This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft
File: 0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft (raw, json)
Hash identifier: 9Th2V4jR+hUi5OXia5fdyOmW24CsJHwCrFarQzv10WE=
Subject key identifier: E2:4A:BC:FF:8C:42:3F:0B:4A:58:9F:53:B8:37:B7:73:F0:03:20:BE
Authority key identifier: 0F:16:59:BD:C3:11:75:84:63:AD:3C:EA:23:A7:EB:5E:D3:77:FC:C2
Certificate issuer: /CN=0F1659BDC311758463AD3CEA23A7EB5ED377FCC2
Certificate serial: 78E21C5207EA44D78F56C4FD0D45A922A395051B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft
Manifest number: 03AC
Signing time: Sat 06 Dec 2025 17:32:18 +0000
Manifest this update: Sat 06 Dec 2025 17:27:18 +0000
Manifest next update: Tue 09 Dec 2025 19:52:18 +0000
Files and hashes: 1: 0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl (hash: xkKzz6EUQvfQPqafEXKesQCdYgliwVDXoWsVCGMVONk=)
2: 3130332e3136322e3132322e302f32332d3234203d3e203137393935.roa (hash: 5kmhgTgeSHUwhas6AKT+9HvbtryMe4lzQT0rPZxLy0k=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl
rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:e2:1c:52:07:ea:44:d7:8f:56:c4:fd:0d:45:a9:22:a3:95:05:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0F1659BDC311758463AD3CEA23A7EB5ED377FCC2
Validity
Not Before: Dec 6 17:27:18 2025 GMT
Not After : Dec 9 19:52:18 2025 GMT
Subject: CN=E24ABCFF8C423F0B4A589F53B837B773F00320BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d3:73:0f:9d:75:c4:4d:67:d3:d4:6a:79:a1:
9d:48:17:5c:71:97:44:2b:7c:a0:08:83:cd:e1:ca:
ed:79:17:82:0a:ba:a8:5a:6b:8c:d8:18:05:4e:e6:
fb:03:9c:3c:40:66:ce:0d:d0:26:a6:48:df:9d:b1:
93:9b:ea:3a:12:de:97:ae:c2:80:78:69:1f:c2:7e:
08:43:0b:7b:73:61:b6:36:f4:d9:e8:d9:b3:8c:5d:
57:b8:d6:3c:37:eb:d8:fb:87:f7:b4:ec:1c:d3:87:
4c:18:2c:63:fb:30:2b:a7:a8:f5:61:1d:3f:b4:33:
63:15:d8:d9:76:95:60:ab:c7:39:f4:8b:be:7c:80:
9d:2e:98:d4:c8:45:85:0f:24:09:c5:31:fb:7d:b8:
c2:45:26:97:1e:d3:0d:80:a2:4f:06:5f:aa:66:55:
00:b9:00:ef:da:dd:e4:34:8e:71:36:3b:c7:ee:78:
a3:65:2c:ff:d4:72:71:ef:85:82:7e:d3:e2:b7:74:
c1:19:1d:f9:8f:2b:11:7e:47:f7:12:9a:37:ef:70:
0e:19:0f:7e:01:ce:65:cc:9c:11:5e:ee:c3:43:45:
2b:d7:ce:54:9f:f8:6d:60:39:18:9d:75:1d:43:90:
e7:f7:1e:66:ba:9d:6a:bc:a0:5c:27:07:6a:eb:db:
6e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4A:BC:FF:8C:42:3F:0B:4A:58:9F:53:B8:37:B7:73:F0:03:20:BE
X509v3 Authority Key Identifier:
keyid:0F:16:59:BD:C3:11:75:84:63:AD:3C:EA:23:A7:EB:5E:D3:77:FC:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:92:8b:fc:46:3d:50:99:7e:5e:a4:ef:c7:59:e1:f0:8d:ae:
ce:6f:54:a8:b0:15:67:d4:71:0f:ab:36:0b:dd:34:cc:44:c6:
03:0e:50:cf:5a:55:cf:02:3c:b8:d5:c0:98:9c:10:43:35:d4:
16:8d:9f:cb:08:a2:5d:4d:b1:9b:3a:98:08:3f:10:ad:b1:d4:
18:ef:e7:a4:e8:03:3a:06:4e:d5:99:e6:f5:3e:f8:06:04:71:
71:b4:6c:ac:9d:a7:00:a6:22:b9:8a:10:4f:e8:24:dd:2b:c6:
8a:3c:ad:8d:ca:35:01:e5:63:29:0b:b6:53:4a:ff:ba:5f:98:
dd:7c:f3:9e:13:57:e6:3c:21:5a:d1:de:19:8f:90:ff:50:e7:
f4:7f:11:be:34:58:c4:00:5e:6b:4c:c2:94:a8:4b:c4:ff:4d:
e7:3b:09:92:a8:75:95:af:ca:fe:a8:dd:dd:ba:12:1e:1a:af:
34:47:2e:6d:f4:d2:b3:5d:f1:04:81:56:39:95:c0:1a:56:97:
0f:f4:7f:4f:08:75:4a:73:c4:32:6d:55:b0:47:09:71:20:8d:
89:8b:89:7e:48:31:5b:60:76:5b:f7:16:6f:d3:a4:ea:bf:7e:
be:d5:2b:00:39:d5:a1:d8:f2:6c:97:b2:cb:de:72:d9:2e:f4:
06:7d:8e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:52:56 2025 by rpki-client