This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.mft
File: 556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.mft (raw, json)
Hash identifier: 614+pSLNI1Ui4bu6JYipLWEdNjH7lWGtSB6sX68MFbU=
Subject key identifier: DE:9D:1C:C1:1D:78:28:50:26:65:8C:E7:9D:27:12:4F:EC:15:94:45
Authority key identifier: 55:67:56:B0:E2:11:DD:26:2F:0D:5D:C9:EC:59:31:EF:A7:4C:AC:3C
Certificate issuer: /CN=556756B0E211DD262F0D5DC9EC5931EFA74CAC3C
Certificate serial: 644EEB5BE0C5AC43D75B445B65E5066BF7CA9429
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.mft
Manifest number: 01D0
Signing time: Sat 06 Dec 2025 08:31:25 +0000
Manifest this update: Sat 06 Dec 2025 08:26:25 +0000
Manifest next update: Tue 09 Dec 2025 19:44:25 +0000
Files and hashes: 1: 3130332e3132392e342e302f32332d3234203d3e20313335343738.roa (hash: dhNCCntTXF8fPVmBhyc2TID6diy3HmHPisy8tFKfm4Y=)
2: 556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.crl (hash: dBiWXpwmvi3Az2vOaCba/jPCKrGmwiOkTWvbTBaNLVA=)
3: 3130332e3132392e362e302f32332d3234203d3e20313335343738.roa (hash: 6QeO2YACwb/BDxjV2SdJIfE+RbGnx2SRrYdFwDXs0Lw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.crl
rsync://repo-rpki.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:4e:eb:5b:e0:c5:ac:43:d7:5b:44:5b:65:e5:06:6b:f7:ca:94:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=556756B0E211DD262F0D5DC9EC5931EFA74CAC3C
Validity
Not Before: Dec 6 08:26:25 2025 GMT
Not After : Dec 9 19:44:25 2025 GMT
Subject: CN=DE9D1CC11D78285026658CE79D27124FEC159445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:02:ba:cc:53:9d:aa:1a:f9:fc:0f:c9:d0:43:
10:d9:d4:e1:b0:d3:2d:55:99:22:0f:86:54:34:1f:
15:50:39:e5:7d:f6:cd:f1:1c:b2:4b:c8:62:60:83:
cd:bc:ca:51:57:f8:14:b0:22:bb:d8:80:97:b7:c8:
9c:12:41:47:70:09:0e:6a:83:32:7c:0d:97:42:fa:
fc:2b:8e:07:10:de:7a:c8:bd:40:1a:76:3a:8a:b7:
38:d2:2c:23:4b:8e:5a:2d:c4:b4:d7:5f:c7:02:1e:
be:cc:0b:6a:71:f2:37:91:55:ac:dd:41:80:c8:34:
2f:6e:ad:33:ac:fe:ba:a7:a8:f2:ac:88:eb:7e:4c:
51:3a:48:ab:4b:f0:92:f9:2b:6c:10:da:d1:33:64:
f4:5c:2a:b9:15:90:bd:a7:e7:1e:80:85:20:de:70:
87:c3:0f:71:68:d5:01:e4:c3:b1:0a:9b:88:87:10:
46:4d:d6:c1:ff:3e:72:70:27:fe:73:7c:1a:ba:77:
f2:f0:11:96:41:e7:6b:f0:6d:f5:a6:51:8a:77:2a:
36:1e:1a:e2:c7:fe:31:fb:db:36:13:76:7f:e7:65:
a8:d8:07:0b:c3:2d:5f:6f:cd:08:c9:ca:e4:d6:38:
e9:31:06:da:90:ea:b3:db:c8:2f:a6:7e:88:be:c4:
3c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:9D:1C:C1:1D:78:28:50:26:65:8C:E7:9D:27:12:4F:EC:15:94:45
X509v3 Authority Key Identifier:
keyid:55:67:56:B0:E2:11:DD:26:2F:0D:5D:C9:EC:59:31:EF:A7:4C:AC:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:a3:15:38:77:7c:24:57:b4:ac:bc:2d:50:56:1f:71:ec:39:
4f:b2:bb:d3:8b:67:71:3f:b1:c6:74:9e:cf:87:bf:85:a2:d8:
86:56:32:f3:74:a8:cf:ae:31:32:61:8a:f3:8a:02:e7:b2:01:
83:8c:be:29:43:67:e2:08:a4:e0:86:14:20:73:ed:d2:a5:d7:
65:61:ec:f2:bf:63:a9:02:cc:67:aa:ef:2b:94:ec:7e:ac:e4:
85:39:45:d1:cf:da:51:94:93:11:b5:62:20:ef:b1:b6:dd:ee:
fb:d1:3f:b6:3c:49:e7:47:8f:b4:1e:c9:44:02:e7:45:aa:e1:
d5:7a:e1:72:49:78:77:85:43:57:2b:72:b1:d5:6f:0f:92:4c:
4c:b0:b8:20:b9:6f:d6:a1:aa:18:7b:04:ee:fa:37:b5:68:1b:
6c:51:19:6f:9b:b6:59:c7:65:5e:41:d0:05:11:76:d7:09:91:
f0:4d:e0:68:70:44:aa:9c:bf:ff:82:d9:2a:96:e8:12:fa:a3:
7b:34:24:a3:b2:ac:fd:8f:39:9b:a9:0e:4c:31:99:e8:54:ee:
0a:6d:fb:7e:68:50:6d:69:79:79:90:82:48:4d:f6:68:56:6f:
16:a1:1d:2f:ea:e3:74:ba:b5:5a:a8:44:45:37:62:3b:4a:2a:
1f:85:8c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:59:23 2025 by rpki-client