This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft
File: D51CE7B1B9196EF73BFF65318453095C925ECF91.mft (raw, json)
Hash identifier: yiNw8au+k3OZQAAe1Bv8aRq7JqpEYD2wKBeKoJg32bU=
Subject key identifier: C0:1F:9F:5A:33:5E:C6:90:01:60:DB:87:4B:7C:8D:92:E0:87:17:B4
Authority key identifier: D5:1C:E7:B1:B9:19:6E:F7:3B:FF:65:31:84:53:09:5C:92:5E:CF:91
Certificate issuer: /CN=D51CE7B1B9196EF73BFF65318453095C925ECF91
Certificate serial: 45E6DB2162B02BD12C04BDE88722B407C24E3C78
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft
Manifest number: 04F6
Signing time: Fri 05 Dec 2025 04:21:18 +0000
Manifest this update: Fri 05 Dec 2025 04:16:18 +0000
Manifest next update: Mon 08 Dec 2025 05:58:18 +0000
Files and hashes: 1: 3130332e3134362e3132392e302f32342d3234203d3e20313430303238.roa (hash: 1Ph7pIbfyLL/MFd5kaSHsFP+/qk1l1ex5P/+8l18KxM=)
2: 3130332e3134362e3132382e302f32342d3234203d3e20313430303238.roa (hash: gicJjzX38cvUlj+q/M4Y/XP1+pLgazBAyQOFz8mgKiM=)
3: D51CE7B1B9196EF73BFF65318453095C925ECF91.crl (hash: nihiU/IarchVzDN1/qTXNS6WzloYX98oybdrRW6xDB4=)
4: 3130332e3134362e3132382e302f32332d3233203d3e20313430303238.roa (hash: yKK3Hq8hEk1LGbPgkhx2NEZ4T23a1BRrLBg1d7QrEfc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.crl
rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 05:58:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:e6:db:21:62:b0:2b:d1:2c:04:bd:e8:87:22:b4:07:c2:4e:3c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D51CE7B1B9196EF73BFF65318453095C925ECF91
Validity
Not Before: Dec 5 04:16:18 2025 GMT
Not After : Dec 8 05:58:18 2025 GMT
Subject: CN=C01F9F5A335EC6900160DB874B7C8D92E08717B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:96:83:3a:c6:91:63:b1:65:22:dd:ac:7a:ba:
d4:ed:07:3c:07:44:be:d0:82:9c:bd:4a:04:41:89:
6f:46:3b:1a:b2:80:b0:db:83:5a:c1:f8:3c:fe:24:
e8:e6:a0:21:e2:dc:b7:6a:42:7d:9d:b4:ea:02:35:
5c:0e:15:ac:0a:e3:05:57:e0:09:0f:bf:40:1f:81:
0f:70:80:6f:f7:48:76:fb:e0:f4:2b:cf:2a:4e:a0:
ac:e1:f7:ec:a2:6b:ac:22:be:ac:1e:c5:70:4a:5f:
e8:5c:4f:f8:77:23:97:f3:95:b8:26:ec:ec:d8:72:
61:a3:f3:04:22:da:0d:73:52:69:c5:d9:7f:1b:ba:
a3:b0:a3:03:1e:23:7e:05:7f:a9:d1:91:b4:9e:de:
9a:4d:f1:9d:6a:dd:a8:cb:9e:27:7d:a5:ff:8f:55:
27:c7:c9:32:f5:3b:ca:02:bb:16:22:a5:0c:56:b4:
5f:20:c4:d5:c7:7f:8d:3f:76:67:05:f6:87:64:b8:
57:e1:ba:ae:32:aa:4d:2a:80:96:c4:84:7e:46:53:
7b:88:b7:89:f2:a4:2a:95:6c:a1:40:6d:ea:42:59:
e5:39:71:22:ba:31:88:d3:30:54:f8:2a:0a:17:8b:
5d:e3:1c:46:0f:ef:fa:e1:41:0e:d3:bd:32:b0:89:
4c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1F:9F:5A:33:5E:C6:90:01:60:DB:87:4B:7C:8D:92:E0:87:17:B4
X509v3 Authority Key Identifier:
keyid:D5:1C:E7:B1:B9:19:6E:F7:3B:FF:65:31:84:53:09:5C:92:5E:CF:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a6:bb:f7:9e:8e:f3:22:66:fa:35:91:69:c8:8e:c4:e4:73:
b2:fa:27:20:2a:e5:d4:c9:f4:0b:7d:9d:e8:7f:ba:ea:c2:50:
da:79:77:7d:f6:31:02:b8:5b:8c:42:93:e8:23:5b:12:ed:82:
77:cf:b9:7b:5b:38:de:d7:36:17:35:3d:37:ed:56:ba:55:b3:
35:3a:8c:bb:f7:35:47:b4:6d:74:43:34:60:d0:af:52:63:42:
d4:ee:5a:29:ad:7e:17:98:0e:f1:79:8b:93:0e:0b:d3:dd:76:
aa:86:da:65:bc:01:46:e4:64:f7:32:c8:87:80:f4:a5:40:75:
0d:f5:cf:f1:f1:04:f2:62:49:5c:69:15:b3:f2:16:39:48:b9:
1c:95:7a:5d:77:d9:5b:fa:32:1e:bd:ea:07:6f:1f:c0:b2:89:
2b:16:ea:89:a3:a1:96:9e:7c:c2:c2:b6:56:d1:b7:86:d9:d7:
87:5b:80:62:33:a2:14:b4:3d:66:fe:94:2b:09:4b:29:04:a8:
55:e5:1d:90:15:d8:e4:00:f8:a2:f2:16:a8:74:c7:8b:f5:83:
7a:79:08:70:79:00:54:d7:38:16:31:4e:57:50:e6:3b:45:8a:
6f:f2:d8:04:11:b9:a4:a5:f6:5f:9b:30:ff:7a:2f:0b:57:88:
a1:44:f2:db
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIURebbIWKwK9EsBL3ohyK0B8JOPHgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5NUM5
MjVFQ0Y5MTAeFw0yNTEyMDUwNDE2MThaFw0yNTEyMDgwNTU4MThaMDMxMTAvBgNV
BAMTKEMwMUY5RjVBMzM1RUM2OTAwMTYwREI4NzRCN0M4RDkyRTA4NzE3QjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKloM6xpFjsWUi3ax6utTtBzwH
RL7Qgpy9SgRBiW9GOxqygLDbg1rB+Dz+JOjmoCHi3LdqQn2dtOoCNVwOFawK4wVX
4AkPv0AfgQ9wgG/3SHb74PQrzypOoKzh9+yia6wivqwexXBKX+hcT/h3I5fzlbgm
7OzYcmGj8wQi2g1zUmnF2X8buqOwowMeI34Ff6nRkbSe3ppN8Z1q3ajLnid9pf+P
VSfHyTL1O8oCuxYipQxWtF8gxNXHf40/dmcF9odkuFfhuq4yqk0qgJbEhH5GU3uI
t4nypCqVbKFAbepCWeU5cSK6MYjTMFT4KgoXi13jHEYP7/rhQQ7TvTKwiUyJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUwB+fWjNexpABYNuHS3yNkuCHF7QwHwYDVR0j
BBgwFoAU1RznsbkZbvc7/2UxhFMJXJJez5EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
NDJhYTBhOS00NTg4LTRmODctYWI4OS1mM2I5ZGM2MTA3YjYvMC9ENTFDRTdCMUI5
MTk2RUY3M0JGRjY1MzE4NDUzMDk1QzkyNUVDRjkxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5NUM5MjVF
Q0Y5MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQyYWEwYTktNDU4OC00Zjg3LWFi
ODktZjNiOWRjNjEwN2I2LzAvRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5
NUM5MjVFQ0Y5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADimu/eejvMiZvo1kWnIjsTkc7L6JyAq5dTJ
9At9neh/uurCUNp5d332MQK4W4xCk+gjWxLtgnfPuXtbON7XNhc1PTftVrpVszU6
jLv3NUe0bXRDNGDQr1JjQtTuWimtfheYDvF5i5MOC9PddqqG2mW8AUbkZPcyyIeA
9KVAdQ31z/HxBPJiSVxpFbPyFjlIuRyVel132Vv6Mh696gdvH8CyiSsW6omjoZae
fMLCtlbRt4bZ14dbgGIzohS0PWb+lCsJSykEqFXlHZAV2OQA+KLyFqh0x4v1g3p5
CHB5AFTXOBYxTldQ5jtFim/y2AQRuaSl9l+bMP96LwtXiKFE8ts=
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:54:05 2025 by rpki-client