This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft
File: E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft (raw, json)
Hash identifier: cbJ4Jx8AY22/tZj7t4XfuEfxtxz9/t56L5ecaCSUDMI=
Subject key identifier: C2:1B:3E:98:BB:88:AB:AE:19:8D:F6:03:07:1E:D9:C5:57:8D:06:42
Authority key identifier: E4:86:34:E1:D6:FB:2E:8A:06:A4:88:25:B4:D7:EE:C4:7B:2A:E4:BE
Certificate issuer: /CN=E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE
Certificate serial: 1EFF2092A924EDEF0CB69B5BE7FAD693DAC74888
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft
Manifest number: 024F
Signing time: Thu 04 Dec 2025 22:20:55 +0000
Manifest this update: Thu 04 Dec 2025 22:15:55 +0000
Manifest next update: Mon 08 Dec 2025 01:09:55 +0000
Files and hashes: 1: E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.crl (hash: /tyBovCjNorP8PXojv85o+rTc6AJQ7c6TzOu/ToA+WU=)
2: 3130332e3137322e3139342e302f32332d3233203d3e20313437303735.roa (hash: PyDXoIlT1NIef5VwI6vIhfIo1ytHrmrJtk3n+sEFsT0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.crl
rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 01:09:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:ff:20:92:a9:24:ed:ef:0c:b6:9b:5b:e7:fa:d6:93:da:c7:48:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE
Validity
Not Before: Dec 4 22:15:55 2025 GMT
Not After : Dec 8 01:09:55 2025 GMT
Subject: CN=C21B3E98BB88ABAE198DF603071ED9C5578D0642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d7:0c:3d:29:e7:d8:c9:8f:66:7e:d3:5e:cf:
72:4e:99:8d:09:8e:89:14:a6:24:63:92:c1:91:f2:
b6:2c:fb:e2:d6:89:76:24:90:fa:d5:cd:c9:55:88:
8e:9d:5c:35:db:78:c4:a8:70:4f:f4:be:3b:2d:99:
3f:57:45:9a:97:74:c6:d6:e0:0d:15:56:ef:78:96:
ca:84:48:f8:b2:e2:ea:b2:52:32:20:55:34:de:7d:
74:50:54:a9:ab:23:0c:57:6a:e8:3d:93:4a:15:23:
ef:18:3a:80:dc:6e:5b:dc:e7:98:67:6a:78:f0:b0:
69:2c:13:f2:39:83:7e:4f:b7:81:bc:c3:f1:ac:5f:
ec:ff:94:1a:b8:60:df:ec:14:78:7b:a5:75:99:60:
f7:74:2b:12:21:a0:9b:a9:09:83:32:bb:ad:e0:92:
46:b6:62:d5:84:1f:39:88:66:62:3e:e1:27:95:e5:
6d:d2:ac:36:38:60:0e:eb:0d:08:b1:f2:fa:2e:3d:
1f:f3:5d:60:c1:7b:1b:3e:16:75:b7:9b:9d:2d:8e:
43:fe:d3:e1:47:f4:89:5c:cd:dc:1a:2a:7c:e0:03:
79:7f:0b:90:33:0b:f2:c4:d0:c4:49:07:26:cc:31:
1e:fb:e3:dd:2d:e2:ee:73:d9:f0:bc:b3:8e:f5:f5:
c5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1B:3E:98:BB:88:AB:AE:19:8D:F6:03:07:1E:D9:C5:57:8D:06:42
X509v3 Authority Key Identifier:
keyid:E4:86:34:E1:D6:FB:2E:8A:06:A4:88:25:B4:D7:EE:C4:7B:2A:E4:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:2c:8b:af:fe:98:16:ef:ca:3c:d2:d1:9e:b3:f4:51:5b:bf:
c8:67:3b:e9:f1:78:0f:2a:12:f2:f5:a1:10:ea:a7:fb:a3:e9:
96:21:e6:7b:f2:c9:15:9b:8a:d1:4f:71:ea:1b:96:fa:69:a9:
63:ab:88:4c:e2:68:a1:fd:55:ed:e9:7b:a0:02:3c:ac:a0:e0:
b8:b5:60:32:67:0d:f8:d2:4d:58:cc:88:2b:62:ac:6c:5e:fe:
0c:82:f8:d1:17:91:a7:35:f1:42:6a:c0:bc:38:f9:44:ef:3f:
b5:c8:4b:d2:41:41:45:19:10:5e:b2:71:8b:30:ee:cc:33:2d:
40:bd:9d:39:0f:9d:ba:a7:63:3d:87:ee:e9:c4:de:f0:55:ad:
2b:bf:cb:6e:02:95:18:88:73:24:21:7f:dc:4f:8d:54:8b:bd:
d1:68:4d:9f:44:60:a1:8a:16:5b:81:4f:64:10:42:db:fe:57:
ce:0e:bd:5c:09:c7:e3:71:3b:45:fb:02:75:4d:22:9d:bc:e1:
64:b0:4f:38:1e:cc:7f:a6:4e:47:39:e3:6e:c0:9b:93:43:be:
0e:f9:b5:a5:4b:e0:df:bc:b7:00:f5:3c:52:84:97:21:03:05:
b2:5f:b4:0d:4a:01:b7:2b:bd:79:57:96:44:45:4b:f4:7c:d7:
7b:d0:28:41
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUHv8gkqkk7e8Mtptb5/rWk9rHSIgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQ4NjM0RTFENkZCMkU4QTA2QTQ4ODI1QjREN0VFQzQ3
QjJBRTRCRTAeFw0yNTEyMDQyMjE1NTVaFw0yNTEyMDgwMTA5NTVaMDMxMTAvBgNV
BAMTKEMyMUIzRTk4QkI4OEFCQUUxOThERjYwMzA3MUVEOUM1NTc4RDA2NDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv1ww9KefYyY9mftNez3JOmY0J
jokUpiRjksGR8rYs++LWiXYkkPrVzclViI6dXDXbeMSocE/0vjstmT9XRZqXdMbW
4A0VVu94lsqESPiy4uqyUjIgVTTefXRQVKmrIwxXaug9k0oVI+8YOoDcblvc55hn
anjwsGksE/I5g35Pt4G8w/GsX+z/lBq4YN/sFHh7pXWZYPd0KxIhoJupCYMyu63g
kka2YtWEHzmIZmI+4SeV5W3SrDY4YA7rDQix8vouPR/zXWDBexs+FnW3m50tjkP+
0+FH9IlczdwaKnzgA3l/C5AzC/LE0MRJBybMMR77490t4u5z2fC8s4719cUJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUwhs+mLuIq64ZjfYDBx7ZxVeNBkIwHwYDVR0j
BBgwFoAU5IY04db7LooGpIgltNfuxHsq5L4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
M2VjMmNiNi0zNWFkLTQxMDEtOTgyZS0yZTM0ZDU2NmVmZGEvMC9FNDg2MzRFMUQ2
RkIyRThBMDZBNDg4MjVCNEQ3RUVDNDdCMkFFNEJFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTQ4NjM0RTFENkZCMkU4QTA2QTQ4ODI1QjREN0VFQzQ3QjJB
RTRCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNlYzJjYjYtMzVhZC00MTAxLTk4
MmUtMmUzNGQ1NjZlZmRhLzAvRTQ4NjM0RTFENkZCMkU4QTA2QTQ4ODI1QjREN0VF
QzQ3QjJBRTRCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAG8si6/+mBbvyjzS0Z6z9FFbv8hnO+nxeA8q
EvL1oRDqp/uj6ZYh5nvyyRWbitFPceoblvppqWOriEziaKH9Ve3pe6ACPKyg4Li1
YDJnDfjSTVjMiCtirGxe/gyC+NEXkac18UJqwLw4+UTvP7XIS9JBQUUZEF6ycYsw
7swzLUC9nTkPnbqnYz2H7unE3vBVrSu/y24ClRiIcyQhf9xPjVSLvdFoTZ9EYKGK
FluBT2QQQtv+V84OvVwJx+NxO0X7AnVNIp284WSwTzgezH+mTkc5427Am5NDvg75
taVL4N+8twD1PFKElyEDBbJftA1KAbcrvXlXlkRFS/R813vQKEE=
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:09:12 2025 by rpki-client