This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.mft
File: 819AD043A7A2F8424ABC9E6CFD9C518670507FC3.mft (raw, json)
Hash identifier: ZbYlnAPjLWcfN9i9jkw4IdFw79Ed1Mu+O5e8ZHsVzOo=
Subject key identifier: 26:2B:42:D9:A5:A0:0C:50:39:AB:9A:28:C1:8A:01:8F:1B:62:99:57
Authority key identifier: 81:9A:D0:43:A7:A2:F8:42:4A:BC:9E:6C:FD:9C:51:86:70:50:7F:C3
Certificate issuer: /CN=819AD043A7A2F8424ABC9E6CFD9C518670507FC3
Certificate serial: 6980A4E8EDD84C4759B75AA43503FCA71C2FD851
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.mft
Manifest number: 01D2
Signing time: Sat 06 Dec 2025 11:02:14 +0000
Manifest this update: Sat 06 Dec 2025 10:57:14 +0000
Manifest next update: Tue 09 Dec 2025 12:25:14 +0000
Files and hashes: 1: 819AD043A7A2F8424ABC9E6CFD9C518670507FC3.crl (hash: 1ygjoYJh0Zn+YLS+lXrQo1wIL4uirxqreg+qUVWT4MU=)
2: 3130332e3132392e35362e302f32332d3234203d3e20313335343738.roa (hash: tGutfHYLd+1w5afOstLzep3nkeXsmFCSKPGKSJYYWl0=)
3: 3130332e3132392e35382e302f32332d3234203d3e20313335343738.roa (hash: YeGR8oOh1UfyEQoGwDtsTMZrPfaKasaF2ECFyYxm2Hg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.crl
rsync://repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 12:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:80:a4:e8:ed:d8:4c:47:59:b7:5a:a4:35:03:fc:a7:1c:2f:d8:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=819AD043A7A2F8424ABC9E6CFD9C518670507FC3
Validity
Not Before: Dec 6 10:57:14 2025 GMT
Not After : Dec 9 12:25:14 2025 GMT
Subject: CN=262B42D9A5A00C5039AB9A28C18A018F1B629957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1f:18:0c:b7:de:b6:5a:0f:9a:92:44:0b:e3:
20:6f:fd:57:e7:c7:77:8e:58:d0:e8:de:84:51:6f:
de:46:9b:d4:67:b1:27:62:2f:0c:f8:fb:70:7e:39:
52:6c:7a:12:7e:91:24:21:cd:83:9a:9f:df:46:7c:
45:92:c7:11:81:42:ad:1f:7c:5c:1b:96:c8:e4:4d:
de:3b:89:65:70:71:67:b6:18:59:10:bf:4d:a3:aa:
1c:82:11:5f:db:4b:a0:9d:ee:2e:dd:df:5e:cc:e9:
e0:50:96:4a:90:86:0b:b5:a5:35:fc:49:e7:c3:d0:
72:e4:39:6d:fd:c9:f5:13:56:8a:07:6b:d5:82:4c:
56:45:2c:a0:3b:7e:1c:c0:4f:75:1d:35:67:5c:f0:
32:25:9a:68:d4:f7:f8:3c:7a:4b:7b:af:3d:d8:2f:
b8:31:7f:9e:d0:dd:8d:7b:aa:1a:ef:77:53:b5:80:
b2:12:6a:b9:f8:dd:4c:28:4d:b6:ef:69:b0:8f:20:
8e:ec:75:4b:9c:9c:cd:97:d1:29:4d:6b:32:6d:3b:
d0:41:70:8e:6d:13:6a:7d:62:c7:e1:73:2b:c2:1d:
9a:5c:04:52:52:d9:a5:85:2f:13:a2:69:3f:1b:b8:
a4:e7:50:6c:cb:1f:ec:55:1a:0c:8c:82:20:b5:c9:
9a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:2B:42:D9:A5:A0:0C:50:39:AB:9A:28:C1:8A:01:8F:1B:62:99:57
X509v3 Authority Key Identifier:
keyid:81:9A:D0:43:A7:A2:F8:42:4A:BC:9E:6C:FD:9C:51:86:70:50:7F:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ca:e7:5f:17:2e:ed:aa:0b:a1:9f:4b:9b:4b:7e:1a:2b:50:
85:0d:02:cc:a7:08:fc:83:43:22:cc:09:68:fa:c6:71:bd:9e:
2b:bf:ea:ef:5f:ba:56:49:96:71:da:95:86:e2:c8:49:55:23:
2d:24:d3:c9:6b:0a:c3:ac:b7:40:08:df:79:b1:20:d7:c2:5e:
c7:6b:46:27:4c:f5:76:e8:8f:f0:93:08:54:53:aa:59:89:d8:
21:98:85:fa:3b:f0:09:98:19:46:dd:7b:cd:38:fe:c4:b0:68:
e0:4a:27:51:14:b8:a3:4c:b9:62:f9:0e:7e:9a:58:a9:2f:6f:
e4:55:a8:f6:c5:00:92:be:8f:37:5c:b4:cd:ed:19:a4:01:7f:
e7:43:99:0f:61:cf:c6:d8:f3:c5:84:88:1d:22:cb:f8:3b:55:
12:6a:8f:c7:19:30:a6:6a:25:d6:b0:95:4e:20:a5:d1:13:1e:
c3:7d:6e:5b:26:7c:b1:8b:24:c6:03:9c:bf:51:9d:9a:b0:7b:
b2:db:df:36:24:d4:06:e6:02:5f:40:8b:22:78:7f:ee:1a:06:
99:f0:13:04:88:7d:b2:ae:7b:8d:0e:26:ea:78:7a:69:7d:b1:
ec:62:da:b2:c3:4e:76:7d:66:81:7c:2c:0b:34:69:4c:61:c2:
8f:56:98:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:53:15 2025 by rpki-client