This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.mft
File: 7A1D192D65B7EEADC46AB445208CC224DCE974B6.mft (raw, json)
Hash identifier: 1wa/nWy1qv1teIXvxIBgCYlrYGwntqfy714P2FPb8jw=
Subject key identifier: AB:08:C2:74:F7:40:5B:0C:92:01:FC:B0:A1:4E:17:99:E5:B1:EE:3E
Authority key identifier: 7A:1D:19:2D:65:B7:EE:AD:C4:6A:B4:45:20:8C:C2:24:DC:E9:74:B6
Certificate issuer: /CN=7A1D192D65B7EEADC46AB445208CC224DCE974B6
Certificate serial: 2425C74B22CD68E5CD96CCFBC4F275F073C7DCBB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A1D192D65B7EEADC46AB445208CC224DCE974B6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.mft
Manifest number: 02A5
Signing time: Fri 05 Dec 2025 15:20:55 +0000
Manifest this update: Fri 05 Dec 2025 15:15:55 +0000
Manifest next update: Mon 08 Dec 2025 23:15:55 +0000
Files and hashes: 1: 7A1D192D65B7EEADC46AB445208CC224DCE974B6.crl (hash: Uytmj2mf/oemkpdNozIR+AVvWQe7ZMymLm/0tZeExMA=)
2: 3130332e3134322e36312e302f32342d3234203d3e20313339333639.roa (hash: gQUi+SSlZWbgtxREEtY9XyZ6mEDQwkMmGKLNXyWWZlc=)
3: 3130332e3134322e36302e302f32342d3234203d3e20313339333639.roa (hash: bgLc0wXOVn9w5v/YbQRRsK2+epF0KGKuwlh4tr4ebCY=)
4: 3130332e3134322e36302e302f32332d3234203d3e20313339333639.roa (hash: pb2t7SBeTp32K0Tjh6odZI2irDPZNgzYkTCAyS4mxhU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.crl
rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A1D192D65B7EEADC46AB445208CC224DCE974B6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 23:15:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:25:c7:4b:22:cd:68:e5:cd:96:cc:fb:c4:f2:75:f0:73:c7:dc:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7A1D192D65B7EEADC46AB445208CC224DCE974B6
Validity
Not Before: Dec 5 15:15:55 2025 GMT
Not After : Dec 8 23:15:55 2025 GMT
Subject: CN=AB08C274F7405B0C9201FCB0A14E1799E5B1EE3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:68:45:0d:b9:66:e9:c6:61:a1:ec:70:e4:10:
a5:8c:00:e8:33:a0:85:0d:74:86:61:06:6d:9d:55:
14:e6:0c:e7:74:72:71:a4:fa:54:4b:93:c6:b9:78:
4a:77:31:f7:9b:f0:9f:4d:23:18:40:e1:32:0b:bd:
a3:12:74:ea:b6:dc:cf:ad:29:88:86:7c:9a:ad:e1:
01:fd:9c:46:47:d5:97:dd:32:a7:e4:9f:7b:b2:ae:
6a:62:2b:0e:8a:fe:38:60:b9:c3:ee:66:af:b2:91:
a1:64:19:9a:41:92:97:b2:a7:f7:2b:eb:7d:77:78:
bc:c1:8e:9d:25:8a:91:ba:df:d0:d2:31:4c:e9:3e:
32:c8:70:10:56:e1:e3:51:23:02:56:da:c8:5b:43:
1b:50:9b:5d:35:fe:da:7c:ba:94:fc:b8:59:c3:b4:
dc:c1:50:fa:5d:ef:10:3e:06:33:14:ad:36:a1:c0:
0d:02:9c:e6:74:29:50:e1:7f:d6:e7:17:bd:03:7d:
41:1a:a4:42:5d:8c:08:a9:b9:2c:42:ff:24:05:92:
d0:55:13:ca:1a:13:5b:c1:60:44:0a:1d:a6:05:af:
33:91:38:c7:9b:2a:e6:b3:88:c2:a2:2c:52:b2:28:
40:15:72:55:aa:59:21:c9:4d:76:cd:8e:0c:44:da:
ca:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:08:C2:74:F7:40:5B:0C:92:01:FC:B0:A1:4E:17:99:E5:B1:EE:3E
X509v3 Authority Key Identifier:
keyid:7A:1D:19:2D:65:B7:EE:AD:C4:6A:B4:45:20:8C:C2:24:DC:E9:74:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A1D192D65B7EEADC46AB445208CC224DCE974B6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:94:6e:ae:ff:80:3a:c7:8b:38:85:1d:f4:76:87:a9:30:8a:
e5:42:f0:53:4f:8d:d1:41:a9:3b:a7:a6:10:ad:21:a5:97:6b:
6d:d1:d3:44:f2:45:df:77:d7:aa:e3:d9:1e:e7:d4:e2:4c:dc:
a4:d5:eb:76:1b:46:85:d3:c5:4d:3f:78:bd:78:98:91:c5:06:
55:13:0d:25:15:22:c3:b6:4c:88:bf:59:0c:e6:1b:a9:c3:b2:
7c:68:1b:65:44:db:6a:a4:98:3a:5b:ee:a4:30:62:ea:0b:d8:
ec:b5:1e:74:12:14:87:b7:f3:e5:ed:a4:a2:fa:c2:a3:b8:da:
37:d1:69:55:ce:f6:03:10:77:a9:e3:7a:46:4c:ec:55:c7:24:
90:3c:79:67:45:29:d4:6e:fc:15:94:d6:b4:8d:0f:ac:ec:9a:
fd:bd:1d:be:18:ea:c2:c4:58:e6:38:4b:da:b0:b6:f4:15:d6:
91:6b:9e:2f:42:bb:92:9e:78:e3:de:5c:2f:23:7b:36:b5:68:
73:13:7b:9a:47:59:5a:bd:37:24:71:24:c0:e5:c9:28:3a:c1:
a0:49:43:a7:f7:09:60:fa:88:11:0a:63:cc:fb:b1:08:b2:9e:
3c:a3:b4:4a:6f:be:63:74:7d:8f:2b:8a:f8:d6:6a:1c:db:44:
fe:4b:b8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:36:33 2025 by rpki-client