:45:1f:2a:a2:54:0c:ca:c6:c8:2f:be:2b:18:f4:
4b:f2:f6:fb:2f:54:08:94:e6:8a:2e:cf:d4:09:cc:
cb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:00:61:0F:6A:E7:CF:7F:E6:0E:95:38:52:55:DF:2C:55:30:B7:EE
X509v3 Authority Key Identifier:
keyid:48:C1:26:F9:8E:BA:7D:2F:C4:EA:85:78:A5:46:9B:E9:0C:AF:F6:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:4b:5b:3d:87:14:f5:55:fd:15:b8:1e:52:a8:9e:93:a1:da:
4f:57:a2:29:5d:34:72:b7:ee:05:ed:ac:1e:d5:e7:da:ee:7d:
76:2c:a1:4b:c5:d3:9a:80:83:3c:bd:8c:5b:bd:32:ca:eb:09:
18:da:33:8f:a4:f3:46:87:c6:f6:3d:e6:00:99:bb:ae:7e:db:
3b:6a:ae:d4:1c:1b:6b:82:8e:88:54:a6:cd:5d:c2:46:9b:e5:
87:0a:c4:48:8e:e8:58:d0:d9:57:f2:d9:36:e2:03:b1:a6:69:
42:f4:cd:a0:d4:43:e3:14:00:f2:5f:07:a6:de:cf:f7:40:f5:
35:7f:36:7f:b8:ef:ff:eb:e8:88:97:fa:6d:76:4d:47:20:c8:
cf:74:04:bd:0c:12:b9:87:e5:5e:82:2f:97:25:e2:88:d2:f6:
15:95:c9:7e:ca:42:b7:48:41:93:d7:3e:82:10:67:67:2c:23:
b9:fd:6d:e5:77:08:01:14:e6:8a:64:a2:a0:5b:32:74:2a:94:
67:49:8a:23:ce:17:14:8e:20:fe:40:15:f7:ef:fc:5a:dd:2d:
60:9b:92:0f:75:2c:7a:5c:01:6c:f3:44:ae:be:35:e5:ee:a4:
b1:5f:73:e5:7f:ae:bc:33:28:e2:56:f9:30:5d:66:cd:27:80:
f5:14:04:7e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUObLJa+MAoDhYJk854JTvdZyejLUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDhDMTI2Rjk4RUJBN0QyRkM0RUE4NTc4QTU0NjlCRTkw
Q0FGRjY3NzAeFw0yNTEyMTcxNzI2NTBaFw0yNTEyMjAyMzE5NTBaMDMxMTAvBgNV
BAMTKDE5MDA2MTBGNkFFN0NGN0ZFNjBFOTUzODUyNTVERjJDNTUzMEI3RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVovP4LxMi775lhjhM3vWw4Kyu
hzzcdQsW+oJ7C67NhksIGiJKY8EV4Bqo0DWeBSVkY9sLhKzPeXmn8epXMKGKqfIH
pL6IjYuTbzp/DDzB/RKdgBq8cxrBrdJs5B+wxVyVE4XvyLXGi5kXg2ngaaNxBLbB
fRhmLKl1weTl7Pijf67LnVdj2aRGEfgFFAONq8ld91HCUZBm+uS0noezl2OA+Wix
3mUDGVeM4JaX/sOsRsI9/VYMnziXo3qj910g2itVVXavi8uONhHu03afEnpq3yUe
QDPUN+0xZnoBW+wLHJZFHyqiVAzKxsgvvisY9Evy9vsvVAiU5oouz9QJzMvPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUGQBhD2rnz3/mDpU4UlXfLFUwt+4wHwYDVR0j
BBgwFoAUSMEm+Y66fS/E6oV4pUab6Qyv9ncwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
MDgyYmEwZC0yN2UxLTQwMDAtYWNmYS1hMTllYjllMGY2MzcvMC80OEMxMjZGOThF
QkE3RDJGQzRFQTg1NzhBNTQ2OUJFOTBDQUZGNjc3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDhDMTI2Rjk4RUJBN0QyRkM0RUE4NTc4QTU0NjlCRTkwQ0FG
RjY3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjA4MmJhMGQtMjdlMS00MDAwLWFj
ZmEtYTE5ZWI5ZTBmNjM3LzAvNDhDMTI2Rjk4RUJBN0QyRkM0RUE4NTc4QTU0NjlC
RTkwQ0FGRjY3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFxLWz2HFPVV/RW4HlKonpOh2k9XoildNHK3
7gXtrB7V59rufXYsoUvF05qAgzy9jFu9MsrrCRjaM4+k80aHxvY95gCZu65+2ztq
rtQcG2uCjohUps1dwkab5YcKxEiO6FjQ2Vfy2TbiA7GmaUL0zaDUQ+MUAPJfB6be
z/dA9TV/Nn+47//r6IiX+m12TUcgyM90BL0MErmH5V6CL5cl4ojS9hWVyX7KQrdI
QZPXPoIQZ2csI7n9beV3CAEU5opkoqBbMnQqlGdJiiPOFxSOIP5AFffv/FrdLWCb
kg91LHpcAWzzRK6+NeXupLFfc+V/rrwzKOJW+TBdZs0ngPUUBH4=
-----END CERTIFICATE-----
Generated at Thu Dec 18 13:00:07 2025 by rpki-client