This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft
File: D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft (raw, json)
Hash identifier: vjMn9lrYPD4kzgV+hsPrQf8kyW8hfvhqXNZN++nx7YM=
Subject key identifier: 19:61:53:F7:2B:34:42:BB:46:11:9C:A4:47:28:15:5E:6A:E7:A9:ED
Authority key identifier: D8:5B:24:E8:18:A4:DA:C3:88:41:5F:B8:C9:69:05:DF:03:C8:D6:EA
Certificate issuer: /CN=D85B24E818A4DAC388415FB8C96905DF03C8D6EA
Certificate serial: 767DD0B9560B5667AAF1188D10DA23AE36212AB3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft
Manifest number: 01C8
Signing time: Sat 06 Dec 2025 00:42:03 +0000
Manifest this update: Sat 06 Dec 2025 00:37:03 +0000
Manifest next update: Tue 09 Dec 2025 03:52:03 +0000
Files and hashes: 1: D85B24E818A4DAC388415FB8C96905DF03C8D6EA.crl (hash: WQtp5Oe9B9bFNb9oy8ZaVrJSjakY8IalGKVPs8UouCM=)
2: 3130332e3131382e3132312e302f32342d3234203d3e20313530323033.roa (hash: XcmiTK4lbXwTUsCM0a8uD99kDHrKe3SuEWNxjOChLtA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.crl
rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 03:52:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:7d:d0:b9:56:0b:56:67:aa:f1:18:8d:10:da:23:ae:36:21:2a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D85B24E818A4DAC388415FB8C96905DF03C8D6EA
Validity
Not Before: Dec 6 00:37:03 2025 GMT
Not After : Dec 9 03:52:03 2025 GMT
Subject: CN=196153F72B3442BB46119CA44728155E6AE7A9ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:da:a6:e2:79:bc:8f:f5:95:48:ad:b5:7f:75:
fd:74:7e:1e:e4:e3:fb:05:2a:7d:81:bf:f4:b9:68:
e6:37:92:63:63:db:5f:1f:8a:25:38:0e:5f:aa:1c:
9f:5e:af:1a:a5:c4:43:1f:24:03:12:12:4a:11:fd:
02:0c:31:b3:91:39:0c:e9:74:a9:3a:41:7f:9b:4b:
21:73:77:e0:08:f8:3d:0e:b6:d5:59:e2:40:61:2c:
66:c2:c8:db:b1:3c:cd:1b:7a:0e:a1:33:f5:f9:a0:
26:1a:14:39:44:09:2f:33:30:49:7d:3b:22:27:0b:
50:4b:24:bf:67:b3:e9:56:76:50:d6:6b:25:6a:40:
b3:ae:4d:d0:69:8b:e9:f8:81:1e:4c:93:42:86:43:
04:b1:53:f6:0e:5f:fa:dd:53:5f:1c:ef:3b:26:46:
59:9d:9d:44:03:f3:36:c3:2d:5c:e3:64:a9:6e:8e:
a3:71:e3:f2:42:3e:ea:cb:be:ca:94:83:80:53:4a:
88:f9:c9:75:c2:93:b1:c4:6e:02:62:25:9e:7c:23:
ed:ed:d2:6d:f9:64:79:80:5c:78:25:f8:a5:40:bf:
b1:a4:64:92:2b:4d:3b:98:37:69:52:63:14:2c:c0:
3e:f0:92:68:34:1e:74:3a:49:22:df:37:a7:c5:11:
d1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:61:53:F7:2B:34:42:BB:46:11:9C:A4:47:28:15:5E:6A:E7:A9:ED
X509v3 Authority Key Identifier:
keyid:D8:5B:24:E8:18:A4:DA:C3:88:41:5F:B8:C9:69:05:DF:03:C8:D6:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d4:ee:48:34:e4:17:36:dc:99:d2:a1:c6:1e:6e:30:a1:fa:
8e:2b:d8:28:22:d9:dc:4e:1d:c5:e1:c2:1e:d8:cd:4d:d9:38:
6e:52:e7:bc:2e:11:82:cd:0b:4a:7f:21:18:e3:bb:d7:c2:6a:
94:65:60:c5:88:fc:2f:88:d4:ad:da:40:da:e5:34:2d:60:dc:
7f:a0:31:9b:41:32:53:11:95:b3:9b:f7:76:9f:20:92:0c:b7:
a8:c8:86:e5:22:3e:95:b6:9b:69:b6:38:1a:d8:3d:33:a2:8d:
5a:03:2c:c0:e4:d5:52:12:36:9d:73:95:57:ba:63:6a:18:76:
74:81:84:ae:b5:b0:7d:c4:e1:16:9b:6c:90:37:b7:75:c3:1d:
de:14:83:57:ec:67:02:ba:68:d5:94:24:7d:02:df:c5:92:55:
e8:30:33:c5:6d:1f:bc:27:78:aa:fd:7d:bb:5a:bf:01:dd:df:
e3:b2:e5:a6:14:3d:df:47:7d:67:53:f2:bb:b6:9e:8b:d2:8a:
4b:14:07:7a:0e:a4:c1:f1:d9:49:9d:90:03:6d:67:87:4e:ef:
83:c0:2f:7d:43:fa:87:5b:05:cc:eb:26:d3:ad:a3:ec:78:54:
81:29:95:0b:c0:bf:8e:93:05:26:0b:4f:93:2e:1a:6c:9c:4a:
0f:1c:23:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:12:38 2025 by rpki-client