This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/690E7BC726C787991D438BDDB48990A7A17D8D15.mft
File: 690E7BC726C787991D438BDDB48990A7A17D8D15.mft (raw, json)
Hash identifier: 6phnaZSzV1WWDd2Wuiw+soL1DpX9zC/GBdD0LCK+dbw=
Subject key identifier: 8A:39:40:28:60:6A:E3:36:6B:AF:5A:69:C5:AF:48:35:DC:E0:3D:26
Authority key identifier: 69:0E:7B:C7:26:C7:87:99:1D:43:8B:DD:B4:89:90:A7:A1:7D:8D:15
Certificate issuer: /CN=690E7BC726C787991D438BDDB48990A7A17D8D15
Certificate serial: 7528CBCD775B6E84AEFBF86505CB79051FB45B4B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/690E7BC726C787991D438BDDB48990A7A17D8D15.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/690E7BC726C787991D438BDDB48990A7A17D8D15.mft
Manifest number: 0152
Signing time: Sat 06 Dec 2025 16:21:39 +0000
Manifest this update: Sat 06 Dec 2025 16:16:39 +0000
Manifest next update: Tue 09 Dec 2025 22:33:39 +0000
Files and hashes: 1: 690E7BC726C787991D438BDDB48990A7A17D8D15.crl (hash: z5wLAtwh87vA3qNW76ocRRgtE5JxRAtaka+LTAJYGyg=)
2: 3130332e32362e3230382e302f32322d3234203d3e203138313033.roa (hash: 6bqd3P1jvnQnjsCjRtIIfzvZLlg5nv5q33H6TglsIt4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/690E7BC726C787991D438BDDB48990A7A17D8D15.crl
rsync://repo-rpki.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/690E7BC726C787991D438BDDB48990A7A17D8D15.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/690E7BC726C787991D438BDDB48990A7A17D8D15.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:28:cb:cd:77:5b:6e:84:ae:fb:f8:65:05:cb:79:05:1f:b4:5b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690E7BC726C787991D438BDDB48990A7A17D8D15
Validity
Not Before: Dec 6 16:16:39 2025 GMT
Not After : Dec 9 22:33:39 2025 GMT
Subject: CN=8A394028606AE3366BAF5A69C5AF4835DCE03D26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ba:9f:ad:fe:ac:b4:13:9f:6d:ea:52:ba:a9:
36:68:5d:c9:ff:07:48:13:c1:49:43:15:48:9d:cc:
d0:65:c0:45:e7:21:1b:b3:89:3d:d1:7c:2b:33:6d:
6d:43:0b:45:ef:0c:20:90:1e:f9:ab:a4:41:d0:88:
6d:13:6c:5c:03:a5:5a:2f:af:5b:97:c8:c5:80:27:
5a:14:d1:f5:36:e9:2a:72:bb:e3:e9:6c:3a:99:77:
d8:47:3d:56:9b:1a:af:2c:a3:86:30:1d:2d:b9:21:
04:f5:7e:38:41:53:6e:4d:f7:1c:60:ba:6b:78:19:
56:3c:92:62:d4:0b:fe:99:bc:72:54:df:8b:00:2d:
36:e6:ff:c7:73:ed:0c:1f:33:04:5b:d3:dd:92:43:
56:5f:82:04:a7:7b:85:b1:6e:ec:2c:45:f6:6d:0d:
80:1d:7b:56:81:61:9e:2c:6a:ad:6a:24:ec:d7:12:
ed:b4:3c:dc:b4:bf:82:d7:a3:c6:a2:d6:99:65:ea:
91:c8:ea:9b:44:74:d6:69:b3:88:1f:eb:7c:e0:f2:
85:12:a6:04:ba:42:2a:29:72:75:c3:92:02:1f:5c:
27:b0:3c:d2:2b:be:dc:6f:cf:64:a1:96:6f:61:df:
7f:fe:a5:39:c2:a1:65:01:54:6c:00:98:81:29:15:
27:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:39:40:28:60:6A:E3:36:6B:AF:5A:69:C5:AF:48:35:DC:E0:3D:26
X509v3 Authority Key Identifier:
keyid:69:0E:7B:C7:26:C7:87:99:1D:43:8B:DD:B4:89:90:A7:A1:7D:8D:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/690E7BC726C787991D438BDDB48990A7A17D8D15.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/690E7BC726C787991D438BDDB48990A7A17D8D15.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/690E7BC726C787991D438BDDB48990A7A17D8D15.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:46:e7:13:20:3f:e0:7d:ce:da:d4:4a:52:9b:c2:56:25:bf:
56:d7:92:a9:01:26:f3:03:e0:c9:4e:8f:5d:9d:87:fc:00:76:
62:5d:2c:60:13:d1:64:99:97:6b:1f:fd:18:a3:fd:54:67:61:
50:db:af:01:7b:93:1b:e6:28:74:56:45:e6:09:dc:e1:21:43:
79:d2:3e:da:e7:58:60:3f:32:08:97:df:c4:27:72:83:5e:54:
ab:cf:13:1d:69:cb:84:2f:7f:05:50:43:2e:68:e2:1b:fd:84:
79:ef:0a:4c:2f:82:2d:4d:a5:7f:a4:82:38:2c:16:4b:6d:73:
ee:94:c6:fb:8c:c8:3e:dc:f7:f7:f0:a5:ce:91:3d:09:f2:f1:
f6:f1:97:4c:5a:98:ac:7a:84:49:f7:1a:cc:a6:42:6d:6a:0f:
b4:b1:16:d9:ce:eb:81:97:03:1f:91:8a:7d:57:ef:ee:57:ee:
bd:ce:8f:43:3d:56:2a:70:73:d9:ed:d6:a3:e2:9e:fe:d2:d9:
3a:17:b4:18:cf:0c:e2:9f:26:d1:4c:48:4e:00:7d:67:4c:19:
1d:45:b3:b8:e2:46:b2:38:45:a9:4e:44:33:eb:a9:15:fa:05:
fd:6c:46:02:8d:cb:57:ff:8c:24:29:4e:b9:1b:9e:59:f7:20:
9e:2d:5d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:51:57 2025 by rpki-client